last executing test programs: 2m50.432090758s ago: executing program 1 (id=1059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100705b8b74000001410000001c001700000001000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000181000000000000000010000010100000100"/54, 0x36) shutdown(0xffffffffffffffff, 0x1) 2m50.043155929s ago: executing program 1 (id=1063): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x0, 0x401, @remote, 0x80005}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005260000720afdfef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf250000003364010101ff020000000000000000000000000001000400004e210002000000202100000025d541f42a94bae6e7a6d9955a23411326b4690a4f84437b81572be9e1481e0daee9769dad272408e299c62c7a32ee5f59357015db4de7b2bac0ee11bde56153e764", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1, @ANYRESHEX=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="bfa200000000000007020000c0ffffff231f000040000000b70400000000000085000000451000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r5, r3, 0x25, 0x8, @val=@tracing={0x0, 0x6}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={0xffffffffffffffff, r1, 0x25, 0xc, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000162300000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x1, 0xfffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x8000000004, 0x6f9, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400010000}, 0xcf57, 0x100, 0x1, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffffc, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 2m47.007296009s ago: executing program 1 (id=1074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xcc, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xb8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "232c1c28607c8cb830fd3fa105527526c735c1008ee65583815090f11a5435b8"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ac8a9c68012a23317d10259f6935fd578dba4a9f085562a9c45bca4eb5ad8dcf"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0644d83e2bd0c6294996abccabf46c21"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x8000) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e708a47b00000000000000a1", 0x12, 0x40000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYBLOB="800008091463dccb56ff000000000000000000010600000014e100ffffffe50000b88bf2e71196297fac845dee3ddfce30fc45e05ee3825e0e823ce5c5c905ae43ae5049e1b7e6f1042edb25d8999648103b9af6c3c1dbe9f3932b4bc993"], 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x90) socket(0x2, 0x5, 0x103) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000140)={0x7, 0xf, 0x81, 0xa, 0x3}, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000260001000000000004000000020100800c000100020000000000000014000c0100"], 0x114}], 0x1}, 0x0) 2m45.996597977s ago: executing program 1 (id=1083): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x4}, 0x2}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x4}, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 2m45.415174226s ago: executing program 1 (id=1086): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x7, 0x7, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$igmp6(0xa, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m44.955119906s ago: executing program 1 (id=1089): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x83868000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m29.600382296s ago: executing program 32 (id=1089): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x83868000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 1m28.967896487s ago: executing program 4 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000004200010000000000000000000301001208004d80040008001200010000112233445566778899aabb884700000800028004f02d80040003"], 0x3c}}, 0x4008010) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1m28.952482326s ago: executing program 4 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000200050006"], 0x2c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x122, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r6, 0x5) write$tun(r2, &(0x7f0000000140)=ANY=[], 0x4a) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000001c0)={0x1, 'pim6reg1\x00', 0x4}, 0x18) ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000001780)={r2, &(0x7f0000001680)='\x00', 0x101000, &(0x7f00000016c0)={@align=0x10, {0x9e, 0x0, 0x6, 0x7fffffffffffffff}}, 0x80000000, &(0x7f0000001700), &(0x7f0000001740)=0x101}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x60040001}, 0x4004000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000280)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f00000002c0)={0x1204, 0x3e, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1a}, [@generic="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", @typed={0x8, 0xf3, 0x0, 0x0, @u32=0x8001}, @nested={0x8e, 0x61, 0x0, 0x1, [@generic="dab35c2f035d8d1a0b7ee13a67f39f82cb3c591f8c41c34eb8e261ae5a44e308a9bacd953ffa0ff1b3575a6d0791352586aea45f56", @typed={0x8, 0xdc, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x16a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @generic="98189dd8152add350a477df1e28e4514ecd53ff805ebd64f0322e0be8330a7020d1d293ecdcc", @generic="8842c83245aace9acbccb8414b35519001ec3c9cd58116e068e44944ba5cf0"]}, @generic="6d6e54f0d3cd8a4570de0d4aa37d7ec6d834f1939dee37bbc9ff2bb7d2fc11cb631a196d086b5290cbdf1968b27fc22c3035c6425facc1c3a7d9bd037e2ecacbfb714f35f11adadff75bf303d8ca5243099c86a7da33a866c298b20333b434ae5e8d9177c0e5a9333e5acafb6394631db101", @nested={0x14, 0x94, 0x0, 0x1, [@nested={0x4, 0x145}, @nested={0x4, 0x131}, @typed={0x4, 0x77}, @nested={0x4, 0x62}]}, @nested={0x91, 0x6f, 0x0, 0x1, [@generic="054b61cc2220a68156", @generic="7c31a6cb60a61482b0890d900cc58cbe49d312a2c8dd9dc931baf46d220b93dbd3bb9e0715b0ab158b3288927cf68e7253cf1ae7a6a9599eac8829e92d52a0e16bef99033a1efe15fd2fbe028b7a9096decfcd648445fac44167ec78fe8627b000bf5e846f7a03d2351c5314df934ad1c22888ec0b53cf19db3aef150756a74f", @nested={0x4, 0x95}]}, @typed={0x5, 0x128, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2b, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x162, 0x0, 0x0, @str='*a]\x00'}, @generic="d91cbda502664d079385fed4500553ff1f1e99e71417104ee0f871071664ee4db5f3b98c744d"]}, 0x1204}, 0x1, 0x0, 0x0, 0x1}, 0x20048805) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000400002002400800b00010067656e65766510001400028005000a0001000000050009000100000000c760fb123e7aaf30dd6c57e337e59c725a7ae68c0ef67a414dbda367bda660c545a0c6c2437d7e16753617f51dad4429e904fdfa906666e6e108ff220776a2c64e8516b6cc5354d01f48a14da2c0ada1d0e71fcc20de802253297429a7285030bba2d45f4b10043f44826242cccd97d8e8940be8c90c6b020dcfe274ce53542dfa2c411c664e03d898b654934ffb549e3f3a43532db2fabe"], 0x44}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 1m28.944310656s ago: executing program 4 (id=1413): r0 = socket(0x10, 0x80002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m28.719970277s ago: executing program 4 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000003b00010000000000000000000a00000025000100534d"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000001c0)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000000a00e8000802110000010000100017800400040004000100"], 0x40}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000000780)={0xb14, r4, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6000, 0x8}}}}, [@NL80211_ATTR_TID_CONFIG={0x478, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x36, 0xc, 0x1b, 0x12, 0x0]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x6, 0x8}, {0x4, 0x8}, {0x3, 0x3}, {}, {0x3, 0x8}, {0x2, 0x5}, {0x5, 0x8}, {0x5, 0x9}, {0x4, 0x7}, {0x4}, {0x4, 0x7}, {0x7, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0xa}, {0x4}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x3, 0xa}, {0x5, 0x7}, {0x5, 0x8}, {0x2}, {0x7, 0x4}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x1}, {0x7, 0x8}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x1}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x9}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x3}, {0x6, 0x1}, {}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2, 0x3, 0x7, 0x1949, 0x10, 0x3, 0x40]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x8}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0xa}, {0x4, 0x9}, {0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x5}, {0x5}, {0x1, 0x8}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x3}, {0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x3}, {0x7, 0x9}, {0x2}, {0x0, 0xa}, {0x3}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x2}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x7}, {0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x5}, {0x7, 0x1}, {0x1}, {0x5, 0x5}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbe, 0xc4, 0x4686, 0x4, 0xe074, 0x5, 0x7, 0x99b9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0xde2ef937c99f08f2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f7, 0x6, 0x2, 0x8, 0x880, 0x8, 0x5, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x3, 0x1, 0x5, 0x2, 0x200, 0x7]}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x25}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0xa}, {0x3, 0xa}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x2}, {0x4}, {0x3, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x8}, {0x0, 0x5}, {0x3, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x9}, {0x2, 0x6}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x7, 0x2}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x24, 0x2, 0x1, 0xc, 0x48, 0x9, 0x12, 0x6c, 0x1b, 0x6c, 0x24, 0x5, 0x6c, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x1, 0x9, 0x7, 0x1, 0x8, 0xc0e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x7, 0x4}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x7, 0x6}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe, 0x0, 0x3, 0x8, 0x1, 0x5, 0xfc01]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xac, 0x0, 0x6, 0x1, 0x4, 0x200, 0x101, 0x31]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2a, 0x8, 0x5397, 0x9, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x4}, {0x4, 0x3}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x1}, {0x5, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0xa}, {0x7}, {0x2, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x9}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0xa}, {0x2, 0x7}, {0x2, 0x6}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {}, {0x5, 0x8}, {0x7, 0x4}, {0x3, 0x6}, {0x3, 0x7}, {0x5, 0x5}, {0x4, 0x8}, {0x6}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x6}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x3, 0x5, 0x5, 0x0, 0x8000, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x36, 0x38430c4f5c3edd6c, 0x6, 0x60, 0xb, 0x60, 0x60, 0xc, 0x0, 0x2a, 0x0, 0x18, 0x30, 0x60, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xad, 0x65, 0x6, 0x6, 0x4, 0x49e7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x8}, {0x4}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x4, 0x1}, {0x3, 0x2}, {0x4, 0x1}]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x9}, {0x2, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xc78, 0x1, 0xfffb, 0x6, 0x6, 0x4, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x100, 0xa0, 0x2, 0x7ff, 0x34ca, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffff7f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4d}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x384, 0x11d, 0x0, 0x1, [{0x380, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x334, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x9}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x5, 0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x7, 0x7}, {0x7}, {0x4, 0x1}, {0x6, 0xa}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x7}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x4}, {0x5, 0x6}, {0x2}, {0x1, 0x6}, {0x2, 0x5}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0xb2ea, 0x4, 0x3ff, 0x3, 0x3, 0xc, 0xff92]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfff, 0x6a56, 0x2, 0x200, 0x9, 0x0, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x1}, {0x0, 0x5}, {}, {0x2, 0x1}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x3, 0xa}, {0x4}, {0x2, 0x8}, {0x5, 0x3}, {0x5, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x5, 0x4}, {0x5, 0x9}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {}, {0x0, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x5, 0x8}, {}, {0x0, 0x5}, {0x5, 0x3}, {0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x1}, {0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x0, 0x6}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x6}, {0x5, 0x9}, {0x7, 0x6}, {0x7, 0x6}, {0x1, 0x2}, {0x2, 0x5}, {0x2}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x4}]}]}, @NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x4}, {0x2, 0x6}, {0x1}, {0x2, 0x3}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0xa}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x7}, {0x4}, {0x2}, {0x4, 0x1}, {0x2, 0x5}, {0x5, 0xa}, {0x4, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x5, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x9}, {0x4, 0x4}, {0x7, 0x7}, {0x3, 0x5}, {0x7, 0x4}, {0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x5, 0xa}, {0x4, 0x5}, {0x3, 0x1}, {0x3, 0x5}, {0x4, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x2}, {0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x7}, {0x3, 0x1}, {0x2}, {0x5, 0x4}, {0x5, 0x5}, {0x1}, {0x0, 0x8}, {0x2, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x24, 0x3, 0x24, 0x6, 0x18, 0x12, 0x36, 0x1, 0x1b, 0x36, 0x1b, 0x30, 0x24, 0x24, 0x30, 0x30, 0x36, 0x1, 0x5, 0x6, 0x24, 0x16, 0x1b, 0x1, 0x2, 0x5, 0x36, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x2, 0x5, 0x1, 0x4, 0xc, 0x1b, 0x36, 0x4, 0xc, 0x3, 0x2, 0x1e, 0x2, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b8a, 0xffff, 0xffff, 0x2, 0x1, 0xe, 0x7, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x100, 0x7, 0x7f0, 0xfc00, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x0, 0x4}, {0x4, 0x7}, {0x7, 0x4}, {0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x7}, {0x4}, {0x2, 0x6}, {0x1, 0x8}, {0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0x2}, {0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x8}, {0x7, 0x8}, {0x4, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x8, 0x380, 0x2, 0x7, 0x2]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x4, 0xa}, {0x3, 0x5}, {0x2, 0x3}, {0x5}, {0x2, 0x9}, {0x4, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x1, 0x8}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x1, 0x7ff, 0x9, 0x0, 0x6, 0xf]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x5, 0x9, 0x0, 0x4, 0x9, 0x2, 0x4, 0x36, 0xb, 0x6c, 0x16, 0x6c, 0x24, 0x12, 0x2, 0xb, 0x5, 0x5, 0x16, 0x16, 0xb, 0x1b, 0xc, 0x1b, 0xb, 0x12, 0x5, 0xb]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x1}, {0x6, 0x3}, {0x4, 0x9}, {0x7}, {0x4, 0x8}, {0x0, 0x2}, {0x3, 0xa}, {0x2, 0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x5, 0x5}, {0x7}, {0x1, 0x2}, {0x5, 0x8}, {0x1, 0x8}, {0x3}, {0x3, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {}, {0x7, 0x8}, {0x7, 0x6}, {0x7}, {0x7, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0x7}, {0x0, 0x1}, {0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x4, 0x9}, {0x4, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x2, 0x4}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x81, 0x43bd, 0x8, 0x8, 0x55b, 0xb3c, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa94, 0x800, 0xfff, 0x7, 0x5, 0x3, 0x8, 0xf994]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3473, 0x8, 0xfff8, 0xcd, 0x3, 0x9, 0x101, 0x8]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2, 0x2}, {0x6, 0x9}, {0x4, 0xa}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xb21, 0x9, 0xe9c, 0x0, 0x4e, 0x1ff, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x76}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}]}, @NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x30, 0x9, 0x1b, 0x48, 0x6c, 0x69, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x7, 0x3, 0x4, 0xf, 0x1c94, 0x3]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x60, 0x6, 0x7fff, 0xf89, 0x7, 0x8001, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x3, 0x4, 0x6, 0x30, 0x18, 0x16, 0x16, 0x1, 0x0, 0x12, 0x36, 0x4, 0x0, 0x24, 0x30, 0xb, 0x30, 0x2, 0x9, 0x18, 0x48, 0x48, 0x60, 0x5]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1f, 0x36, 0x1b, 0x36]}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0xa}, {0x7, 0x5}, {0x7, 0x1}, {}, {0x2}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x9}, {0x4, 0x8}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x2}, {0x4}, {0x3, 0x7}, {0x1, 0x6}, {0x6}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x7}, {0x3, 0x3}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0xa}, {0x4, 0x7}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0xfffc, 0x9, 0xfff5, 0x2, 0xa, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x12, 0x6c, 0x12, 0x1b, 0x4, 0x6, 0x3, 0x60, 0x6, 0x63, 0x9, 0xc, 0x5, 0x36, 0x24, 0x12, 0x9, 0x12, 0x6c, 0x12, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2a, 0xfe01, 0x6, 0x3, 0xa, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x2, 0xa}, {0x7, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x5}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0x1}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x5}, {0x1, 0x7}, {0x6, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3, 0xe3, 0xffff, 0x7fff, 0xe15, 0x200, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x1000, 0x8000, 0x6, 0x8000, 0x8, 0x400]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xb14}, 0x1, 0x0, 0x0, 0x51}, 0xc010) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000304fcffffff0300000000000400", @ANYRES32=r1, @ANYBLOB="1404000010ff05001c0012800900acd266748247167203a9d2b10100626f6e640000000000aa9f1fd763c36167ea76f736345b4acb747c60ae9bc3712787b29a7ba688bcdb5782e84f3e3ab3a4113e41d8b3e9e80a"], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) 1m28.094036171s ago: executing program 4 (id=1417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1006}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELSET={0x360, 0xb, 0xa, 0xb346ca78d3a41376, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x268, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x804}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb46544}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b48}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20a}]}]}, @NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xde}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe54c0483}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe28}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5e4bb450}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3a8}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0xe, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 1m27.615891703s ago: executing program 4 (id=1418): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfed1, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m12.52555684s ago: executing program 33 (id=1418): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfed1, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 5.860915049s ago: executing program 0 (id=1984): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0xffffe000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) sendto(r2, 0x0, 0x0, 0x241, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r1, 0x0, 0x0, 0x4ab2e41821fb85f6}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000001900)="b6b833b95d69fcae095f26137b7213f1ce58e67fd00c75adac522be435745006a71b8fb0bba35a8e7d4d050b46ab82cb48b11166749a4cb0b4b064292143e04c70164ff28c7a0475ac1589888cb81ac3c449ada6027a23463a247ddadf8fbf46e1dbd7090587e86b9c0da36b37a349f80479678d64168a31d28e2c2859ea69d8fddeca17c0", 0x85}, {&(0x7f0000000140)="06418b92b929e93277", 0x9}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) unshare(0x24020400) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0xb, 0x0, &(0x7f0000000340)) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req3={0x5, 0x80000001, 0x7fffffff, 0x29fb, 0x6, 0x5, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x56) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000140)) 5.344891217s ago: executing program 3 (id=1988): socket(0x2b, 0x80801, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2", 0xc5) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) write(0xca, &(0x7f0000000040)="0300", 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001640)=""/4106, 0x9e}], 0x2}, 0x20000003}], 0x4000000000002c5, 0x40010020, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x12}]}}]}, 0x40}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0) 4.875112693s ago: executing program 2 (id=1991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000cc000000000000000000deffffff0000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c, 