last executing test programs: 2.254122964s ago: executing program 0 (id=7711): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x804) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="774a0100000000", @ANYRES32, @ANYRESHEX=0x0], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040085) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) r5 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r5, &(0x7f0000000e80)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/194, 0xc2}], 0x1, &(0x7f00000005c0)=""/63, 0x3f}, 0x8}, {{&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/79, 0x4f}, {&(0x7f00000007c0)=""/168, 0xa8}], 0x3}, 0x800}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)=""/21, 0x15}, {&(0x7f0000000880)=""/1, 0x1}, {&(0x7f00000008c0)=""/114, 0x72}], 0x3}, 0x9}, {{&(0x7f0000000980)=@x25, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/13, 0xd}, {&(0x7f0000000a40)}], 0x2, &(0x7f0000000ac0)=""/28, 0x1c}, 0xffffffff}, {{&(0x7f0000000b00)=@isdn, 0x8a, &(0x7f0000000c00)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/122, 0x7a}], 0x2, &(0x7f0000000d80)=""/229, 0xe5}, 0x52a}], 0x5, 0x2, &(0x7f0000000c40)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5000000010cb9dddd741106e826f6c42c71c25004b6f9f70e6b237865b784674dd614be6fba37fe7dc47f213df8ce6ef20baf8a0fcdfcd7221f722f83d8612597ef19082e96878261637789eb7d58d1e08e4733b625fedd606203988d4797b3a96a2", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="080000005a0001060400000000001400050000806a00000037486d40c2df0759d7811253d9f162cf82e794c848aad6000000006448ed45e6d2beb89cbf762e9e6267c0b53c0a24a9f06dc5fb1f1bfef782789a8af43b7f028568275f142f56d6fba3b620fb6134e806efa81d2fd3d4e4402194a7c14785082ca65d38534a1a5555f1c25b8feefdd9dcf2fbe56621a6db59b1ee0548033a4b85b2c68022b929996c9e88f98c7c3759d4999fb497dd32102e87bf153089817ad76a0b2cdfcd5744946c89b61da0cf64a76c220c4403008d3d975dd16cdaae2ebef2367718fd843c1f41b939d785b3c90000000000"], 0x18}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500002000000002001190780000e1060000"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r7, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_INO_PATHS(r6, 0xc0389423, &(0x7f0000000040)={0x7fff, 0x38, [0x7, 0x7ff, 0x2fcc850a, 0x78f], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) socket$netlink(0x10, 0x3, 0x0) 1.542455108s ago: executing program 1 (id=7717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a00010028bd7000fcdbdf250a008000", @ANYRES32=r1, @ANYBLOB="01050000"], 0x1c}}, 0x41d6b02d55468d44) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a00010028bd7000fcdbdf250a008000", @ANYRES32=r1, @ANYBLOB="01050000"], 0x1c}}, 0x41d6b02d55468d44) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.525299577s ago: executing program 2 (id=7718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r2, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x48}}, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x401c}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0xb, 0x1, 0x322afc92, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x4, 0x46, &(0x7f0000000500)=""/70, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xc, 0x7, 0x100}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[{0x0, 0x5, 0xf, 0x8}, {0x5, 0x2, 0xb, 0xc}, {0x5, 0x5, 0x0, 0x7}, {0x2, 0x4, 0x7, 0x3}, {0x0, 0x1, 0x8, 0x7}, {0x3, 0x4, 0x5, 0x9}, {0x0, 0x1, 0x4}, {0x5, 0x3, 0x5, 0xa}], 0x10, 0x100}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r6, r4, 0x5, 0x0, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="080008000300000000001400000045fe003000780000606799cdb69079ac1e0001ffffffff21f3305280f125a6e11a9316b296b53b5d25867c0a8c27b647"], 0xfdef) 1.280190853s ago: executing program 0 (id=7720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14024100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7f}, @void, @val={0xc, 0x99, {0x9, 0x21}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48005}, 0x4000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r7, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000014000000080016000007000018000180140002006e657464657673696d3000000000000008001500170000000800130000170000080014"], 0x4c}}, 0x0) 1.274602378s ago: executing program 4 (id=7721): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x883e}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x46) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0xd, @empty, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140)=0x10, 0x4) (rerun: 32) 1.093869693s ago: executing program 1 (id=7722): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4fd72e2351f4382ceaf1440000002000010026bd7000ffffffff0a142040030000070000000014000100ff020000259a7d8feba1149e9d0004b9afb700000000000000000000000114000200fc0200000000000000000000000000006f7825244ebbed35e8578891516cd51d8c98a52268c4f4af7d4e0c3946d0b83b68b4416744528e3ae4403302c30905f3c042ed133df74d24055d2b7846ec158b56655d39eeb5339515f80aff10a47df35dccc32ca924217a3f2364e29df42f4ed63d58279f7c2642a35c09e2204e957e8aadce39f7204a386e5b465d39c9331b9dd78f8ca529ac440331cba61f172a3b4a16db0000000036dc92d50ab917265ea0e7a56387541f38442e7f1e118124716947a9bb1dd3646452df1c4e0510844de0c178e11665fc78cba9546eb0776bb2173af81c41e90613ae21b1f7245f32aefca7267dc398e01a8747a0eeae3469fe66960408cb317d92efbfb3674f14923487abec622b0fc8d218c08117576ff52c045509388987a0a07c000000000000009ee2896708626fcde9f6bb4699c79e007eaab34c71a6d8a56c414708c2fe31b3397b356e10367c0bdf7c8868ecf84e79b07c1c0ddfae7ba88a6a673475bfffe3313b4b779b8d086f141094d7c2f3225ae23bf9cd7e6e2d3227724c"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local}]}}]}, 0x40}}, 0x2) (async) close(r10) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x4005) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) 1.063108406s ago: executing program 2 (id=7724): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) close(0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="0d1e5b19287f523f7e8ec643e523fb64", 0x10) 1.019266668s ago: executing program 4 (id=7725): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="10", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xce) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x20000000) r5 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r7, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000680)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}, 0x4}}, 0x10) sendfile(r5, r5, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xffffffff, 0x2000001, 0x4e1, r0, 0x101, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 949.634655ms ago: executing program 3 (id=7726): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) r1 = accept4$tipc(r0, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x800) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001680)=0x0) sendmmsg(r0, &(0x7f0000001d40)=[{{&(0x7f0000000140)=@in={0x2, 0x4e23, @private=0xa010102}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="0d6e4c6a7be420826d559f0f984d5d0dd2597a59c9f2fe8829097903a0da7bd6ea8d0a1b0a8e23e978287d542c79184a6c021c97439243d9b4", 0x39}, {&(0x7f0000001200)="149b7e1dfafafcdd9bf38594fb3388d57527c7a5008b1d0d39ed66932158c28c41b5a83c4f41d96fd957e7816551804251eb42eca575878eb6f8dbd6efb065de79a7d0d57942199b178b888c9a3fdaca91045e0afbc65494f52f9c880669e0a3ec1e11745c99e1696b2f27c3c12156cd609fffd4348c3a2c40d7b9b2c2167c8dcbff64ccb5dac378028e470089727f206a3418cc1b3f0674207d973f1153620b136a447abd3f73850c799c77ae67611f7fe6ca26bd3d64787e057af218", 0xbd}], 0x3, &(0x7f0000001300)=[{0x20, 0x107, 0x5, "dadaee2dde5144c746"}, {0x10, 0x109, 0x5}, {0xd8, 0x0, 0x3, "d2740de69425fbab380f73a13fa4cf1f2eeb00e95c307a5c63171d70af8f53b22b4fd19def6caf2e87fa2c0c1acc5603248ff8041650b5791e788bc3603419493928b0e861e526c64a0f9a629fbc1ac1ec1020289931412f4a990ae6a97e8e09069495747993afecb7747942670ffa855a3312f678dd42584a3ecd1fa7bc15c96f5a198cc9f8ef30295ce39f540c31737e52426dd2ed1bfdf2e2f1298fb3298e2a773842a60aab256a19a9a100a376d69368429e2a20835856f91e57d8e679a863ac03"}], 0x108}}, {{&(0x7f0000001440)=@x25, 0x80, &(0x7f00000015c0)=[{&(0x7f00000014c0)="75921a89789a8b3c32c68ebf643181c054bec2f259fafc61fb1621077ffbe55aa2d1274b671d8a3677fa320e199b43699add584ee9bcfc9c6444d4df10b92215dcf9bb47f9851c5255a9d50849e58df809dd24852c2b3d921d", 0x59}, {&(0x7f0000001540)="238ba38ada9a1d87c12f004ea10b9fdf7fd35f8653dac4508f0bdc2499bd0a182e11d9216d0773c392f2a3e7ea0e2f3f4eb074dd75a6a8cb071baf4c83aa6aad9ec683fff3eb91259ed827b85348a285748914c1840af48138ce067b0dd976e020b3f5e64dbda0e67d9406f35d1a47f2b59d9847915b734dee2b9a5553526d7d", 0x80}], 