last executing test programs: 12m30.212258898s ago: executing program 1 (id=859): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000)=0xfffffffc, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1d, @multicast2}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12m30.108175927s ago: executing program 1 (id=861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0xc27f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x36, 0x1, 0x5}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 12m29.858467094s ago: executing program 1 (id=865): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000dff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x32e}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@ifindex, 0xffffffffffffffff, 0x17, 0x4}, 0x20) 12m29.789764612s ago: executing program 1 (id=867): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @mcast2, 0xfffffff7}}, 0x7, 0x9, 0xe, 0x7}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x4}, &(0x7f0000000300)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @mcast2, 0xfffffff7}}, 0x7, 0x9, 0xe, 0x7}, &(0x7f0000000280)=0x98) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x4}, &(0x7f0000000300)=0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) 12m29.615382605s ago: executing program 1 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000818120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000080)='FREEZING\x00', 0x9) (async) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0, 0x80) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000000)="0dc314", 0x3}], 0x1) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) 12m29.25371682s ago: executing program 1 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2b, 0x70bd2b, 0x70bd2b, 0x8, [0x5]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x24000058) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff78a9}], 0x1, 0x2020, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r8}, 0x18) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r9, r10, 0x2f, 0x0, @val=@perf_event}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) 12m14.154607221s ago: executing program 32 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2b, 0x70bd2b, 0x70bd2b, 0x8, [0x5]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x24000058) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff78a9}], 0x1, 0x2020, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r8}, 0x18) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r9, r10, 0x2f, 0x0, @val=@perf_event}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) 11m54.229401787s ago: executing program 5 (id=1128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x401, 'G0S', 0x3, 0x4}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000004c0)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0xfffffffe, {}, [{0x34}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048824}, 0x0) 11m53.939746673s ago: executing program 5 (id=1134): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x13, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x1ff, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) socket$inet_mptcp(0x2, 0x1, 0x106) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x6, 0xde) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)={0x2c, 0x43, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x89, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @pid}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x4048001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x3, 0x3, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) poll(0x0, 0x0, 0x3) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 11m52.95207368s ago: executing program 5 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0, 0x80) writev(r3, &(0x7f0000000680)=[{&(0x7f0000000000)="0dc314", 0x3}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x5ac, 0x0, 0x6, 0xffffffff}, 0x10) r4 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefd", 0xffeb}], 0x1) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$sock(r5, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="47da0328f414a24994ff2bfd4a35b037a1361a9aea5541723b230dc1e5228b4cb48bc23ea33eb9d167b0d8a707a13fb83f95c768ccccb4c98558bfd39bc015656d242bb490ed15f4a9806507b698bf8923dc5dd582809fb653f9e87f2abc77f7170a128596cc2ca3b60a837ad2", 0x6d}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @mark={{0x14, 0x1, 0x24, 0xfffff9da}}, @txtime={{0x18, 0x1, 0x3d, 0x2a}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x78}}, {{&(0x7f0000000380)=@vsock, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000400)="f1ee34d4550c40917a9d745685c7297a1608201e4f63578e0665374c0cdb2fb1975f3f809f71fe9cdf62ad17cafa8ff65bc4f82f0c1267f9778716cc11cb82d97369a43da33c92c96eecf1d9adbf8388dde9796e583d28f2eb1a34028635ae514d6775cec7a31f24987da01f90f1b8ac9745ca02d88779ed4daa719b4ad32437456c120b0590a8b5db669ec6ea95b2b86f5c66e3820499b0", 0x98}, {&(0x7f00000004c0)="98b5df0cdf49719b6c9737fb68ff0c2bc629e1ce06d4339acb10921c3cf6e2adc234054f06569a19c664acf85e4929e759841ceb681d8c698f8e8fafa1651a1ad4e9a3be402ddef555f534c50c4aca77d7e52a1fa36a54b9b9f78ba5e355682da22728c3a269b8c84c615a4f40e799af5b0685", 0x73}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="fd2b8c8875bcd5452ab64ea5ec0aa357baecabfc7d4795b5253036ad3388cf0976dba5334fe8a638e084ba64024055716910e16e4237cf3b394d3a733c54db3ec89d78194f3b46d890d991ab5d3db0b53feb5e77d47ba7029452f3e0665f6c9f65378fc0ac3c80cc58c133632e2797790e281ad2cc3f9ad7c630d6e47a613563295427", 0x83}, {&(0x7f0000001600)="e2b4b36df2fb72df08712e1124b0cfcd6711af17350f8b0ef17ecf429faa698b99784d4a379686e046331a8d4b1add2e825e3e63cad64b8d709cf256789a67bfc019a435b2b79f6df69afe16b99f3e783906ff4144b91ef754406c9e09ceb220496245e6380e96ce2de09ecb33a2fe18b5096f10086593865d34df8d272b62a64e93446472e06c7863a804470f7a2e32478747b4de1c3eebb569", 0x9a}], 0x5, &(0x7f0000001740)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xff7}}, @timestamping={{0x14, 0x1, 0x25, 0x7c}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x78}}], 0x2, 0x84001) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m52.743682821s ago: executing program 5 (id=1143): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000180)=0x9f7, 0x4) (async) getsockopt$inet_opts(r4, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000140)=0x50) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(r2) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lc\x00', 0x12, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 11m52.336535177s ago: executing program 5 (id=1147): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xce23, 0xfffffffe, @remote, 0x47ffe}, 0xfffffffffffffff4) listen(r0, 0x0) 11m52.297050273s ago: executing program 5 (id=1148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x20410}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0xfc}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000017}, 0x4048004) write$tun(r2, 0x0, 0x340a) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0x7, 0xffff, 0x7}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11m37.176368299s ago: executing program 33 (id=1148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x20410}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0xfc}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000017}, 0x4048004) write$tun(r2, 0x0, 0x340a) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0x7, 0xffff, 0x7}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.185743435s ago: executing program 2 (id=6428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x23, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x1b}, @jmp={0x5, 0x0, 0x3, 0x7, 0x1, 0x100, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @generic={0x9, 0x6, 0x4, 0x8, 0xcc}, @alu={0x7, 0x0, 0xa, 0xa, 0x0, 0x50}, @ldst={0x2, 0x0, 0x6, 0x1, 0x8, 0x30, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x8000, 0x2d, &(0x7f0000000180)=""/45, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x9, 0x3, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x4fa0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000004c0)={r1, 0x0, 0xd4, 0x0, &(0x7f0000000340)="869babd92e6e78296c810cab3b106077f3f7a09193bbac41b55db801101584e411700786ebb29cdec63f306cd5bcb260b91d2cd3fd9b03679db9737985b207d92fc37f4cf2b327481363b3097c90a53d413d0ef20f58e9565a19bf91d4d5af260314f7d91d612622a335b8bc9a558dd27a8df67b98c2d73908ef4f1c2b18ac9255be2350d76adb949a7674fa742ef6095afbf1ea0ba952d3d33b6d607b7e38ed6fe42a45da6d398a1d766582c3d1392433d8a3416357d3f19724ab2a57fb08950e40dca82a0c36d9f66a4530935e9d269397d606", 0x0, 0xfffffffa, 0x0, 0x45, 0x0, &(0x7f0000000440)="98890f427a4aa197931ff6104d51223de68629dc8eef2c0924f5d0c063b1ae75084542c471a87f50fdffd5fe785da94fd56d45209bbfd4d9f6b87db137341322331011a871"}, 0x50) 5.891326798s ago: executing program 2 (id=6430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf250000000000f9ffff07000a"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) sendmmsg$inet6(r2, &(0x7f0000000140), 0x0, 0x200880d8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) unshare(0x26020400) unshare(0x24020000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4}, 0x18) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000440)=0xc, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4008010) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 5.185411642s ago: executing program 3 (id=6434): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @dev}, &(0x7f0000000740)=0x10, 0x800) sendmsg$netlink(r1, &(0x7f00000007c0)={&(0x7f0000000040), 0xc, &(0x7f00000006c0)=[{&(0x7f0000000080)={0x294, 0x2c, 0x20, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x2e, 0x0, 0x0, @u32=0x5}, @generic="c41682e0b206dd92b79910f1d198f4c8068c777b6e913e8373db0ac6e9a5e6249d5ef3053f03f380f36afe7052e2bef515ba9543577aa25ae9718f838035b23f449752be897f", @generic="bde63c01054bc5179af78473e47bd9e761b8f6442859fb5028f43c207a40", @nested={0x218, 0xe5, 0x0, 0x1, [@generic="7d8d0aabe863b5ca65e8959ef77f38fa4e051819e9268ef2bdcdf2cecbef272ddabc8395a40557d7b95e82e2165d00809a4cbee5c0166d49eee30b6c5514449046aa963672ae6f256d237dbdabfcd37cb2584cd7aaee740e0098b4915c0021eeea1c74f1a7f08bf24060d885619fa5f947c364d34d2598fcf6e1b8f022051b86bd5d51e6a01df5fb4cef2ea964c0704cdc94b9e6ad8fe9d55a9149636b7c0b950578281096f75bf81714e3085685124a12b94df3b570afbdd0ff970947f84ea6e83ef30bf682389b68604572ea5f3200379b6ab5055535c9d96c8216d71cef", @generic="2fce5cf980ca5f0f0f8e91b2034165d4d28d6e9983055a2da261b512b1acf344e0cc328b266a591421cf60d1f3dc3df2cc284b18af95272e39f57463652b193b3544ca62a30d025993442c5778b18289bd423adc434603f631016f2bb6ad2d6c6c2705d1ccc2d9a7c8271af873c2afa5213ced321ed414b203cfb2a59a47", @typed={0x8, 0x10f, 0x0, 0x0, @str='\\x-\x00'}, @nested={0x4, 0x5e}, @generic="57e59fc2ced1343b19f02cd737e3d45e0d876d7440d3aa8b9a022693c9aeefdd523c1045ec382e75207be2d78eff5575392172bd54a9400127d620fb5a38223ae12a908d86a517753096729f5113c6c40c19eb6659b50b81e2f5baed83b8382d872d306b7e616f90c75c9c337273bb840c61149290bb30a80357973f7abcd3651111e2748dcc43d389855371a4b13248d34c25f525daacf7e0c5768c8920946d6f8235893e19a863ec35b9"]}]}, 0x294}, {&(0x7f0000000340)={0x18, 0x40, 0x200, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x9f, 0x0, 0x0, @fd=r0}]}, 0x18}, {&(0x7f0000000380)={0x20, 0x29, 0x300, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @nested={0x8, 0x130, 0x0, 0x1, [@nested={0x4, 0x86}]}]}, 0x20}, {&(0x7f0000000440)={0x250, 0x2f, 0x400, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0xce, 0x0, 0x0, @fd=r0}, @nested={0xc7, 0xf6, 0x0, 0x1, [@generic="64ad652a0fe7b349e4b5e5a26606ca17711fda161605c510aad3fb43683238ea9bcc1a04bc0caaa49f38ff8969e251340ac71b81c09f448c634c1a81d4fa5ae3a53e3f5684c05e851f1ee140f776c4248b4a72c4b7ff63ab9cbf3a08254b04361a70179b60b37f9a5892f0910d8456440883dbd2a0289729dfa9d49eae6c47f0ca1919389cd60a3be4949455afe814e31de29c214f3824b3f6a0c65fb516b82382cbd9e3a604f386014d6bd4c29d28", @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x14d, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x29}]}, @generic="86af5136b63647854afbab8de9295758a9eed4c92f569d698b1fb14f3cc8f5db27c9915db8a376f8c40de8dc310e7235", @nested={0x140, 0xc5, 0x0, 0x1, [@generic="b5baf4c35beb5c023ef486ca4ede1bf6318d60d5ee8dc210b6eba6c70f1f85c31b746eecf2ab0f47455c0294e38c20", @typed={0x8, 0x77, 0x0, 0x0, @fd=r0}, @generic="521278a22f3660d23b631bd63c98bfc0ba27d12b2df16faf425ce988d088412aaa1a95bd472df4dbfc682f280f531e7a389e653e2ec2b1b633c5590ae23809a9508c64d1ab8e51cd16e2d67f596c005bde24abc203304ef6e5df57afc532d31eaac29f193c28edaf9342e54338db3c24479b9051ee61d9878bfebfc860914826130b569aff5e8852e5626f057b186b994a38d82778dbbf3ff6b29171f0af76cda64b41c20e6c5ab14310160d341332421b34632e107a443a5935a42c812bca563cde2d2c667fb30ac60b148daf7d51b0817c040d0aa2872bb557ebeaafdda0a5d47dff9cf1c0c438b1098d8b3ac8e0b96af6f3b53793afa2649aca9486", @nested={0x4, 0x101}, @nested={0x4, 0x65}]}]}, 0x250}], 0x4, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x800}, 0x20040010) (async) preadv(r1, &(0x7f0000002c80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/238, 0xee}, {&(0x7f0000001900)=""/235, 0xeb}, {&(0x7f0000001a00)=""/94, 0x5e}, {&(0x7f0000001a80)=""/203, 0xcb}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/202, 0xca}], 0x7, 0x80, 0x7ff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002d40), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000002e40)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x48, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000c000) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000003300)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000032c0)={&(0x7f0000002f00)={0x388, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x1}, {0x0, 0x7}, {0x4}, {0x5, 0x6}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x4}, {0x1}, {0x7, 0x9}, {0x7}, {0x2}, {0x3, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x4, 0x7}, {0x4, 0x5}, {0x3, 0x2}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x2, 0x3}, {0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x5, 0x8}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xda71, 0x2, 0xff, 0x81, 0x7ff, 0x2, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb12, 0x0, 0x0, 0xaf8, 0xc7cc, 0x22f, 0x1000, 0xff86]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x48, 0x48, 0x18, 0x24, 0x18, 0x4, 0x30, 0x6c, 0x2, 0x12, 0x18, 0x0, 0x9, 0x2, 0x1, 0x4, 0x60, 0x6, 0x66, 0xb915d7b6b5c3730e]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x3, 0x18, 0x16, 0x16, 0x3, 0x9, 0x18, 0x1b, 0x6c, 0x2, 0x16, 0x1, 0x16, 0x3, 0xa, 0x18, 0x2, 0x48, 0x12, 0x60, 0x24, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x8000, 0x7, 0x2, 0x1f8a, 0x2, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x2, 0xe, 0x5e, 0x0, 0x9, 0xfff9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x9, 0x4, 0x3, 0x5, 0x8a, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaf4a, 0xa, 0x5, 0x5, 0x101, 0x1, 0xfff, 0x6]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x36, 0xc, 0x18, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6000, 0xf035, 0xffff, 0x9, 0x1, 0x0, 0xece, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x0, 0x100, 0x2, 0x7, 0xfff, 0xf, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x0, 0x3, 0x0, 0x7fff, 0xea8e, 0x80]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x1}, {0x6, 0x9}, {0x6, 0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x6, 0xa}, {0x2, 0x8}, {0x3, 0x9}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0xa}, {0x7, 0x3}, {0x5, 0x16}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0xa}, {0x2}, {0x6}, {0x2, 0x8}, {0x7, 0xa}, {0x6, 0x1}, {0x7, 0x6}, {0x4}, {0x0, 0x7}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x5, 0x4}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0x6}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x1, 0x3}, {0x2, 0x7}, {0x6}, {0x4}, {0x4, 0x2}, {0x6, 0x1}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x200, 0x5, 0x5617, 0x1000, 0x400, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0xc, 0x2, 0x200, 0x5, 0x168e, 0xe5d9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x6}, {0x5, 0xa}, {0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0x1}, {0x4, 0x8}, {0x6}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0xa}, {0x6, 0x4}, {0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x3}, {0x3, 0x2}, {0x6, 0x7}, {0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x8, 0x9cd7, 0x810, 0x1, 0x8e0e, 0xa]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{}, {0x7, 0x9}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x2, 0x8}, {0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x4}, {0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x8}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x6}, {0x1}, {0x5}, {0x6, 0x9}, {0x3, 0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x5, 0x3}, {0x1, 0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0x7}, {0x1, 0x5}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x3}, {0x4}, {0x5}, {0x4, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x5, 0x6}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x60, 0x5, 0x2, 0x2, 0x2, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4b, 0x2, 0x40, 0x2, 0xd29, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x16, 0x6, 0x16, 0x1, 0x30, 0x2, 0x60, 0x2, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000008c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003380), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000003480)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x60, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8044}, 0x800) (async) sendmsg$nl_generic(r7, &(0x7f00000036c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003500)={0x168, 0x9, 0x800, 0x70bd2d, 0x25dfdbfd, {0x1b}, [@nested={0x3e, 0x110, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @u32=0xfffffffc}, @generic="140d0b17667cf3cb3c55", @typed={0x8, 0xf5, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xfd}, @typed={0x13, 0x6f, 0x0, 0x0, @binary="36f8322035b140105b2e1dadc5d848"}]}, @nested={0x114, 0x79, 0x0, 0x1, [@nested={0x4, 0xb9}, @generic="eefca3356d01ecd3596a687973b2bb5187eb18529067b554a5a9579e89e171bbc0b35e9ac64e363a19ce25178a3161dc768a187aa076f861073a332293078584777f7584356153a104b5c4ebb918500f7f2ed886cd97ff456e351a6d0ff8c069ed1b81697492eb4db757945d8cdfb0037e5f41989f4865286a2f6505767afccfc46c844934f41e65ff6628149138e33247102187c8b1486e1da8728794e3888846c9bb8a797075130a37d1101ad3db0bc9fae6714d2b2f93096342aa781364301c917a03cf2f8204d4865839b9adcf49e7e7666e776d69995d5a73d698e859884f68b32fdc5ef2cf1c212fe9518e0132dd", @nested={0x4, 0xc1}, @generic="52549a3f0e1023e0fa13cbbd68d9981e98aa0de9dfd5cb"]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000003800)={r0, &(0x7f0000003700)='pci\x00', 0x10000, &(0x7f0000003740)={@_ha_fsid={[0x0, 0x1ff]}, {0x62, 0x101, 0xa, 0x3ff}}, 0x2, &(0x7f0000003780), &(0x7f00000037c0)=0x4}) getsockname$packet(r9, &(0x7f0000003840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003880)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000038c0)={r9, r10, 0x25, 0x12, @void}, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003940), r7) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x40, r11, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x62}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$bt_hci(r9, &(0x7f0000003a40)={0x1f, 0x2}, 0x6) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x2040300}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f0000003b80)=0x5, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003bc0)={0x80000001}, 0x8) r12 = socket(0x26, 0x800, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000004640)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004600)={&(0x7f0000003c40)={0x984, r6, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x66}}}}, [@NL80211_ATTR_TX_RATES={0x210, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x0, 0x2, 0x6b, 0x7, 0x3, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x8, 0x5, 0x7f, 0x38, 0x37d, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x97, 0x2, 0x0, 0xf, 0x7, 0xfc01, 0x4d]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x6, 0x2, 0x36, 0x5, 0x34, 0x1, 0x24, 0x4, 0x16, 0x1b, 0x4, 0xc, 0x3, 0x55, 0x30, 0x16, 0x30, 0x6, 0x60, 0x60, 0x48, 0x9, 0x6, 0x1, 0xc, 0x24, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x3, 0x6726, 0xe, 0xe88c, 0xf544, 0x810]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x0, 0xfffd, 0x7, 0x0, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x3}, {0x5}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x6}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x4}, {0x3, 0x7}, {0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x3}, {0x1}, {0x5, 0x5}, {0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x4, 0x7}, {0x7, 0x5}, {0x0, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0xa}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x5}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x7, 0xa}, {0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x31, 0x6c, 0x18, 0x30, 0x48, 0x65, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x7, 0x2, 0xf50a, 0x8000, 0x3d, 0x4, 0x7]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x4, 0x6}, {0x6, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x8}, {0x1}, {}, {0x5, 0xa}, {0x6, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0x2}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x1}, {0x7, 0x8}, {0x4, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x1, 0x81, 0x0, 0x40, 0x8000, 0x260f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x9}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xe, 0x4, 0xff84, 0xc, 0x7, 0xd, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x4}, {0x2, 0x9}, {0x5, 0xa}, {0x6, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x7}, {0x5, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x7}, {0x4}, {0x3, 0xa}, {0x2, 0x8}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0x3}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x2, 0x7ff, 0xffff, 0x7, 0x1, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac06]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @beacon=[@NL80211_ATTR_IE={0x134, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x3f}, 