0x800) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e24, 0xff, @local, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r5, 0x18e40, 0x2200a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400cc17}, 0x0) 4.731475902s ago: executing program 2 (id=1993): close(0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) poll(&(0x7f0000000000)=[{r2, 0x6102}, {r0, 0x24}, {0xffffffffffffffff, 0x4181}, {r0, 0x145c}, {r3, 0x20}, {0xffffffffffffffff, 0x8000}], 0x6, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000005c0)={r1, 0x400}, &(0x7f0000000600)=0x8) syz_emit_ethernet(0xcd, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbf, 0x300, 0x0, 0x0, 0x1, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x41}}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x8001, "68dfa3dc817907e219b3c9eed0e24e320f68097e628235db89811faf0cf37987e9b6faf38cf4a933dd34b832855e139781f77535ba94ada1b2c7b7d35114d8cf95d176909862a7b6415b8df799b8cac5296c24dac47ba542680c8ddfe87798ec8677e118bd36782d56c75bb05119a0ce138f845622d9bec9fcc18db310d35051152365a04694aa7cdf7ab4b98b9979e693534180784670ec47769f23a4042ad9c12443"}}}}}, 0x0) 4.627144259s ago: executing program 6 (id=1994): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="0100000012020000ffffffff00000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000a17701000000000000000402"], 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x168, 0x248, 0x168, 0x390, 0x248, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_hsr\x00', 'macvtap0\x00', {}, {}, 0x84, 0x0, 0x0, 0x2}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00, 0x71b681034600913a], 'macsec0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x3b, 0x6, 0x4, 0x20}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x5, 0x4}}, @inet=@rpfilter={{0x28}, {0x1eef34d1141a4022}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x9b80000000}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000000)={0x5, 0x67, 0x4, 0x8}, 0x10) 4.593044023s ago: executing program 5 (id=1995): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000305fcff04050000000000000000", @ANYRES32=0x0, @ANYBLOB="49130100318800000500100003000000"], 0x28}, 0x1, 0x0, 0x0, 0x200088c0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x64) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2000000, 0x3, 0xfffffffffffffffd, 0x0, 0x3378}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x12, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000200)={0x6, 0xbc, 0x3, 0xfd}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002780)={{r7}, r8, 0xc, @inherit={0x68, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000004000000000000005b0a000000000000040000000000100008000000000000000100000000000000f9ffffffffffffff0800000000000000050000000000000002000000000000000b00000000000000060000000000000004e9ffffff000000"]}, @devid}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r9, 0x0, &(0x7f0000001780)=""/4096}, 0x20) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) 4.580561863s ago: executing program 2 (id=1996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x5, 0xf7}]}]}, {0x0, [0x5f, 0x4f, 0x79cd555f0db66961, 0x61, 0x2e, 0x5b, 0x0, 0x0, 0x2e]}}, 0x0, 0x37}, 0x28) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90656, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r4, 0x2}, 0x20) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000180)=0x8f, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r8, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r9, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) recvmmsg(r9, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe}}]}, 0x38}}, 0x890) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000a00)={&(0x7f0000000200), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x2cc, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x288, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x12c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21605595}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x457}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x358f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xe42}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaa81}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeee9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2428}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x35, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffe01}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x20000000004}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x22e2846c}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0xc}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x398}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r13, 0xd}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={r13, @in={{0x2, 0x4e21, @multicast1}}, 0x31c7, 0x8}, 0x90) socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.41818267s ago: executing program 6 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000480)=@buf) 4.398176836s ago: executing program 0 (id=1998): r0 = socket$key(0xf, 0x3, 0x2) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe80902", 0x35}], 0x1) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.256979749s ago: executing program 0 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x3, 0x40000000, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r3], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r8, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) socket$pppoe(0x18, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x27, 0x5, 0x7) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$kcm(r9, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x10f0}, 0x1) 4.174870209s ago: executing program 3 (id=2000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f000005f000/0x4000)=nil, 0x4000, 0x3, 0x50, 0xffffffffffffffff, 0xffffd000) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$nl_route_sched_retired(r2, &(0x7f0000007dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002900)=@newtaction={0x16ec, 0x30, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{0x115c, 0x1, [@m_ipt={0x1158, 0x4, 0x0, 0x0, {{0x8}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x45, 0x6, {0x3, 'mangle\x00', 0x2, 0xff, "672df533eb2827719168ffdd7cc9a5f8444bf1714c1381aca66ed4"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x9a9}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x71, 0x6, {0xa, 'raw\x00', 0xf, 0x4, "c47b2c61c883d6586ef4fdea179760e3ed276781f494b5b8bd5a19f42c9b2212bcae95bdf18a329184bdb34452adf778ea418e2506ea5d70a0ec63f4b09b3908246ccb9ce6541d"}}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x57c, 0x1, [@m_ipt={0x198, 0x13, 0x0, 0x0, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1923}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xa5, 0x6, {0x1, 'raw\x00', 0x0, 0x3, "8678c38f68239bf30268c4fd7be3646c93c9352a434ed080710b1eabcbae995ac379f5782af2426fab4d39d41653a67033bde5ab8a540f530381a11751b9847cf13ab1397c6216aa47a691ab39e00145da2bade498b877ee8a5802d44f80c24790376ff2283f77e3d2d55c87187523fce3484405d8186a4334219d"}}]}, {0x8a, 0x6, "d94e5a3d7d70c6afa5866e57681e4ed482d366009d804aa6160875ee807f1649eeb88a2783b51a9a7773bf0d046742f03cf8a8dea632396f5c807b67ba970124dabaf6265aaed756797ce3ee13ce30e50cf0cbcdc9610d6513ed02b2fa7b99baadd98ca2379b6b21dcfb5c35a1e025a84d9d3919e7fdbed4e13d43cc5a789400000000000000"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x16c, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8}]}, {0xf2, 0x6, "30502a886c176d7e01049e4b0f2de2d8b16cb647f4921a319db010ea6e2ed10ca6710da6726bf4c6d50c388612d5498f4a2b11f09f8ee44f743726441d024c5ee73ee35440e3fb591252a232b3fa4e4ebba16080b48551133a18be7525d667fd05e17fdbdd77833eef05498a9b2980da650b855501ca3cca903e47c7eafe03318391e345d55e7c304bf0faf23324ab5a0537b58002392fb00db16ff192ec18fe758823c1e7f0fd6aea769333c43c6091ea2bc979edf39910fd6094d2176ade4eb823f71520f3cc5c1f65a393a73e2a98d7e7cae8d66fa01e99f14c0b9439e5d755621e2a37f46fb9d74356cdf854"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0xdc, 0x18, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xaa, 0x6, "676472031eea6c42b2fc1c2986b88f1617aeefc47b11d3c05655868858206bc4d881bc01a2313a066bd258df899a598537f2d9916264eb5de6c6af5bed3e19d867b4ba011fed43b50e3db14d68073ad29752e99ef3d8bad26c1c95376d9236cde17ccae00d58a5cfb0b36be0af1910b65a083663e9bfe11d482d2b881e9a3b9a0bb12ff40950a78791ac11d912916855ce922071cd42d18d8be88a00d79c71bfda4b64b75755"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_ipt={0x198, 0x1, 0x0, 0x0, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe6, 0x6, {0x101, 'raw\x00', 0x1, 0x6, "eb8f3a536776234f1899a559bfeab85296b8bfe4d248eeab2dfde72d42e8b11b71f490b11dcf54ff18b6b147038494d189dd9dc13d03f67c12ade50e64dc6d76a00bd6c3b6e167af76ddcdce30ca93f70b2161a1e30b8bc17c075d63ec00a67d16aa019d5c83301760a4ad56b8bdcc775e666b9c39e3452295659bb9ec3c21f7eab3cfe8663b1a8092a1c3ba1c08b4684bed4de3dd3c6f6d1f76f92ca72362dc74b17307a58bbc908827dafd1fcdd8d2a81a76b78750c0d00c72eb64"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x57, 0x6, {0x3d5, 'nat\x00', 0x1, 0x9, "39be13e3736b31963d17299618a389f362005565e5960ea713e6be6b83cc89f558d34b9aaa6656f9cda5714425"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x15, 0x6, "1f79c0be5882ed40dc93e817d569be0a09"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x16ec}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r6, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48c66a6fa56095a843e7cec600"/23, @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf25060000000c00990006000000620000000a0018000303030303030000080005000700000008000500020000000800050006000000050053000000000005005300010000000a00e800ffffffffffff00000a00e800080211000000000014001780040003000400040004000500040003001c00e7005583c6608b1a25de2b503608b0877af9ae4528b710a4c91f08001780040005001c00e700375625ec03f0d2982785b103352dbd34c4c388acf02a1108040017800a00e80008021100000000000a00e800ffffffffffff0000"], 0xdc}}, 0x4000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r8, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001880)="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", 0x7c6}, {&(0x7f0000002880)="1d2a14209b2ce5a4558a11f5ddf93ac8ccea31cb7464525f4cc9722a5ffcbc246fbd62e115d95434cc7e02ba844312", 0x2f}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0x44000) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x75ddbfdedb4202d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.134238665s ago: executing program 6 (id=2001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c3000000000300003e851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff30500180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x81, 0x9, {{0x23, 0x4, 0x3, 0x16, 0x8c, 0x67, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x0, 0x7, "934e04f545"}, {0x1, 0x8, "c112c7f0c6a4"}, {0x6, 0x3, "90"}, {0x0, 0xd, "824171c2a660e7e6bad21f"}, {0x2, 0xa, "8429b784da385d9e"}, {0x1, 0x10, "635a239e7a1dead7f745ffe94ee5"}, {0x2, 0xf, "a0faac0f03415a008bbf9975c4"}, {0x0, 0x4, "e993"}, {0x0, 0xb, "4a7307bd3f5e3d6167"}]}, @rr={0x7, 0xb, 0x88, [@empty, @empty]}, @timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0x4, [{@remote, 0x4}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@newqdisc={0xa4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], 0x0, [0x1, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x4}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r12 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000180)={r0, r11}) sendmmsg$inet(r12, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="4e3396c79c46c0f0cdacef86de24ff", 0xf}], 0x1, &(0x7f00000015c0)=ANY=[], 0x290}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="025ef9e7fda180464262", 0xa}], 0x1}}], 0x2, 0x24004040) 4.040970821s ago: executing program 2 (id=2002): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=@base={0x1e, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = epoll_create1(0x0) r2 = epoll_create(0x1200000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x40000001}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000240)={0x8002008}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socketpair(0x28, 0x4, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x3}, 0x8) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'wm\x00'}, 0x9) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x5}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000030000000000000000400000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) 3.806701765s ago: executing program 3 (id=2003): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbd}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x88}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001600000000a3badd47000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x99, 0xffffffffffffffff, 0x0, 0xb, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd2d, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffe95}, 0x3f) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) sendmsg$xdp(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000500)="db66045c03ca7d91a01b79487c0864fa49abf276226168fcd363342544d72c6c4e40075a6cff9a47b45b0f7b16d4051814dcfbdb28cc582dd22eb8dab0cfe1ea928420e83e94f640fe49d1ccabddc7a74a266c482d2c2293d3fc6d8b71bbb2b2b7f01b90a4ccec17dc9b698d7f4c27627d2ed43247bbb75d16d838bf00a6ae1aa0c9719c277d88141d7e9e743633b3b1175886820f9e5ed8783d6db8e4e9b0f45f6f02a0c8a1790b88a8fc9a32939a4f8a88a9cc4858aa0b32cd6d8402298bf80605333b715410f0", 0xc8}, {&(0x7f0000000600)="6b8591e39195bdfed64a2dc7e22aa3a08fb7fbab115e3e8c047bab084ee9bd8ad8a8c570cf9281b95902cd586f9429b2792653ac6867d60a28f2f0384bf460a5899bf58aac1ab398b21cdcf0af6d19853fbf324769834debc853b99ef3a6f798a91a1d49", 0x64}, {&(0x7f0000000700)="7bba127f240d95e7898edd3cbbd75b30260d71588d5f7487a416d230b48fd72fddccb418b3b59d48cab72b8fe1140477f5c025b58a6b1492af06854884e12971fd35206fe0f9562783f1e38b0995b5efc23dc1b9083a190f9470569d24", 0x5d}, {&(0x7f0000000780)="b233e5da45b395b9692e169b67a3deb189601218ad82b57dbfde7f395c4b273f33", 0x21}, {&(0x7f00000007c0)="743716", 0x3}, {&(0x7f0000000800)="10a4ef12f1", 0x5}, {&(0x7f0000000a80)="104fcd344eb2bdcc4180748d39e78f62390220e8542dad3baf9d2d790976c85a91347afc4a97348622e2635dc952107c1fa9d011a0e9705c4b2da626d36a677fa0933c0720ddba8a839c814218830d06aadb0b583428554bdb87a47a094cff17bb0b09f399fcdcbc56a6d28a72568b3dd70f6d98a51f935aaefaf6593d23fa2da401aef04169c2b837c90eee373046ddb64b8eda508eb5a8dfedf98ff5dc8ce09731aa54d1179146bf908a2ac0f7ed17228db15ecf48b8f4deb1b4", 0xbb}, {&(0x7f0000000b40)="cc6935bab6955465a299c5e9a41d71b0cbeb0a1ae7da69d2ea45403887b7822709f0c7dc1b43fc6785140cde43b1c94a", 0x30}, {&(0x7f0000000b80)="34ac817e2209309a31ec133b42d0d884b71b51d380db4b5237076d40c5ef2e77c7ade30d8671bd72ef9a1456ab84b7e0c2163d67f2a1e36e624f45d190f8d7f8f00cf23ab74f186fd2d6c2ccccf3d91d98b459b99c84a2efe57c31af7d37b0d74a9e6ed58e61bcb30e9487474cbe7f5bbacb7af99993dbddbf1939370722494483ed3497398c94b802b730c8", 0x8c}], 0x9, 0x0, 0x0, 0x4000000}, 0x15) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x5, 0xb7b, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000dc0)={0x60, r14, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x45}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc890}, 0x20040080) 3.738525153s ago: executing program 6 (id=2004): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0xb4}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@tracing={0x0, 0x3ff}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x2000000000000055, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000fc0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xeb1cd959723a93b8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES8=r3, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4010744d, &(0x7f0000000080)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x7fff, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000300"/28], 0x5f) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f00000001c0)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 3.726256009s ago: executing program 2 (id=2005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000013180)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r11, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r11, 0xda90) accept4(r11, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) 3.610080816s ago: executing program 5 (id=2006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ffffffff0000000003000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x358}, 0x94) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x9, [0x3, 0xfff8, 0x8, 0xe8b, 0x2, 0x8, 0x0, 0x1700, 0x7]}, &(0x7f0000000140)=0x16) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$tun(r3, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b6f41bc0259370}, 0x8000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2500000000000000000000ffff64010101ff020000000000000000000000000001000400004e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB='%\x00\x00\x00'], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0x6, 0x9}, {0x1, 0x7}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x20040054) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r10, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x27c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8020) 3.334491844s ago: executing program 0 (id=2007): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000013180)) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r11, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r11, 0xda90) accept4(r11, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) 3.174327576s ago: executing program 5 (id=2008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x480}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x890}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x5, 0xf7, 0x1, 0x2000000}, {0x9, 0x40, 0x3, 0x9}, {0xbd3c, 0x8, 0xab}, {0x41fc, 0x6, 0x73, 0x3}, {0x10, 0x40, 0x5, 0x10001}, {0x29, 0x1, 0x5, 0x8}, {0x184, 0xad, 0x1, 0x5}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x9c, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x480}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x890}, 0x40) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x5, 0xf7, 0x1, 0x2000000}, {0x9, 0x40, 0x3, 0x9}, {0xbd3c, 0x8, 0xab}, {0x41fc, 0x6, 0x73, 0x3}, {0x10, 0x40, 0x5, 0x10001}, {0x29, 0x1, 0x5, 0x8}, {0x184, 0xad, 0x1, 0x5}]}, 0x10) (async) 3.119886744s ago: executing program 5 (id=2009): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x41800) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}]}}}}}}}, 0x0) 3.022589627s ago: executing program 5 (id=2010): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="f78d9ca38ffd48f32560ddf3876ee2e55ebf87a24ebbb238295a31769b2991de2e5b0e7a5c9e6e1d8cb71b16738c48d087b65dcf4d2d0d9e033f2cde366204d6a025846baa4b677ce3", 0x10}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048a7cb18f65d27b8fab406000000b90f29d5d98e73980eb09d03116a3f0cc4a98149ca449f4d911b35c270e350b8f2a8a7222c6de360abe8804f9bba09089e7ec515d61771ea8606f50237574bda8b470f71d455d12f9741be103da969846bd6da1157e2789dfb4e71ca212a1026ee13214366285dd5ce52a86d6fab67dce1c30ab5d0c53782d563e40ae2cdf28330cd37580a2196fffa642a638743b676", 0xea}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000600)=[@op], 0xe0}], 0x1, 0x0) (async, rerun: 64) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340)=0x8, 0x4) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x4000000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) (async, rerun: 32) r10 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) sendto$inet(r10, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async, rerun: 64) listen(r10, 0xda90) (rerun: 64) accept4(r10, 0x0, 0x0, 0x800) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async, rerun: 64) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 656.064969ms ago: executing program 6 (id=2011): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) close(0x3) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x1, 0x4000080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 652.239398ms ago: executing program 2 (id=2012): r0 = socket(0x2c, 0x3, 0x0) close(0x3) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0xfb, &(0x7f0000003b00)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r1 = epoll_create1(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r5, 0x0, 0x20000000002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000440)="c05af4e3f781bcd7c4491fad9eda95a65f44c8deae4cd1932feaa04eb07537d02dc7967a5c3b7a7bd1c07a0bd2770e3b1cb0604fe0e142a0c2b0d00c568bfe75374778a73e30bf4d5ba325f703d58c3bc67839bec8f1772a4c22788ee17e0c4550b765f5a8dcfa3975c8bfcb9bfa6e770b", 0x71}], 0x1}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100"], 0x90}}, 0x4) 529.400014ms ago: executing program 0 (id=2013): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93010b0002"], 0x3c}}, 0x20048800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) 470.86218ms ago: executing program 3 (id=2014): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000c8500000086000000bf09000000000000550901000000000095000000000000002d0a0600000000002500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) 270.090232ms ago: executing program 6 (id=2015): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(r6, 0x1, 0x4a, 0x0, &(0x7f0000000000)) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x13f, 0x40, 0x44}, 0x50) getsockopt(r8, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffd14) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x1, "e868bea2c76518ffc87358406e5ca7b90ef82c2132d5c556a456bb5e6cec52aac1fe179cfaf5a4223a5603a23b7ae65a00325859bdb4590c01da8725cf304eb796b8bd8b0c594edc34edf33b"}}, 0x4c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) close(0x3) socket(0x23, 0x80000, 0xd2) 267.840461ms ago: executing program 5 (id=2016): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x97, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1027, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ffe5ffffffffffe00000000200000001a80016ea1f00084003bc", 0x3a}, {&(0x7f00000004c0)="b09cffb577bc5fbf432e552d80d7e05ac29d02bdcb85b2af7149cabd7abc2c5e2515d61bf078d47135016b013fa0048ee768f6eefc60a4cefa8eff67827bc3cbe5e4df392ab62e39662bf5e15e7d9ef26c3778ff05f18fcab36397634d56e7692823b7c93d4e1f92dc5f61ea59182fc2d6eafe3a6bd5197e7e60dbdb3db39775ba516ec3a01c2e7271d500ea46e67476a4d2f29624ad665dbf319e2dc498", 0x9e}], 0x2, 0x0, 0x0, 0x7400}, 0x20004c04) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03a0005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x4e, "5c76276f6c86622447091e9940a5f2781ad01612b415e66ee2f69b275061f3ca96d04070418e9da4558e5466889627a54ee74f275d8be40c5075f649bed3977847c88e8094e33676640254c6b8d0"}}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000240)=0x6) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x48084) bind$unix(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 256.710401ms ago: executing program 3 (id=2017): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb"], 0x88}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 123.026171ms ago: executing program 0 (id=2018): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000005400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 64) r5 = accept(r1, 0x0, 0x0) (rerun: 64) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r2}, 0x20) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x8000, 0x7800, 0xbc9, 0x7fff, {{0x2e, 0x4, 0x1, 0x9, 0xb8, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x28, 0x3, [{0x5, 0x10, "6d16a59c0c4e7a9c302021a23333"}, {0x0, 0x12, "6d65b90d519094e3fef1f0f1f0ea81ae"}]}, @ra={0x94, 0x4}, @generic={0x89, 0xa, "27cdb998ac872e4a"}, @noop, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x6, [0x7, 0xffffffff]}, @timestamp_addr={0x44, 0x44, 0xd0, 0x1, 0x1, [{@rand_addr=0x64010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@multicast2}, {@remote, 0x8}, {@loopback, 0xa2}, {@multicast1, 0x3}]}, @end, @rr={0x7, 0x1b, 0xa7, [@multicast1, @rand_addr=0x64010100, @loopback, @empty, @empty, @local]}]}}}}}) (async, rerun: 64) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) (rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x18c, 0x800000, 0x80000001, 0x881, r6, 0xc, '\x00', r8, r7, 0x0, 0x3, 0x3, 0x4}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) (async) close(r9) (async, rerun: 32) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 32) recvmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) (async) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES8], 0x20, 0x6044}, 0x4086) 0s ago: executing program 3 (id=2019): r0 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@fwd={0x1}, @struct={0xd, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x6, 0x3, 0xc}, {0xb, 0x3, 0x4}]}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x4306}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @var={0xc, 0x0, 0x0, 0xe, 0x5}, @enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0x36133b5fd533b008, [{0xa, 0x3, 0x9}, {0xe, 0xc}, {0x2, 0x401, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfff}}, @ptr={0x9}]}, {0x0, [0x61, 0x61, 0x30, 0x30]}}, &(0x7f0000000780)=""/84, 0xde, 0x54, 0x1, 0x81, 0x10000}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd, 0x80000001, 0x8, 0xb34b, 0x24020, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x2001, 0x81, r6, 0x4}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r8, r7}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) close(r6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd9e4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x22, &(0x7f0000000d00)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000000582080004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000063060000850000000600000018120000", @ANYRES32, @ANYBLOB="00100000000000000c000000b700000000000000850000009b1c000085100000fcffffff181200cecf7cd3757129409e55cf71fbf2b632befe4513997009838bf4a4d24f53556ca2bb7b666ed746ce97bb55da825371a236fa242396f54d3651a8dd722e6223258615b2c066a10e45447657fbcec3a3a340a773cb996fd163727847ef5a399c74d52c761f68ffd7b8e89ceb50bd7ca129385532c607227d62f80b8cbe8557bef22b0d0da8550958dd5a37b79948bf47239d119c657f57c6175e96874db5f42d243cb5c9eccb08f2bac690aece0d15edc7bb5fa8e3dbcb5e4f72c7132eb887ccf09f0839293f9e7a", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x22, &(0x7f0000000500)=""/34, 0x40f00, 0x2, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000840)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x5, 0x4d, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[r2, r3, 0x1, r4, r6, r9, r10], &(0x7f0000000b40)=[{0x1, 0x2, 0x4, 0x7}, {0x3, 0x2, 0xb, 0xc}], 0x10, 0x5}, 0x94) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x60600) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2003}, 0x94) r12 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r12, &(0x7f00000042c0)=[{{&(0x7f00000001c0)={0xa, 0xfffe, 0x8, @empty, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000340)=[@rthdr={{0x18, 0x29, 0x39, {0x84, 0x0, 0x1, 0x4}}}], 0x18}}], 0x1, 0x4000880) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r13, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r11, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x4) r14 = accept4(r0, 0x0, 0x0, 0x800) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r14) sendmsg$ETHTOOL_MSG_RINGS_SET(r14, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r15, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40001) kernel console output (not intermixed with test programs): 695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 145.707539][ T7697] netlink: 80 bytes leftover after parsing attributes in process `syz.2.498'. [ 145.711699][ T7697] netlink: 80 bytes leftover after parsing attributes in process `syz.2.498'. [ 146.234326][ T7718] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 146.276774][ T7718] gretap1: entered allmulticast mode [ 146.519528][ T7737] warning: `syz.1.507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.597251][ T7740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.625884][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.509'. [ 146.743615][ T7747] tipc: Can't bind to reserved service type 2 [ 146.899546][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 147.241537][ T7777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.515'. [ 147.500488][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 147.551996][ T7796] netlink: 'syz.1.522': attribute type 2 has an invalid length. [ 147.592301][ T7797] netlink: 14 bytes leftover after parsing attributes in process `syz.1.522'. [ 150.413804][ T7821] batadv0: entered promiscuous mode [ 150.429469][ T7821] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.433565][ T7821] batadv0: left promiscuous mode [ 150.517262][ T7834] netlink: 'syz.3.528': attribute type 3 has an invalid length. [ 150.517286][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 150.806481][ T7852] tipc: Enabling of bearer rejected, failed to enable media [ 151.172008][ T7873] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 151.300742][ T7886] ip6t_hbh: too many supported opts specified [ 151.478389][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'. [ 151.479676][ T7892] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 151.479695][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 151.481423][ T7892] dummy0: entered promiscuous mode [ 151.539016][ T7892] team0: Port device dummy0 removed [ 151.596728][ T7895] veth5: entered allmulticast mode [ 151.733550][ T7911] ip_tables: iptables: counters copy to user failed while replacing table [ 152.082184][ T7904] syzkaller0: entered promiscuous mode [ 152.082214][ T7904] syzkaller0: entered allmulticast mode [ 152.103886][ T7912] tipc: Started in network mode [ 152.103906][ T7912] tipc: Node identity , cluster identity 4711 [ 152.103922][ T7912] tipc: Failed to obtain node identity [ 152.103952][ T7912] tipc: Enabling of bearer rejected, failed to enable media [ 152.104631][ T7922] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 152.122254][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 152.190353][ T7927] netlink: 80 bytes leftover after parsing attributes in process `syz.1.549'. [ 152.366574][ T7935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.399344][ T7925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.415686][ T7925] geneve3: left promiscuous mode [ 152.616574][ T7941] netlink: 224 bytes leftover after parsing attributes in process `syz.4.551'. [ 152.629771][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.551'. [ 154.302518][ T1104] ip6_tunnel: L xmit: Local address not yet configured! [ 154.319180][ T1104] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.576286][ T7956] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 154.702248][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'. [ 154.758522][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 154.758552][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'. [ 154.766525][ T7965] sctp: [Deprecated]: syz.4.560 (pid 7965) Use of int in max_burst socket option. [ 154.766525][ T7965] Use struct sctp_assoc_value instead [ 154.882350][ T7970] netlink: 'syz.3.561': attribute type 11 has an invalid length. [ 155.102856][ T7996] netlink: 'syz.2.558': attribute type 16 has an invalid length. [ 155.102880][ T7996] netlink: 'syz.2.558': attribute type 17 has an invalid length. [ 155.263009][ T7984] macsec2: entered promiscuous mode [ 155.382467][ T7996] dummy0: left promiscuous mode [ 155.420760][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.420917][ T7996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.501644][ T7996] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 155.536197][ T7996] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.698407][ T8013] netlink: 'syz.3.567': attribute type 2 has an invalid length. [ 155.809408][ T8017] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 155.903297][ T8023] __nla_validate_parse: 1 callbacks suppressed [ 155.903319][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'. [ 156.414618][ T8046] bond4: option all_slaves_active: invalid value (255) [ 156.437058][ T8046] bond4 (unregistering): Released all slaves [ 156.491276][ T8054] netlink: 'syz.1.581': attribute type 2 has an invalid length. [ 156.757794][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.868512][ T8074] netlink: 'syz.3.584': attribute type 3 has an invalid length. [ 156.961485][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 156.961509][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 156.961925][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 156.961940][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 156.971407][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 156.971430][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 156.971892][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 156.971908][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 157.057604][ T8062] bridge0: port 2() entered disabled state [ 157.058366][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.384572][ T8062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.391544][ T8062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.809927][ T8116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.588'. [ 158.045225][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.045258][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.045298][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.046873][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.050550][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.050584][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.050622][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.050647][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.130613][ T8125] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 158.237010][ T8130] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 158.342209][ T8137] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 158.342247][ T8137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.344887][ T8137] netlink: 'syz.3.593': attribute type 11 has an invalid length. [ 158.426907][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.581157][ T8133] bond0: (slave bridge1): making interface the new active one [ 158.598244][ T8133] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 158.763754][ T8155] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 158.790108][ T8154] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 159.204233][ T8175] openvswitch: netlink: Duplicate or invalid key (type 0). [ 159.462727][ T8188] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 160.000070][ T8224] tipc: Enabling of bearer rejected, failed to enable media [ 160.928155][ T8271] syzkaller0: entered promiscuous mode [ 160.928179][ T8271] syzkaller0: entered allmulticast mode [ 160.944442][ T8271] ip_tables: iptables: counters copy to user failed while replacing table [ 161.237886][ T8243] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 161.283182][ T8243] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 162.258117][ T8320] __nla_validate_parse: 3 callbacks suppressed [ 162.258140][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.625'. [ 162.420591][ T8322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'. [ 162.580777][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 162.633907][ T8337] syzkaller0: entered promiscuous mode [ 162.633934][ T8337] syzkaller0: entered allmulticast mode [ 162.649417][ T8337] netlink: 168 bytes leftover after parsing attributes in process `syz.1.628'. [ 162.833750][ T8345] netlink: 48 bytes leftover after parsing attributes in process `syz.2.632'. [ 162.916261][ T8334] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 162.916288][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.022386][ T8350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.633'. [ 166.451097][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 166.589014][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 166.589040][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 166.648958][ T8415] syzkaller0: left promiscuous mode [ 166.648984][ T8415] syzkaller0: left allmulticast mode [ 167.252607][ T8443] syzkaller1: entered promiscuous mode [ 167.252633][ T8443] syzkaller1: entered allmulticast mode [ 167.774718][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.777330][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.981606][ T8454] netlink: 'syz.0.654': attribute type 4 has an invalid length. [ 168.048657][ T8477] netlink: 100 bytes leftover after parsing attributes in process `syz.4.657'. [ 168.056409][ T8477] netlink: 239 bytes leftover after parsing attributes in process `syz.4.657'. [ 168.093142][ T8477] netlink: zone id is out of range [ 168.093161][ T8477] netlink: zone id is out of range [ 168.093168][ T8477] netlink: zone id is out of range [ 168.093177][ T8477] netlink: zone id is out of range [ 168.093185][ T8477] netlink: zone id is out of range [ 168.093193][ T8477] netlink: zone id is out of range [ 168.093201][ T8477] netlink: zone id is out of range [ 168.093209][ T8477] netlink: zone id is out of range [ 168.093240][ T8477] netlink: zone id is out of range [ 168.093248][ T8477] netlink: zone id is out of range [ 168.116099][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 168.254932][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 168.796675][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 169.312484][ T8540] netlink: 104 bytes leftover after parsing attributes in process `syz.2.671'. [ 169.312951][ T8540] netlink: 220 bytes leftover after parsing attributes in process `syz.2.671'. [ 169.312977][ T8540] tc_dump_action: action bad kind [ 169.393725][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 169.516528][ T8549] syzkaller1: entered promiscuous mode [ 169.516553][ T8549] syzkaller1: entered allmulticast mode [ 169.636961][ T8556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.678'. [ 169.637132][ T8556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.678'. [ 169.988587][ T8577] ip6t_rt: unknown flags 1F [ 170.495420][ T1120] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.496506][ T1120] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.496545][ T1120] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.496578][ T1120] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.709985][ T8608] pim6reg1: entered promiscuous mode [ 170.710012][ T8608] pim6reg1: entered allmulticast mode [ 170.943607][ T8621] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 171.353913][ T8637] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 171.427115][ T8637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.531685][ T8646] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 172.789304][ T8708] netlink: 'syz.3.715': attribute type 4 has an invalid length. [ 172.789329][ T8708] netlink: 'syz.3.715': attribute type 3 has an invalid length. [ 172.967571][ T8713] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 173.317984][ T8740] __nla_validate_parse: 74 callbacks suppressed [ 173.318011][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 173.446160][ T8741] net_ratelimit: 6 callbacks suppressed [ 173.446184][ T8741] ip_tables: iptables: counters copy to user failed while replacing table [ 173.553612][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 173.655893][ T8749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.658150][ T8751] bond1: option ad_select: unable to set because the bond device is up [ 173.849767][ T8767] batman_adv: batadv0: Adding interface: syzkaller0 [ 173.849785][ T8767] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.849814][ T8767] batman_adv: batadv0: Interface activated: syzkaller0 [ 173.950174][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.734'. [ 173.982860][ T8774] ip6t_hbh: unknown flags AD [ 174.003440][ T8775] netlink: 'syz.3.735': attribute type 18 has an invalid length. [ 174.003482][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.735'. [ 174.074284][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 174.074310][ T8778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'. [ 174.236650][ T8775] netlink: 216 bytes leftover after parsing attributes in process `syz.3.735'. [ 174.236674][ T8775] netlink: 11 bytes leftover after parsing attributes in process `syz.3.735'. [ 174.284311][ T8778] veth5: entered allmulticast mode [ 174.295885][ T8778] bond3: (slave veth5): Enslaving as an active interface with an up link [ 174.317957][ T8764] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 174.353983][ T8764] batman_adv: batadv0: Removing interface: syzkaller0 [ 174.576528][ T8795] netlink: 'syz.3.741': attribute type 4 has an invalid length. [ 174.663813][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 174.666772][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 174.910979][ T8812] syzkaller0: entered promiscuous mode [ 174.911005][ T8812] syzkaller0: entered allmulticast mode [ 174.958725][ T8812] sit0: entered promiscuous mode [ 174.993104][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8b5000: rx timeout, send abort [ 175.493286][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8b5c00: rx timeout, send abort [ 175.493898][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8b5000: abort rx timeout. Force session deactivation [ 175.972206][ T8838] vlan0: entered allmulticast mode [ 175.972231][ T8838] bond0: entered allmulticast mode [ 175.972244][ T8838] bond_slave_0: entered allmulticast mode [ 175.993352][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8b5c00: abort rx timeout. Force session deactivation [ 176.148243][ T8850] syz_tun: entered allmulticast mode [ 176.179827][ T8851] pimreg: entered allmulticast mode [ 176.493193][ T8863] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 176.803669][ T8872] lo: entered allmulticast mode [ 