0x2, &(0x7f0000001600)=[{0x70, 0x115, 0x200, "8b49935172d51db8f02f80ce26b6bbc333218a23b5e3e140fcf7a132fd5a1fdf8d72e7c5ebced12bfcf2e3c9b300f3e8e48cc4d08094884bfd1e99d1b514bd2d9d944bfa4a2757acebc369abd237016db12f84cf5c35b51c5fc30a"}], 0x70}}, {{&(0x7f00000016c0)=@nfc_llcp={0x27, r2, 0xffffffffffffffff, 0x6, 0x98, 0x2, "da62a939da2890397e31c39ba5896751681cd695058d99ea55e27fc9e4e931d9e7d17986c8e395463fb2efef19ad94d594ccf177dfc6df0d81ca0e751253a5", 0x2}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001740)="e117882f847a3ce5573186f8ef6ce314290096f6c99766f6eb192364578c183c55625248836e16c5cc96839c06871bdd5cfa855e34ab2ea7c4ce69b1d0048bfa616c5b78ec0225f8ab690f0501004032dfcbac519a15846b2bec8b483c70113cd21d42507e3f60b6b6cefde6cbd6b65483aa23b3c2356140db613a284647364b9ec0fdeb142e6293cc55905866d0865cb6d5dd19c86224dc530b874493dec47e99faab", 0xa3}, {&(0x7f0000001800)="5943317f59c37568a8892015e1b97482fa0c2ccea63d6782f8ae4cb3103251f7ece0b0d55b9f531a742c3582e2b63a251972fa496178fb0f0594a6dda579d36ceeccdc71b89d902440e8f8f6d11901bf0a8494ae0d5f310c6e9850ac712dd810f78a699f08614f701007f7bbdcd9be8f57617e143c9f260045058130735a89bc3a4ee0fa4962b20701f6b2fc0b1e509f1d63497600303bcc0a1bd0478cabfd0cd2e6fa0d70ee2659194d7f6b61ddb0ba09a10685dff025b4f627809c6b93cf2e1c77c845347dfeda0959", 0xca}, {&(0x7f0000001900)="8f3eaad9b509093b7b1bffb322d0dc4a396df0667fbdd5bdc571da98a921bc79ed1b95fc884a8718c379f1f33c3f9716da116a95223772eb15b77ba3af4c6b25a71694930c4425683d4f3a38291ea960ded80e53af21e9fb44d2b27c43d5a460fbf6bba3be18b1430cced7e9d061eb9f4279445fad4e71e1996320336d254116d546da6ba796e182efc559f09707bf12", 0x90}, {&(0x7f00000019c0)="f0c209ca96947285b7508137974b8f8249d2b2fad88693120bb6915e0d44f595255cee18ff9182a5ca2aefb30a5b2c0343033176418815a2f61aa447d19fea4117fd29298482fb49421d6e765e6da238d5664f7cdd0da0a7fdfa64089be558eda060d38c7dcf5c09c91f281793352a35240791ecaa8b0a16175ebb1f7614fd5570a54b8da5420236dd0f1c553b7ee49b972b4d27868dc9fdd4f9157c3465f0408da8f25a8d19c3ba24d207", 0xab}], 0x4}}, {{&(0x7f0000001ac0)=@pptp={0x18, 0x2, {0x1, @multicast2}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)="8ebba4e6764a4adb410b3314058ebcd4415c2314394f2f115b11428b08fd1b04d2907529584f6f14a80aa9dc5434a0a63f0467a59e21b2b8d6b57577289ecd67d164c69f9f1d9d27efa4f7586ee311ade97986dc11b81d90b008fd166b3303049169e9437c62faa80e992ca0073f4039741448690e081fa65091fba0873a7107952cdec81acf1f75ea14d1ad558bef117561d35ff4c6acab3789b58f69e292c9dfa3377d9ac23e0657dd2c7db0aff4b640e15975af4e1e75102ba3d0a10f4b509b711df164830501db4f5d920c", 0xcd}], 0x1, &(0x7f0000001c80)=[{0xa8, 0x204, 0x8, "38be15ade7e34a5365775ae520f9e2942dd24ab3cebae2a46f737fb8df0c0d9f074340b9028f2184a35d1efa4fc02b545317bd2632c8285f981f7aca137ab90c05ce20831c24b11ed77dc0ab0a26e09af72c6b839bcf917438bc1916d23ac05825a4eb6cf01bd8eb388d787b5b33ac61c28f2df431909801ba0ec8519530c1d9068bf4dab093ae08a8648c60a4e63b7bac"}], 0xa8}}], 0x4, 0x800) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001e40)={r0, 0x5, 0x4, 0x2}) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e80)={0x0, @loopback, @private}, &(0x7f0000001ec0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001f00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x4e21, 0x0, 0x4e24, 0xff, 0xa, 0x20, 0x40, 0x3c, r4, 0xee00}, {0x2, 0x1, 0xe000, 0x7, 0xfffffffffffffff9, 0x4d, 0x0, 0x7ff}, {0x5, 0x80000001, 0x89ad, 0x5}, 0x2, 0x0, 0x0, 0x1, 0x1}, {{@in=@loopback, 0x4d6, 0x32}, 0x2, @in=@empty, 0x3507, 0x4, 0x3, 0x5, 0x8, 0xc, 0x10001}}, 0xe8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000002000)=0x9, 0x4) getsockopt$nfc_llcp(r5, 0x118, 0x1, &(0x7f0000002040)=""/14, 0xe) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002100)={'syztnl0\x00', &(0x7f0000002080)={'ip6gre0\x00', r4, 0x29, 0x8, 0x7, 0x9, 0x37, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x7, 0x700, 0x9, 0x81}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f0000002140)={'ip6_vti0\x00', r6, 0x4, 0xf, 0x6, 0x3, 0x45, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7800, 0x8, 0xe66}}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002340)={&(0x7f0000002280)={0xb0, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) (async) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000023c0)={@remote, 