0x2, 0x4, @broadcast, 0xfffffffa, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random_vendor={0xdd, 0x3f, "cba31de34e7e09238134bccb8ee10dbfac0cd639a0a765d259afa156a4882e042f4f777deda11af828d84278f044e207f7e6c38b1019cab58e3a731fbea8a4"}, @random={0x1, 0x22, "ed066de471727748e7cd5551b2d28a61596558ecb06bc00a5b776561e48e7a014fe0"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb6}}, @random_vendor={0xdd, 0xa3, "3197bb47facc46ff41b4841aed2584e78846b273b561b4f76cec51aec87052193a2e538c6a77cf63d76ce5e444d6573895e547743a487f40dc6b6a8400f6bc5a2186e986fff38fb588df4edf370201b1c6f90eff711c3cebc92931ad9cb5f771ac0a8b88908cedcc290512e5f15392194cdbd64a203c64865546e370c3089f0a4cd3d20987a4e18499e821647aa2b793d7b738e158a8b9aa0cf75a856ea7768d1870a3"}, @peer_mgmt={0x75, 0x4, {0x0, 0x0, @void, @void, @void}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1b4, 0x7f, [@fast_bss_trans={0x37, 0x73, {0x96, 0x1, "60d0643ca7c00c0692c9ab265b37113d", "a4ba9b838f83cbf6a0815390e0f72597e3e59d5287a4ac7cd4908668f25034b4", "4ea6d32e2913bb7531ade61174ea8bacbeb03a993df000214793cf56bc7a0e69", [{0x2, 0x1f, "92c42f11354d1f320a6ef92df10b2ac043275136ca0e8ca91652942125a438"}]}}, @perr={0x84, 0x2f, {0x0, 0x3, [{{}, @device_a, 0xffff, @void, 0x2c}, {{}, @device_a, 0x0, @void, 0x38}, {{0x0, 0x1}, @device_b, 0xad02, @value, 0x7}]}}, @mic={0x8c, 0x10, {0x9a3, "0df9693a5d00", @short="b4ed735ba5be23af"}}, @preq={0x82, 0x83, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0xfd, 0x6, 0xed5b, @broadcast, 0x8, @value, 0x8, 0x8, 0x9, [{{}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x401}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1}, @device_b, 0x7ff}, {{0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @preq={0x82, 0x67, {{}, 0xf, 0x6, 0x235b3e7b, @broadcast, 0xfffffffb, @void, 0x4, 0x5, 0x7, [{{0x1, 0x0, 0x1}, @broadcast, 0x10000}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @device_a, 0x7fff}, {{0x1}, @device_b, 0x5}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x1}, @broadcast, 0x2}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x6}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0xcc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xc1, 0x2, "568a9ede181a478db078dd13076dd90f4b58f1c97ae0f74ad5b0f55b8758bebd07b751c6360d6252ef2a6e6b5636e6903fcc10e4cc37df598235f525e816bb61725fd8b48ef7b1ac9bcdab9c6fae79e4c41051f6457c3ced1fedcc6d40f1318d9cd7ca63bddbc94728c7f38d01b97d3b56d1c0c4b2cd15a99d4bc7bc9028728c847b7f7c6558dc267e6ba7b0ec36edf57eeeb126d2de1bb10bd6d15fdf283535221f485aa8af2979c9a37d5826202e50436a028fee7f0fa6345b75fa2c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x35d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_b, @broadcast, @from_mac=@broadcast, {0x1, 0x7}}, 0x9, @random=0xc, 0x8, @val={0x0, 0x20, @random="9428c6af7ea350ae3d0a405e2ef9ef30c72901258f24777def9a4b5c4ebc1044"}, @val={0x1, 0x6, [{0x0, 0x1}, {0x24, 0x1}, {0x6}, {0xb}, {0x24}, {0xc}]}, @void, @val={0x4, 0x6, {0x0, 0x9, 0x4, 0x5}}, @void, @void, @val={0x25, 0x3, {0x1, 0x2}}, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x4, 0x6}}, @val={0x2d, 0x1a, {0x4000, 0x0, 0x5, 0x0, {0xffffffff, 0x3, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2}, 0x6, 0x9, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x10}}, @val={0x76, 0x6, {0x1, 0x3, 0x1, 0xc48f}}, [{0xdd, 0xf0, "94ab42100ef3cb5e6ac93d401ad7c1fde400fb40c63f401964996dc155c8c0709c45a369f0f3a322aa883f5454beab88a14756cb0fb2f85efb1ad16ded89713eef0074ce76796421872c3d83448aecc5915f7a24e966d0cd83d5b3a9bc3081f413b64072a389c079396f3ca57f2beb1e24148c6fc597d63d4085ac5a15dc13260f266c695e3e8a83b8de615ad0709486260ae368230e0924ae8f286a488564c82f5643cd1a7bc93bc77b43451be930738ca7f8a3ef9764c0028d41de3ae639cad93b3e96b3d7f44c15dba8f7c69b54f94f39f09b8321fbe4a7aeca5660d71882fb76b8d63d4f5ae35fcc60f516a4e026"}, {0xdd, 0x6b, "000fa5368126f774067fa3812de78a7ede593ccb83e5ec6bfdb9761cf78dc2833b1bd6f427b0ecf5194ccee2352f2e94240675bee36913d77701b4f6ba60cc0dcc6a1682c79a2778da9fb10c6799e511121b99c7ff27fcc7b96d9ae329f859d2032424ea59b6eb03bcb472"}, {0xdd, 0xc3, "676863da64ec5220fd9dcaf14eb9be2aa498e8bdd46bced8967925a01172ab1c326537b1d1ccba014b1f46a0e55fbc65f80ca6026fe0eb8a5cc86911a0dc0cea8f92d6da19dd51e0a69fbd1e92fcac5a2915087d42bef3fb300d4f426da0030fcbdef3a162732b91925bf42a6e695e7dc65e264f77cb20e059027a408505ceb446d07a29275324b534d0d04f8156828fdc9bb5b1c6f0034889373e4fb9d1a8f6f35a5e44884c1a13dcb8919dcb24964a4fed1268a3c2b7abcd0dd2f63ccc294abf9ad6"}, {0xdd, 0x9d, "71c44aaf2533814e27fe6af09eb999bb9ca9c2d3a56fe6ceb9e1085d78204669e399b0a4552d63f497cd1e66973757f501534a99ea8c750278d43a6ae0f6ef835423f32b1e9375700a41e7a72ea31b7e50ec8dbff292b2bf5604cd0d89db61f6165717eacee44b9a13f272fe74eaaa2fc8d4d3b80ccf11234fbcdac6832067916717c8df0df4fe656e6b64b47b3daae76027934f5ced9f860f639a9cb9"}]}}], @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x984}, 0x1, 0x0, 0x0, 0x10}, 0xc0) socket$kcm(0x29, 0x2b0a795d5a290665, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004740)={&(0x7f00000046c0)=@ipv4_delrule={0x4c, 0x21, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x10, 0x7, 0x5, 0x0, 0x0, 0x4, 0x10000}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0xfffffffc}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) sendto$unix(r12, &(0x7f00000047c0)="5e41aba75eb1b4fb825a8efd0c948ddc5d769eedd9a8f77dd4ec755832a1ffd0848d5630fafa719290322c45c585dfc7acc573c7e0f6ba6b6e890d65842ba9539bbdab5260a4b0efdb27f7ef6efce88cdb12c0c8823c282ee338ad68d3dae10349e661e13613c32faf3518b47dd03194ce04597319ea6332b484454c9cdb3ff15ff09153ce9326396cf2f3dd18c4a4a04807a31bf70348b4294cf56a71db6c939f54ef1c45db2b0f5d666296b986a8fc913e8f2dd2b650d52ff2c81a5cdc7ef03e40fa3b", 0xc4, 0x2000c190, &(0x7f00000048c0)=@file={0x0, './file0\x00'}, 0x6e) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000004a80)={0xffffffffffffffff, 0x1, 0x3, r10, 0x3}, 0xc) 4.893622644s ago: executing program 3 (id=6437): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000001aa0b00009004"], 0x48) r2 = socket$inet(0x2, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) socket(0x11, 0x2, 0x0) (async) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000001aa0b00009004"], 0x48) (async) socket$inet(0x2, 0x5, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) 4.828773824s ago: executing program 2 (id=6438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc420", 0x3}], 0x4}, 0x20008b88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 4.739241585s ago: executing program 0 (id=6439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffffffffffe34, 0x0, 0xffffffffffffffff, 0xffffffffffffff80}, 0x42) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000380)={0x0, 0xfffffffffffffed4, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x140f, 0x1, 0x70bd26, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000ec0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x6, 0xffffffff, {{0x2e, 0x4, 0x3, 0x6, 0xb8, 0x8, 0x0, 0x6, 0x17, 0x0, @broadcast, @empty, {[@lsrr={0x83, 0xf, 0xaa, [@broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @timestamp_addr={0x44, 0x34, 0x97, 0x1, 0x9, [{@empty, 0x7}, {@remote, 0x6}, {@remote, 0x8000}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x3f, 0x3, 0x4, [{@loopback, 0x8}, {@remote, 0x8}, {@multicast1}, {@rand_addr=0x64010102, 0xfffffc00}, {@local, 0x300}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x9}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x14, 0xe6, 0x0, 0xe, [0xc0, 0x0, 0x0, 0xda]}, @rr={0x7, 0x7, 0x54, [@private=0xa010100]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000001000)={'ip6_vti0\x00', r7, 0x29, 0x1, 0x8, 0x6aa, 0x18, @dev={0xfe, 0x80, '\x00', 0x9}, @loopback, 0x0, 0x20, 0x1000, 0x10000}}) connect$packet(r5, &(0x7f0000000e80)={0x11, 0x4, r8, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xd4c, 0x0, 0x0, @private2, @mcast2, {[], "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"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000f396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x190a1, 0x2c0e}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) 4.519064163s ago: executing program 3 (id=6440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r1, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000000}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000047}, 0x4014) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200), 0x3) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000240)={0x0, 0x8000}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x10000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8884) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x3, 0x5a7, 0x24, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x80, 0x10, 0x7b}}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001480)=0x0, &(0x7f00000014c0)=0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x84008101}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$xdp(r2, &(0x7f0000001b80)={&(0x7f0000001600)={0x2c, 0x4, r6, 0x8bb}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001640)="b97ad6872ea9058dfa02429c2a51667eed38", 0x12}, {&(0x7f0000001680)="acec83ee9fc15fea48e55c79e08093c48948202a8d16c73ecba6704d82276bd1d0ba9accff59ef0f49e1d133cced8485a57d612b7b34ae91e892108c3c34383619032cf99e5ebc", 0x47}, {&(0x7f0000001700)="33699b4f7671e41dac587740fc672decc99c97adf0c92d40d25a7a3df3f8d22faada1c5021136c1035e0646a6b56e6bcbd434ef6da66374e9c6cec794ac9899752abfd799bf6f14711f8115d2e719b9a1350158c8a318ed175ac9d32a5e8be1f3f01ef2cf80e347c67c225bab65360785815ce195befc6d7d4057cf527fedee4fb094589f183755211d69d09aae323290983538945fa7c3c4ce93dff6b1b7596dc1bf5bd6f46b2aea23e4b7f37165e57c438eef858d5786f27a2727740f3906483877c8f81af5ff9b5781a", 0xcb}, {&(0x7f0000001800)="4840fd50c15ddf003d591728f4236c9229e3dd3d819bcf2cf6d23393a2dcb9bd71f072ef77e08c23f9682342c83bb13c08ed86e0cbae2e55a150a96a4e1d8ae7c4f7e14b90d575e17063ee70b22a5e5cdaa0b53dd93cb30ef2", 0x59}, {&(0x7f0000001880)="4d966613f685c34285ca62cf28fe71d982c17bacf9c62f444eaa48c01e1d95938efbba0a3a73a1b3fd47de4c95e999e70c896b91d003a5788c5d85f323b808a4da22c93cf3e44772fedc2662b539bd8e20d430a0aba05fdc2d9b4d9bc4e1db0c97d0e62c114d966a5e47949ec43b5d4e0d5acb7148257c13ffad0597d7a4730ab96a8c439401854f8bfb4e5908ceea111b83b7f65b246d0f217b2da658a5f3dd302b58f72c41f0b32cab016f666dd32e6a1dea7d1305ec82514b007a2fa399a64d812839b4eb93fac51d98cb55e7e0a43cc9e0d65283aaecc5fe0e352886632685656602a287dbbf9153f6db42253f482bad08d3cc", 0xf5}, {&(0x7f0000001980)="cc2499fe2a908d7b86796929034aee3764450d84c88c56ce4e3da5aff5c8b88f30094f074c892aec0e3153643f0a536c7987e161c44b1733f14af72fd66ddc3c0373b9c3694142112709f1997d9a9f3c267c27b333f51282e1cd1a9b6c9ebf64c220f09272ea1a21f88c2a165c68e3add2080284ea614dc786e2996fc464f893e4fa3d86e6d5346eac3ccb670b5b7692a089de93694c50103d5f534a62d303747c840983d6709010ccd2d6186eb43a3c297d6af47e2daa70d2572a37db274b363c", 0xc1}, {&(0x7f0000001a80)="c27744713714000ea61c88400b97457cb77c8cd6a5b89c9ed0900788b735644b7af7252b2474e03e2e16bb98e51dd486a44f29d59dc559f767260e574e120355d4f89d59ad64075013ca71331fab25d75841b9819ff20b920de1886fd233710456fb20f9ab08fa16a068b72f70bc2c497070ccf328bf", 0x76}], 0x7, 0x0, 0x0, 0x10}, 0xc081) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001bc0), r7) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c40), r2) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, r8, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc008001}, 0x20044000) sendmsg$nl_route(r3, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)=@newlink={0x48, 0x10, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8fba066a16fc70b8}]}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x3}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) listen(0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8982, &(0x7f0000001f80)={0x8, 'syzkaller1\x00', {'wg0\x00'}, 0x4}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x6, 0xb}, {0x3}, {0xe, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x804) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r10, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r11, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8a}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4010) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002240), r10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r10, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1008480}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x48, r12, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:semanage_store_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x44080}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000002380)=0x10000, 0x4) 4.513421628s ago: executing program 2 (id=6441): socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)) pipe(&(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0c, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) 4.135099599s ago: executing program 0 (id=6442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x4c84c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @multicast}}]}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r2, 0xd3) 3.87155587s ago: executing program 0 (id=6444): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4000000) socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) (async) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x3, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async) recvmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) (async) r4 = socket(0x1f, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.596331626s ago: executing program 6 (id=6448): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f}, 0x28) (fail_nth: 10) 3.311141855s ago: executing program 6 (id=6449): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x20}, [@RTA_DST={0x8, 0x1, {0x7f, 0x0, 0x1}}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8106}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x20000000) r2 = accept4(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000140)=0x80, 0x80400) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffff14c6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) 1.959778604s ago: executing program 4 (id=6452): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x474, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0x3}}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x2, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x6, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x8, 0x1, 0x5, 0x1, 0x38000000, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x800000, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0x5, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x6ad, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x7ff, 0x2, 0xfff, 0x6, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xfffffff9, 0x3, 0x0, 0x4, 0x7, 0x47, 0xc0, 0xd1b7, 0x2, 0x8, 0xddf3, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x81, 0xff, 0x5, 0x9, 0x6, 0x8, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0x1, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x0, 0x3, 0x7, 0xe755, 0x3, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x81, 0x100, 0x401, 0xc6]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x194, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xd8, 0x1, [@m_bpf={0xd4, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0xa9, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22041d13980367da8408d539eb10ae552c36da2b8b9009d7ed24f9b33ffeb7989b0b6ed0ae05501c8dc34fe8cd"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xa8, 0x1, [@m_nat={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x78, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1273, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socket(0x1, 0x5, 0x0) r1 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800f968215e86bf5b540000000000000008000500", @ANYRES8=r2], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030ab6f5f3b95f2d0a7db0c64000280140006002001000000000000000000459b61fd5e5adc7b00fc02000000000000000000000000000004001200"], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=@newqdisc={0x30, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c5}, 0x24008004) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x1, 'lo\x00', 0x2}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="3400000010000100040000001000000000000000", @ANYRES32=r10, @ANYBLOB="10000000000000000c001a80080002800400018008000400000000002e5114ddcba69aad74be04c599d01eb46c1b0512a068574703ec9c78d968efc4057cdf5acddcbc58d2ce21551fbddd23279b39ad6583d26dc03d1ac6a79b8c1534f8592e5e503326dcaf02784218292b8620eb2a002fb343d064cd93c91bc8dc3a2eeebf57076d4259893c1990b0fed25b6fc1b638f68fa97061519f3f5713995db509dfd007b4ed193126025c"], 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf256f0000000c009900000000000500000000000000160000000800a00000000000050019010700000005f7d500020000000800a0007e000000050018012100000008002700010000000500180138000000"], 0x60}}, 0x50) 1.814389552s ago: executing program 4 (id=6453): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="9b87a7e080d34ad499b9b36f4e70aee186d5d1e5772aa3f0467475f8094db20c5e5127a95234343b77c67c308ea9c06415fc620429d23dbfc0ef1a0e7dda683e", 0x40}, {&(0x7f0000000700)="75b9d2605b5c55d110450f05b6c40dd49285e80041e8f30b01ba94fa0bf194de217c42e1e9b27c3eccc64aec3deaf054faa2288a248e8c6042bcf362edceaf80b6", 0x41}], 0x2}, 0x8004) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x3feff, 0x20110}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3000000010005fba0000000000000000000000003ba98bd09289a192cf768d2d1bfc27bb602ce57bb755a5ad4decd88d06db1447ea42d8ff0e0fc14e397c6a476af3a2f05766fb6c7add58", @ANYRES32=0x0, @ANYBLOB="a00002004188010008001b00000000000800168004000180"], 0x30}}, 0x800) socket(0x840000000002, 0x1, 0x100) (async) r7 = socket(0x840000000002, 0x1, 0x100) sendmsg$FOU_CMD_DEL(r7, &(0x7f000000a180)={0x0, 0x0, &(0x7f000000a140)={0x0, 0xff99}, 0x1, 0x0, 0x0, 0x20044090}, 0x24000804) (async) sendmsg$FOU_CMD_DEL(r7, &(0x7f000000a180)={0x0, 0x0, &(0x7f000000a140)={0x0, 0xff99}, 0x1, 0x0, 0x0, 0x20044090}, 0x24000804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0x26, 0x98, &(0x7f0000000240)="af094d99dce74292b2d4721919631ee95e5d792170af9d35a5d139d9126e4e1641ef6ff34708", &(0x7f0000000280)=""/152, 0x7, 0x0, 0x44, 0x9, &(0x7f00000003c0)="6e7d54a025aa1679b14d18831da659126523196268c7c556f463e5156bfab779d22ed65dae60a94e83cdefce3672a2218435563c712a7a533439558c52f958f219cf4c0f", &(0x7f0000000440)="71a07de3c36d44d9ea", 0x0, 0x0, 0xfd}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0x26, 0x98, &(0x7f0000000240)="af094d99dce74292b2d4721919631ee95e5d792170af9d35a5d139d9126e4e1641ef6ff34708", &(0x7f0000000280)=""/152, 0x7, 0x0, 0x44, 0x9, &(0x7f00000003c0)="6e7d54a025aa1679b14d18831da659126523196268c7c556f463e5156bfab779d22ed65dae60a94e83cdefce3672a2218435563c712a7a533439558c52f958f219cf4c0f", &(0x7f0000000440)="71a07de3c36d44d9ea", 0x0, 0x0, 0xfd}, 0x50) socket$kcm(0x10, 0x2, 0x4) (async) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xa0}, 0x24085) (async) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0xc, 0x6, 0x5, 0x0, 0x0, {0x9, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xa0}, 0x24085) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) connect$can_bcm(r7, &(0x7f0000000500)={0x1d, r0}, 0x10) (async) connect$can_bcm(r7, &(0x7f0000000500)={0x1d, r0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[], 0x5c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[], 0x5c}}, 0x0) 1.351334212s ago: executing program 6 (id=6454): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='%}-$-:%.