177.263911][ T8903] netlink: 'syz.2.770': attribute type 11 has an invalid length. [ 177.533187][ T8912] bridge3: entered promiscuous mode [ 177.533204][ T8912] bridge3: entered allmulticast mode [ 177.660582][ T8918] lo speed is unknown, defaulting to 1000 [ 177.662869][ T8918] lo speed is unknown, defaulting to 1000 [ 177.664490][ T8918] lo speed is unknown, defaulting to 1000 [ 177.892399][ T144] IPVS: starting estimator thread 0... [ 177.932710][ T10] lo speed is unknown, defaulting to 1000 [ 177.932762][ T10] syz0: Port: 1 Link DOWN [ 177.934403][ T8918] infiniband syz0: set down [ 177.934427][ T8918] infiniband syz0: added lo [ 177.975279][ T8925] IPVS: using max 28 ests per chain, 67200 per kthread [ 178.014170][ T8918] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 178.014214][ T8918] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 178.014253][ T8918] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 178.106514][ T8918] RDS/IB: syz0: added [ 178.107052][ T8918] smc: adding ib device syz0 with port count 1 [ 178.107138][ T8918] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 178.109134][ T5622] lo speed is unknown, defaulting to 1000 [ 178.131745][ T8918] lo speed is unknown, defaulting to 1000 [ 178.539848][ T8918] lo speed is unknown, defaulting to 1000 [ 178.733894][ T8918] lo speed is unknown, defaulting to 1000 [ 178.882357][ T8918] lo speed is unknown, defaulting to 1000 [ 179.033942][ T8918] lo speed is unknown, defaulting to 1000 [ 180.029407][ T8887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.244066][ T8960] tipc: Enabling of bearer rejected, already enabled [ 180.293390][ T8969] __nla_validate_parse: 142 callbacks suppressed [ 180.293412][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 180.309844][ T8969] netlink: 104 bytes leftover after parsing attributes in process `syz.0.783'. [ 180.394435][ T8971] syzkaller0: mtu less than device minimum [ 180.418571][ T8964] tc_dump_action: action bad kind [ 180.963184][ T8995] tipc: Enabling of bearer rejected, failed to enable media [ 181.902877][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 181.911114][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 181.911140][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 182.361291][ T53] block nbd0: Receive control failed (result -32) [ 182.363010][ T5624] block nbd0: Receive control failed (result -32) [ 182.429392][ T9078] syzkaller0: entered promiscuous mode [ 182.429420][ T9078] syzkaller0: entered allmulticast mode [ 182.532231][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 183.139939][ T9117] xfrm0: entered allmulticast mode [ 183.140159][ T9117] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 183.221197][ T9117] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 183.253131][ T9117] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 183.358325][ T9121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.808'. [ 183.358361][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.808'. [ 183.430965][ T9119] bond2: entered promiscuous mode [ 183.433014][ T9119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.434429][ T9123] bond2: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.477951][ T9123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.496662][ T9123] C: entered promiscuous mode [ 183.499111][ T9123] bond2: (slave C): Enslaving as an active interface with an up link [ 183.499736][ T9123] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 183.562928][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 183.577575][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 183.842007][ T9139] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 183.922186][ T9143] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 184.030325][ T9143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.072912][ T9148] macvlan2: entered promiscuous mode [ 184.072937][ T9148] macvlan2: entered allmulticast mode [ 184.092597][ T9148] bond4: entered promiscuous mode [ 184.101948][ T9148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.117777][ T9148] bond4: left promiscuous mode [ 184.214386][ T9157] xt_CT: No such helper "netbios-ns" [ 184.285611][ T9155] bridge2: entered promiscuous mode [ 184.285637][ T9155] bridge2: entered allmulticast mode [ 184.292406][ T9155] team0: Port device bridge2 added [ 184.292830][ T9159] bridge0: port 3(team0) entered blocking state [ 184.294187][ T9159] bridge0: port 3(team0) entered disabled state [ 184.294325][ T9159] team0: entered allmulticast mode [ 184.294340][ T9159] team_slave_0: entered allmulticast mode [ 184.294380][ T9159] team_slave_1: entered allmulticast mode [ 184.300762][ T9159] team0: entered promiscuous mode [ 184.300858][ T9159] team_slave_0: entered promiscuous mode [ 184.301261][ T9159] team_slave_1: entered promiscuous mode [ 184.506339][ T9164] vlan2: entered allmulticast mode [ 184.506370][ T9164] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 184.506770][ T9164] bridge0: port 3(vlan2) entered blocking state [ 184.506972][ T9164] bridge0: port 3(vlan2) entered disabled state [ 184.513032][ T9164] vlan2: entered promiscuous mode [ 184.513060][ T9164] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 184.556827][ T9171] sctp: [Deprecated]: syz.2.821 (pid 9171) Use of int in max_burst socket option. [ 184.556827][ T9171] Use struct sctp_assoc_value instead [ 185.380847][ T9216] netlink: zone id is out of range [ 185.380867][ T9216] netlink: zone id is out of range [ 185.380875][ T9216] netlink: zone id is out of range [ 185.380884][ T9216] netlink: zone id is out of range [ 185.380892][ T9216] netlink: zone id is out of range [ 185.380900][ T9216] netlink: zone id is out of range [ 185.380913][ T9216] netlink: zone id is out of range [ 185.461098][ T9219] tipc: Invalid UDP bearer configuration [ 185.461149][ T9219] tipc: Enabling of bearer rejected, failed to enable media [ 185.992650][ T9249] netlink: 'syz.1.843': attribute type 3 has an invalid length. [ 185.992688][ T9249] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 185.992704][ T9249] __nla_validate_parse: 9 callbacks suppressed [ 185.992716][ T9249] netlink: 192 bytes leftover after parsing attributes in process `syz.1.843'. [ 185.992747][ T9249] NCSI netlink: No device for ifindex 1601862003 [ 186.174384][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.840'. [ 186.226720][ T9240] pim6reg1: entered promiscuous mode [ 186.226746][ T9240] pim6reg1: entered allmulticast mode [ 186.581182][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.601081][ T9272] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.631565][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.813635][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.827826][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.849241][ T9272] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.849269][ T9272] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.890579][ T9272] veth1_macvtap: left promiscuous mode [ 186.894104][ T9272] veth0_macvtap: left promiscuous mode [ 186.918993][ T9272] veth0_macvtap: entered promiscuous mode [ 186.924453][ T9272] veth1_macvtap: entered promiscuous mode [ 186.949749][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.964135][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.974874][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.998590][ T9272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.019809][ T9301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 187.081725][ T9272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.250858][ T9272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.290674][ T9268] netlink: 'syz.4.845': attribute type 4 has an invalid length. [ 187.290700][ T9268] netlink: 'syz.4.845': attribute type 3 has an invalid length. [ 187.328156][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.328283][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.333941][ T60] bridge0: port 2() entered blocking state [ 187.334087][ T60] bridge0: port 2() entered forwarding state [ 187.711184][ T43] ip6_tunnel: L xmit: Local address not yet configured! [ 187.751779][ T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.765978][ T9313] macvlan2: entered promiscuous mode [ 187.766001][ T9313] batadv0: entered promiscuous mode [ 187.766206][ T9313] macvlan2: entered allmulticast mode [ 187.766220][ T9313] batadv0: entered allmulticast mode [ 187.767527][ T9313] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.768731][ T9313] batadv0: left allmulticast mode [ 187.768757][ T9313] batadv0: left promiscuous mode [ 187.925573][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.925609][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.976655][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.976692][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.979819][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.979851][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.980621][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.980662][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.012240][ T9318] netlink: 'syz.2.856': attribute type 20 has an invalid length. [ 188.012263][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 188.106843][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 188.270009][ T9323] syzkaller0: left promiscuous mode [ 188.270044][ T9323] syzkaller0: left allmulticast mode [ 188.314078][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.860'. [ 188.451777][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 189.341978][ T9362] syzkaller1: entered promiscuous mode [ 189.342005][ T9362] syzkaller1: entered allmulticast mode [ 189.385294][ T9373] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 189.387719][ T9373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.389768][ T9373] team0: Port device netdevsim1 added [ 189.457362][ T9374] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 189.474180][ T9374] team0: Port device netdevsim1 removed [ 189.736128][ T9388] netlink: 56 bytes leftover after parsing attributes in process `syz.4.871'. [ 189.742613][ T9390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.872'. [ 189.744809][ T9391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.872'. [ 190.715671][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.874'. [ 191.190278][ T9482] bond3: option arp_interval: invalid value (18446744073709551615) [ 191.190298][ T9482] bond3: option arp_interval: allowed values 0 - 2147483647 [ 191.200965][ T9482] bond3 (unregistering): Released all slaves [ 191.334217][ T9495] __nla_validate_parse: 1 callbacks suppressed [ 191.334243][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.881'. [ 191.334385][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 191.334420][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.881'. [ 191.445360][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.606637][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 191.691397][ T9505] netlink: 132 bytes leftover after parsing attributes in process `syz.4.885'. [ 191.960743][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 192.151797][ T9530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.893'. [ 192.448862][ T9544] Bluetooth: MGMT ver 1.23 [ 192.570615][ T9555] netlink: 'syz.1.903': attribute type 1 has an invalid length. [ 192.571418][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 192.604079][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 192.639423][ T9558] netlink: 'syz.4.902': attribute type 49 has an invalid length. [ 193.099508][ T9583] tipc: Enabling of bearer rejected, failed to enable media [ 193.103080][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 193.103109][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 193.428799][ T9595] syzkaller0: entered promiscuous mode [ 193.428867][ T9595] syzkaller0: entered allmulticast mode [ 194.097386][ T9606] lo speed is unknown, defaulting to 1000 [ 194.779640][ T9636] netlink: 'syz.3.929': attribute type 5 has an invalid length. [ 197.774649][ T9691] __nla_validate_parse: 7 callbacks suppressed [ 197.774672][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 197.774690][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 197.787578][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.787831][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.788156][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.788387][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.788583][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.788779][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.797126][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 197.797346][ T9688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.934'. [ 198.135706][ T9422] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 40379 - 0 [ 198.135763][ T9422] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 40379 - 0 [ 198.135801][ T9422] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 40379 - 0 [ 198.135838][ T9422] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 40379 - 0 [ 199.125674][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 199.126914][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.316841][ T9735] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 199.317047][ T9735] dummy0: entered promiscuous mode [ 199.485426][ T9741] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 199.493701][ T9741] : entered promiscuous mode [ 199.566064][ T9744] xt_REDIRECT: bad MAP_IPS. [ 199.681804][ T9748] bond4 (unregistering): Released all slaves [ 199.839134][ T9760] pimreg9: entered allmulticast mode [ 199.876396][ T9762] sctp: [Deprecated]: syz.0.951 (pid 9762) Use of int in maxseg socket option. [ 199.876396][ T9762] Use struct sctp_assoc_value instead [ 200.081755][ T9758] net_ratelimit: 226 callbacks suppressed [ 200.081779][ T9758] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 200.467438][ T9764] syzkaller0: left promiscuous mode [ 201.027177][ T9769] kthread_run failed with err -4 [ 201.902655][ T9825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 202.673843][ T9836] lo speed is unknown, defaulting to 1000 [ 203.152378][ T9850] netlink: 'syz.1.970': attribute type 4 has an invalid length. [ 203.154070][ T9851] netlink: 'syz.1.970': attribute type 4 has an invalid length. [ 203.440417][ T9862] nbd: socks must be embedded in a SOCK_ITEM attr [ 203.440684][ T9862] block nbd1: shutting down sockets [ 203.460062][ T9858] nbd: socks must be embedded in a SOCK_ITEM attr [ 203.460481][ T9858] block nbd2: shutting down sockets [ 203.791587][ T9867] syzkaller0: entered promiscuous mode [ 203.799651][ T9870] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 203.871811][ T9870] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.060148][ T9878] netlink: 'syz.1.975': attribute type 2 has an invalid length. [ 204.060176][ T9878] __nla_validate_parse: 67 callbacks suppressed [ 204.060188][ T9878] netlink: 228 bytes leftover after parsing attributes in process `syz.1.975'. [ 204.234297][ T9870] IPVS: Scheduler module ip_vs_sip not found [ 204.636142][ T9890] netlink: 48 bytes leftover after parsing attributes in process `syz.2.977'. [ 204.676805][ T9891] netlink: 'syz.3.978': attribute type 1 has an invalid length. [ 205.862733][ T9928] netlink: 'syz.4.989': attribute type 2 has an invalid length. [ 205.862758][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 206.349873][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 206.539973][ T9950] ipvlan2: entered promiscuous mode [ 206.556192][ T9950] team0: Device ipvlan2 failed to register rx_handler [ 206.602456][ T9951] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 207.120645][ T9971] 8021q: adding VLAN 0 to HW filter on device bond8 [ 207.121502][ T9971] bridge0: port 3(bond8) entered blocking state [ 207.121742][ T9971] bridge0: port 3(bond8) entered disabled state [ 207.121891][ T9971] bond8: entered allmulticast mode [ 207.127060][ T9971] bond8: entered promiscuous mode [ 207.608581][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 207.608772][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 207.608826][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 207.819218][ T9995] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 207.957093][ T9995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.976465][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1007'. [ 209.010110][T10024] netlink: 10056 bytes leftover after parsing attributes in process `syz.4.1015'. [ 209.126251][T10024] raw_sendmsg: syz.4.1015 forgot to set AF_INET. Fix it! [ 209.287488][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1017'. [ 209.752407][T10040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1021'. [ 209.842116][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 209.842156][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'. [ 210.288843][T10056] bond0: entered promiscuous mode [ 210.288878][T10056] bond_slave_0: entered promiscuous mode [ 210.289122][T10056] bond_slave_1: entered promiscuous mode [ 210.314705][T10056] batadv0: entered promiscuous mode [ 210.334788][T10056] debugfs: 'hsr1' already exists in 'hsr' [ 210.334817][T10056] Cannot create hsr debugfs directory [ 210.368689][T10056] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 210.385982][T10056] bond0: left promiscuous mode [ 210.386010][T10056] bond_slave_0: left promiscuous mode [ 210.386271][T10056] bond_slave_1: left promiscuous mode [ 210.400537][T10056] batadv0: left promiscuous mode [ 210.407683][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1026'. [ 211.721782][T10076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.743193][T10096] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1034'. [ 212.239328][T10110] netlink: 'syz.2.1036': attribute type 18 has an invalid length. [ 212.290753][T10108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.503193][T10118] netlink: Unknown nat attribute (0) [ 212.503238][T10118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.137677][T10136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1044'. [ 213.160458][T10137] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1044'. [ 213.347578][T10142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1046'. [ 213.503312][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 213.845394][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 214.162036][T10167] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 214.162060][T10167] netlink: 'syz.1.1053': attribute type 2 has an invalid length. [ 214.330893][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 214.489435][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 215.664556][T10211] syzkaller0: left promiscuous mode [ 215.664585][T10211] syzkaller0: left allmulticast mode [ 215.678460][T10211] tipc: Started in network mode [ 215.678492][T10211] tipc: Node identity 261b873266ba, cluster identity 4711 [ 215.684292][T10211] tipc: Enabled bearer , priority 1 [ 215.878393][T10217] netlink: 'syz.2.1061': attribute type 16 has an invalid length. [ 215.878420][T10217] netlink: 'syz.2.1061': attribute type 17 has an invalid length. [ 216.312003][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.981518][T10251] Bluetooth: MGMT ver 1.23 [ 217.117652][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.166988][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.710071][T10217] bridge3: left promiscuous mode [ 218.710100][T10217] bridge3: left allmulticast mode [ 218.745833][ T9428] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.745875][ T9428] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.745965][ T9428] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.745986][ T9428] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.746016][ T9428] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.746138][ T9428] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.746197][ T9428] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.746218][ T9428] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.935721][ T8103] tipc: Node number set to 1084327730 [ 219.205544][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1073'. [ 219.283151][T10275] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 219.283177][T10275] netlink: 'syz.1.1074': attribute type 268 has an invalid length. [ 219.283194][T10275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1074'. [ 220.322516][T10300] IPVS: Error connecting to the multicast addr [ 220.739733][T10320] syzkaller0: entered promiscuous mode [ 220.739763][T10320] syzkaller0: entered allmulticast mode [ 221.279209][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1090'. [ 221.574074][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 222.109457][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 222.111423][T10363] nft_compat: unsupported protocol 5 [ 222.129364][T10361] ip6tnl2: entered allmulticast mode [ 222.153823][ T9413] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 222.154097][ T9413] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 222.175435][ T5620] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 222.186129][ T5620] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 222.205388][T10364] syzkaller1: entered promiscuous mode [ 222.205413][T10364] syzkaller1: entered allmulticast mode [ 222.243560][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1098'. [ 222.243876][T10364] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1098'. [ 222.335812][ T5620] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 224.422185][T10402] bridge0: entered promiscuous mode [ 224.422257][T10402] bridge0: entered allmulticast mode [ 225.229524][T10416] netlink: 1120 bytes leftover after parsing attributes in process `syz.3.1113'. [ 225.229556][T10416] netlink: 1120 bytes leftover after parsing attributes in process `syz.3.1113'. [ 225.320573][T10419] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 225.320601][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1113'. [ 225.321843][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.723501][T10430] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1117'. [ 226.006693][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 226.156842][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 226.568329][T10450] tipc: Enabled bearer , priority 0 [ 226.612110][T10450] syzkaller0: entered promiscuous mode [ 226.612178][T10450] syzkaller0: entered allmulticast mode [ 226.774012][T10458] __nla_validate_parse: 1 callbacks suppressed [ 226.774037][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 226.910907][T10450] tipc: Resetting bearer [ 226.937774][T10448] tipc: Resetting bearer [ 227.003875][T10448] tipc: Disabling bearer [ 227.408009][ C1] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.771658][T10517] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 228.952622][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 228.952653][T10524] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1146'. [ 229.157184][T10532] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 229.224558][T10538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.226500][T10538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1149'. [ 229.283708][T10532] bond9: entered promiscuous mode [ 229.284333][T10532] 8021q: adding VLAN 0 to HW filter on device bond9 [ 229.286994][T10536] netlink: 'syz.3.1149': attribute type 12 has an invalid length. [ 229.287015][T10536] netlink: 'syz.3.1149': attribute type 29 has an invalid length. [ 229.287027][T10536] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1149'. [ 229.287044][T10536] netlink: 'syz.3.1149': attribute type 3 has an invalid length. [ 229.287055][T10536] netlink: 'syz.3.1149': attribute type 2 has an invalid length. [ 229.287065][T10536] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1149'. [ 229.606053][T10554] syzkaller1: entered promiscuous mode [ 229.606086][T10554] syzkaller1: entered allmulticast mode [ 229.936895][T10572] xt_connbytes: Forcing CT accounting to be enabled [ 229.943996][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1158'. [ 230.041930][T10587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1158'. [ 230.053363][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 230.056377][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 230.399833][T10598] veth1_to_bond: entered allmulticast mode [ 230.403181][T10597] veth1_to_bond: left allmulticast mode [ 230.483957][T10600] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 230.514035][T10600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.522702][T10600] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 230.589811][T10606] FAULT_INJECTION: forcing a failure. [ 230.589811][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 230.589847][T10606] CPU: 0 UID: 0 PID: 10606 Comm: syz.0.1165 Not tainted syzkaller #0 PREEMPT(full) [ 230.589870][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 230.589882][T10606] Call Trace: [ 230.589891][T10606] [ 230.589901][T10606] dump_stack_lvl+0xe8/0x150 [ 230.589936][T10606] should_fail_ex+0x410/0x560 [ 230.589966][T10606] _copy_from_user+0x2d/0xb0 [ 230.589994][T10606] ___sys_sendmsg+0x1c6/0x360 [ 230.590021][T10606] ? __lock_acquire+0x747/0x2de0 [ 230.590048][T10606] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.590111][T10606] ? __fget_files+0x2a/0x420 [ 230.590137][T10606] ? __fget_files+0x3a2/0x420 [ 230.590172][T10606] __x64_sys_sendmsg+0x1b1/0x290 [ 230.590200][T10606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.590247][T10606] do_syscall_64+0x166/0x520 [ 230.590277][T10606] ? trace_irq_disable+0x3b/0x140 [ 230.590298][T10606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.590319][T10606] ? clear_bhb_loop+0x70/0xc0 [ 230.590356][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.590376][T10606] RIP: 0033:0x7fa9f819e199 [ 230.590396][T10606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.590425][T10606] RSP: 002b:00007fa9f9137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.590454][T10606] RAX: ffffffffffffffda RBX: 00007fa9f8425fa0 RCX: 00007fa9f819e199 [ 230.590469][T10606] RDX: 0000000020000000 RSI: 0000200000006700 RDI: 0000000000000004 [ 230.590482][T10606] RBP: 00007fa9f9137090 R08: 0000000000000000 R09: 0000000000000000 [ 230.590494][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.590506][T10606] R13: 00007fa9f8426038 R14: 00007fa9f8425fa0 R15: 00007fffb18fedb8 [ 230.590541][T10606] [ 230.879725][T10609] syzkaller1: entered promiscuous mode [ 230.879759][T10609] syzkaller1: entered allmulticast mode [ 231.133599][T10611] bond5: option resend_igmp: invalid value (2878) [ 231.133627][T10611] bond5: option resend_igmp: allowed values 0 - 255 [ 231.168471][T10611] bond5 (unregistering): Released all slaves [ 231.336696][ T5624] Bluetooth: hci4: Malformed HCI Event [ 231.428851][T10622] ip_tables: iptables: counters copy to user failed while replacing table [ 231.580460][T10624] vlan4: entered allmulticast mode [ 231.580485][T10624] bond0: entered allmulticast mode [ 231.580498][T10624] bond_slave_0: entered allmulticast mode [ 231.580513][T10624] bond_slave_1: entered allmulticast mode [ 231.919673][T10644] __nla_validate_parse: 7 callbacks suppressed [ 231.919697][T10644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1178'. [ 231.988453][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 231.994532][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'. [ 231.994557][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'. [ 232.054654][T10644] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 232.145111][T10653] openvswitch: netlink: Tunnel attr 14574 out of range max 16 [ 232.556895][T10663] syzkaller0: entered promiscuous mode [ 232.556919][T10663] syzkaller0: entered allmulticast mode [ 232.608410][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 232.608438][T10669] openvswitch: netlink: Flow key attr not present in new flow. [ 232.793464][T10678] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1188'. [ 232.793492][T10678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1188'. [ 233.184479][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 233.307373][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'. [ 233.530209][T10699] syzkaller0: entered promiscuous mode [ 233.530240][T10699] syzkaller0: entered allmulticast mode [ 233.685878][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 233.733585][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 236.527741][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.531454][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.551390][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.604709][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.669252][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.017516][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.019059][T10713] tc_dump_action: action bad kind [ 238.193463][T10725] __nla_validate_parse: 1 callbacks suppressed [ 238.193487][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1198'. [ 238.299817][T10731] netlink: 'syz.3.1200': attribute type 31 has an invalid length. [ 238.339004][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 238.731680][T10755] FAULT_INJECTION: forcing a failure. [ 238.731680][T10755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.731716][T10755] CPU: 1 UID: 0 PID: 10755 Comm: syz.3.1204 Not tainted syzkaller #0 PREEMPT(full) [ 238.731739][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.731751][T10755] Call Trace: [ 238.731759][T10755] [ 238.731767][T10755] dump_stack_lvl+0xe8/0x150 [ 238.731898][T10755] should_fail_ex+0x410/0x560 [ 238.731938][T10755] _copy_from_iter+0x1d3/0x1660 [ 238.731960][T10755] ? __alloc_skb+0x27a/0x7a0 [ 238.731985][T10755] ? __alloc_skb+0x27a/0x7a0 [ 238.732008][T10755] ? __alloc_skb+0x27a/0x7a0 [ 238.732029][T10755] ? __pfx__copy_from_iter+0x10/0x10 [ 238.732052][T10755] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 238.732082][T10755] ? __alloc_skb+0x27a/0x7a0 [ 238.732102][T10755] ? __alloc_skb+0x27a/0x7a0 [ 238.732127][T10755] ? netlink_sendmsg+0x650/0xb40 [ 238.732146][T10755] ? skb_put+0x112/0x210 [ 238.732250][T10755] netlink_sendmsg+0x6c0/0xb40 [ 238.732292][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.732316][T10755] ? apparmor_socket_sendmsg+0x18b/0x360 [ 238.732338][T10755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.732353][T10755] sock_sendmsg_nosec+0x14e/0x190 [ 238.732376][T10755] ____sys_sendmsg+0x54e/0x850 [ 238.732407][T10755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.732440][T10755] ? import_iovec+0x73/0xa0 [ 238.732468][T10755] ___sys_sendmsg+0x2a5/0x360 [ 238.732490][T10755] ? __lock_acquire+0x747/0x2de0 [ 238.732515][T10755] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.732583][T10755] ? __fget_files+0x2a/0x420 [ 238.732610][T10755] ? __fget_files+0x3a2/0x420 [ 238.732649][T10755] __x64_sys_sendmsg+0x1b1/0x290 [ 238.732680][T10755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.732733][T10755] do_syscall_64+0x166/0x520 [ 238.732761][T10755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.732887][T10755] ? clear_bhb_loop+0x70/0xc0 [ 238.732910][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.732928][T10755] RIP: 0033:0x7f51a8b9e199 [ 238.732949][T10755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.732964][T10755] RSP: 002b:00007f51a9999028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.732988][T10755] RAX: ffffffffffffffda RBX: 00007f51a8e25fa0 RCX: 00007f51a8b9e199 [ 238.733002][T10755] RDX: 0000000020000000 RSI: 0000200000006700 RDI: 0000000000000004 [ 238.733015][T10755] RBP: 00007f51a9999090 R08: 0000000000000000 R09: 0000000000000000 [ 238.733027][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.733040][T10755] R13: 00007f51a8e26038 R14: 00007f51a8e25fa0 R15: 00007fff57cdc508 [ 238.733069][T10755] [ 238.811478][ T5624] Bluetooth: hci5: command tx timeout [ 238.874562][T10758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1205'. [ 238.874685][T10758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1205'. [ 239.190862][T10718] lo speed is unknown, defaulting to 1000 [ 239.264075][T10763] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 239.588588][T10779] netlink: 'syz.3.1211': attribute type 21 has an invalid length. [ 239.588615][T10779] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1211'. [ 240.887078][ T5624] Bluetooth: hci5: command tx timeout [ 240.962375][T10811] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 241.287492][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.287746][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.287846][T10718] bridge_slave_0: entered allmulticast mode [ 241.289085][T10718] bridge_slave_0: entered promiscuous mode [ 241.342001][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 241.342440][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.342798][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.342986][T10718] bridge_slave_1: entered allmulticast mode [ 241.356177][T10718] bridge_slave_1: entered promiscuous mode [ 241.423702][T10836] syzkaller0: entered promiscuous mode [ 241.423732][T10836] syzkaller0: entered allmulticast mode [ 241.440367][T10718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.450334][T10718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.500274][T10718] team0: Port device team_slave_0 added [ 241.503918][T10718] team0: Port device team_slave_1 added [ 241.551259][T10718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.551279][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.551306][T10718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.556351][T10718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.556367][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.556391][T10718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.657578][T10718] hsr_slave_0: entered promiscuous mode [ 241.658943][T10718] hsr_slave_1: entered promiscuous mode [ 241.660053][T10718] debugfs: 'hsr0' already exists in 'hsr' [ 241.660073][T10718] Cannot create hsr debugfs directory [ 241.909833][T10840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1222'. [ 241.957806][T10841] netlink: 'syz.4.1221': attribute type 10 has an invalid length. [ 241.978592][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1222'. [ 242.025304][T10841] team0: Port device dummy0 added [ 242.487589][T10853] lo speed is unknown, defaulting to 1000 [ 242.509926][T10850] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.1226'. [ 242.645473][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 242.728264][T10718] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.760043][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.762574][T10718] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.793468][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.800018][T10718] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.831816][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.836695][T10718] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.891757][T10866] netlink: 'syz.0.1231': attribute type 3 has an invalid length. [ 242.891785][T10866] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1231'. [ 242.894563][T10718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.965568][ T5624] Bluetooth: hci5: command tx timeout [ 243.588658][T10718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.640480][T10718] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.703751][ T9413] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.703869][ T9413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.752122][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.752314][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.891371][T10886] ip_tables: iptables: counters copy to user failed while replacing table [ 243.925516][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 243.997878][T10886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.011084][T10886] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 244.240946][T10900] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 245.045794][ T5624] Bluetooth: hci5: command tx timeout [ 246.563362][T10899] bond1: left allmulticast mode [ 246.563390][T10899] bridge1: left allmulticast mode [ 246.574738][T10899] bond2: left allmulticast mode [ 246.678712][T10899] ip6tnl2: left allmulticast mode [ 246.772286][T10919] __nla_validate_parse: 1 callbacks suppressed [ 246.772369][T10919] netlink: 964 bytes leftover after parsing attributes in process `syz.4.1238'. [ 246.772389][T10919] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.916455][ T9428] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.916493][ T9428] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.921241][ T9428] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.921279][ T9428] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.921579][ T9428] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.921608][ T9428] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.921646][ T9428] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.921668][ T9428] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.896191][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1239'. [ 247.896232][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 248.091304][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1243'. [ 248.922787][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1246'. [ 249.182245][T10966] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 249.182275][T10966] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1247'. [ 249.602481][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'. [ 249.619830][ T5624] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 250.056603][T10718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.549011][T10994] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 250.549070][T10994] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 250.549109][T10994] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 250.675808][T10999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1253'. [ 251.510252][T11019] netlink: 'syz.2.1259': attribute type 4 has an invalid length. [ 251.837239][T10718] veth0_vlan: entered promiscuous mode [ 251.942521][T11036] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 252.009903][T11036] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.087358][T11030] bond5: (slave gretap1): making interface the new active one [ 252.088998][T11030] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 252.094634][T10718] veth1_vlan: entered promiscuous mode [ 252.273934][T11042] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 252.327807][T11044] netlink: 'syz.2.1268': attribute type 2 has an invalid length. [ 252.327840][T11044] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 252.357530][T11045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1267'. [ 252.529405][T10718] veth0_macvtap: entered promiscuous mode [ 252.583976][T10718] veth1_macvtap: entered promiscuous mode [ 252.636657][T10718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.673607][T10718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.709965][T11051] netlink: 'syz.0.1271': attribute type 10 has an invalid length. [ 252.754057][T11051] team0: Device vxcan0 is of different type [ 252.776923][ T9410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.778821][ T9410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.006186][ T9419] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.006544][ T9419] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.290298][ T9422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.290325][ T9422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.384000][ T9422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.384026][ T9422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.027689][T11098] hsr0: entered promiscuous mode [ 254.119330][T11095] hsr0: left promiscuous mode [ 254.460756][T11116] xt_nfacct: accounting object `' does not exist [ 254.473027][T11109] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1286'. [ 254.529610][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1289'. [ 254.535880][T11118] netlink: 'syz.3.1289': attribute type 9 has an invalid length. [ 254.535912][T11118] netlink: 'syz.3.1289': attribute type 6 has an invalid length. [ 254.535926][T11118] netlink: 'syz.3.1289': attribute type 7 has an invalid length. [ 254.535939][T11118] netlink: 'syz.3.1289': attribute type 8 has an invalid length. [ 254.611581][T11120] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1290'. [ 254.880829][T11126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1292'. [ 254.928052][T11132] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1295'. [ 254.931978][T11127] xt_hashlimit: max too large, truncated to 1048576 [ 254.932343][T11127] No such timeout policy "syz1" [ 254.969777][T11133] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1294'. [ 255.010521][T11133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1294'. [ 255.048082][ T9419] IPVS: starting estimator thread 0... [ 255.074382][T11132] syzkaller0: entered promiscuous mode [ 255.074408][T11132] syzkaller0: entered allmulticast mode [ 255.097916][ T31] audit: type=1800 audit(1791272069.662:3): pid=11132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1295" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1430 res=0 errno=0 [ 255.135202][T11137] IPVS: using max 27 ests per chain, 64800 per kthread [ 255.302212][T11141] block nbd1: server does not support multiple connections per device. [ 255.302732][T11141] block nbd1: shutting down sockets [ 255.539893][T11145] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 255.644614][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1302'. [ 255.671389][T11148] netlink: 