0x23, r4}) (async) write$nci(r3, &(0x7f0000002400)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x9, 0x1}, 0x4) (async, rerun: 32) connect$rose(r3, &(0x7f0000002440)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async, rerun: 32) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000002480)=0x1, 0x4) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002500), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x78, r9, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xc9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x62}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x401}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x64, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x35, 0x19, "2554c5156cf0fa9962b8b56677cf27b7661304c879f17b119deb0eacd39798b12a59e13536da6692013f6adedf6f0ae5a5"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x384ffc98dab75487) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002f00)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002840)={0x654, r11, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x638, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x77}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x16, 0xf, 0xf, 0xc, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa8b, 0x0, 0x9, 0x7, 0x2fc5, 0x5, 0xaf8, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x2}, {0x5, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x3}, {0x4, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x8}, {0x5, 0x4}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x9}, {0x4}, {0x6, 0x8}, {0x5, 0x2}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x867, 0x81, 0x1ff, 0x6, 0x7, 0x6]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x12, 0x6c, 0x78, 0x4, 0x6c]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x3, 0xa}, {0x4, 0x3}, {0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x4}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0x5}, {0x3, 0x1}, {0x7, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x7}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x2}, {0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x5}, {0x4, 0x4}, {0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x7}, {0x4, 0x2}, {0x7, 0x3}, {0x7, 0x9}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x4}, {0x0, 0x2}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x5}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x7}, {0x5, 0x7}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x0, 0x2, 0x27, 0xa, 0x7, 0x81]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x6}, {0x6, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0xa}, {0x2, 0x2}, {0x4, 0x4}, {0x7, 0x7}, {0x1, 0x1e}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x3}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x5}, {0x0, 0x8}, {0x6}, {0x3, 0x1}, {0x7, 0x2}, {0x4, 0x3}, {}, {0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0x9}, {0x6, 0x2}, {0x4, 0x5}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x6}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x1, 0x4}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x2, 0x8000, 0x3, 0x2, 0x4, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x24, 0x9, 0x6, 0x16, 0x60, 0x16, 0x16, 0x35, 0x9853089617d3fe30, 0x9, 0x12, 0x4, 0x1, 0x5, 0x16, 0x3, 0x1, 0x48, 0x18, 0x3, 0x6c, 0x18, 0x60, 0x36, 0x2, 0xb, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}]}, {0x394, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xc, 0x400, 0x3, 0x8, 0x4d, 0x3]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x3}, {0x6, 0x1}, {0x6, 0x8}, {0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1c84, 0x3ff, 0x8000, 0x180, 0xfffc, 0x0, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xd, 0xeafb, 0x8, 0x8, 0xeb66, 0x4, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x6c, 0x30, 0x36, 0x12, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x4, 0x60, 0x60, 0x24, 0xc, 0x1b, 0x2, 0x12, 0x24, 0x6c]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xc4f, 0xa, 0x3, 0x7, 0x6, 0x8, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x3}, {0x3, 0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x7}, {0x5}, {0x4, 0x7}, {0x3, 0x6}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x3}, {0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x1}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x3, 