\x93(-\x00', 0x20000, &(0x7f0000000080)={@align=0x2, {0x0, 0xfffe, 0x7, 0xc4}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1dc, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa7ab}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xea7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40}, 0x20044045) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000580)='\\*\x00', 0x3) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) pselect6(0x40, &(0x7f00000005c0)={0x2, 0x400, 0x5, 0x9, 0x3, 0xb, 0xb9b7, 0x5}, &(0x7f0000000600)={0x2, 0x7, 0x4f, 0x5, 0x1, 0x100000000, 0x3, 0x400}, &(0x7f0000000640)={0x0, 0x6, 0xff, 0x81, 0x93, 0x738, 0x5, 0x2}, &(0x7f00000006c0)={r3, r4+10000000}, &(0x7f0000000740)={&(0x7f0000000700)={[0x3]}, 0x8}) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x28}}}}, [""]}, 0x20}}, 0x24008881) splice(r0, &(0x7f00000008c0)=0xf, r5, &(0x7f0000000900)=0x1, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r0, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000000b40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x14, &(0x7f0000000940)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x0, 0xb, 0x1, 0x4, 0xffffffffffffffc0, 0x4}, @call={0x85, 0x0, 0x0, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x2, 0x6, 0x8, 0xa, 0x2, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x550a}, @call={0x85, 0x0, 0x0, 0x14}], &(0x7f0000000a00)='syzkaller\x00', 0x34a, 0x2d, &(0x7f0000000a40)=""/45, 0x41100, 0x7, '\x00', r7, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x3, 0x4, 0x8, 0x400}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000dc0)=[{0x1, 0x1, 0xb, 0x7}, {0x1, 0x1, 0x5}, {0x3, 0x3, 0x4, 0x4}, {0x0, 0x1, 0x10, 0x7}], 0x10, 0x7}, 0x94) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x3f6, 0x400, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x20004080) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000fc0)={{r8}, "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"}) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000020c0)=0x8, 0x4) ioctl$sock_netdev_private(r9, 0x89f4, &(0x7f0000002100)="8ecac16a800570c1788c066f7bab9cc5580abbb203bb2ec269b3dabc1701e7c61c296d9d4a21bac9f33934ea0b1498a68948004bd2d21f11fcdf6f1f42b6021613a87e0d72bf315b78b977474e22883ca3deacfcecd235deb694d58b9ca666afccc9fabae66b6f933dc46af4db9093438c7b3b30e302a6b12127223ece62d1e75d9ec903f4e60018407370c5137f7f4d5074d094ea30afa06e79a36c4fd804f3f455ac2d2fd9a412d13b28bcf943b7cffc187af194db53ae0b6883ee2513") r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x44, r10, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x70f}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffffa118}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x401}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x41) ioctl$XFS_IOC_FSGROWFSRT(r8, 0x40105870, &(0x7f0000002380)={0x0, 0x5}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x34, r12, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xc9f1, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000002500)) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x58, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004) socket$inet(0x2, 0x1, 0xe) epoll_pwait(0xffffffffffffffff, &(0x7f0000002680)=[{}, {}, {}, {}], 0x4, 0x9, &(0x7f00000026c0)={[0xfff]}, 0x8) 1.350441158s ago: executing program 3 (id=6455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0x8, 0x101, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=0x1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x1, 0x0, @void}, 0x10) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f00000001c0)={0x8, 0x8, 0xd425, 0x278f5096, 0x1, 0x2, 0x9}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) syz_emit_ethernet(0x8c, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv4={0x800, @dccp={{0xa, 0x4, 0x1, 0x5, 0x7e, 0x65, 0x0, 0xc, 0x21, 0x0, @multicast2, @private=0xa010100, {[@lsrr={0x83, 0x13, 0x70, [@broadcast, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x2, "368b87", 0x0, "0890be"}, "1925fb42448d48068a76475d895c8fe188a019f21100f3dbd5894cdc81c72dce825fb3f68d651889835347f40636058d1da8a2307f378446a60f295e034ad4b31928fc33874c"}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000020000026000400"}, {0x2, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) 1.319488961s ago: executing program 0 (id=6456): syz_emit_ethernet(0x12, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000140), 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)=ANY=[@ANYBLOB="980000003a123e1f506cc63d53e4e67f00fdadc4fd74363f5babe2b32f92da6c3a653786e52b5674261dc526ebcf1c65b6b24fb15bd705917709547a89eff0e7e328306c894042f411aa1da68f42d59b9e0edd10649f372611e766c25d7cb531e43e9b0c16460f6e8b7165150c11fdb0d952", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ea05000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000b00000091000000000000000200000000000000030000000000000009000000000000000000000000000000000000000000000000000000000000000400000009000000080000000000000005000000000000000000000000e0a000"/378]) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fee76ac0e", 'veth1_vlan\x00'}) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000063180300480012800b000100697036746e6c00003800028008000100", @ANYRES16=r5, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf263a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b00"], 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x8, @loopback, 0x8001}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="53edcabbbbabde99e3b16a0fdfc8be3a34b8a522f85d08349c4f4a9d6bae743c3e46bcc5306145c2652c222293c16f9f71bb2a59e927ad79c93952efcc673d16974d1bd1112d4b29e4e77e0da98d3e095de25757227a6aacda973cabb25b30fa5b3d1193781f9cde29ddf5c6e8d5cba2d6244c5dc291b46747c68ee49d831b1efd932ce5acddad785e3c011922c26ce170674c516591e0bbcd4bf88b1eb533e7399aa890bd7518442e1f2dcbd82b71bfaa3d37b63e837dd829623d36b9646d729c59"], 0xe8}}], 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="04005b00ab6ce94055826ceeb51b6fd34cc233fe7e6bd1b8474f5704b577369827afcd58da9a24e5aaa17c20dd7c32056f8be644c3ff47d60c278265e7b96fda"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r12, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 1.231780719s ago: executing program 4 (id=6457): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="018d00"}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.177174172s ago: executing program 2 (id=6458): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000068000100fae26789de58915a00000000000000000c000200010000001500000014000c80060001008100007a247692c1f8deea00080002"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000100)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x3a}, 0x400020b1) 793.999477ms ago: executing program 4 (id=6459): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f}, 0x28) (fail_nth: 11) 707.872501ms ago: executing program 0 (id=6460): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x1a, 0x800, 0xff) (async) socket(0x1a, 0x800, 0xff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x4004010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000140)={r11, 0x718, 0x4, 0x0, 0xb, 0x9, 0x1, 0x0, {r11, @in6={{0xa, 0x4e23, 0x10, @local, 0x8000}}, 0xffffffff, 0x7ff, 0x40, 0x8, 0x7}}, &(0x7f0000000200)=0xb0) r12 = socket(0x10, 0x803, 0x0) sendmsg$sock(r12, &(0x7f0000003400)={&(0x7f0000000000)=@generic={0x2c, "ae4d28209a2401d9e1601dcf88fa5ef9d2854bf70364393c01599a2d75ff0b01a5c38b6f122284f6bf7610e0f8904cd9c5f4cd6435144e5981c335ae70fed0a2ab345b189b864ee51a7d3ce47b9fb6ce94389cedae85383a0e9101a116fecbb40e62ed5f95d8df02cb707cd00a81e4ca8f65301e4adfa513d2b7db7a68dc"}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000080)="43c89e2ef585776c", 0x8}, {&(0x7f0000000300)="1f244c8917d9ec37698967f0964da66c15af16df77e7317f2032378c8bf53d1f2a0bc7e9a15e31c461c7ef2fff1b681e21db84346bc8fe6813eff27b040bf286f5c44ee756a0cab2fbaa1c936afbf04d5ea8c2495fcd1adb9a6ae24eae16bd746ddd", 0x62}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="74cb0bd9077c0c60fae4913a66f86346c0e2b003c48d842b67fb6c669080967ff9fe23c9b06274026e9eddbcfe2e07ac3b761571bb34f5536eab843ec669a61e2f44b3d3ea04437e8f20f972c305181a5a89ee343b9983264f947168d7047923ba9ece0f282cf6cc7a349cbf7513940877fb5f3b84eb3b2b26d30cd3793a58ff9664a709f9cd144d29a24f437ab585462bd258ff5cbf599439b7496f545ef65c85522d8d2095a479af43bfb7dffc9803184586c80b342bca5b4388683dbfbebf922ca37f0ac8a11e555792676f95f7f847c7bc03141d44cdb32a253deeef88be340f", 0xe2}, {&(0x7f00000030c0)="ae49eae6548035cbd86e30ab7c179fc3b9e3c814224f2479031f2f20f82a3a30d2faf5e92acc6f073b16b429b62b2c7e5982b5a4c11636eae37a00f558f1772e5fd043127ebc253f67b6cd95c04ad4290764ff4b214727c5b666f77e2ad0ef7c28365c4a037d6f77757c14212d5069869b9541653cb53887ef19463b7b9349fac4ef708014c51a926ed83cc71aad8b72c5688d8acea6864df3139a65c9f8e692bd62a4035dfc469e695c01d26270e8d967ff1cd196aec5bbd4ceae81beeaf944a02e1e4a585d84556e43df33a338a7a5e77b7bb82f52bce4649d82008881315f33a6a309e915d8", 0xe7}, {&(0x7f00000031c0)="e2273548f62466795d20cc2b3f6c3b9212b72f11b3615591f5bea015684683a7db931b971c317d0ded50b31076bc08b38579d5e944c751d018401bf996f6de96d07bc023fd06177a1a9d1f8a126de89ee213a6b33bd7ee67a96e7379f1ed13524a9bb30e16014a63ea6268b4dea198f0f50118555554bf376bc253408d449b8b4dc9ed66c88e65610958a76a64502858f0e02d0658e593fb9026f6761b30eb36d929ec7e57d77ff0566cec7b569b29eed13beae45eede7c7d62b678aa5b5559f4e107b3ab31a8811d14f879cc3b045888c4585355aec1de68e3ccb0971cb", 0xde}], 0x6, &(0x7f0000003340)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8008}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xdd9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0xc0}, 0x20000041) sendto(r12, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r13 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r13, 0x6, 0x25, 0x0, 0x0) recvmmsg(r12, &(0x7f00000001c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x14, &(0x7f0000000100)=""/191, 0xbf}, 0x1}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r12, &(0x7f00000001c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x14, &(0x7f0000000100)=""/191, 0xbf}, 0x1}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fcffffff000004000000000006f7029b03864d0f217411eeb8a17e85c1ed8739497cbda39b6cf2efaa199a6799471cc49c88b5", @ANYRES32=0x0, @ANYBLOB="1111020071400000200012800b0001006d61637365630000100002800c0004000300000100c2800008000500", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fcffffff000004000000000006f7029b03864d0f217411eeb8a17e85c1ed8739497cbda39b6cf2efaa199a6799471cc49c88b5", @ANYRES32=0x0, @ANYBLOB="1111020071400000200012800b0001006d61637365630000100002800c0004000300000100c2800008000500", @ANYRES32=r2, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 455.827736ms ago: executing program 4 (id=6461): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38a9bfd3f0b5193587308b8f000004", @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000240004800c00078008000600000000001300010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) r5 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fddbdf251b0000000400cc0008009a00"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29}, 0x94) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYRESOCT=r4], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) (rerun: 64) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r11, 0x100, 0x709d2d, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1000, 0x7fff}}}, ["", "", "", "", ""]}, 0x30}}, 0x4000000) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e83000000001400028005001100000000000500100000003200"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x44841}, 0x8000) (rerun: 64) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r14, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8008801}, 0x800) 422.581647ms ago: executing program 6 (id=6462): r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cf7dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df770700000000000000984a3e7190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8447}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x20}, 0x1) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x18}) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r4, 0x9cc21000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@union={0x6, 0x4, 0x0, 0x5, 0x1, 0x5, [{0xc, 0x1, 0x2}, {0xf, 0x5, 0x8}, {0x2, 0x2, 0x8}, {0xa, 0x3, 0x4}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0xc, [{0xb, 0x7, 0x9}, {0xf, 0x0, 0x1000}, {0x7, 0xfff, 0x9}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x2e, 0x2e, 0x5f, 0x41, 0x5f]}}, &(0x7f0000000300)=""/200, 0x9a, 0xc8, 0x0, 0x6, 0x10000, @value=r4}, 0x28) ppoll(&(0x7f00000005c0)=[{r3, 0xc77f}, {r2, 0x2718}, {r0, 0x1e8}], 0x3, 0x0, 0x0, 0x0) close(r0) 315.801127ms ago: executing program 3 (id=6463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f0000001e00)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x28, 0x1a, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x2000}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @loopback}}]}, 0x28}}, 0x18) 297.068792ms ago: executing program 6 (id=6464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@dstopts={{0x18, 0x29, 0x37, {0x32}}}], 0x18}}], 0x1, 0x20000010) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x80) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000), &(0x7f0000000200)=0xb94142cc0708e4b7) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=r3], 0xd8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xc}, 0x94) 189.430858ms ago: executing program 4 (id=6465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100200000009500000000000000bf91000000000000b70200000000000085000000d4000000b7000000006400009500000000000000"], &(0x7f0000004380)='GPL\x00', 0x5, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000140)={0x0, 0x6, [0x5483, 0x1, 0x4, 0x4, 0x5, 0x3060eb8b]}) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x20) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c815}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r3}) 114.107249ms ago: executing program 6 (id=6466): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1966, 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x5e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f0000000340)='syz0\x00', 0x440100, &(0x7f0000000380)={@align=0xfffffffffffff000, {0x101, 0x4, 0xfffffffb, 0x5}}, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x2}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2, 0x0, 0x0, 0x11dc, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0x7, 0x6}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x80000001, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x18, 0x13, &(0x7f0000000bc0)=@raw=[@generic={0x78, 0x9, 0x9, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, @generic={0x5, 0x7, 0x7, 0x7, 0x4}, @alu={0x7, 0x0, 0x3, 0x9, 0x4, 0x6, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x9, 0x0, 0x5, 0x80, 0x7}, @generic={0x2, 0x0, 0xb, 0x2, 0x40}], &(0x7f0000000c80)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001200)=""/4096, 0x41000, 0x22, '\x00', r3, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002240)={0x0, 0xd, 0x80000000, 0xbaff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x174}, 0x94) pipe(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x8, 0x2d, &(0x7f0000000980)=@raw=[@alu={0x7, 0x1, 0xc, 0xa, 0x9, 0x30, 0x4}, @tail_call, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x17}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f0000000b00)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x1e, '\x00', r3, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x0, 0xf, 0x1, 0x19}, 0x10, r4, r5, 0x2, &(0x7f00000023c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r6, 0xffffffffffffffff], &(0x7f0000002400)=[{0x4, 0x3, 0x8, 0x3}, {0x4, 0x1, 0xc}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0x23, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2a5}}, @call={0x85, 0x0, 0x0, 0x5b}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9271}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='syzkaller\x00', 0x9, 0xe9, &(0x7f00000009c0)=""/233, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x7, 0x1, 0xffff7fff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0x1], &(0x7f0000000b80)=[{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x6, 0x1}, {0x3, 0x4, 0xc, 0x9}, {0x2, 0x3, 0x7, 0xb}, {0x1, 0x5, 0x6, 0x9}, {0x1, 0x3, 0x9, 0xa}], 0x10, 0x401}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r8, &(0x7f0000000380)="000039a4c1f86906dd2b97a2f8da4bdee791b65640710b41a1d6b6ee63cbc004218ee8c071310218aef5cd86f437e78e30ec98664f3862eb3958dbd068a9ffc3e33735786b463b3ff1275cc11bbaf63cb20ba144fb1d57c358e030b044cf113707786b054208251cfc1b791cdcbaabaa9d1b48da684de464a6cee4b53e646813550ac424d1f16f2f43527d07797b54dd26b0749de87792907aba113c6c4221774e16b1f402285f7feaac61922897f3d696877587551bc91c250f886b6b6ae4d9bbafa48a516f9e264dfd0ba2fa026319f56136", 0xd3) splice(r8, &(0x7f0000000040), r7, 0x0, 0x800000000ff, 0x0) socket$kcm(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="05"], 0x10) close(r9) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10}, &(0x7f0000000500), &(0x7f0000000540)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r11}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 93.373202ms ago: executing program 3 (id=6467): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x60, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x200000c1}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x1, 0xa, 0x16, 0x15, 0x15, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40400c0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socketpair$unix(0x1, 0xcc689e3498d24126, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x30, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}, [@RTA_VIA={0x14, 0x12, {0x27, "f71d9cb5330400d0e3167fd987a4"}}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x144}, 0x200000c0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff3}, {0x6, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x6}}]}}]}, 0x48}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) r7 = socket(0x18, 0x803, 0x2) getsockname$packet(r7, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 57.036497ms ago: executing program 0 (id=6468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="1e"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=6469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000009125c60222413cbfd51000"/38], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001240)={0x0, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x9, 0x5, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x9}]}, &(0x7f0000001180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x20, '\x00', r3, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0x5, 0x8, 0x753}, 0x10, r4, r5, 0x5, &(0x7f0000001280)=[r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000012c0)=[{0x3, 0x2, 0x5, 0x7}, {0x1, 0x1, 0xb, 0xb}, {0x1, 0x2, 0x8}, {0x0, 0x2, 0x2, 0x6}, {0x4, 0x5, 0x8, 0xc}], 0x10, 0xa94}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000640)="f8a5ffece0692da2b89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e68382732f8e4ae645cf8c760a5ccd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): 5'. [ 731.503825][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5188'. [ 731.528552][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 731.988155][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 732.286208][T27793] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 732.830005][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5200'. [ 732.888271][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 733.269463][T27837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.483916][T27843] lo speed is unknown, defaulting to 1000 [ 733.733163][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5206'. [ 733.797098][T27857] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5209'. [ 733.863975][T27861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5210'. [ 733.874741][T27861] netlink: 'syz.6.5210': attribute type 29 has an invalid length. [ 733.887174][T27861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5210'. [ 733.938221][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 734.408404][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 734.561028][T27853] lo speed is unknown, defaulting to 1000 [ 734.626373][T27881] veth7: entered allmulticast mode [ 734.657019][T27881] bond2: (slave veth7): Enslaving as an active interface with an up link [ 734.674333][T27875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.727013][T27877] bond2 (unregistering): (slave veth7): Releasing backup interface [ 734.785286][T27877] bond2 (unregistering): Released all slaves [ 735.048678][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 735.279788][T27900] netlink: 'syz.6.5217': attribute type 7 has an invalid length. [ 735.601286][T27900] veth5: left promiscuous mode [ 735.608463][T27900] veth7: left allmulticast mode [ 736.008773][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 736.018628][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 736.026763][ C0] lec:lec_tx_timeout: lec0 [ 736.031558][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 736.189940][T27925] netlink: 'syz.3.5224': attribute type 7 has an invalid length. [ 736.370735][T27934] __nla_validate_parse: 2 callbacks suppressed [ 736.370771][T27934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5228'. [ 736.466677][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5231'. [ 736.556508][T27925] tipc: Disabling bearer [ 736.603247][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5228'. [ 736.736422][T27942] veth11: entered promiscuous mode [ 736.751135][T27950] netlink: 'syz.2.5232': attribute type 29 has an invalid length. [ 736.768854][T27952] netlink: 'syz.2.5232': attribute type 29 has an invalid length. [ 736.981281][T27968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5237'. [ 737.058194][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.093591][T27968] ip6tnl1: entered allmulticast mode [ 737.514340][T27989] netlink: zone id is out of range [ 737.546989][T27989] netlink: zone id is out of range [ 737.575292][T27989] netlink: zone id is out of range [ 737.591095][T27995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5243'. [ 737.602256][T27989] netlink: zone id is out of range [ 737.659466][T27989] netlink: zone id is out of range [ 737.666842][T27989] netlink: zone id is out of range [ 737.687111][T27989] netlink: zone id is out of range [ 737.708237][T27989] netlink: zone id is out of range [ 737.726300][T27989] netlink: zone id is out of range [ 737.746340][T27989] netlink: zone id is out of range [ 737.928714][T28011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5247'. [ 738.088231][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 738.147857][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5249'. [ 738.157403][T28018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5249'. [ 738.171335][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5249'. [ 738.183050][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5249'. [ 738.623440][T28030] SET target dimension over the limit! [ 739.053766][T28047] bond2: (slave gretap0): Device is not bonding slave [ 739.089576][T28047] bond2: option active_slave: invalid value (gretap0) [ 739.109753][T28047] bond2 (unregistering): Released all slaves [ 739.148138][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 739.449497][T28067] siw: device registration error -23 [ 739.541701][T28068] siw: device registration error -23 [ 739.714611][T28078] lo speed is unknown, defaulting to 1000 [ 740.168501][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 740.578297][T28101] lo speed is unknown, defaulting to 1000 [ 740.883185][T28113] netlink: 'syz.6.5277': attribute type 6 has an invalid length. [ 741.038062][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 741.046187][ C0] lec:lec_tx_timeout: lec0 [ 741.052069][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 741.080185][T28117] lo speed is unknown, defaulting to 1000 [ 741.228146][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 741.708780][T28126] bridge3: entered promiscuous mode [ 741.727019][T28126] bridge3: entered allmulticast mode [ 741.799579][T28127] bridge4: entered promiscuous mode [ 741.813543][T28127] bridge4: entered allmulticast mode [ 742.308808][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 742.466106][T28150] __nla_validate_parse: 1 callbacks suppressed [ 742.466130][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5287'. [ 742.641768][T28148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5286'. [ 742.871496][T28175] lo speed is unknown, defaulting to 1000 [ 742.905681][T28148] nbd: socks must be embedded in a SOCK_ITEM attr [ 742.946929][T28164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5286'. [ 742.959824][T27317] block