'syz.5.1301': attribute type 7 has an invalid length. [ 255.870323][T11162] netlink: 'syz.4.1304': attribute type 21 has an invalid length. [ 255.870352][T11162] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1304'. [ 256.222864][T11162] netlink: 'syz.4.1304': attribute type 4 has an invalid length. [ 256.222890][T11162] netlink: 'syz.4.1304': attribute type 5 has an invalid length. [ 256.737911][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.858704][T11190] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 257.015021][T11190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.413958][T11218] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 257.828705][T11190] bond4: (slave gretap1): making interface the new active one [ 257.834265][T11190] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 257.852161][T11195] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 257.983396][T11221] : renamed from dummy0 (while UP) [ 258.534447][T11240] __nla_validate_parse: 4 callbacks suppressed [ 258.534477][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 258.538167][T11240] tipc: Resetting bearer [ 258.692348][T11240] tipc: Disabling bearer [ 258.990264][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 259.258391][T11235] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 259.283255][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 259.325638][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'. [ 261.095338][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 261.968177][T11279] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.056046][T11287] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.063035][T11290] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.186632][T11314] macvlan2: entered allmulticast mode [ 262.186661][T11314] bridge0: entered allmulticast mode [ 262.363921][T11317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 262.871243][T11331] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 263.283510][T11345] batman_adv: batadv0: Adding interface: macvtap1 [ 263.283531][T11345] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.284481][T11345] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 263.549575][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 263.619343][T11347] batman_adv: batadv0: Removing interface: macvtap1 [ 263.856997][T11354] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1350'. [ 264.381641][T11373] ip6t_srh: unknown srh invflags 4000 [ 264.705814][T11381] lo: Caught tx_queue_len zero misconfig [ 265.082846][T11354] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 265.247138][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 265.247167][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 265.365526][T11392] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 265.578394][T11395] siw: device registration error -23 [ 265.797493][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 266.072555][T11406] validate_nla: 1 callbacks suppressed [ 266.072578][T11406] netlink: 'syz.5.1365': attribute type 1 has an invalid length. [ 266.074264][T11406] netlink: 'syz.5.1365': attribute type 1 has an invalid length. [ 266.133471][T11387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1361'. [ 266.339703][T11415] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1369'. [ 266.371666][ T9422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.371692][ T9422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.450883][T11421] Bluetooth: hci0: unsupported parameter 5134 [ 266.450914][T11421] Bluetooth: hci0: unsupported parameter 8192 [ 266.450927][T11421] Bluetooth: hci0: unsupported parameter 5134 [ 266.450939][T11421] Bluetooth: hci0: unsupported parameter 8192 [ 266.638306][T11427] ip_tables: iptables: counters copy to user failed while replacing table [ 266.641145][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 266.641507][T11427] netlink: 'syz.5.1368': attribute type 4 has an invalid length. [ 266.807034][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 266.812748][T11438] veth0_to_team: mtu less than device minimum [ 266.814162][T11438] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 266.880398][T11415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.030821][T11453] siw: device registration error -23 [ 268.134741][T11461] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1378'. [ 268.219014][T11467] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.879138][T11495] __nla_validate_parse: 2 callbacks suppressed [ 268.879169][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1383'. [ 269.293233][T11495] bond1: option lacp_active: invalid value (5) [ 269.354875][T11495] bond1 (unregistering): Released all slaves [ 269.693217][T11522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1392'. [ 270.061528][T11538] veth1_to_team: Caught tx_queue_len zero misconfig [ 270.149136][T11542] netlink: 'syz.2.1398': attribute type 14 has an invalid length. [ 270.149160][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 270.150218][T11542] bond0: option xmit_hash_policy: invalid value (239) [ 270.420726][T11554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1402'. [ 271.044879][T11567] netlink: 'syz.3.1405': attribute type 1 has an invalid length. [ 297.577203][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1414'. [ 297.592546][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1414'. [ 297.848171][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 298.665734][T11634] Bluetooth: hci0: unsupported parameter 5134 [ 298.665760][T11634] Bluetooth: hci0: unsupported parameter 8192 [ 298.665770][T11634] Bluetooth: hci0: unsupported parameter 5134 [ 298.665780][T11634] Bluetooth: hci0: unsupported parameter 8192 [ 299.427598][T11667] netlink: 'syz.2.1426': attribute type 11 has an invalid length. [ 299.427625][T11667] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.1426'. [ 299.427967][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1426'. [ 299.499250][T11668] xt_nfacct: accounting object `' does not exist [ 299.724855][T11668] netlink: 'syz.0.1427': attribute type 2 has an invalid length. [ 299.987976][T11675] xt_TCPMSS: Only works on TCP SYN packets [ 300.953528][T11714] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1440'. [ 300.989281][T11715] xt_l2tp: v2 doesn't support IP mode [ 301.007368][T11716] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1440'. [ 301.183493][T11723] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1442'. [ 301.183645][T11723] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1442'. [ 301.184115][T11723] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1442'. [ 301.314286][T11728] bridge_slave_1: left allmulticast mode [ 301.314309][T11728] bridge_slave_1: left promiscuous mode [ 301.314468][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.344647][T11728] bond0: (slave bond_slave_0): Releasing backup interface [ 301.362260][T11728] bond0: (slave bond_slave_1): Releasing backup interface [ 301.377824][T11728] team0: Port device team_slave_0 removed [ 301.381260][T11728] team0: Port device team_slave_1 removed [ 301.381702][T11728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.384688][T11728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.398810][T11728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.017292][T11753] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 302.241655][T11763] ipvlan2: entered promiscuous mode [ 302.244597][T11763] team0: Device ipvlan2 failed to register rx_handler [ 302.486941][T11773] netlink: 'syz.5.1455': attribute type 1 has an invalid length. [ 302.680906][T11773] bond1: entered promiscuous mode [ 302.680952][T11773] bond1: entered allmulticast mode [ 302.681420][T11773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.805422][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.806520][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 303.209583][T11780] __nla_validate_parse: 6 callbacks suppressed [ 303.209607][T11780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1456'. [ 303.837499][T11814] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 303.980324][T11819] netlink: 964 bytes leftover after parsing attributes in process `syz.5.1464'. [ 303.980353][T11819] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 304.323725][T11839] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 304.323755][T11839] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 304.349158][T11842] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 304.349187][T11842] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 304.356384][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 304.800898][T11858] syzkaller0: entered promiscuous mode [ 304.800924][T11858] syzkaller0: entered allmulticast mode [ 304.948565][T11866] sctp: [Deprecated]: syz.2.1475 (pid 11866) Use of int in max_burst socket option. [ 304.948565][T11866] Use struct sctp_assoc_value instead [ 305.490360][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 305.541450][T11889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1480'. [ 305.543439][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1480'. [ 305.544138][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1480'. [ 305.607761][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 306.299376][T11917] bridge0: left promiscuous mode [ 306.304175][T11917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.320969][T11917] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.367140][T11917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.674274][T11917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.674304][T11917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.682150][T11917] veth1_vlan: left promiscuous mode [ 306.684219][T11917] veth0_vlan: left promiscuous mode [ 306.686748][T11917] veth0_vlan: entered promiscuous mode [ 306.689553][T11917] veth1_vlan: entered promiscuous mode [ 306.696510][T11917] veth1_macvtap: left promiscuous mode [ 306.697899][T11917] veth0_macvtap: left promiscuous mode [ 306.699956][T11917] veth0_macvtap: entered promiscuous mode [ 306.701640][T11917] veth1_macvtap: entered promiscuous mode [ 306.724069][T11917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.726426][T11917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.728429][T11917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.731084][T11917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.732237][T11917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.733966][T11917] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.763944][T11917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.845205][T11917] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 307.198498][T11934] netlink: 3784 bytes leftover after parsing attributes in process `syz.3.1491'. [ 307.220560][ T9413] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.220598][ T9413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.220641][ T9413] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.220666][ T9413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.252398][ T9429] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.252437][ T9429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.702201][T11954] netlink: 'syz.5.1497': attribute type 10 has an invalid length. [ 307.805751][T11954] team0: Port device dummy0 added [ 307.831392][T11965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 308.516966][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1505'. [ 308.613055][T11993] netlink: 'syz.2.1506': attribute type 4 has an invalid length. [ 308.661296][T11996] netlink: 'syz.2.1506': attribute type 4 has an invalid length. [ 308.695356][T11994] netlink: 'syz.5.1507': attribute type 21 has an invalid length. [ 308.695457][T11994] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1507'. [ 308.695493][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1507'. [ 308.871992][T12002] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1509'. [ 308.900315][T12002] ipvlan2: entered promiscuous mode [ 308.902833][T12002] team0: Device ipvlan2 failed to register rx_handler [ 308.970662][T12008] xt_hashlimit: size too large, truncated to 1048576 [ 308.990695][T12010] netlink: 'syz.5.1511': attribute type 16 has an invalid length. [ 308.990720][T12010] netlink: 'syz.5.1511': attribute type 17 has an invalid length. [ 309.183331][T12010] bond1: left promiscuous mode [ 309.183362][T12010] bond1: left allmulticast mode [ 309.432288][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1512'. [ 309.469866][T12017] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1512'. [ 312.084511][T12038] Bluetooth: hci0: unsupported parameter 5135 [ 312.084539][T12038] Bluetooth: hci0: unsupported parameter 8192 [ 312.084553][T12038] Bluetooth: hci0: unsupported parameter 5135 [ 312.084565][T12038] Bluetooth: hci0: unsupported parameter 8192 [ 312.261319][T12038] lo speed is unknown, defaulting to 1000 [ 312.541547][T12063] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1524'. [ 312.561882][T12064] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1524'. [ 312.588354][T12062] bridge0: port 4(veth0) entered blocking state [ 312.588869][T12062] bridge0: port 4(veth0) entered disabled state [ 312.589061][T12062] veth0: entered allmulticast mode [ 312.620636][T12062] veth0: entered promiscuous mode [ 312.804552][T12073] x_tables: unsorted entry at hook 1 [ 312.813528][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1526'. [ 312.813561][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1526'. [ 312.958669][T12076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.958791][T12076] IPv6: NLM_F_CREATE should be set when creating new route [ 312.958959][T12076] IPv6: NLM_F_CREATE should be set when creating new route [ 312.958989][T12076] IPv6: NLM_F_CREATE should be set when creating new route [ 313.612703][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.615810][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.622788][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.639835][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.640688][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.681520][T12105] can: request_module (can-proto-0) failed. [ 314.714407][T12113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1535'. [ 314.730370][T12113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.066905][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'. [ 315.073747][T12119] netlink: 'syz.5.1537': attribute type 10 has an invalid length. [ 315.113238][T12125] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 315.331821][T12125] batman_adv: batadv0: Adding interface: syzkaller0 [ 315.378618][T12125] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.378753][T12125] batman_adv: batadv0: Interface activated: syzkaller0 [ 315.697864][T12140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1540'. [ 315.767143][ T5624] Bluetooth: hci6: command tx timeout [ 316.231629][T12143] netlink: 'syz.2.1540': attribute type 2 has an invalid length. [ 316.231656][T12143] netlink: 'syz.2.1540': attribute type 8 has an invalid length. [ 316.231689][T12143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1540'. [ 316.322455][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 316.322491][T12149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1542'. [ 316.322506][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1542'. [ 316.451606][T12131] bridge0: entered promiscuous mode [ 316.475780][T12131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.480156][T12131] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.491044][T12131] dummy0: left promiscuous mode [ 316.590336][T12152] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1539'. [ 316.653326][T12131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.653356][T12131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.691517][T12131] veth1_vlan: left promiscuous mode [ 316.703209][T12131] veth0_vlan: left promiscuous mode [ 316.706846][T12131] veth0_vlan: entered promiscuous mode [ 316.712049][T12131] veth1_vlan: entered promiscuous mode [ 316.740809][T12131] veth1_macvtap: left promiscuous mode [ 316.754795][T12131] veth0_macvtap: left promiscuous mode [ 316.758442][T12131] veth0_macvtap: entered promiscuous mode [ 316.773048][T12131] veth1_macvtap: entered promiscuous mode [ 316.788797][T12131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.793244][T12131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.801629][T12131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.812837][T12131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.831725][T12131] bond1: left promiscuous mode [ 316.831760][T12131] bridge1: left promiscuous mode [ 316.837716][T12131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.848855][T12131] bond2: left promiscuous mode [ 316.849610][T12131] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.860465][T12131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.874195][T12131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.903763][T12131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.919491][T12131] 8021q: adding VLAN 0 to HW filter on device bond6 [ 316.940846][T12131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.961135][T12131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.962354][T12131] 8021q: adding VLAN 0 to HW filter on device bond8 [ 316.980276][T12131] bond9: left promiscuous mode [ 316.980696][T12131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.045750][T12124] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 317.074627][T12124] batman_adv: batadv0: Removing interface: syzkaller0 [ 317.123775][ T9422] bridge0: port 4(veth0) entered blocking state [ 317.124011][ T9422] bridge0: port 4(veth0) entered forwarding state [ 317.133703][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.133862][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.140129][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.140256][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.404032][T12095] lo speed is unknown, defaulting to 1000 [ 317.417965][ T9422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.418004][ T9422] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.419020][ T9422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.419054][ T9422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.419119][ T9422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.419143][ T9422] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.419176][ T9422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.419199][ T9422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.524626][ T9429] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.524862][ T9429] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.549357][ T30] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.789226][T12163] li: renamed from lo [ 317.845467][ T5624] Bluetooth: hci6: command tx timeout [ 317.907378][T12166] ovs-dp0: entered promiscuous mode [ 318.088110][ T30] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.184403][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.328744][ T30] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.359275][ T8083] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.512769][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 318.520438][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 318.552503][ T8090] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.592088][T12137] li speed is unknown, defaulting to 1000 [ 318.726024][ T8090] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 319.540113][T12202] ipt_ECN: cannot use operation on non-tcp rule [ 319.925181][ T5624] Bluetooth: hci6: command tx timeout [ 320.099514][T12207] netlink: 'syz.3.1557': attribute type 4 has an invalid length. [ 320.162065][T12211] netlink: 'syz.3.1557': attribute type 4 has an invalid length. [ 320.260611][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 320.272589][T12214] __nla_validate_parse: 1 callbacks suppressed [ 320.272618][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 320.377475][ T9419] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.377515][ T9419] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.377639][ T9419] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.377665][ T9419] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.377741][ T9419] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.377766][ T9419] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.387951][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 320.534396][T12221] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 321.021797][T12216] 8021q: adding VLAN 0 to HW filter on device bond6 [ 321.729597][T12095] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.729781][T12095] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.730291][T12095] bridge_slave_0: entered allmulticast mode [ 