0x5}, {0x2, 0xa}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x6, 0x7}, {0x4, 0x7}, {0x3, 0x2}, {0x5, 0x6}, {0x3, 0x9}, {0x7, 0x8}, {0x1}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xa}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0xf01, 0x6, 0x8, 0x9, 0x5, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x6e, 0x24, 0x60, 0x48, 0x24, 0x9, 0x6, 0x16, 0x1b68bbc6d74500aa, 0x4, 0x6, 0x1b, 0x16, 0x2, 0x36, 0x5, 0x1b, 0x16, 0x16, 0x60, 0xb, 0xc, 0x1, 0x3, 0xc, 0x6c, 0x6]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x18, 0xc, 0x16, 0x48, 0x30, 0xc, 0x3, 0x6, 0x2, 0x12, 0x5, 0xb, 0xc, 0x9, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x9, 0x60, 0x5, 0x24, 0xb, 0x36, 0x6, 0x5, 0xc, 0x14, 0x60, 0x24, 0x24, 0xc, 0x16, 0xb, 0x6, 0x6c, 0x3, 0x4, 0x2, 0x3, 0x6c, 0x5, 0x6c, 0x16, 0x16, 0x6, 0x1b, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x6, 0x3}, {0x3}, {0x2, 0x5}, {0x4, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0x4}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x5, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x7, 0x9}, {0x3, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x1b, 0x18, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x6}, {0x1}, {0x5, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x4, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x9}, {0x3, 0x6}, {0x4}, {0x2, 0x6}, {0x6, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0x8}, {0x7, 0x1b}, {0x7, 0x2}, {0x1, 0x9}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x1b, 0x59, 0xc, 0x48, 0x12, 0x9, 0x6c, 0x9, 0x60, 0x12, 0x48, 0x12, 0x56, 0x4, 0x5, 0x48, 0x1, 0x1b, 0x6c, 0x4, 0x5, 0x60, 0x5, 0x3f]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3, 0x8, 0x0, 0x5, 0x9, 0x4, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x9, 0xfff, 0x7, 0x7, 0x200, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd, 0x1e1, 0x20, 0x0, 0x1, 0x7, 0x1]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x4}, {0x4, 0x6}, {0x7, 0x2}, {0x5, 0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0xa}, {0x5}, {0x2, 0xa}, {0x1}, {0x2, 0x5}, {0x3, 0x5}, {0x1}, {0x6, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x3}, {0x2, 0xa}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x2}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x4}, {0x3}, {0x4, 0x4}, {0x2, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x2}, {0x3, 0x8}, {0x4}, {0x2, 0x5}, {0x1, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x9, 0x8, 0x47e, 0xf, 0x6, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x16, 0x18, 0x1b, 0x48, 0x30, 0x18, 0x5, 0x4, 0x3, 0x60, 0x48, 0x1b, 0x6c, 0x48, 0x18, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0xff, 0x100, 0x0, 0x3, 0x7, 0x5]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x2}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x5}, {0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x6, 0x8}, {0x7, 0xa}, {0x4, 0x2}, {0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x7, 0x4}, {0x6, 0xa}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x1}, {0x7, 0x2}, {0x5, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x3, 0x6, 0x6, 0x2, 0x7f, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x5}, {0x6, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x6}, {0x6, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x4}, {}, {0x3, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x6}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x6, 0x1}, {0x4, 0x3}, {0x4, 0x7}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x3ff, 0x401, 0x0, 0x2, 0x5, 0x7, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}]}]}, 0x654}, 0x1, 0x0, 0x0, 0x100}, 0x4011) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x34, r13, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xffffff80, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 949.170644ms ago: executing program 0 (id=7727): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) socket(0x34, 0x2, 0xb2) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipv6_deladdr={0x20, 0x15, 0x200, 0x70bd29, 0x25dfdbff, {0xa, 0x10, 0x1, 0xc8, r2}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x10, 0x4853, 