nbd64: NBD_DISCONNECT [ 742.989876][T28164] nbd: device at index 64 is going down [ 743.325795][T27324] udevd[27324]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 743.338114][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 743.700521][T28191] tipc: Started in network mode [ 743.719471][T28191] tipc: Node identity 2e61058c39a7, cluster identity 4711 [ 743.738747][T28191] tipc: Enabled bearer , priority 0 [ 743.749872][T28208] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5299'. [ 743.930960][T28191] syzkaller0: entered promiscuous mode [ 743.937487][T28191] syzkaller0: entered allmulticast mode [ 743.973751][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5301'. [ 744.023705][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5301'. [ 744.058993][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5301'. [ 744.073182][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5301'. [ 744.083963][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5301'. [ 744.096312][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5301'. [ 744.312208][T28217] batadv0: left promiscuous mode [ 744.368142][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 744.427837][T28191] tipc: Resetting bearer [ 744.484623][T17639] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.499766][T17639] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.555942][T17639] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.629998][T17639] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.640921][T28190] tipc: Resetting bearer [ 744.669821][T28190] tipc: Disabling bearer [ 744.700161][T17639] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 745.153608][ T1100] netdevsim netdevsim3 ªªªªª»: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.182186][ T1100] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.207098][ T1100] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.225900][ T1100] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.411374][T28232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.480120][T28259] lo speed is unknown, defaulting to 1000 [ 745.498663][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 746.406903][T28281] vlan4: entered allmulticast mode [ 746.588136][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 746.670255][T28297] netlink: 'syz.6.5322': attribute type 2 has an invalid length. [ 746.692410][T28297] netlink: 'syz.6.5322': attribute type 2 has an invalid length. [ 746.766579][T28301] ip6erspan0: entered allmulticast mode [ 746.887968][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 746.896060][ C0] lec:lec_tx_timeout: lec0 [ 746.901875][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.017743][ T5823] block nbd2: Receive control failed (result -1) [ 747.520735][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 747.763724][T28335] __nla_validate_parse: 215 callbacks suppressed [ 747.763762][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'. [ 747.818443][T28335] netlink: 'syz.0.5330': attribute type 1 has an invalid length. [ 747.835883][T28337] syzkaller0: entered promiscuous mode [ 747.859153][T28337] syzkaller0: entered allmulticast mode [ 748.177265][T28348] xt_CT: No such helper "syz1" [ 748.214501][T28351] net_ratelimit: 354 callbacks suppressed [ 748.214534][T28351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.273209][T28355] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5334'. [ 748.325321][T28360] netlink: 'syz.6.5337': attribute type 13 has an invalid length. [ 748.350628][T28359] netlink: 'syz.6.5337': attribute type 13 has an invalid length. [ 748.374807][T28359] netlink: 'syz.6.5337': attribute type 17 has an invalid length. [ 748.402362][T28360] netlink: 'syz.6.5337': attribute type 17 has an invalid length. [ 748.427230][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5339'. [ 748.598590][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 748.702041][T28360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.716211][T28360] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.724658][T28375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5343'. [ 748.792707][T28377] netlink: 4540 bytes leftover after parsing attributes in process `syz.2.5344'. [ 748.880854][T28360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.939780][T28359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.976797][T28375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5343'. [ 748.996046][T28381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5345'. [ 749.057616][T28381] 8021q: adding VLAN 0 to HW filter on device bond9 [ 749.071716][T28381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5345'. [ 749.082307][T28381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5345'. [ 749.107616][T28384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.119684][T28381] geneve3: entered promiscuous mode [ 749.124959][T28381] geneve3: entered allmulticast mode [ 749.485204][T28383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.592852][T28410] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5354'. [ 749.608134][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 749.766506][T28419] netlink: 'syz.6.5356': attribute type 4 has an invalid length. [ 750.558733][T28446] macsec1: entered allmulticast mode [ 750.564878][T28446] macsec0: entered allmulticast mode [ 750.608146][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 750.656555][T28450] pimreg: entered allmulticast mode [ 751.708203][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 751.845307][T28495] erspan0: entered promiscuous mode [ 751.875399][T10027] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 751.907988][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 751.916086][ C0] lec:lec_tx_timeout: lec0 [ 751.921147][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 752.044263][T28495] can: request_module (can-proto-5) failed. [ 752.664923][T28491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.681291][T28533] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 752.735433][T28533] bond2 (unregistering): Released all slaves [ 752.738162][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.836432][T28542] __nla_validate_parse: 5 callbacks suppressed [ 752.836488][T28542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5386'. [ 752.915146][T28547] xt_hashlimit: overflow, try lower: 0/0 [ 752.980392][T28542] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 753.073456][T28542] bond0 (unregistering): Released all slaves [ 753.174928][T28539] ip6tnl0: Caught tx_queue_len zero misconfig [ 753.253727][T28558] netlink: 'syz.2.5391': attribute type 4 has an invalid length. [ 753.275638][T28558] netlink: 'syz.2.5391': attribute type 4 has an invalid length. [ 753.297078][T28559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5392'. [ 753.314670][T28559] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5392'. [ 753.330383][T28559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5392'. [ 753.350210][T28559] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5392'. [ 753.351738][T28565] netlink: 'syz.2.5391': attribute type 21 has an invalid length. [ 753.446166][T28565] netlink: 'syz.2.5391': attribute type 21 has an invalid length. [ 753.448268][T17639] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.522026][T17639] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.611950][T17639] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.646026][T17639] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.673224][T28552] lo speed is unknown, defaulting to 1000 [ 753.718117][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 753.719572][T28576] netlink: 'syz.3.5395': attribute type 1 has an invalid length. [ 753.856183][T28576] bond0: entered promiscuous mode [ 753.861777][T28576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.083306][T28576] bond0: (slave bridge5): making interface the new active one [ 754.096702][T28589] netlink: 'syz.0.5399': attribute type 10 has an invalid length. [ 754.105833][T28576] bridge5: entered promiscuous mode [ 754.118395][T28576] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 754.132379][T28589] syz_tun: entered promiscuous mode [ 754.649996][T28577] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5394'. [ 754.738631][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 754.884728][T28610] netlink: 'syz.4.5402': attribute type 29 has an invalid length. [ 755.225488][T28618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5403'. [ 755.432792][T28630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5405'. [ 755.432850][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5405'. [ 755.527399][T28629] netlink: 'syz.3.5405': attribute type 1 has an invalid length. [ 755.546287][T28629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.612657][T28605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.808179][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 756.219770][T28656] lo speed is unknown, defaulting to 1000 [ 756.281131][T28665] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5415'. [ 756.606547][T28687] netlink: 'syz.2.5417': attribute type 1 has an invalid length. [ 756.665617][T28687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.828175][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 756.928039][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 756.936134][ C0] lec:lec_tx_timeout: lec0 [ 756.941218][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 757.536603][T28727] x_tables: duplicate underflow at hook 1 [ 757.928153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.043722][T28750] netlink: 'syz.2.5431': attribute type 8 has an invalid length. [ 758.054617][T28750] __nla_validate_parse: 1 callbacks suppressed [ 758.054636][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5431'. [ 758.132462][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5431'. [ 758.135703][T28752] xfrm0: entered allmulticast mode [ 758.189216][T28752] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 758.320765][T28761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.759325][T28779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5440'. [ 758.794800][T28779] netem: incorrect ge model size [ 758.821013][T28779] netem: change failed [ 758.888212][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 759.432609][T28806] syzkaller0: entered promiscuous mode [ 759.438746][T28806] syzkaller0: entered allmulticast mode [ 759.485565][T28806] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5446'. [ 759.624580][T28823] validate_nla: 1 callbacks suppressed [ 759.624599][T28823] netlink: 'syz.6.5449': attribute type 89 has an invalid length. [ 759.772793][T28819] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 760.048558][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 760.162391][T28836] netlink: 'syz.3.5454': attribute type 1 has an invalid length. [ 760.426163][T28850] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5459'. [ 760.428155][T28848] block nbd3: Unsupported socket: should be TCP or UNIX. [ 760.455844][T28840] netlink: 'syz.0.5456': attribute type 15 has an invalid length. [ 760.510398][T28842] syzkaller0: entered promiscuous mode [ 760.524076][T28842] syzkaller0: entered allmulticast mode [ 760.766203][T28856] netlink: 'syz.3.5462': attribute type 6 has an invalid length. [ 760.825412][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5463'. [ 761.088180][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 761.958011][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 761.966051][ C0] lec:lec_tx_timeout: lec0 [ 761.971151][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 762.044813][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.088432][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 764.198286][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 765.063783][T28853] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 765.066672][T28856] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 765.168158][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 765.197668][T28873] lo speed is unknown, defaulting to 1000 [ 765.364832][T28886] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 765.422475][T28886] bond7 (unregistering): Released all slaves [ 765.464063][T28892] netlink: 'syz.0.5470': attribute type 1 has an invalid length. [ 765.501419][T28892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5470'. [ 765.654651][T28900] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 766.100903][T28912] syzkaller0: entered promiscuous mode [ 766.110856][T28912] syzkaller0: entered allmulticast mode [ 766.178135][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 766.235860][T28922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5476'. [ 766.436146][T28930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5476'. [ 766.978026][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 766.986701][ C0] lec:lec_tx_timeout: lec0 [ 766.992863][ T5823] block nbd3: Receive control failed (result -1) [ 767.298232][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 767.306450][T28954] netlink: 'syz.3.5482': attribute type 322 has an invalid length. [ 767.319399][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5481'. [ 767.855126][T28977] syzkaller0: entered promiscuous mode [ 767.861165][T28977] syzkaller0: entered allmulticast mode [ 767.870683][T28975] lo speed is unknown, defaulting to 1000 [ 768.288184][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 769.347216][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 770.328350][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 771.428576][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 771.731739][T28996] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5493'. [ 771.760045][T28996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.901807][T29007] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5494'. [ 771.937652][T29007] netlink: 'syz.0.5494': attribute type 1 has an invalid length. [ 772.021164][T29013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5495'. [ 772.107672][T29011] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5497'. [ 772.194285][T29017] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 772.478615][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 772.736147][T29036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5503'. [ 772.945332][T29041] lo speed is unknown, defaulting to 1000 [ 773.489705][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 773.737711][T29069] netlink: 'syz.6.5513': attribute type 83 has an invalid length. [ 773.757070][T29069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5513'. [ 773.776413][T29069] erspan0: entered promiscuous mode [ 773.785407][T29069] macvtap1: entered promiscuous mode [ 773.791507][T29069] macvtap1: entered allmulticast mode [ 773.811199][T29069] erspan0: entered allmulticast mode [ 773.837746][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5513'. [ 773.873606][T29072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5512'. [ 773.912637][T29075] erspan0: left allmulticast mode [ 773.917876][T29075] erspan0: left promiscuous mode [ 774.261164][T29089] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5516'. [ 774.278398][T29089] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5516'. [ 774.296876][T29089] tipc: Invalid UDP bearer configuration [ 774.296998][T29089] tipc: Enabling of bearer rejected, failed to enable media [ 774.552889][T29094] geneve3: entered promiscuous mode [ 774.571506][T10027] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.588097][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 774.605926][T10027] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.732239][T10027] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.755711][T10027] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.781597][T29107] netlink: 'syz.0.5521': attribute type 4 has an invalid length. [ 774.886378][T29111] ip6t_rpfilter: unknown options [ 775.132325][T29111] lo speed is unknown, defaulting to 1000 [ 775.528630][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 776.390986][T29148] netlink: 'syz.6.5532': attribute type 22 has an invalid length. [ 776.395138][T29146] netlink: Unknown conntrack attr (type=2304, max=9) [ 776.688291][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 776.772592][T29166] __nla_validate_parse: 7 callbacks suppressed [ 776.772612][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5536'. [ 776.801182][T29167] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5535'. [ 776.824139][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5536'. [ 776.845580][T29167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5535'. [ 776.924532][T17639] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.943866][T17639] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.963030][T17639] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.997710][T17639] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.519575][T29177] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.527235][T29177] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.551672][T29189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5539'. [ 777.618164][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 778.101412][T29177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.153336][T29177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.481987][T29177] veth0_macvtap: left allmulticast mode [ 778.738023][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 779.149076][T20151] syz0: Port: 1 Link DOWN [ 779.153857][T17640] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.163349][T17640] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.209545][T17640] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.234489][T17640] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.270285][T29194] lo speed is unknown, defaulting to 1000 [ 779.276186][T17640] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.309699][T17640] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.355308][T17640] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.374485][T17640] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.593120][T29207] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 779.734543][T29209] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.5544'. [ 779.843240][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 779.962475][T29207] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 779.986885][T29207] bond10 (unregistering): Released all slaves [ 780.346054][T29219] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5546'. [ 780.380559][T29219] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5546'. [ 780.656678][T29233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5549'. [ 780.843738][T29233] bond2: entered promiscuous mode [ 780.870011][T29233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 780.908187][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 781.103471][T29237] lo speed is unknown, defaulting to 1000 [ 781.113837][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5555'. [ 781.253370][T29246] netlink: 'syz.3.5554': attribute type 3 has an invalid length. [ 781.373545][T29252] bond0: left promiscuous mode [ 781.426401][T29252] bond0: left allmulticast mode [ 781.883045][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5559'. [ 781.942373][T29270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5559'. [ 781.998106][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 782.560275][T29289] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 782.656950][T29290] macsec0: left allmulticast mode [ 782.704218][T29284] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5564'. [ 782.809402][T29284] .70·: renamed from hsr0 [ 782.821721][T29284] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 782.835850][T29284] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.872157][T29284] .70·: entered allmulticast mode [ 782.891618][T29284] hsr_slave_0: entered allmulticast mode [ 782.912596][T29284] hsr_slave_1: entered allmulticast mode [ 782.932680][T29284] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 782.968344][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 782.988549][T29297] bond3: entered promiscuous mode [ 783.001238][T29297] bond3: entered allmulticast mode [ 783.253219][T29281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.785637][T29184] Set syz1 is full, maxelem 65536 reached [ 783.893037][T29320] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5573'. [ 783.953201][T29324] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 784.022473][T29324] bond4 (unregistering): Released all slaves [ 784.088568][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 784.182320][T29338] netlink: 'syz.4.5577': attribute type 1 has an invalid length. [ 784.204704][T29326] lo speed is unknown, defaulting to 1000 [ 784.528207][T29338] bond10: entered promiscuous mode [ 784.535935][T29338] 8021q: adding VLAN 0 to HW filter on device bond10 [ 784.683328][T29359] bond10: (slave bridge5): making interface the new active one [ 784.705805][T29359] bridge5: entered promiscuous mode [ 784.726658][T29359] bridge5: left promiscuous mode [ 785.078128][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 785.407491][T29390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5585'. [ 786.088262][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 787.128787][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 788.218132][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 789.218133][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 790.368449][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 791.195924][T21372] lec:lec_start_xmit: lec0:No lecd attached [ 791.328410][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 792.358220][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 793.428284][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 794.458220][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 795.528425][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 796.548581][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 