321.733026][T12095] bridge_slave_0: entered promiscuous mode [ 321.740700][T12095] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.741028][T12095] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.741211][T12095] bridge_slave_1: entered allmulticast mode [ 321.743882][T12095] bridge_slave_1: entered promiscuous mode [ 321.765681][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 321.947498][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 321.947539][T12258] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 321.972173][T12095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.983301][T12095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.006013][ T5619] Bluetooth: hci6: command tx timeout [ 322.021188][T12260] sctp: [Deprecated]: syz.5.1567 (pid 12260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.021188][T12260] Use struct sctp_sack_info instead [ 322.122241][T12095] team0: Port device team_slave_0 added [ 322.133843][T12095] team0: Port device team_slave_1 added [ 322.180778][T12266] openvswitch: netlink: Unknown key attributes 1 [ 322.214334][T12095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.214356][T12095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.214384][T12095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.269382][T12095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.269403][T12095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.269432][T12095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.436243][T12095] hsr_slave_0: entered promiscuous mode [ 322.437454][T12095] hsr_slave_1: entered promiscuous mode [ 322.438406][T12095] debugfs: 'hsr0' already exists in 'hsr' [ 322.438428][T12095] Cannot create hsr debugfs directory [ 322.581817][T12286] x_tables: duplicate underflow at hook 4 [ 322.952314][T12293] gretap1: entered promiscuous mode [ 323.423914][T12308] netlink: 'syz.3.1578': attribute type 3 has an invalid length. [ 323.423932][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1578'. [ 323.423944][T12308] netlink: 'syz.3.1578': attribute type 3 has an invalid length. [ 323.423953][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1578'. [ 323.424264][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 325.157114][T12267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.226378][T12095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 325.253532][T12095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.254800][T12095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 325.373655][T12095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.376211][T12095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 325.486879][T12095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.493964][T12095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.548181][T12095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.559749][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 325.814493][T12322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 325.814524][T12322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'. [ 326.168256][T12095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.356976][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 326.590559][T12095] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.633924][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.634038][ T9419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.661471][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.661597][ T9419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.714110][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1588'. [ 326.714140][T12349] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1588'. [ 326.969229][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 327.020244][T12351] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 327.084013][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 327.084061][T12366] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1592'. [ 327.151546][T12351] xt_CT: No such helper "netbios-ns" [ 327.158311][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 327.187432][T12356] team0: Port device team_slave_0 removed [ 327.622533][T12383] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 327.666607][T12383] team0: Port device dummy0 added [ 327.685678][ T8081] page_pool_release_retry() stalled pool shutdown: id 148, 32 inflight 60 sec [ 327.827589][T12390] netlink: 'syz.2.1597': attribute type 11 has an invalid length. [ 328.199272][T12394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.611483][T12399] li speed is unknown, defaulting to 1000 [ 329.453902][T12095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.746240][T12429] unsupported nlmsg_type 40 [ 330.148218][T12440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 330.541682][T12095] veth0_vlan: entered promiscuous mode [ 330.965696][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 331.064621][T12095] veth1_vlan: entered promiscuous mode [ 331.232177][T12484] ip_tables: iptables: counters copy to user failed while replacing table [ 331.378586][T12095] veth0_macvtap: entered promiscuous mode [ 331.408584][T12095] veth1_macvtap: entered promiscuous mode [ 331.498244][T12095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.548596][T12095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.671482][ T9422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.672517][ T9422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.672560][ T9422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.677325][ T9419] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.177448][T12529] team0: Device wg1 is of different type [ 332.235715][T12543] __nla_validate_parse: 6 callbacks suppressed [ 332.235739][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'. [ 332.282039][T12529] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 332.491430][T12537] bond7: option arp_validate: invalid value (1048579) [ 332.497832][T12537] bond7 (unregistering): Released all slaves [ 332.624392][T12448] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 332.650982][ T9410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.651008][ T9410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.742360][T12543] bridge3: entered promiscuous mode [ 333.243497][ T9413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.243521][ T9413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.430431][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'. [ 333.510723][T12584] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 333.899277][T12599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1625'. [ 334.514678][T12621] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1631'. [ 334.533465][ T5619] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 334.793147][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'. [ 334.795336][T12633] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1634'. [ 334.874833][T12640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1637'. [ 335.099840][T12645] netlink: 'syz.5.1638': attribute type 1 has an invalid length. [ 335.099867][T12645] netlink: 'syz.5.1638': attribute type 2 has an invalid length. [ 335.581333][T12660] netlink: 'syz.0.1644': attribute type 21 has an invalid length. [ 335.871176][T12671] netlink: zone id is out of range [ 335.873209][T12671] netlink: zone id is out of range [ 335.873592][T12671] netlink: zone id is out of range [ 335.873995][T12671] netlink: zone id is out of range [ 335.874006][T12671] netlink: zone id is out of range [ 335.874054][T12671] netlink: zone id is out of range [ 335.874063][T12671] netlink: zone id is out of range [ 335.874132][T12671] netlink: zone id is out of range [ 335.874140][T12671] netlink: zone id is out of range [ 335.874169][T12671] netlink: zone id is out of range [ 336.243828][T12691] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 336.260997][T12691] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 336.379004][T12694] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 336.437365][T12696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1652'. [ 336.760942][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 336.954506][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 337.237471][T12720] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 337.689145][T12730] netlink: 'syz.5.1664': attribute type 1 has an invalid length. [ 338.006487][T12734] __nla_validate_parse: 4 callbacks suppressed [ 338.006530][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1664'. [ 338.008619][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1664'. [ 338.042787][T12731] team0: Device wg1 is of different type [ 338.129855][T12732] bond4: option arp_validate: invalid value (1048579) [ 338.133089][T12732] bond4 (unregistering): Released all slaves [ 338.201292][T12733] bond4: option arp_validate: invalid value (1048579) [ 338.214799][T12733] bond4 (unregistering): Released all slaves [ 338.284566][T12734] bridge1: entered promiscuous mode [ 338.318458][T12735] bridge1: entered promiscuous mode [ 338.491692][T12753] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1670'. [ 338.706540][T12760] netlink: 'syz.6.1675': attribute type 1 has an invalid length. [ 338.706564][T12760] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1675'. [ 338.785990][T12768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1674'. [ 338.813263][T12765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.454319][T12803] netlink: 'syz.5.1681': attribute type 11 has an invalid length. [ 339.454346][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1681'. [ 339.511141][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1681'. [ 341.057156][T12856] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1690'. [ 341.058964][T12856] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1690'. [ 341.602803][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1696'. [ 341.686653][T12878] syzkaller0: entered promiscuous mode [ 341.686681][T12878] syzkaller0: entered allmulticast mode [ 341.712794][T12878] tipc: Started in network mode [ 341.712830][T12878] tipc: Node identity 16d08db7db5, cluster identity 4711 [ 341.713193][T12878] tipc: Enabled bearer , priority 0 [ 342.567631][T12876] tipc: Resetting bearer [ 342.744136][T12876] tipc: Disabling bearer [ 342.876541][T12890] ip6gre1: entered allmulticast mode [ 342.879301][ T30] tipc: Node number set to 3447754167 [ 343.117052][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1702'. [ 343.363398][T12937] lo: entered promiscuous mode [ 343.370376][T12937] tunl0: entered promiscuous mode [ 343.370908][T12937] gre0: entered promiscuous mode [ 343.373115][T12937] gretap0: entered promiscuous mode [ 343.373507][T12937] erspan0: entered promiscuous mode [ 343.374062][T12937] ip_vti0: entered promiscuous mode [ 343.380617][T12937] ip6_vti0: entered promiscuous mode [ 343.381033][T12937] sit0: entered promiscuous mode [ 343.387530][T12937] ip6tnl0: entered promiscuous mode [ 343.388207][T12937] ip6gre0: entered promiscuous mode [ 343.393399][T12937] syz_tun: entered promiscuous mode [ 343.393992][T12937] ip6gretap0: entered promiscuous mode [ 343.398151][T12937] bridge0: entered promiscuous mode [ 343.398860][T12937] vcan0: entered promiscuous mode [ 343.399387][T12937] bond0: entered promiscuous mode [ 343.399403][T12937] bond_slave_0: entered promiscuous mode [ 343.399589][T12937] bond_slave_1: entered promiscuous mode [ 343.400397][T12937] team0: entered promiscuous mode [ 343.400413][T12937] team_slave_0: entered promiscuous mode [ 343.400589][T12937] team_slave_1: entered promiscuous mode [ 343.400761][T12937] dummy0: entered promiscuous mode [ 343.445868][T12937] nlmon0: entered promiscuous mode [ 343.450402][T12937] batadv0: entered promiscuous mode [ 343.451107][T12937] vxcan0: entered promiscuous mode [ 343.457323][T12937] vxcan1: entered promiscuous mode [ 343.457876][T12937] veth0: entered promiscuous mode [ 343.458508][T12937] veth1: entered promiscuous mode [ 343.463007][T12937] wg0: entered promiscuous mode [ 343.522856][T12937] wg1: entered promiscuous mode [ 343.525985][T12937] wg2: entered promiscuous mode [ 343.533204][T12937] veth0_to_bridge: entered promiscuous mode [ 343.540533][T12937] veth1_to_bridge: entered promiscuous mode [ 343.563145][T12937] veth0_to_bond: entered promiscuous mode [ 343.570953][T12937] veth1_to_bond: entered promiscuous mode [ 343.589840][T12937] veth0_to_team: entered promiscuous mode [ 343.600312][T12937] veth1_to_team: entered promiscuous mode [ 343.608124][T12937] veth0_to_batadv: entered promiscuous mode [ 343.612183][T12937] batadv_slave_0: entered promiscuous mode [ 343.622554][T12937] veth1_to_batadv: entered promiscuous mode [ 343.627163][T12937] batadv_slave_1: entered promiscuous mode [ 343.631408][T12937] xfrm0: entered promiscuous mode [ 343.638830][T12937] veth0_to_hsr: entered promiscuous mode [ 343.671923][T12937] veth1_to_hsr: entered promiscuous mode [ 343.672723][T12937] hsr0: entered promiscuous mode [ 343.673241][T12937] veth1_virt_wifi: entered promiscuous mode [ 343.673521][T12937] veth0_virt_wifi: entered promiscuous mode [ 343.682453][T12937] virt_wifi0: entered promiscuous mode [ 343.698902][T12937] macvtap0: entered promiscuous mode [ 343.699693][T12937] macsec0: entered promiscuous mode [ 343.716150][T12937] geneve0: entered promiscuous mode [ 343.717303][T12937] geneve1: entered promiscuous mode [ 343.717830][T12937] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 343.726682][T12937] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 343.727397][T12937] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 343.728005][T12937] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 343.756209][T12937] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 343.761847][T12937] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 343.762802][T12937] mac80211_hwsim hwsim26 wlan2: entered promiscuous mode [ 343.780972][T12937] vlan0: entered promiscuous mode [ 343.810655][T12937] mac80211_hwsim hwsim28 wlan3: entered promiscuous mode [ 343.811181][T12937] bond1: entered promiscuous mode [ 343.812054][T12937] bond2: entered promiscuous mode [ 343.823763][T12937] bond3: entered promiscuous mode [ 343.824208][T12937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.132914][T12966] Cannot find add_set index 0 as target [ 344.157373][T12962] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 344.206206][T12962] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1711'. [ 344.439657][T12984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1717'. [ 344.853810][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1722'. [ 344.853880][T12996] net_ratelimit: 27 callbacks suppressed [ 344.853963][T12996] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 345.033258][T12996] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.239252][T13014] syz_tun: entered allmulticast mode [ 345.421261][T13014] bond4: option packets_per_slave: invalid value (1751607656) [ 345.421283][T13014] bond4: option packets_per_slave: allowed values 0 - 65535 [ 345.469125][T13014] bond4 (unregistering): Released all slaves [ 346.909643][T13051] siw: device registration error -23 [ 347.042819][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1733'. [ 347.062574][T13055] syzkaller0: entered promiscuous mode [ 347.062600][T13055] syzkaller0: entered allmulticast mode [ 347.259520][T13066] team0: Port device dummy0 removed [ 347.362135][T13063] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 347.470578][T13079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1745'. [ 347.470622][T13079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1745'. [ 347.800406][T13091] netlink: 'syz.0.1749': attribute type 21 has an invalid length. [ 347.832125][T13096] netlink: 'syz.0.1749': attribute type 21 has an invalid length. [ 347.886998][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1745'. [ 347.967204][T13098] gre0: entered promiscuous mode [ 347.967231][T13098] gre0: entered allmulticast mode [ 348.245559][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 348.254667][T13104] siw: device registration error -23 [ 348.400206][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'. [ 348.613681][T13120] openvswitch: netlink: IP tunnel TTL not specified. [ 349.047168][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 349.087031][T13076] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 349.150618][T13076] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.217684][T13138] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 349.414808][T13152] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.694313][T13158] netlink: 'syz.3.1766': attribute type 4 has an invalid length. [ 349.751440][T13167] siw: device registration error -23 [ 349.832313][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'. [ 349.939702][T13170] netlink: 'syz.5.1767': attribute type 83 has an invalid length. [ 349.940014][T13170] netlink: 'syz.5.1767': attribute type 83 has an invalid length. [ 349.941405][T13170] netlink: 'syz.5.1767': attribute type 83 has an invalid length. [ 349.942521][T13170] netlink: 'syz.5.1767': attribute type 83 has an invalid length. [ 349.944329][T13170] netlink: 'syz.5.1767': attribute type 83 has an invalid length. [ 349.944589][T13170] netlink: 'syz.5.1767': attribute type 83 has an invalid length. [ 350.645850][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 351.118629][T13189] netlink: 1120 bytes leftover after parsing attributes in process `syz.3.1773'. [ 351.118661][T13189] netlink: 1120 bytes leftover after parsing attributes in process `syz.3.1773'. [ 351.576479][T13216] xt_cgroup: invalid path, errno=-2 [ 352.204768][T13229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1779'. [ 352.368341][T13239] ip_tables: iptables: counters copy to user failed while replacing table [ 352.493162][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1785'. [ 352.526673][T13248] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.526786][T13248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.526797][T13248] IPv6: NLM_F_CREATE should be set when creating new route [ 352.526843][T13248] IPv6: NLM_F_CREATE should be set when creating new route [ 352.526868][T13248] IPv6: NLM_F_CREATE should be set when creating new route [ 353.009286][T13262] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 353.157453][T13273] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1792'. [ 353.157697][T13273] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1792'. [ 353.157906][T13273] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1792'. [ 353.325584][T13279] validate_nla: 59 callbacks suppressed [ 353.325674][T13279] netlink: 'syz.5.1793': attribute type 2 has an invalid length. [ 353.428706][T13281] __nla_validate_parse: 17 callbacks suppressed [ 353.428747][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1793'. [ 353.429668][T13281] netlink: 'syz.5.1793': attribute type 2 has an invalid length. [ 353.442163][T13279] : entered promiscuous mode [ 353.471860][T13284] siw: device registration error -23 [ 353.572741][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1794'. [ 353.696803][T13288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.706767][T13288] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1796'. [ 353.777995][T13292] netlink: 'syz.6.1798': attribute type 2 has an invalid length. [ 353.778026][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1798'. [ 353.893477][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1798'. [ 353.893578][T13292] bridge_slave_1: left allmulticast mode [ 353.893600][T13292] bridge_slave_1: left promiscuous mode [ 353.893865][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.941947][T13292] bridge_slave_0: left allmulticast mode [ 353.941978][T13292] bridge_slave_0: left promiscuous mode [ 353.950649][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.093909][T13295] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1799'. [ 354.094084][T13295] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1799'. [ 354.122158][T13294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1799'. [ 354.122302][T13294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1799'. [ 354.145919][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'. [ 354.768754][T13330] xt_limit: Overflow, try lower: 0/0 [ 355.623377][T13366] smc: net device lo applied user defined pnetid SYZ0 [ 356.547635][T13406] li speed is unknown, defaulting to 1000 [ 357.463179][T13420] siw: device registration error -23 [ 358.218299][T13446] ip_tables: iptables: counters copy to user failed while replacing table [ 359.218223][T13481] __nla_validate_parse: 38 callbacks suppressed [ 359.218250][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1839'. [ 359.880561][T13497] bridge0: port 4(veth0) entered disabled state [ 