0x400000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) (async) ioctl(r3, 0x8b22, &(0x7f0000000040)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292e154c7beef915d564c90c2004b0f25d41ecb7588de", 0x21) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 923.532912ms ago: executing program 1 (id=7728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000001e000100000000000000000007"], 0x28}}, 0x0) setsockopt(r0, 0x6, 0x1, &(0x7f0000000040)="88df7d057fc7c98a1175796323c06f97599c165cba", 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x40, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000001540)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000440)=""/4096, 0x5af}], 0x3) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="68ebacf4715e7bacb2b47e28e421922305a09e0bcc4456292a3a17c93fb4a670c3b2ff818f7f15ec561ba3397ba0ea71357f4e1744bdb78d18c1bb94e91f0d0312b0ff0aaed691257726f0c5e72e99369f160836101e3e98c9917b038a8f351b19ba05fff34b5b324b9685f43360119a63ac86a847f2afc77b43605e298d52f6c66a0011c22734065a2470d6eb326fb0a9"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0xc000802) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="720ac4cb0000000071105f000000040095000000000000009dc292e4fd27a613d611b682674bd2850b359fba22e350673930a2061b6cbe0b616f39777c488b1f55b2f390ba1c796b661cd5ad734d339e7c305ec01ce2f51de01ce1239dcfe440e7f10600c33d3391d00fe275f51472dbc5bfb4e6f8a263dd0441f7de2c8496ac4ca498dc94524eb0bfb01aa2b00253bfff310a73b7bc39a7389f4d8512ac9c4c77073de364bf6070b082c9195f3b9d7b51"], &(0x7f0000000380)='GPL\x00'}, 0x90) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffb, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0x1c16}, 0x20) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_int(r8, 0x0, 0x12, 0x0, 0x0) r12 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r12, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) 840.892648ms ago: executing program 3 (id=7729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0xa7, 0x7, 0xfb, 0x66c4}, {0x8000, 0x6, 0x7, 0x3}, {0x7, 0x8, 0x3, 0x6}, {0x35, 0x7, 0x1, 0x5}, {0x1, 0x9, 0x81, 0x7}, {0xe8f0, 0x5, 0x5, 0x80000000}, {0x1000, 0x4, 0x3, 0x401}]}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 832.69719ms ago: executing program 4 (id=7730): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "c075595db0c3caee", "e772998fefc50dca44bde278e69d97efd72c35b87a3d31a781332bcd0d1c4e55", "7c5d1a32", "60d37deea55f0b7c"}, 0x38) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2, 0x80805, 0x0) (async) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x8, 0x1, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) (async) r8 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) 682.4061ms ago: executing program 0 (id=7731): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0xfb4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}}, 0xffffffff, 0xf6, 0x7, 0x4, 0x84, 0x8, 0xa}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r0, 0x5}, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0xa, 0x9, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 682.048331ms ago: executing program 2 (id=7732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x800, 0xb6d) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000204006a000000000000008f0500000000080aa6bbdca53b3ff52997"], &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet(0x2, 0x800, 0xb6d) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000040)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000204006a000000000000008f0500000000080aa6bbdca53b3ff52997"], &(0x7f0000000040)=""/249, 0x26, 0xf9, 0x6}, 0x20) (async) 660.054525ms ago: executing program 0 (id=7733): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 646.492779ms ago: executing program 3 (id=7734): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r2, 0x40049409, r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x44c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x1000, 0x1, 0x101, 0x2, 0x2, 0xfff, 0x8, 0x2, 0x7, 0xffffff98, 0x0, 0xd5b, 0x6, 0x4, 0x95, 0xfffffff7, 0x2, 0xf, 0x9, 0xe, 0x4584a3a4, 0x5d1, 0xfe0, 0x1000, 0x7, 0x1, 0x10001, 0xffff, 0x1, 0x2, 0x4, 0x4, 0x0, 0x7, 0x345, 0x3c, 0x8, 0x6, 0x3, 0x35d, 0x5, 0xf6fc, 0x7, 0x40, 0x5, 0x7fff, 0x1, 0xfffffff9, 0x9, 0xe148, 0xe, 0x9, 0x0, 