796.888055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 796.896091][ C0] lec:lec_tx_timeout: lec0 [ 797.588272][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 798.568231][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 799.668290][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 800.678193][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 801.738667][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 802.818345][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.868324][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 804.868077][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 805.888239][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 806.244863][T29428] netlink: 'syz.0.5587': attribute type 64 has an invalid length. [ 806.352493][T29438] syzkaller1: entered promiscuous mode [ 806.365110][T29438] syzkaller1: entered allmulticast mode [ 806.376063][T29439] lo speed is unknown, defaulting to 1000 [ 806.897853][T29463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5597'. [ 806.988132][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 807.074426][T29470] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5600'. [ 807.165916][T29475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5602'. [ 807.385088][T29482] bond0: entered promiscuous mode [ 807.412907][T29482] debugfs: 'hsr1' already exists in 'hsr' [ 807.420710][T29487] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5603'. [ 807.438351][T29482] Cannot create hsr debugfs directory [ 807.968511][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 807.980591][T29506] netlink: 'syz.6.5609': attribute type 1 has an invalid length. [ 808.026857][T29506] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 808.061974][T29500] lo speed is unknown, defaulting to 1000 [ 808.234031][T29522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5613'. [ 808.602102][T29518] lo speed is unknown, defaulting to 1000 [ 808.647861][T29502] batadv_slave_0: Caught tx_queue_len zero misconfig [ 808.659993][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 808.723478][T29540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5616'. [ 808.776497][T29540] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5616'. [ 808.968269][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.071856][T29551] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5620'. [ 809.107072][T29551] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5620'. [ 809.146653][T29551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5620'. [ 809.161569][T29556] netlink: 'syz.4.5621': attribute type 1 has an invalid length. [ 809.195404][T29560] netlink: 'syz.2.5620': attribute type 2 has an invalid length. [ 809.272862][T29551] --map-set only usable from mangle table [ 809.505554][T29564] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 809.530910][T29564] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 809.720053][T29567] bond11: (slave bridge5): Enslaving as an active interface with a down link [ 809.753100][T29556] macvlan0: entered promiscuous mode [ 809.776404][T29556] macvlan0: entered allmulticast mode [ 809.802067][T29556] bond11: entered promiscuous mode [ 809.815691][T29556] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 809.844012][T29556] bond11: left promiscuous mode [ 810.028168][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 810.291531][T29602] netlink: 'syz.3.5628': attribute type 3 has an invalid length. [ 810.684354][T29616] lo speed is unknown, defaulting to 1000 [ 811.030841][T29621] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 811.068191][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 811.999614][T29644] __nla_validate_parse: 6 callbacks suppressed [ 811.999626][T29644] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5640'. [ 812.138673][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 813.030429][T29588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 813.129340][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 813.365522][T29654] openvswitch: netlink: Missing key (keys=40, expected=80) [ 813.771543][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 813.857981][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.866145][ C0] lec:lec_tx_timeout: lec0 [ 814.273596][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 815.238241][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 816.078962][T29680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.256425][T29679] lo speed is unknown, defaulting to 1000 [ 816.299533][T29696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5650'. [ 816.398797][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 816.586882][T29699] lo speed is unknown, defaulting to 1000 [ 816.773172][T29711] netlink: 'syz.0.5652': attribute type 11 has an invalid length. [ 816.791849][T29711] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.5652'. [ 817.338574][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.790434][T29737] geneve2: entered promiscuous mode [ 817.836405][T17639] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 55442 - 0 [ 817.862156][T17639] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 55442 - 0 [ 817.910555][T17639] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 55442 - 0 [ 817.921471][T29739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5658'. [ 817.948175][T17639] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 55442 - 0 [ 818.206956][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5661'. [ 818.348539][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 818.672301][T29769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5666'. [ 818.840923][T29759] syzkaller1: entered promiscuous mode [ 818.847517][T29759] syzkaller1: entered allmulticast mode [ 818.954801][T29771] syzkaller0: entered promiscuous mode [ 818.971880][T29771] syzkaller0: entered allmulticast mode [ 819.039096][T29777] syzkaller0: entered promiscuous mode [ 819.046512][T29777] syzkaller0: entered allmulticast mode [ 819.066892][T29787] tipc: Enabled bearer , priority 0 [ 819.107406][T29777] tipc: Resetting bearer [ 819.478091][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 820.508525][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 821.546929][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 822.537831][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 823.025215][T29776] tipc: Resetting bearer [ 823.053849][T29776] tipc: Disabling bearer [ 823.403572][T29822] netlink: 4324 bytes leftover after parsing attributes in process `syz.0.5680'. [ 823.421384][T29811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.433278][T29824] netlink: 'syz.2.5679': attribute type 12 has an invalid length. [ 823.435782][T29822] openvswitch: netlink: Flow key attr not present in new flow. [ 823.618137][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 823.982674][T29843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5687'. [ 824.040627][T29847] netlink: 'syz.6.5689': attribute type 2 has an invalid length. [ 824.109921][T29847] tipc: Started in network mode [ 824.170252][T29847] tipc: Node identity 340008, cluster identity 4711 [ 824.197323][T29847] tipc: Node number set to 3407880 [ 824.241239][T29827] netlink: zone id is out of range [ 824.259796][T29827] netlink: zone id is out of range [ 824.288135][T29827] netlink: zone id is out of range [ 824.306403][T29859] netlink: 'syz.0.5692': attribute type 10 has an invalid length. [ 824.319591][T29827] netlink: zone id is out of range [ 824.343015][T29859] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5692'. [ 824.347993][T29827] netlink: zone id is out of range [ 824.394542][T29827] netlink: zone id is out of range [ 824.415168][T29827] netlink: zone id is out of range [ 824.453648][T29827] netlink: zone id is out of range [ 824.479747][T29862] macsec0: entered allmulticast mode [ 824.483500][T29865] siw: device registration error -23 [ 824.496052][T29827] netlink: zone id is out of range [ 824.503002][T29867] veth1_macvtap: entered allmulticast mode [ 824.513884][T29867] macsec0: left allmulticast mode [ 824.530942][T29867] veth1_macvtap: left allmulticast mode [ 824.550113][T29862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5693'. [ 824.668086][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 824.902091][T29878] nbd: couldn't find a device at index 0 [ 825.209126][T29896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5702'. [ 825.291629][T29898] pim6reg: entered allmulticast mode [ 825.360988][T29899] pim6reg: left allmulticast mode [ 825.570876][T29913] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5707'. [ 825.668639][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 825.793201][T29918] lo speed is unknown, defaulting to 1000 [ 826.050565][T29934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5715'. [ 826.369519][T29934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5715'. [ 826.672184][T29966] bond0: entered promiscuous mode [ 826.683927][T29966] bond_slave_0: entered promiscuous mode [ 826.688640][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 826.697337][T29966] bond_slave_1: entered promiscuous mode [ 826.726243][T29966] batadv0: entered promiscuous mode [ 826.745122][T29966] debugfs: 'hsr1' already exists in 'hsr' [ 826.765258][T29966] Cannot create hsr debugfs directory [ 826.782453][T29966] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 826.805439][T29966] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 826.831346][T29966] bond0: left promiscuous mode [ 826.843979][T29966] bond_slave_0: left promiscuous mode [ 826.858428][T29966] bond_slave_1: left promiscuous mode [ 826.879841][T29966] batadv0: left promiscuous mode [ 827.134094][T29983] xt_hashlimit: size too large, truncated to 1048576 [ 827.652148][T29994] netlink: 'syz.0.5727': attribute type 53 has an invalid length. [ 827.708617][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 827.856999][T30000] vlan0: entered promiscuous mode [ 827.881954][T30000] bridge0: entered promiscuous mode [ 828.119144][T30002] netlink: 'syz.4.5730': attribute type 1 has an invalid length. [ 828.157482][T30002] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5730'. [ 828.212988][T30002] netlink: 'syz.4.5730': attribute type 1 has an invalid length. [ 828.268642][T30002] bond12: entered promiscuous mode [ 828.276825][T30002] 8021q: adding VLAN 0 to HW filter on device bond12 [ 828.365049][T29994] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 828.508422][T10028] net_ratelimit: 29 callbacks suppressed [ 828.508470][T10028] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 828.689302][T28659] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 828.771779][T30033] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5735'. [ 828.818045][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 828.889061][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 828.968839][T30037] vlan5: entered promiscuous mode [ 828.974742][T30037] bridge0: entered promiscuous mode [ 829.008757][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 829.130435][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 829.268611][T17640] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 829.398886][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 829.512325][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 829.649189][T28659] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 829.671770][T30066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5745'. [ 829.685423][T30066] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 829.768305][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 829.781676][T17640] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 830.034363][T30080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5748'. [ 830.053528][T30080] ip6tnl4: entered allmulticast mode [ 830.169439][T30086] netlink: 'syz.2.5749': attribute type 31 has an invalid length. [ 830.456282][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5751'. [ 830.508601][T30093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5751'. [ 830.938132][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 831.998109][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 832.542537][T30061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.559194][T30089] netlink: 'syz.2.5750': attribute type 1 has an invalid length. [ 832.592693][T30089] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5750'. [ 832.760618][T30103] netlink: 'syz.6.5755': attribute type 32 has an invalid length. [ 832.808449][T30103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5755'. [ 832.890903][T30119] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5757'. [ 832.932236][T30103] bond4: option coupled_control: invalid value (12) [ 832.938505][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 832.977774][T30103] bond4 (unregistering): Released all slaves [ 833.348817][T30139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5762'. [ 833.393329][T30141] tipc: New replicast peer: 255.255.255.255 [ 833.426255][T30141] tipc: Enabled bearer , priority 10 [ 833.454954][T30141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5764'. [ 833.624791][T30157] netlink: 'syz.3.5768': attribute type 8 has an invalid length. [ 834.018678][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 834.418050][T17639] net_ratelimit: 86 callbacks suppressed [ 834.418069][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 834.501344][T30165] lo speed is unknown, defaulting to 1000 [ 834.728688][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 834.775807][T30188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5776'. [ 835.050018][T17640] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 835.059264][T30201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5778'. [ 835.118174][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 835.131455][T30201] bridge8: entered promiscuous mode [ 835.149289][T30201] bridge8: entered allmulticast mode [ 835.211559][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 835.349238][T17640] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 835.479961][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 835.618261][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 835.646569][T30227] xt_limit: Overflow, try lower: 268435456/134217728 [ 835.738278][T28659] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 836.058155][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 836.278420][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 836.498184][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 836.803926][T30273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5799'. [ 837.128086][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 837.463055][T30298] lo speed is unknown, defaulting to 1000 [ 837.490950][T30307] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 837.511521][T30307] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 837.750211][T30300] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.772199][T30317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5806'. [ 837.818145][T30293] lo speed is unknown, defaulting to 1000 [ 838.056798][T30314] lo speed is unknown, defaulting to 1000 [ 838.108577][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 838.256727][T30334] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5810'. [ 838.639494][T30349] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5813'. [ 838.652638][T30348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5814'. [ 838.703855][T30355] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5815'. [ 838.873404][T30354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5813'. [ 838.874916][T29808] block nbd64: NBD_DISCONNECT [ 838.901314][T30354] nbd: device at index 64 is going down [ 839.087262][T30361] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 839.137804][T30361] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 839.148113][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 839.156884][T30357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5813'. [ 839.187456][T30357] tipc: Enabling of bearer rejected, failed to enable media [ 839.332930][T29808] udevd[29808]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 839.428545][T10027] net_ratelimit: 14 callbacks suppressed [ 839.428567][T10027] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 839.587223][T30379] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 839.596982][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 839.721333][T10027] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 839.838289][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 839.979166][T17639] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 840.098892][ T1100] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 840.228466][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 840.249812][T30409] xt_hashlimit: size too large, truncated to 1048576 [ 840.278510][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 840.358070][T10027] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 840.389614][T30416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 840.415666][T30416] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 840.425073][T30416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 840.437815][T30416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 840.454125][T30416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.544264][T10026] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 840.744438][T30413] lo speed is unknown, defaulting to 1000 [ 841.078991][T30434] __nla_validate_parse: 4 callbacks suppressed [ 841.079008][T30434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5835'. [ 841.097587][T30434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5835'. [ 841.107498][T30435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5835'. [ 841.176944][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5835'. [ 841.208841][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 841.317515][T30448] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5837'. [ 841.531204][T30437] lo speed is unknown, defaulting to 1000 [ 841.560232][T30458] netlink: 424 bytes leftover after parsing attributes in process `syz.6.5838'. [ 841.591352][T30458] netlink: 'syz.6.5838': attribute type 1 has an invalid length. [ 842.019252][T30413] chnl_net:caif_netlink_parms(): no params data found [ 842.268144][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 842.364489][T30482] netlink: 1612 bytes leftover after parsing attributes in process `syz.6.5846'. [ 842.568371][ T5823] Bluetooth: hci1: command tx timeout [ 842.684829][T30503] netlink: 'syz.6.5848': attribute type 1 has an invalid length. [ 842.723800][T30503] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5848'. [ 842.771812][T30503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5848'. [ 842.790675][T30507] netlink: 'syz.4.5850': attribute type 2 has an invalid length. [ 842.800064][T30507] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5850'. [ 842.815997][T30413] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.841708][T30413] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.869875][T30413] bridge_slave_0: entered allmulticast mode [ 842.886779][T30413] bridge_slave_0: entered promiscuous mode [ 842.914590][T30413] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.936570][T30413] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.955470][T30413] bridge_slave_1: entered allmulticast mode [ 842.972267][T30413] bridge_slave_1: entered promiscuous mode [ 843.044822][T30413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.075294][T30413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.156233][T30413] team0: Port device team_slave_0 added [ 843.166476][T30413] team0: Port device team_slave_1 added [ 843.223858][T30413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.231827][T30413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.280093][T30413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.318153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 843.333529][T30413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.373497][T30413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.442284][T30413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.620387][T30413] hsr_slave_0: entered promiscuous mode [ 843.627668][T30413] hsr_slave_1: entered promiscuous mode [ 843.639485][T30413] debugfs: 'hsr0' already exists in 'hsr' [ 843.656374][T30413] Cannot create hsr debugfs directory [ 844.418696][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.489179][T30543] net_ratelimit: 7 callbacks suppressed [ 844.489199][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 844.515566][T30585] lo speed is unknown, defaulting to 1000 [ 844.648311][ T5823] Bluetooth: hci1: command tx timeout [ 844.815909][T30544] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 844.907408][T30596] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 845.216101][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 845.458232][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 845.568129][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 845.587632][T30413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 845.649173][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.687721][T30413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 845.775036][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.817214][T30413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 845.845381][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.948434][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 846.040320][T30413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 846.099649][T30413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.253258][ T56] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 846.460600][T30667] bond13: option mode: invalid value (254) [ 846.471541][T30667] bond13 (unregistering): Released all slaves [ 846.548153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 846.609203][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 