359.881129][T13497] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.881830][T13497] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.020629][T13511] netlink: 'syz.6.1847': attribute type 21 has an invalid length. [ 360.086501][T13514] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1847'. [ 360.614678][T13497] bridge0: left allmulticast mode [ 360.823080][T13480] macvtap1: entered allmulticast mode [ 360.823102][T13480] veth0_to_bridge: entered allmulticast mode [ 360.848321][T13480] veth0_to_bridge: left allmulticast mode [ 360.926202][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 360.926231][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 360.926257][T13540] netlink: 'syz.2.1850': attribute type 11 has an invalid length. [ 360.955584][ T9428] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.955621][ T9428] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.955923][ T9428] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.955947][ T9428] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.955980][ T9428] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.956002][ T9428] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.956034][ T9428] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.956056][ T9428] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.964643][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1849'. [ 361.200073][T13542] ip_tables: iptables: counters copy to user failed while replacing table [ 361.208277][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 361.304626][T13528] syzkaller0: entered promiscuous mode [ 361.304654][T13528] syzkaller0: entered allmulticast mode [ 361.354845][T13546] siw: device registration error -23 [ 361.443180][T13546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1853'. [ 362.001125][T13581] netlink: 'syz.2.1858': attribute type 1 has an invalid length. [ 362.001199][T13581] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1858'. [ 366.263203][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 366.263580][T13604] xt_cgroup: path and classid specified [ 366.538727][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 366.585808][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 366.592855][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 366.829433][T13618] siw: device registration error -23 [ 366.870113][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 366.870165][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1870'. [ 366.926631][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1868'. [ 367.200086][T13643] tipc: New replicast peer: 255.255.255.255 [ 367.202397][T13643] tipc: Enabled bearer , priority 10 [ 367.202928][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1877'. [ 367.204308][T13643] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 367.243372][T13643] bond5: entered promiscuous mode [ 367.244048][T13643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.320767][T13646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.345784][T13636] li speed is unknown, defaulting to 1000 [ 367.353441][T13648] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1876'. [ 367.385936][T13652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1877'. [ 367.387860][T13652] bond5: entered allmulticast mode [ 367.406177][T13646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.410162][T13648] netlink: 'syz.5.1876': attribute type 1 has an invalid length. [ 368.808503][T13690] netlink: 'syz.2.1891': attribute type 25 has an invalid length. [ 369.032463][T13690] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 369.059399][T13690] bond6 (unregistering): Released all slaves [ 369.800223][T13719] siw: device registration error -23 [ 370.022489][T13724] ip_tables: iptables: counters copy to user failed while replacing table [ 370.982265][T13757] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.536201][T13777] siw: device registration error -23 [ 371.620089][T13777] __nla_validate_parse: 5 callbacks suppressed [ 371.620116][T13777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1914'. [ 371.941068][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 371.961150][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 372.228418][T13804] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1920'. [ 372.440570][T13813] netlink: 'syz.6.1924': attribute type 21 has an invalid length. [ 372.440607][T13813] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1924'. [ 372.440731][T13813] netlink: 'syz.6.1924': attribute type 5 has an invalid length. [ 372.440747][T13813] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1924'. [ 372.507651][T13814] sit0: left promiscuous mode [ 372.631119][T13816] netlink: zone id is out of range [ 372.631137][T13816] netlink: zone id is out of range [ 372.631146][T13816] netlink: zone id is out of range [ 372.631153][T13816] netlink: zone id is out of range [ 372.631161][T13816] netlink: zone id is out of range [ 372.631169][T13816] netlink: zone id is out of range [ 372.631181][T13816] netlink: zone id is out of range [ 372.631189][T13816] netlink: zone id is out of range [ 372.631197][T13816] netlink: zone id is out of range [ 372.631203][T13816] netlink: zone id is out of range [ 372.761837][T13822] siw: device registration error -23 [ 372.769558][T13814] geneve2: left promiscuous mode [ 372.769581][T13814] geneve2: left allmulticast mode [ 372.789248][T13814] bond2: left promiscuous mode [ 372.789271][T13814] C: left promiscuous mode [ 372.869272][T13826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1927'. [ 373.371034][T13837] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 373.383312][T13837] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 373.402552][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 373.407853][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 373.407880][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 373.811909][T13853] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 373.838662][T13853] bond6 (unregistering): Released all slaves [ 375.611236][T13916] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 375.642774][T13916] bond11: option mode: invalid value (10) [ 375.842600][T13916] bond11 (unregistering): Released all slaves [ 376.177499][T13902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.534712][T13943] SET target dimension over the limit! [ 376.849509][T13962] bond0: (slave bond_slave_1): Releasing backup interface [ 376.864081][T13962] netlink: 'syz.6.1961': attribute type 1 has an invalid length. [ 376.929288][T13962] bond1: option mode: invalid value (7) [ 376.937978][T13962] bond1 (unregistering): Released all slaves [ 377.011432][T13960] netlink: 'syz.3.1960': attribute type 15 has an invalid length. [ 377.043119][T13962] netlink: 'syz.6.1961': attribute type 10 has an invalid length. [ 377.043139][T13962] __nla_validate_parse: 5 callbacks suppressed [ 377.043147][T13962] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1961'. [ 377.043288][T13962] dummy0: entered promiscuous mode [ 377.116263][T13974] xt_hashlimit: size too large, truncated to 1048576 [ 377.166139][T13975] macvtap1: entered allmulticast mode [ 377.166165][T13975] veth0_to_bridge: entered allmulticast mode [ 377.175439][T13975] veth0_to_bridge: left allmulticast mode [ 377.773653][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.774424][T13998] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.927380][T14002] net_ratelimit: 493 callbacks suppressed [ 377.927429][T14002] ip_tables: iptables: counters copy to user failed while replacing table [ 378.160420][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 378.617120][T14033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1977'. [ 378.810274][T14036] syzkaller0: entered promiscuous mode [ 378.810301][T14036] syzkaller0: entered allmulticast mode [ 379.614544][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.802850][T14057] x_tables: duplicate underflow at hook 3 [ 380.251336][T14070] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1985'. [ 380.883302][ T9408] IPVS: starting estimator thread 0... [ 380.976221][T14089] IPVS: using max 26 ests per chain, 62400 per kthread [ 381.011116][ T5619] Bluetooth: hci4: SCO packet too small [ 381.107979][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 381.383404][T14105] ip6t_ah: unknown flags 4 [ 381.452749][T14107] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 381.466138][T14107] bond6 (unregistering): Released all slaves [ 381.489440][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 381.618851][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 381.941773][ T5619] Bluetooth: hci6: link tx timeout [ 381.941799][ T5619] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 382.296321][T14144] openvswitch: netlink: Message has 8 unknown bytes. [ 382.368135][T14148] syzkaller1: entered promiscuous mode [ 382.368275][T14148] syzkaller1: entered allmulticast mode [ 382.407095][T14150] siw: device registration error -23 [ 382.704787][T14159] siw: device registration error -23 [ 382.823633][T14166] ip_tables: iptables: counters copy to user failed while replacing table [ 382.883778][T14170] siw: device registration error -23 [ 384.016066][ T5624] Bluetooth: hci6: command 0x0406 tx timeout [ 385.172537][T14135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.426632][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2012'. [ 385.533489][T14180] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 385.539162][T14180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.547384][T14180] team0: Port device netdevsim1 added [ 385.909057][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'. [ 385.938558][T14187] ip_tables: iptables: counters copy to user failed while replacing table [ 386.496355][T14187] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2016'. [ 386.573485][T14216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.593563][T14216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.593995][T14216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.594385][T14216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.662963][T14216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 387.611003][T14236] smc: adding net device macvtap0 with user defined pnetid SYZ0 [ 387.631465][T14240] bond2: (slave C): Releasing backup interface [ 387.632437][T14240] bond2: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 387.660445][T14240] team0: Port device dummy0 removed [ 387.661119][T14240] bridge_slave_0: left allmulticast mode [ 387.661141][T14240] bridge_slave_0: left promiscuous mode [ 387.661430][T14240] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.687723][T14240] bridge_slave_1: left allmulticast mode [ 387.687764][T14240] bridge_slave_1: left promiscuous mode [ 387.688029][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.703656][T14240] team0: Port device team_slave_1 removed [ 387.704145][T14240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.704490][T14240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.708318][T14240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.708737][T14240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.085630][ T8088] page_pool_release_retry() stalled pool shutdown: id 148, 32 inflight 120 sec [ 415.445299][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 415.445965][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 441.049578][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.888106][ T32] INFO: task syz.4.1418:11628 blocked for more than 143 seconds. [ 444.888142][ T32] Not tainted syzkaller #0 [ 444.888152][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.888161][ T32] task:syz.4.1418 state:D stack:27168 pid:11628 tgid:11627 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 444.888229][ T32] Call Trace: [ 444.888358][ T32] [ 444.888409][ T32] __schedule+0x17db/0x58f0 [ 444.888625][ T32] ? __pfx___schedule+0x10/0x10 [ 444.888722][ T32] ? schedule+0x90/0x2b0 [ 444.888754][ T32] schedule+0x164/0x2b0 [ 444.888786][ T32] schedule_preempt_disabled+0x13/0x30 [ 444.888812][ T32] __mutex_lock+0x7c1/0x1550 [ 444.888849][ T32] ? __mutex_lock+0x5d4/0x1550 [ 444.888884][ T32] ? nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 444.889018][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 444.889046][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 444.889121][ T32] nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 444.889148][ T32] ? __nla_parse+0x40/0x60 [ 444.889237][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 444.889266][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 444.889367][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 444.889399][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 444.889430][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 444.889469][ T32] ? bpf_lsm_capable+0x9/0x20 [ 444.889524][ T32] ? security_capable+0x7e/0x2c0 [ 444.889605][ T32] genl_rcv_msg+0x614/0x7a0 [ 444.889650][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.889677][ T32] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 444.889722][ T32] netlink_rcv_skb+0x226/0x4a0 [ 444.889761][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.889790][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.889830][ T32] ? down_read+0x2be/0x330 [ 444.889875][ T32] genl_rcv+0x28/0x40 [ 444.889901][ T32] netlink_unicast+0x7bd/0x940 [ 444.889969][ T32] netlink_sendmsg+0x813/0xb40 [ 444.890004][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.890037][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 444.890110][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.890130][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 444.890200][ T32] ____sys_sendmsg+0x54e/0x850 [ 444.890265][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.890305][ T32] ? import_iovec+0x73/0xa0 [ 444.890370][ T32] ___sys_sendmsg+0x2a5/0x360 [ 444.890397][ T32] ? __lock_acquire+0x747/0x2de0 [ 444.890452][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.890487][ T32] ? futex_wait+0x2a2/0x390 [ 444.890567][ T32] ? __fget_files+0x2a/0x420 [ 444.890635][ T32] ? __fget_files+0x3a2/0x420 [ 444.890676][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 444.890792][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.890848][ T32] do_syscall_64+0x166/0x520 [ 444.890941][ T32] ? trace_irq_disable+0x3b/0x140 [ 444.890972][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.891041][ T32] ? clear_bhb_loop+0x70/0xc0 [ 444.891073][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.891098][ T32] RIP: 0033:0x7f8089d9e199 [ 444.891249][ T32] RSP: 002b:00007f808ac1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.891303][ T32] RAX: ffffffffffffffda RBX: 00007f808a025fa0 RCX: 00007f8089d9e199 [ 444.891325][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000004 [ 444.891340][ T32] RBP: 00007f8089e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 444.891354][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.891367][ T32] R13: 00007f808a026038 R14: 00007f808a025fa0 R15: 00007fffb84c0278 [ 444.891407][ T32] [ 444.891441][ T32] [ 444.891441][ T32] Showing all locks held in the system: [ 444.891482][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 444.891538][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 444.891726][ T32] locks held by getty/5374: 2, on CPU#0: [ 444.891769][ T32] #0: ffff8880363ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 444.891913][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 444.891994][ T32] locks held by kworker/0:16/8088: 2, last CPU#0: [ 444.892010][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 444.892091][ T32] #1: ffffc90003597c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 444.892260][ T32] locks held by syz.1.1089/10331: 2, on CPU#0: [ 444.892279][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 444.892338][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 444.892402][ T32] locks held by syz.4.1418/11628: 2, on CPU#1: [ 444.892417][ T32] #0: ffffffff902b8ee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 444.892472][ T32] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 444.892551][ T32] [ 444.892559][ T32] ============================================= [ 444.892559][ T32] [ 444.892570][ T32] NMI backtrace for cpu 1 [ 444.892585][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 444.892609][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 444.892622][ T32] Call Trace: [ 444.892635][ T32] [ 444.892646][ T32] dump_stack_lvl+0xe8/0x150 [ 444.892713][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 444.892793][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.892844][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 444.892874][ T32] sys_info+0x135/0x170 [ 444.892899][ T32] watchdog+0xfd7/0x1030 [ 444.892933][ T32] ? watchdog+0x1c7/0x1030 [ 444.892963][ T32] kthread+0x38b/0x480 [ 444.892993][ T32] ? __pfx_watchdog+0x10/0x10 [ 444.893021][ T32] ? __pfx_kthread+0x10/0x10 [ 444.893043][ T32] ret_from_fork+0x514/0xb70 [ 444.893079][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 444.893110][ T32] ? __switch_to+0xc89/0x1420 [ 444.893162][ T32] ? __pfx_kthread+0x10/0x10 [ 444.893185][ T32] ret_from_fork_asm+0x1a/0x30 [ 444.893232][ T32] [ 444.893240][ T32] Sending NMI from CPU 1 to CPUs 0: [ 444.893272][ C0] NMI backtrace for cpu 0 [ 444.893291][ C0] CPU: 0 UID: 0 PID: 8088 Comm: kworker/0:16 Not tainted syzkaller #0 PREEMPT(full) [ 444.893312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 444.893325][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 444.893436][ C0] RIP: 0010:__lock_acquire+0x31b/0x2de0 [ 444.893459][ C0] Code: 89 6c 24 28 8b bc 24 48 01 00 00 8b ac 24 38 01 00 00 4c 8b 84 24 28 01 00 00 4c 8b 7c 24 08 4d 8d af b0 0b 00 00 41 83 fe 31 <48> 89 74 24 20 0f 83 54 28 00 00 4c 89 74 24 38 4b 8d 04 b6 89 f1 [ 444.893499][ C0] RSP: 0018:ffffc90003597890 EFLAGS: 00000087 [ 444.893525][ C0] RAX: 000000000000bc2f RBX: 0000000000000000 RCX: ffffffff943b14d0 [ 444.893538][ C0] RDX: 0000000000000000 RSI: 0000000000000787 RDI: 00000000003f24ce [ 444.893551][ C0] RBP: 0000000000000000 R08: ffffffff86aa5ffd R09: 0000000000000000 [ 444.893563][ C0] R10: dffffc0000000000 R11: fffffbfff1f32d5d R12: 0000000000000000 [ 444.893576][ C0] R13: ffff888031902af0 R14: 0000000000000002 R15: ffff888031901f40 [ 444.893589][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 444.893605][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.893619][ C0] CR2: 000056157dc72168 CR3: 0000000075360000 CR4: 00000000003526f0 [ 444.893637][ C0] Call Trace: [ 444.893644][ C0] [ 444.893658][ C0] ? __pfx___schedule+0x10/0x10 [ 444.893682][ C0] ? irqentry_exit+0x218/0x910 [ 444.893709][ C0] ? irqentry_exit+0x218/0x910 [ 444.893735][ C0] lock_acquire+0x115/0x350 [ 444.893753][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 444.893779][ C0] ? process_scheduled_works+0x97a/0x1630 [ 444.893804][ C0] ? process_scheduled_works+0x97a/0x1630 [ 444.893826][ C0] _raw_spin_lock+0x2e/0x40 [ 444.893848][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 444.893872][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 444.893898][ C0] ? process_scheduled_works+0x97a/0x1630 [ 444.893921][ C0] process_scheduled_works+0xc3d/0x1630 [ 444.893956][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.893981][ C0] ? assign_work+0x3cf/0x5d0 [ 444.894004][ C0] worker_thread+0xa47/0xfb0 [ 444.894038][ C0] kthread+0x38b/0x480 [ 444.894055][ C0] ? __pfx_worker_thread+0x10/0x10 [ 444.894076][ C0] ? __pfx_kthread+0x10/0x10 [ 444.894093][ C0] ret_from_fork+0x514/0xb70 [ 444.894131][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 444.894165][ C0] ? __switch_to+0xc89/0x1420 [ 444.894193][ C0] ? __pfx_kthread+0x10/0x10 [ 444.894210][ C0] ret_from_fork_asm+0x1a/0x30 [ 444.894241][ C0] [ 444.894268][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 445.820509][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 445.830357][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.840513][ T32] Call Trace: [ 445.843864][ T32] [ 445.846991][ T32] vpanic+0x56d/0xa60 [ 445.851210][ T32] ? __pfx_vpanic+0x10/0x10 [ 445.855824][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 445.861526][ T32] panic+0xc5/0xd0 [ 445.865280][ T32] ? __pfx_panic+0x10/0x10 [ 445.869748][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 445.875164][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 445.881832][ T32] watchdog+0x1030/0x1030 [ 445.886322][ T32] ? watchdog+0x1c7/0x1030 [ 445.890865][ T32] kthread+0x38b/0x480 [ 445.895061][ T32] ? __pfx_watchdog+0x10/0x10 [ 445.900308][ T32] ? __pfx_kthread+0x10/0x10 [ 445.904934][ T32] ret_from_fork+0x514/0xb70 [ 445.909571][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 445.914710][ T32] ? __switch_to+0xc89/0x1420 [ 445.919600][ T32] ? __pfx_kthread+0x10/0x10 [ 445.924410][ T32] ret_from_fork_asm+0x1a/0x30 [ 445.929748][ T32] [ 445.933330][ T32] Kernel Offset: disabled [ 445.937796][ T32] Rebooting in 86400 seconds..