0x1ff, 0x5, 0x5, 0x6, 0xfffffff8, 0x1f, 0xffffffff, 0xd, 0xa, 0x3, 0x40, 0x8af, 0x1, 0x1, 0xd5, 0x6, 0xff, 0x2, 0x268, 0x3, 0x1, 0x8, 0x4, 0x8001, 0xffffffff, 0x983, 0x3, 0x414, 0x6, 0xfffffffe, 0x9, 0x9, 0x2, 0x9, 0x0, 0x3, 0x2a, 0x8, 0x3, 0x2, 0x2, 0x6, 0x4, 0x4, 0x32, 0x7f, 0x2, 0x2, 0xfffffffc, 0x78, 0x9, 0x8000, 0x8, 0x7f, 0x3ff, 0xff, 0x4, 0x800, 0x75, 0x1fd, 0x6, 0x4, 0x3, 0x6, 0xf, 0x2, 0xdf1e, 0xfea9, 0x3c0, 0x7, 0xffffff81, 0x5, 0x1, 0x80000000, 0x7, 0x4, 0x4, 0x1, 0xfffffffa, 0xf, 0x2, 0x800, 0x5, 0xde, 0x80000001, 0x7, 0x2, 0x2, 0xe, 0xa, 0x1, 0x4, 0x26af9bc7, 0x5, 0x58ec, 0x5, 0x652, 0x6, 0x2, 0x5, 0xa, 0x4, 0xf1ec, 0x43b0, 0xeda, 0xfff, 0x2, 0x4, 0xa, 0x2, 0x4, 0x5, 0x0, 0x7fff, 0x2, 0x9, 0x5, 0x7, 0x0, 0x94d, 0xfffffffa, 0xe4e, 0x0, 0x1, 0x5, 0x0, 0x1, 0xf, 0x8, 0x4, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x800, 0x100000, 0x9, 0x8001, 0xffffffff, 0x8000, 0x4, 0xa4e9, 0xfffffffa, 0xc4, 0x4, 0xb, 0x7, 0xffffff9e, 0xffff8000, 0x852, 0x3, 0x9, 0x5, 0x7, 0x7fd, 0x9, 0xf, 0xffffffc5, 0x80000000, 0xc207, 0x6, 0x5, 0x6851, 0xa0, 0x10, 0x5f, 0x0, 0xffffff2d, 0xe, 0x2, 0x5000, 0x7f, 0x4, 0xffff, 0x7, 0x2, 0x8, 0x254653cb, 0x9, 0x5, 0x10000, 0x5, 0x7, 0x4, 0x9, 0x6476b2ca, 0x2, 0xce32d1c, 0x9, 0x97, 0x7, 0xe, 0x7, 0x3, 0x5, 0x0, 0x1, 0x3, 0x903]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x44c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=r4, @ANYBLOB="decf72cf8eae461cffa0d3d3265cd7526727f590665cafc4f877d0551f7b7e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) ioctl$FICLONE(r2, 0x40049409, r2) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x44c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x1000, 0x1, 0x101, 0x2, 0x2, 0xfff, 0x8, 0x2, 0x7, 0xffffff98, 0x0, 0xd5b, 0x6, 0x4, 0x95, 0xfffffff7, 0x2, 0xf, 0x9, 0xe, 0x4584a3a4, 0x5d1, 0xfe0, 0x1000, 0x7, 0x1, 0x10001, 0xffff, 0x1, 0x2, 0x4, 0x4, 0x0, 0x7, 0x345, 0x3c, 0x8, 0x6, 0x3, 0x35d, 0x5, 0xf6fc, 0x7, 0x40, 0x5, 0x7fff, 0x1, 0xfffffff9, 0x9, 0xe148, 0xe, 0x9, 0x0, 0x1ff, 0x5, 0x5, 0x6, 0xfffffff8, 0x1f, 0xffffffff, 0xd, 0xa, 0x3, 0x40, 0x8af, 0x1, 0x1, 0xd5, 0x6, 0xff, 0x2, 0x268, 0x3, 0x1, 0x8, 0x4, 0x8001, 0xffffffff, 0x983, 0x3, 0x414, 0x6, 0xfffffffe, 0x9, 0x9, 0x2, 0x9, 0x0, 0x3, 0x2a, 0x8, 0x3, 0x2, 0x2, 0x6, 0x4, 0x4, 0x32, 0x7f, 0x2, 0x2, 0xfffffffc, 0x78, 0x9, 0x8000, 0x8, 0x7f, 0x3ff, 0xff, 0x4, 0x800, 0x75, 0x1fd, 0x6, 0x4, 0x3, 0x6, 0xf, 0x2, 0xdf1e, 0xfea9, 0x3c0, 0x7, 0xffffff81, 0x5, 0x1, 0x80000000, 0x7, 0x4, 0x4, 0x1, 0xfffffffa, 0xf, 0x2, 0x800, 0x5, 0xde, 0x80000001, 0x7, 0x2, 0x2, 0xe, 0xa, 0x1, 0x4, 0x26af9bc7, 0x5, 0x58ec, 0x5, 0x652, 0x6, 0x2, 0x5, 0xa, 0x4, 0xf1ec, 0x43b0, 0xeda, 0xfff, 0x2, 0x4, 0xa, 0x2, 0x4, 0x5, 0x0, 0x7fff, 0x2, 0x9, 0x5, 0x7, 0x0, 0x94d, 0xfffffffa, 0xe4e, 0x0, 0x1, 0x5, 0x0, 0x1, 0xf, 0x8, 0x4, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x800, 0x100000, 0x9, 0x8001, 0xffffffff, 0x8000, 0x4, 0xa4e9, 0xfffffffa, 0xc4, 0x4, 0xb, 0x7, 0xffffff9e, 0xffff8000, 0x852, 0x3, 0x9, 0x5, 0x7, 0x7fd, 0x9, 0xf, 0xffffffc5, 0x80000000, 0xc207, 0x6, 0x5, 0x6851, 0xa0, 0x10, 0x5f, 0x0, 0xffffff2d, 0xe, 0x2, 0x5000, 0x7f, 0x4, 0xffff, 0x7, 0x2, 0x8, 0x254653cb, 0x9, 0x5, 0x10000, 0x5, 0x7, 0x4, 0x9, 0x6476b2ca, 0x2, 0xce32d1c, 0x9, 0x97, 0x7, 0xe, 0x7, 0x3, 0x5, 0x0, 0x1, 0x3, 0x903]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x44c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=r4, @ANYBLOB="decf72cf8eae461cffa0d3d3265cd7526727f590665cafc4f877d0551f7b7e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) 526.135668ms ago: executing program 2 (id=7735): r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r3 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x800) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0x138c40, 0x2, 0x3af, 0x7, 0x9], 0x3, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180), 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff5f}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x3ff}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x804) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) 518.506278ms ago: executing program 4 (id=7736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 321.820506ms ago: executing program 3 (id=7737): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{0x0, 