846.728460][ T5823] Bluetooth: hci1: command tx timeout [ 846.737540][T30674] netlink: 'syz.3.5875': attribute type 1 has an invalid length. [ 846.746497][T30413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.783553][T30674] 8021q: adding VLAN 0 to HW filter on device bond7 [ 846.800747][ T56] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 846.837646][T30674] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 846.875501][T30413] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.899970][T30674] bond7: (slave dummy0): making interface the new active one [ 846.912020][T30674] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 846.922007][T30677] lo speed is unknown, defaulting to 1000 [ 846.936563][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.943804][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.960706][T28657] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.967999][T28657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.259460][ T3540] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 847.488491][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 847.742488][T30537] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 55442 - 0 [ 847.778109][T30537] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 55442 - 0 [ 847.799746][ T3540] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 847.809381][T30537] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 55442 - 0 [ 847.849363][T30537] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 55442 - 0 [ 847.943385][T30413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.021314][T30413] veth0_vlan: entered promiscuous mode [ 848.042609][T30413] veth1_vlan: entered promiscuous mode [ 848.104262][T30413] veth0_macvtap: entered promiscuous mode [ 848.124336][T30413] veth1_macvtap: entered promiscuous mode [ 848.161172][T30413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.199750][T30413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.230817][T30544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.249562][T30544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.265817][T30544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.277255][T30544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.492338][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 848.808790][ T5823] Bluetooth: hci1: command tx timeout [ 848.866805][T30632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.261482][T30726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5886'. [ 849.283008][T30544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.299360][T30719] netlink: 'syz.3.5884': attribute type 3 has an invalid length. [ 849.307180][T30544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.316342][T30726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5886'. [ 849.406298][T30537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.440034][T30537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.504118][T30735] sch_tbf: burst 0 is lower than device sit0 mtu (1280) ! [ 849.538941][ T3540] net_ratelimit: 11 callbacks suppressed [ 849.538961][ T3540] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 849.578113][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 849.700935][T30737] lo speed is unknown, defaulting to 1000 [ 849.711305][T30544] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 849.833141][T30751] netlink: 'syz.4.5891': attribute type 1 has an invalid length. [ 850.068370][T30751] 8021q: adding VLAN 0 to HW filter on device bond13 [ 850.075899][T30755] bond13: up delay (1853) is not a multiple of miimon (100), value rounded to 1800 ms [ 850.127773][T30755] bond13: entered allmulticast mode [ 850.154959][T30763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5893'. [ 850.263960][T30756] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.271688][T30756] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.383314][T30756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.402917][T30756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.561329][ T56] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 850.586936][ T3540] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.608148][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 850.628208][ T3540] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.755122][ T3540] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.781922][ T3540] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.803607][T30774] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 850.819987][T30774] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 850.860881][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 851.002919][ T3540] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 851.015705][T30782] netlink: 'syz.4.5897': attribute type 6 has an invalid length. [ 851.057215][T30782] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5897'. [ 851.088896][T30787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5900'. [ 851.102342][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5899'. [ 851.148986][ T3540] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 851.318145][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 851.365408][T30803] C: renamed from team_slave_0 [ 851.420971][T30803] netlink: 'syz.4.5903': attribute type 4 has an invalid length. [ 851.474415][T30803] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5903'. [ 851.492061][T30803] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 851.608321][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 851.658655][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 851.778305][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 851.824417][T30822] netlink: 'syz.3.5910': attribute type 10 has an invalid length. [ 851.937160][T30822] bond7: (slave dummy0): Releasing active interface [ 851.946617][T30830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5911'. [ 851.958841][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5909'. [ 851.976716][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5909'. [ 852.061931][T30822] team0: Port device dummy0 added [ 852.111124][T30827] team0 (unregistering): Port device team_slave_0 removed [ 852.169525][T30827] team0 (unregistering): Port device team_slave_1 removed [ 852.668137][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 852.793845][T30872] netlink: 'syz.0.5923': attribute type 1 has an invalid length. [ 852.862228][T30869] netlink: 'syz.2.5922': attribute type 1 has an invalid length. [ 852.909346][T30876] syzkaller1: entered promiscuous mode [ 852.921035][T30876] syzkaller1: entered allmulticast mode [ 853.232149][T30886] vlan7: entered promiscuous mode [ 853.684757][T30910] netlink: 'syz.0.5935': attribute type 8 has an invalid length. [ 853.769591][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.110078][T30930] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 854.142071][T30930] syzkaller1: linktype set to 270 [ 854.578577][T28657] net_ratelimit: 18 callbacks suppressed [ 854.578599][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 854.694883][T21372] lec:lec_start_xmit: lec0:No lecd attached [ 854.724173][T30946] lo speed is unknown, defaulting to 1000 [ 854.748080][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.757375][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 855.318250][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 855.433507][T30969] __nla_validate_parse: 6 callbacks suppressed [ 855.433528][T30969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5950'. [ 855.754769][T30969] ip6gre1: entered promiscuous mode [ 855.769552][T30969] ip6gre1: entered allmulticast mode [ 855.858589][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 856.035277][T30991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5955'. [ 856.047017][T30991] netlink: 'syz.6.5955': attribute type 1 has an invalid length. [ 856.063253][T30991] netlink: 'syz.6.5955': attribute type 2 has an invalid length. [ 856.071741][T30991] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5955'. [ 856.208565][T30544] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 856.348320][T30544] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 856.470305][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 856.633020][ T3540] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 856.641871][T30416] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 856.669686][T30416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 856.679223][T30416] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 856.689789][T30416] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 856.703494][T30416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 856.782449][T31019] lo speed is unknown, defaulting to 1000 [ 856.841273][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 856.918076][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 857.165252][T31043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5969'. [ 857.191275][T31033] tipc: Enabling of bearer rejected, failed to enable media [ 857.212898][T31029] syzkaller0: entered promiscuous mode [ 857.219657][T31029] syzkaller0: entered allmulticast mode [ 857.226067][T31045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5969'. [ 857.336492][T30544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.350024][T30544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 857.362552][T31047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5969'. [ 857.655594][T30544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.671167][T30544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 857.729493][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 857.915557][T30544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.928432][T30544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 857.939745][T31069] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5974'. [ 857.968844][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 858.042911][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 858.119052][T30544] netdevsim netdevsim3 ªªªªª» (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.134265][T30544] netdevsim netdevsim3 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 858.151985][T31076] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5977'. [ 858.375906][T31019] chnl_net:caif_netlink_parms(): no params data found [ 858.538991][T31092] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5982'. [ 858.617035][T31096] syz_tun: left promiscuous mode [ 858.643670][T31096] wg1: left allmulticast mode [ 858.655536][T31096] vlan2: left promiscuous mode [ 858.666771][T31096] macsec1: left promiscuous mode [ 858.676307][T31096] vlan4: left allmulticast mode [ 858.688242][T31096] bridge1: left allmulticast mode [ 858.700903][T31096] bond3: left promiscuous mode [ 858.705881][T31101] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 858.717573][T31096] bridge2: left promiscuous mode [ 858.739644][T31096] bond3: left allmulticast mode [ 858.746041][T31096] bridge2: left allmulticast mode [ 858.764114][T31096] bond4: left allmulticast mode [ 858.773041][T31096] macsec2: left promiscuous mode [ 858.789932][T31096] vlan6: left promiscuous mode [ 858.798295][T31096] geneve1: left promiscuous mode [ 858.803515][T31096] vlan6: left allmulticast mode [ 858.808443][ T5823] Bluetooth: hci5: command tx timeout [ 858.825562][T31096] geneve1: left allmulticast mode [ 858.831756][T31096] bond8: left promiscuous mode [ 858.925504][T31096] geneve3: left promiscuous mode [ 858.958083][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 859.068651][T28657] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.084649][T28657] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.112405][T28657] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.135727][T28657] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.206732][T28657] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.227566][T28657] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.240032][T28657] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.248800][T28657] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.256693][T31113] xt_hashlimit: size too large, truncated to 1048576 [ 859.426449][T28657] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.448702][T28657] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.459085][T31099] lo speed is unknown, defaulting to 1000 [ 859.511666][T31019] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.537477][T31019] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.564940][T31019] bridge_slave_0: entered allmulticast mode [ 859.581951][T31019] bridge_slave_0: entered promiscuous mode [ 859.599649][T28657] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.627831][T28657] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.732318][T30544] dvmrp6: left allmulticast mode [ 859.747580][T30544] bond2: left allmulticast mode [ 859.763778][T30544] wireguard0: left allmulticast mode [ 859.847969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 859.856013][ C0] lec:lec_tx_timeout: lec0 [ 859.948176][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 859.993282][T31140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5991'. [ 860.634964][T30544] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 860.643157][T30544] bridge4 (unregistering): left promiscuous mode [ 860.693548][T30544] bond0 (unregistering): (slave bridge5): Releasing backup interface [ 860.701964][T30544] bridge5 (unregistering): left promiscuous mode [ 860.816655][T30544] bond1 (unregistering): Released all slaves [ 860.838501][T30544] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 860.846975][T30544] wireguard0: left promiscuous mode [ 860.855285][T30544] bond2 (unregistering): Released all slaves [ 860.877334][T30544] bond3 (unregistering): Released all slaves [ 860.888450][ T5823] Bluetooth: hci5: command tx timeout [ 860.911340][T30544] bond4 (unregistering): Released all slaves [ 860.931885][T30544] bond5 (unregistering): Released all slaves [ 860.951547][T30544] bond6 (unregistering): Released all slaves [ 860.974878][T30544] bond0 (unregistering): Released all slaves [ 860.997639][T30544] bond7 (unregistering): Released all slaves [ 861.024202][T31019] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.031720][T31019] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.038646][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 861.039142][T31019] bridge_slave_1: entered allmulticast mode [ 861.054960][T31019] bridge_slave_1: entered promiscuous mode [ 861.066035][T28657] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.074728][T28657] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.162185][T28657] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.196718][T28657] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.303777][T31019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.325598][T30544] tipc: Left network mode [ 861.450552][T31149] netlink: 'syz.0.5993': attribute type 1 has an invalid length. [ 861.525526][T31155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'. [ 861.613377][T31019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.745015][T31158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5995'. [ 861.904991][T31019] team0: Port device team_slave_0 added [ 861.939267][T28657] net_ratelimit: 4 callbacks suppressed [ 861.939285][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 861.993695][T31019] team0: Port device team_slave_1 added [ 862.078106][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 862.151974][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 862.186176][T31019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.202307][T31019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.283504][T31019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.548216][T31019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.579818][T31019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.674765][T31019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.722640][T31164] lo speed is unknown, defaulting to 1000 [ 862.739059][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 862.876785][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6004'. [ 862.896260][T31195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6004'. [ 862.914602][T28662] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 862.963989][T31204] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6006'. [ 862.974222][ T5823] Bluetooth: hci5: command tx timeout [ 863.006456][T31195] vlan7: entered allmulticast mode [ 863.016447][T31195] macvtap0: entered allmulticast mode [ 863.045846][T31161] lo speed is unknown, defaulting to 1000 [ 863.052818][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 863.123175][T31205] tc_dump_action: action bad kind [ 863.165630][T31204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6006'. [ 863.183847][T31019] hsr_slave_0: entered promiscuous mode [ 863.202154][T31019] hsr_slave_1: entered promiscuous mode [ 863.222298][T31019] debugfs: 'hsr0' already exists in 'hsr' [ 863.244413][T31019] Cannot create hsr debugfs directory [ 863.427565][T31169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5996'. [ 863.611697][T31223] netlink: 'syz.0.6008': attribute type 5 has an invalid length. [ 863.653731][T31210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.663870][T31210] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.684918][T31210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 863.705343][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6008'. [ 863.774924][T31227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6008'. [ 863.789906][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 863.902798][T31225] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 863.912450][T31225] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 863.924947][ T5489] 8021q: adding VLAN 0 to HW filter on device eth9 [ 863.952925][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 864.128171][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 864.152173][T31238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6011'. [ 864.212734][T31224] lo speed is unknown, defaulting to 1000 [ 864.409972][T28662] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 864.601709][T30544] hsr_slave_0: left promiscuous mode [ 864.610879][T30544] hsr_slave_1: left promiscuous mode [ 865.048118][ T5823] Bluetooth: hci5: command tx timeout [ 865.071223][T30544] team0 (unregistering): Port device dummy0 removed [ 865.148102][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 865.186150][T31257] syzkaller1: entered promiscuous mode [ 865.192421][T31257] syzkaller1: entered allmulticast mode [ 865.548145][ T141] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 865.661665][T31019] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.680851][T31019] netdevsim netdevsim3 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.796480][T31274] bond14: entered allmulticast mode [ 865.804198][T31274] 8021q: adding VLAN 0 to HW filter on device bond14 [ 865.960301][T31279] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 866.023636][T31279] bond1 (unregistering): Released all slaves [ 866.177692][T31019] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.218069][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 866.236097][T31019] netdevsim netdevsim3 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.243146][T31292] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 866.419634][ T141] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 866.420477][T30544] IPVS: stop unused estimator thread 0... [ 866.491858][T31019] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.516586][T31019] netdevsim netdevsim3 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.684671][T31306] netlink: 'syz.4.6022': attribute type 15 has an invalid length. [ 866.880142][T31319] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 867.195009][T31019] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.219756][T31019] netdevsim netdevsim3 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.298132][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 867.369284][T30537] net_ratelimit: 1 callbacks suppressed [ 867.369304][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 867.559500][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 867.689081][T30544] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 868.004150][ T141] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 868.114481][T31365] __nla_validate_parse: 3 callbacks suppressed [ 868.114500][T31365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6036'. [ 868.235018][T31370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6038'. [ 868.244687][T28662] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 868.278523][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 868.371412][T28662] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 868.415412][T31019] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 868.461206][T31019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.486265][T31019] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 868.527703][T31374] netlink: 'syz.6.6038': attribute type 12 has an invalid length. [ 868.590599][T31019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.606274][T31374] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.6038'. [ 868.726232][T31376] netlink: 364 bytes leftover after parsing attributes in process `syz.4.6037'. [ 868.775271][T31376] netlink: 82 bytes leftover after parsing attributes in process `syz.4.6037'. [ 868.815322][T31019] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 868.854907][T31019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.896251][T31019] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 868.977155][T31019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.076597][T31402] tipc: Failed to remove unknown binding: 66,0,0/0:3725350663/3725350664 [ 869.085733][T30544] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 869.110541][T31402] tipc: Failed to remove unknown binding: 66,0,0/0:3725350663/3725350664 [ 869.248375][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 869.318059][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 869.418678][ T141] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 869.464476][T31019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.544126][T31019] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.555209][T31422] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6045'. [ 869.561165][T30544] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.571757][T30544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.625383][T30544] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.632595][T30544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.712668][T31427] Bluetooth: MGMT ver 1.23 [ 869.788408][ T141] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 869.793428][T31430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6049'. [ 869.986292][T31439] hsr0: entered promiscuous mode [ 870.099843][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.314152][T31454] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.6053'. [ 870.334971][T31455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6052'. [ 870.360916][T31454] netlink: 'syz.4.6053': attribute type 6 has an invalid length. [ 870.390445][T31454] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 870.448158][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 870.481980][T31459] Cannot find del_set index 0 as target [ 870.740488][T31425] hsr0: left promiscuous mode [ 870.836193][T31019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.122442][T31019] veth0_vlan: entered promiscuous mode [ 871.174262][T31481] netlink: 'syz.4.6059': attribute type 1 has an invalid length. [ 871.223954][T31479] netlink: 'syz.2.6058': attribute type 4 has an invalid length. [ 871.262816][T31476] lo speed is unknown, defaulting to 1000 [ 871.297062][T31019] veth1_vlan: entered promiscuous mode [ 871.488178][T31492] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6060'. [ 871.488598][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 871.627074][T31019] veth0_macvtap: entered promiscuous mode [ 871.786982][T31019] veth1_macvtap: entered promiscuous mode [ 872.040357][ T29] audit: type=1804 audit(1776650441.944:14): pid=31520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6064" name="/newroot/379/cgroup.controllers" dev="tmpfs" ino=1966 res=1 errno=0 [ 872.102132][ T29] audit: type=1800 audit(1776650441.944:15): pid=31520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6064" name="cgroup.controllers" dev="tmpfs" ino=1966 res=0 errno=0 [ 872.176686][T31019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.192739][ T29] audit: type=1800 audit(1776650441.984:16): pid=31520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6064" name="cgroup.controllers" dev="tmpfs" ino=1966 res=0 errno=0 [ 872.233893][T31019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.247341][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.322249][T31530] wg1: Master is either lo or non-ether device [ 872.349652][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.394844][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.415916][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.438024][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 872.482402][T31530] syzkaller0: entered promiscuous mode [ 872.500793][T31530] syzkaller0: entered allmulticast mode [ 872.700311][T30537] net_ratelimit: 9 callbacks suppressed [ 872.700344][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 873.258740][T30537] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 873.428268][T30543] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 873.498093][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 873.545002][T28657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.588707][T28657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.638737][ T56] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 873.812534][T30543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.832495][T30543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.840649][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 873.958466][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 874.076392][T31596] __nla_validate_parse: 1 callbacks suppressed [ 874.076412][T31596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6082'. [ 874.172388][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 874.209095][T31605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6085'. [ 874.214389][T31603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5958'. [ 874.315619][T31603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5958'. [ 874.332936][ T3540] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 874.371908][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5958'. [ 874.417013][T31603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5958'. [ 874.462758][ T56] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 874.548109][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.609759][T28657] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 875.558060][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 875.734446][T31640] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 875.848660][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.856760][ C0] lec:lec_tx_timeout: lec0 [ 876.069508][T31657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6097'. [ 876.138998][T31657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6097'. [ 876.618060][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 876.690230][T31680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6105'. [ 877.433433][T31714] syzkaller0: entered promiscuous mode [ 877.481476][T31714] syzkaller0: entered allmulticast mode [ 877.611229][T31725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6115'. [ 877.698226][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 877.735866][T30416] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.747448][T31732] netlink: 'syz.6.6114': attribute type 4 has an invalid length. [ 877.770155][T30536] net_ratelimit: 18 callbacks suppressed [ 877.770197][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 877.788982][T30416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.802057][T30416] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.813897][T30416] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.825655][T30416] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 877.852531][T31717] netlink: 'syz.6.6114': attribute type 4 has an invalid length. [ 878.081596][T31717] netlink: 'syz.6.6114': attribute type 4 has an invalid length. [ 878.102583][T30536] bond8: (slave ip6gretap0): failed to get link speed/duplex [ 878.211269][T31729] lo speed is unknown, defaulting to 1000 [ 878.648268][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 879.125071][T31746] .70·: left allmulticast mode [ 879.138327][T31746] hsr_slave_0: left allmulticast mode [ 879.148089][T31746] hsr_slave_1: left allmulticast mode [ 879.235975][T31746] veth11: left promiscuous mode [ 879.246823][T31746] ip6tnl1: left allmulticast mode [ 879.254038][T31746] bridge3: left promiscuous mode [ 879.260945][T31746] bridge3: left allmulticast mode [ 879.272565][T31746] bridge4: left promiscuous mode [ 879.286225][T31746] bridge4: left allmulticast mode [ 879.297796][T31746] bond10: left promiscuous mode [ 879.406771][T31746] bond12: left promiscuous mode [ 879.418558][T31746] bond13: left allmulticast mode [ 879.436539][T31746] bond14: left allmulticast mode [ 879.598208][T19614] bond0: (slave syz_tun): Releasing backup interface [ 879.683454][T31771] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 879.698485][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 879.715698][T31771] bond4 (unregistering): Released all slaves [ 879.929337][T30416] Bluetooth: hci2: command tx timeout [ 880.086448][T31791] tipc: Enabled bearer , priority 0 [ 880.113391][T31799] netlink: 'syz.3.6128': attribute type 13 has an invalid length. [ 880.277014][T31794] syzkaller0: entered promiscuous mode [ 880.286334][T31794] syzkaller0: entered allmulticast mode [ 880.343984][T31729] chnl_net:caif_netlink_parms(): no params data found [ 880.377512][T31794] tipc: Resetting bearer [ 880.452116][T31794] tipc: Disabling bearer [ 880.517207][T31807] netlink: 'syz.6.6132': attribute type 13 has an invalid length. [ 880.530328][T31807] netlink: 'syz.6.6132': attribute type 17 has an invalid length. [ 880.722076][T31818] __nla_validate_parse: 3 callbacks suppressed [ 880.722095][T31818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6132'. [ 880.738068][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 880.925161][T31829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6137'. [ 881.237694][T31842] netlink: 'syz.0.6135': attribute type 1 has an invalid length. [ 881.427267][T31827] netlink: 'syz.0.6135': attribute type 29 has an invalid length. [ 881.740792][T31852] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.748533][T31852] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.888561][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 881.923791][T31852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.943250][T31852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.009980][T30416] Bluetooth: hci2: command tx timeout [ 882.199095][T30536] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.217541][T31869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6145'. [ 882.235237][T30536] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.256753][T30536] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.266044][T30536] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.360543][T31729] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.396473][T31729] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.424277][T31729] bridge_slave_0: entered allmulticast mode [ 882.450357][T31729] bridge_slave_0: entered promiscuous mode [ 882.468849][T31881] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6148'. [ 882.485785][T31729] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.504265][T31729] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.534869][T31729] bridge_slave_1: entered allmulticast mode [ 882.570034][T31729] bridge_slave_1: entered promiscuous mode [ 882.716496][T31896] nbd: must specify at least one socket [ 882.756565][T31881] nbd: couldn't find device at index 0 [ 882.823142][T31729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.868121][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 882.899614][T31729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.181072][T31910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6153'. [ 883.206857][T31729] team0: Port device team_slave_0 added [ 883.231297][T31729] team0: Port device team_slave_1 added [ 883.482409][T31729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.482984][T31922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6159'. [ 883.514929][T31729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.546342][T31729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.587605][T31729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.618402][T31729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.693867][T31729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.709047][T31935] netlink: 'syz.0.6157': attribute type 1 has an invalid length. [ 883.738987][T31935] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6157'. [ 883.898096][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 883.950873][T31729] hsr_slave_0: entered promiscuous mode [ 883.967490][T31729] hsr_slave_1: entered promiscuous mode [ 883.988338][T31729] debugfs: 'hsr0' already exists in 'hsr' [ 884.006873][T31729] Cannot create hsr debugfs directory [ 884.088576][T30416] Bluetooth: hci2: command tx timeout [ 884.169768][T31954] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20004 [ 884.532754][T31966] xt_hashlimit: size too large, truncated to 1048576 [ 884.766679][T31972] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6170'. [ 884.978126][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 885.968131][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 886.168984][T30416] Bluetooth: hci2: command tx timeout [ 886.402007][T31729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 886.479305][T31729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.526685][T31729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 886.576982][T32003] netlink: 'syz.3.6176': attribute type 10 has an invalid length. [ 886.579539][T31729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 886.632900][T31729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 886.666111][T31729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.690699][T32003] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 886.726475][T31729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 886.756615][T31729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 886.968342][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 887.051657][T31729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.114018][T31729] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.163779][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.171034][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.230361][T30544] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.237598][T30544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.506045][T32033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6187'. [ 887.542091][T32033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.628121][T32034] netlink: 'syz.3.6188': attribute type 21 has an invalid length. [ 887.663653][T32037] lo speed is unknown, defaulting to 1000 [ 887.671072][T32034] netlink: 'syz.3.6188': attribute type 6 has an invalid length. [ 887.693736][T32034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6188'. [ 887.880154][T32044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6188'. [ 888.048153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 888.177822][T31729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.266334][T32062] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 888.406481][T32066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6192'. [ 888.486575][T32071] netlink: 'syz.4.6195': attribute type 10 has an invalid length. [ 888.507478][T32071] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6195'. [ 888.548530][T32071] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 888.617007][T32071] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.678036][T32071] .70·: entered promiscuous mode [ 888.714288][T32071] bridge0: port 1(.70·) entered blocking state [ 888.749976][T32071] bridge0: port 1(.70·) entered disabled state [ 888.786068][T32071] .70·: entered allmulticast mode [ 888.840567][T32071] hsr_slave_0: entered allmulticast mode [ 888.872035][T32071] hsr_slave_1: entered allmulticast mode [ 889.048917][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 889.070733][T32087] vlan7: entered allmulticast mode [ 889.083867][T32087] bond0: entered allmulticast mode [ 889.093994][T32087] bond_slave_0: entered allmulticast mode [ 889.100550][T32087] bond_slave_1: entered allmulticast mode [ 889.137426][T32092] openvswitch: netlink: IP tunnel TTL not specified. [ 889.153508][T32083] lo speed is unknown, defaulting to 1000 [ 889.163561][T31729] veth0_vlan: entered promiscuous mode [ 889.247394][T31729] veth1_vlan: entered promiscuous mode [ 889.393557][T31729] veth0_macvtap: entered promiscuous mode [ 889.414583][T31729] veth1_macvtap: entered promiscuous mode [ 889.421624][T32097] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 889.464393][T31729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.502668][T31729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.541532][T30536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.633203][T30536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.657116][T30536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.682336][T30536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.841144][T32107] syzkaller0: entered promiscuous mode [ 889.900470][T32107] syzkaller0: entered allmulticast mode [ 890.081914][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6204'. [ 890.098415][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 890.112176][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.154994][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.217859][T30537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.228842][T30537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.937796][T32142] lo speed is unknown, defaulting to 1000 [ 890.974449][T32146] ipt_REJECT: ECHOREPLY no longer supported. [ 891.071163][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 891.086847][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 891.098417][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 891.111914][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 891.120524][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 891.278219][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 891.822093][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6213'. [ 891.943133][T32147] lo speed is unknown, defaulting to 1000 [ 892.188051][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 892.226360][T32164] lo speed is unknown, defaulting to 1000 [ 892.387151][T32182] syzkaller1: entered promiscuous mode [ 892.403678][T32182] syzkaller1: entered allmulticast mode [ 892.992541][T32203] lo speed is unknown, defaulting to 1000 [ 893.044665][T32147] chnl_net:caif_netlink_parms(): no params data found [ 893.174973][T32233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6228'. [ 893.208289][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 893.217584][T30416] Bluetooth: hci4: command tx timeout [ 893.692868][T32147] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.709926][T32147] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.722959][T32147] bridge_slave_0: entered allmulticast mode [ 893.732023][T32147] bridge_slave_0: entered promiscuous mode [ 893.757267][T32147] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.767366][T32147] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.782059][T32147] bridge_slave_1: entered allmulticast mode [ 893.791644][T32147] bridge_slave_1: entered promiscuous mode [ 893.878401][T32147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.901506][T32147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.953749][T32147] team0: Port device team_slave_0 added [ 893.964099][T32147] team0: Port device team_slave_1 added [ 894.025348][T32255] netlink: 'syz.2.6233': attribute type 1 has an invalid length. [ 894.070897][T32147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.078271][T32147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.110443][T32147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.124118][T32147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.132731][T32147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.162112][T32147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.266206][T32147] hsr_slave_0: entered promiscuous mode [ 894.294545][T32147] hsr_slave_1: entered promiscuous mode [ 894.314566][T32147] debugfs: 'hsr0' already exists in 'hsr' [ 894.335629][T32147] Cannot create hsr debugfs directory [ 894.418335][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 894.679103][T32279] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6239'. [ 894.692099][T32276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6236'. [ 894.710646][T32276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6236'. [ 895.288258][T30416] Bluetooth: hci4: command tx timeout [ 895.398191][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 896.104287][T32228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 896.161754][T32147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 896.223163][T32147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.278823][T32147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 896.313499][T32147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.334230][T32147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 896.372658][T32286] netlink: 'syz.0.6242': attribute type 11 has an invalid length. [ 896.391274][T32147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.405849][T32147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 896.418366][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 896.436775][T32147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.584940][T32298] gretap1: entered promiscuous mode [ 896.608546][T32298] gretap1: entered allmulticast mode [ 896.763219][T32311] netlink: 'syz.0.6244': attribute type 4 has an invalid length. [ 896.778916][T32311] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6244'. [ 896.900768][T32147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.032208][T32147] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.058599][T32316] lo speed is unknown, defaulting to 1000 [ 897.069785][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.077938][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.124801][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.133126][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.271986][T32325] lo speed is unknown, defaulting to 1000 [ 897.368270][T30416] Bluetooth: hci4: command tx timeout [ 897.518126][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 898.003033][T32147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.408337][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 898.452137][T32363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 898.866945][T32376] bond1: option lacp_rate: invalid value (128) [ 898.880182][T32376] bond1 (unregistering): Released all slaves [ 898.913391][T32385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6261'. [ 899.204799][T32147] veth0_vlan: entered promiscuous mode [ 899.248612][T32147] veth1_vlan: entered promiscuous mode [ 899.363407][T32147] veth0_macvtap: entered promiscuous mode [ 899.395781][T32396] ip6tnl0: Caught tx_queue_len zero misconfig [ 899.412731][T32147] veth1_macvtap: entered promiscuous mode [ 899.452155][T30416] Bluetooth: hci4: command tx timeout [ 899.476377][T32147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.518238][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 899.560283][T32147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.614898][T30536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.635979][T32400] lo speed is unknown, defaulting to 1000 [ 899.639440][T30536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.651689][T30536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.668065][T30536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.240448][T32416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6270'. [ 900.280082][T28657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.301932][T28657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.551302][T28657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.563214][T28657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.608035][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 900.938419][T32436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6276'. [ 900.948836][T32436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6276'. [ 901.416821][T32448] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 901.529108][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 901.675662][T32462] tipc: Started in network mode [ 901.700660][T32462] tipc: Node identity 72d0037bba3c, cluster identity 4711 [ 901.734340][T32462] tipc: Enabled bearer , priority 0 [ 901.743704][T32449] syzkaller0: entered promiscuous mode [ 901.752494][T32449] syzkaller0: entered allmulticast mode [ 901.779193][T32449] tipc: Resetting bearer [ 901.815302][T32446] tipc: Resetting bearer [ 901.875052][T32446] tipc: Disabling bearer [ 902.017841][T32479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6287'. [ 902.027855][T32479] netlink: 'syz.6.6287': attribute type 30 has an invalid length. [ 902.037241][T32479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6287'. [ 902.176289][T32484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6290'. [ 902.206437][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6287'. [ 902.257229][T32480] netlink: 'syz.6.6287': attribute type 30 has an invalid length. [ 902.285910][T32480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6287'. [ 902.534398][T32491] lo speed is unknown, defaulting to 1000 [ 902.544242][T32497] netlink: 'syz.0.6293': attribute type 3 has an invalid length. [ 902.618030][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 902.782419][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6296'. [ 902.829201][T32503] lo speed is unknown, defaulting to 1000 [ 903.113167][T32527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.146595][T32515] netlink: 'syz.4.6295': attribute type 6 has an invalid length. [ 903.294533][T32506] lo speed is unknown, defaulting to 1000 [ 903.516311][T32524] lo speed is unknown, defaulting to 1000 [ 903.618063][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 904.313888][T32556] netlink: 15 bytes leftover after parsing attributes in process `syz.3.6304'. [ 904.818069][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 905.187525][T32591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6310'. [ 905.219542][T32591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6310'. [ 905.245706][T32595] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6311'. [ 905.256982][T32591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6310'. [ 905.429716][T32592] veth2: entered allmulticast mode [ 905.511905][T32606] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6313'. [ 905.537207][T32591] veth2: entered allmulticast mode [ 905.585257][T32605] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6312'. [ 905.740816][T32615] "syz.0.6314" (32615) uses obsolete ecb(arc4) skcipher [ 905.777000][T32585] delete_channel: no stack [ 905.848532][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 906.093174][T32630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6319'. [ 906.129226][T32633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6317'. [ 906.401500][T32648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6323'. [ 906.748566][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 907.324142][T32672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.824814][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 908.289792][T32693] netlink: 'syz.4.6334': attribute type 12 has an invalid length. [ 908.532289][T32697] syzkaller0: entered promiscuous mode [ 908.539260][T32697] syzkaller0: entered allmulticast mode [ 908.848073][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 908.969543][T32703] tipc: Started in network mode [ 908.987826][T32703] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 909.022261][T32703] tipc: Enabling of bearer rejected, failed to enable media [ 909.321577][T32707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 909.729574][T32733] __nla_validate_parse: 7 callbacks suppressed [ 909.729591][T32733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6349'. [ 909.918527][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 910.061201][T32737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6351'. [ 910.085018][T32737] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6351'. [ 910.285960][T32750] bond5: option lp_interval: invalid value (0) [ 910.293125][T32750] bond5: option lp_interval: allowed values 1 - 2147483647 [ 910.302581][T32750] bond5 (unregistering): Released all slaves [ 910.905062][ T311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6363'. [ 910.914648][ T311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6363'. [ 911.008106][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 911.071155][ T318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6365'. [ 911.440814][ T333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6369'. [ 911.502975][ T331] ip6t_srh: unknown srh match flags 4000 [ 911.829052][ T344] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 911.890927][ T351] netlink: 'syz.6.6372': attribute type 3 has an invalid length. [ 911.920709][ T344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6373'. [ 911.964741][ T345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6372'. [ 912.068056][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 912.326729][ T369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6380'. [ 912.557285][ T375] netlink: 'syz.6.6381': attribute type 1 has an invalid length. [ 912.559076][ T371] bond1 (unregistering): Released all slaves [ 912.701692][ T375] 8021q: adding VLAN 0 to HW filter on device bond5 [ 912.714151][ T381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.741284][ T379] bond5: (slave gretap2): making interface the new active one [ 912.757766][ T379] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 912.815033][ T381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.836657][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.893695][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.986375][ T397] openvswitch: netlink: IP tunnel dst address not specified [ 913.058090][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 913.222712][ T407] : entered promiscuous mode [ 913.282740][ T418] hsr0: entered promiscuous mode [ 913.287805][ T418] hsr0: entered allmulticast mode [ 913.307743][ T418] hsr_slave_0: entered allmulticast mode [ 913.314143][ T418] hsr_slave_1: entered allmulticast mode [ 914.138085][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 915.012641][ T486] lo speed is unknown, defaulting to 1000 [ 915.088098][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 915.591124][ T510] netlink: 'syz.3.6411': attribute type 2 has an invalid length. [ 916.128127][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.542407][ T541] lo: Caught tx_queue_len zero misconfig [ 916.562799][ T543] __nla_validate_parse: 3 callbacks suppressed [ 916.562833][ T543] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6422'. [ 916.631572][ T543] ip6gre5: entered promiscuous mode [ 916.645419][ T547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6423'. [ 916.660132][ T543] ip6gre5: entered allmulticast mode [ 916.881636][ T548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.158511][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 917.224770][ T555] ipt_REJECT: ECHOREPLY no longer supported. [ 917.760444][ T583] netlink: 'syz.2.6430': attribute type 10 has an invalid length. [ 918.169917][ T591] gre1: entered promiscuous mode [ 918.288131][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 918.678909][ T609] siw: device registration error -23 [ 918.773223][ T614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6437'. [ 918.856616][T20141] IPVS: starting estimator thread 0... [ 918.969663][ T620] IPVS: using max 30 ests per chain, 72000 per kthread [ 919.188838][ T625] bond1 (unregistering): Released all slaves [ 919.238060][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 919.475256][ T641] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 919.483733][ T641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 919.620028][T21372] lec:lec_start_xmit: lec0:No lecd attached [ 919.724157][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6445'. [ 919.857391][ T657] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6447'. [ 919.871621][ T657] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6447'. [ 919.935983][ T659] FAULT_INJECTION: forcing a failure. [ 919.935983][ T659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.950150][ T659] CPU: 0 UID: 0 PID: 659 Comm: syz.6.6448 Not tainted syzkaller #0 PREEMPT(full) [ 919.950178][ T659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 919.950190][ T659] Call Trace: [ 919.950198][ T659] [ 919.950206][ T659] dump_stack_lvl+0xe8/0x150 [ 919.950241][ T659] should_fail_ex+0x412/0x560 [ 919.950271][ T659] _copy_to_user+0x31/0xb0 [ 919.950294][ T659] btf_new_fd+0x5b4/0xd40 [ 919.950329][ T659] ? __pfx_btf_new_fd+0x10/0x10 [ 919.950355][ T659] ? bpf_token_put+0x143/0x160 [ 919.950378][ T659] ? bpf_btf_load+0x126/0x190 [ 919.950402][ T659] __sys_bpf+0x4e5/0x950 [ 919.950424][ T659] ? __pfx___sys_bpf+0x10/0x10 [ 919.950459][ T659] ? ksys_write+0x242/0x270 [ 919.950487][ T659] ? __pfx_ksys_write+0x10/0x10 [ 919.950517][ T659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.950537][ T659] __x64_sys_bpf+0x7c/0x90 [ 919.950556][ T659] do_syscall_64+0x15f/0xf80 [ 919.950578][ T659] ? trace_irq_disable+0x3b/0x140 [ 919.950599][ T659] ? clear_bhb_loop+0x40/0x90 [ 919.950625][ T659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.950644][ T659] RIP: 0033:0x7f1a2af9c819 [ 919.950662][ T659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.950678][ T659] RSP: 002b:00007f1a2bed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 919.950699][ T659] RAX: ffffffffffffffda RBX: 00007f1a2b215fa0 RCX: 00007f1a2af9c819 [ 919.950714][ T659] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 919.950726][ T659] RBP: 00007f1a2bed1090 R08: 0000000000000000 R09: 0000000000000000 [ 919.950738][ T659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.950749][ T659] R13: 00007f1a2b216038 R14: 00007f1a2b215fa0 R15: 00007ffdfe65cee8 [ 919.950779][ T659] [ 920.318101][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 921.130269][ T668] tipc: Failed to remove unknown binding: 66,1,1/0:636981642/636981644 [ 921.158604][ T668] tipc: Failed to remove unknown binding: 66,1,1/0:636981642/636981644 [ 921.168139][ T668] tipc: Failed to remove unknown binding: 66,1,1/0:636981642/636981644 [ 921.378200][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 921.576128][ T678] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6452'. [ 921.602038][ T678] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 921.670436][ T680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.742129][ T681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6453'. [ 922.086335][ T633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.338502][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 922.472177][ T696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6456'. [ 922.616061][ T692] lo speed is unknown, defaulting to 1000 [ 922.773101][ T710] FAULT_INJECTION: forcing a failure. [ 922.773101][ T710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.811361][ T710] CPU: 0 UID: 0 PID: 710 Comm: syz.4.6459 Not tainted syzkaller #0 PREEMPT(full) [ 922.811390][ T710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 922.811401][ T710] Call Trace: [ 922.811410][ T710] [ 922.811418][ T710] dump_stack_lvl+0xe8/0x150 [ 922.811450][ T710] should_fail_ex+0x412/0x560 [ 922.811480][ T710] _copy_to_user+0x31/0xb0 [ 922.811503][ T710] simple_read_from_buffer+0xe1/0x170 [ 922.811532][ T710] proc_fail_nth_read+0x1bb/0x230 [ 922.811560][ T710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 922.811588][ T710] ? rw_verify_area+0x2a6/0x4d0 [ 922.811617][ T710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 922.811650][ T710] vfs_read+0x20c/0xa70 [ 922.811680][ T710] ? __pfx___mutex_lock+0x10/0x10 [ 922.811704][ T710] ? __pfx_vfs_read+0x10/0x10 [ 922.811731][ T710] ? __fget_files+0x2a/0x420 [ 922.811756][ T710] ? __fget_files+0x3a0/0x420 [ 922.811776][ T710] ? __fget_files+0x2a/0x420 [ 922.811805][ T710] ksys_read+0x150/0x270 [ 922.811832][ T710] ? __pfx_ksys_read+0x10/0x10 [ 922.811865][ T710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.811886][ T710] do_syscall_64+0x15f/0xf80 [ 922.811907][ T710] ? trace_irq_disable+0x3b/0x140 [ 922.811927][ T710] ? clear_bhb_loop+0x40/0x90 [ 922.811950][ T710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.811968][ T710] RIP: 0033:0x7f2031d5d04e [ 922.811986][ T710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 922.812002][ T710] RSP: 002b:00007f2032ce2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 922.812023][ T710] RAX: ffffffffffffffda RBX: 00007f2032ce36c0 RCX: 00007f2031d5d04e [ 922.812037][ T710] RDX: 000000000000000f RSI: 00007f2032ce30a0 RDI: 0000000000000003 [ 922.812049][ T710] RBP: 00007f2032ce3090 R08: 0000000000000000 R09: 0000000000000000 [ 922.812060][ T710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 922.812071][ T710] R13: 00007f2032016038 R14: 00007f2032015fa0 R15: 00007fff1b09fe68 [ 922.812102][ T710] [ 923.378036][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 923.601094][ T731] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6465'. [ 923.603851][ T739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6469'. [ 923.644424][ T731] [ 923.646791][ T731] ====================================================== [ 923.653814][ T731] WARNING: possible circular locking dependency detected [ 923.660845][ T731] syzkaller #0 Not tainted [ 923.665261][ T731] ------------------------------------------------------ [ 923.672285][ T731] syz.4.6465/731 is trying to acquire lock: [ 923.678179][ T731] ffffffff8ff4be18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 923.679378][ T740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6467'. [ 923.687351][ T731] [ 923.687351][ T731] but task is already holding lock: [ 923.687363][ T731] ffff8880286cd270 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 923.687423][ T731] [ 923.687423][ T731] which lock already depends on the new lock. [ 923.687423][ T731] [ 923.687432][ T731] [ 923.687432][ T731] the existing dependency chain (in reverse order) is: [ 923.687441][ T731] [ 923.687441][ T731] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 923.687556][ T731] _raw_spin_lock_bh+0x36/0x50 [ 923.687579][ T731] nr_rt_device_down+0x153/0x860 [ 923.687606][ T731] nr_device_event+0x137/0x150 [ 923.687629][ T731] notifier_call_chain+0x1ad/0x3d0 [ 923.687649][ T731] __dev_notify_flags+0x16d/0x310 [ 923.687677][ T731] netif_change_flags+0xe8/0x1a0 [ 923.687705][ T731] dev_change_flags+0x130/0x260 [ 923.687730][ T731] dev_ioctl+0x7b4/0x1150 [ 923.687754][ T731] sock_do_ioctl+0x23e/0x320 [ 923.687775][ T731] sock_ioctl+0x5c6/0x7f0 [ 923.687795][ T731] __se_sys_ioctl+0xfc/0x170 [ 923.687812][ T731] do_syscall_64+0x15f/0xf80 [ 923.687833][ T731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.687852][ T731] [ 923.687852][ T731] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 923.687878][ T731] _raw_spin_lock_bh+0x36/0x50 [ 923.687896][ T731] nr_rt_device_down+0xbe/0x860 [ 923.828777][ T731] nr_device_event+0x137/0x150 [ 923.834072][ T731] notifier_call_chain+0x1ad/0x3d0 [ 923.839781][ T731] __dev_notify_flags+0x16d/0x310 [ 923.845327][ T731] netif_change_flags+0xe8/0x1a0 [ 923.850786][ T731] dev_change_flags+0x130/0x260 [ 923.856158][ T731] dev_ioctl+0x7b4/0x1150 [ 923.861012][ T731] sock_do_ioctl+0x23e/0x320 [ 923.866120][ T731] sock_ioctl+0x5c6/0x7f0 [ 923.870959][ T731] __se_sys_ioctl+0xfc/0x170 [ 923.876062][ T731] do_syscall_64+0x15f/0xf80 [ 923.881172][ T731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.887583][ T731] [ 923.887583][ T731] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 923.895492][ T731] __lock_acquire+0x15a5/0x2cf0 [ 923.900863][ T731] lock_acquire+0x106/0x350 [ 923.905895][ T731] _raw_spin_lock_bh+0x36/0x50 [ 923.911189][ T731] nr_del_node+0x57d/0xbb0 [ 923.916137][ T731] nr_rt_ioctl+0xb34/0xf90 [ 923.921079][ T731] sock_do_ioctl+0x101/0x320 [ 923.926190][ T731] sock_ioctl+0x5c6/0x7f0 [ 923.931037][ T731] __se_sys_ioctl+0xfc/0x170 [ 923.936146][ T731] do_syscall_64+0x15f/0xf80 [ 923.941254][ T731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.947661][ T731] [ 923.947661][ T731] other info that might help us debug this: [ 923.947661][ T731] [ 923.957877][ T731] Chain exists of: [ 923.957877][ T731] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 923.957877][ T731] [ 923.971729][ T731] Possible unsafe locking scenario: [ 923.971729][ T731] [ 923.979352][ T731] CPU0 CPU1 [ 923.984717][ T731] ---- ---- [ 923.990072][ T731] lock(&nr_node->node_lock); [ 923.994838][ T731] lock(nr_node_list_lock); [ 924.001946][ T731] lock(&nr_node->node_lock); [ 924.009227][ T731] lock(nr_neigh_list_lock); [ 924.014248][ T731] [ 924.014248][ T731] *** DEADLOCK *** [ 924.014248][ T731] [ 924.022417][ T731] 2 locks held by syz.4.6465/731: [ 924.027453][ T731] #0: ffffffff8ff4be78 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 924.036961][ T731] #1: ffff8880286cd270 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 924.046646][ T731] [ 924.046646][ T731] stack backtrace: [ 924.052530][ T731] CPU: 0 UID: 0 PID: 731 Comm: syz.4.6465 Not tainted syzkaller #0 PREEMPT(full) [ 924.052551][ T731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 924.052563][ T731] Call Trace: [ 924.052571][ T731] [ 924.052579][ T731] dump_stack_lvl+0xe8/0x150 [ 924.052608][ T731] print_circular_bug+0x2e1/0x300 [ 924.052637][ T731] check_noncircular+0x12e/0x150 [ 924.052665][ T731] __lock_acquire+0x15a5/0x2cf0 [ 924.052696][ T731] ? nr_del_node+0x57d/0xbb0 [ 924.052723][ T731] lock_acquire+0x106/0x350 [ 924.052745][ T731] ? nr_del_node+0x57d/0xbb0 [ 924.052769][ T731] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 924.052785][ T731] ? nr_del_node+0x247/0xbb0 [ 924.052809][ T731] ? nr_del_node+0x57d/0xbb0 [ 924.052832][ T731] _raw_spin_lock_bh+0x36/0x50 [ 924.052849][ T731] ? nr_del_node+0x57d/0xbb0 [ 924.052872][ T731] nr_del_node+0x57d/0xbb0 [ 924.052897][ T731] nr_rt_ioctl+0xb34/0xf90 [ 924.052923][ T731] ? kasan_quarantine_put+0xbb/0x1f0 [ 924.052947][ T731] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 924.052975][ T731] ? apparmor_capable+0x126/0x170 [ 924.052996][ T731] ? capable+0x88/0xe0 [ 924.053018][ T731] ? nr_ioctl+0x1b1/0x3b0 [ 924.053038][ T731] sock_do_ioctl+0x101/0x320 [ 924.053060][ T731] ? __pfx_sock_do_ioctl+0x10/0x10 [ 924.053076][ T731] ? do_futex+0x333/0x420 [ 924.053106][ T731] sock_ioctl+0x5c6/0x7f0 [ 924.053125][ T731] ? __pfx_sock_ioctl+0x10/0x10 [ 924.053141][ T731] ? __fget_files+0x2a/0x420 [ 924.053163][ T731] ? __fget_files+0x3a0/0x420 [ 924.053181][ T731] ? __fget_files+0x2a/0x420 [ 924.053203][ T731] ? bpf_lsm_file_ioctl+0x9/0x20 [ 924.053221][ T731] ? __pfx_sock_ioctl+0x10/0x10 [ 924.053237][ T731] __se_sys_ioctl+0xfc/0x170 [ 924.053253][ T731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.053270][ T731] do_syscall_64+0x15f/0xf80 [ 924.053291][ T731] ? trace_irq_disable+0x3b/0x140 [ 924.053307][ T731] ? clear_bhb_loop+0x40/0x90 [ 924.053327][ T731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.053343][ T731] RIP: 0033:0x7f2031d9c819 [ 924.053361][ T731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.053375][ T731] RSP: 002b:00007f2032ce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.053395][ T731] RAX: ffffffffffffffda RBX: 00007f2032015fa0 RCX: 00007f2031d9c819 [ 924.053408][ T731] RDX: 00002000000001c0 RSI: 000000000000890c RDI: 000000000000000a [ 924.053421][ T731] RBP: 00007f2031e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 924.053432][ T731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.053441][ T731] R13: 00007f2032016038 R14: 00007f2032015fa0 R15: 00007fff1b09fe68 [ 924.053464][ T731] [ 924.354386][ T744] tipc: Started in network mode [ 924.360034][ T744] tipc: Node identity ac14140f, cluster identity 4711 [ 924.367133][ T744] tipc: New replicast peer: 255.255.255.255 [ 924.373736][ T744] tipc: Enabled bearer , priority 10 [ 924.458037][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 924.887897][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 924.896118][ C0] lec:lec_tx_timeout: lec0 [ 925.477998][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 925.488092][T20150] tipc: Node number set to 2886997007 [ 926.498030][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 927.548013][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 928.587972][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 929.617993][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 930.747993][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 931.532090][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.758228][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 932.748259][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!