0x20}], 0x1}, 0x20040000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000dc0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000280)=0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0xfffffffffffffce9, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x1, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x4, 0xff, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@cipso={0x86, 0x55, 0x3, [{0x6, 0x11, "e4cbe9064175f0363027ada257be81"}, {0x7, 0xd, "fff5b9b9c95f67fd13d604"}, {0x6, 0x10, "812d9adff470534267a69818bf26"}, {0x0, 0xf, "cb581d43250e58e700bb546554"}, {0x6, 0x12, "8b73b23b3082a5f19de00782d688e098"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x701, 0x10, 0x1, 0x8, {{0x11, 0x4, 0x2, 0x3d, 0x44, 0x67, 0x0, 0x30, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x1, [{@multicast1, 0x8}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0xb, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000d80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x524, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9a4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe218}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x158, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x827}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0xe, 0x5, 0xfffffffb}, {0xc1, 0x0, 0x1, 0x8}, {0x102f, 0x4, 0x80, 0x200}, {0xdd75, 0x86, 0x2, 0xe}, {0x3, 0x2, 0x74, 0x7fff}]}}}]}}, {{0x8, 0x1, r14}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x10}, 0x41) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r16}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000400)={@loopback, 0x23, r16}) 321.12993ms ago: executing program 1 (id=7738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 320.315766ms ago: executing program 2 (id=7739): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000001c0)={r1, r2/1000+60000}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000240)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0x200, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0xa, 0x10}, {}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x1}}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x8844}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 295.219784ms ago: executing program 0 (id=7740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="c3ebdf02ccf049bcc145ba28e73853bc2beca0e03d5bd6c012e42d1428b917e255bc9e75cc701a5deacd14f062187f82e85e20e19b9ebfb6aef45d2ad0a7bc634373c630c98214899de376e8a8c2008b754001691c7b09262a9486cdd1654e717ddf0adc63e0a44f09a257aeb4827cea5c5eb652a7c34ace0d86abb34410bebcdd914d56bf83fd55d154e89e48870351e008a7462652501c07f9eabf4051243ef58362b6870778dbd820f1f674c5314c3dc2c9e671d1acc8a39f526c02fa98be", 0xc0}], 0x1}, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="c3ebdf02ccf049bcc145ba28e73853bc2beca0e03d5bd6c012e42d1428b917e255bc9e75cc701a5deacd14f062187f82e85e20e19b9ebfb6aef45d2ad0a7bc634373c630c98214899de376e8a8c2008b754001691c7b09262a9486cdd1654e717ddf0adc63e0a44f09a257aeb4827cea5c5eb652a7c34ace0d86abb34410bebcdd914d56bf83fd55d154e89e48870351e008a7462652501c07f9eabf4051243ef58362b6870778dbd820f1f674c5314c3dc2c9e671d1acc8a39f526c02fa98be", 0xc0}], 0x1}, 0x84) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 206.178055ms ago: executing program 4 (id=7741): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/4084, 0xff2}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000200)=""/150, 0xd9}], 0x3}, 0x2000) 198.109114ms ago: executing program 3 (id=7742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xc18, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3249, 0x6263, 0xe35f, 0xc, 0x0, 0x1000, 0x4]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x7}, {0x2, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x8, 0x5, 0x3, 0x5, 0x9, 0x1]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3c7, 0x4c6, 0x4000, 0x2, 0x3ff, 0xff, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x1b, 0x64, 0x12, 0x1b, 0x9, 0x4, 0x9, 0x9, 0x36, 0x30, 0x1, 0x24, 0x17, 0x16, 0x16, 0x18, 0x36, 0x30, 0x3, 0x5, 0x60, 0x60, 0xc, 0xb, 0x16, 0x6, 0x4, 0x3, 0x4, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x3}, {}, {0x6, 0x5}, {0x1, 0xa}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x1}, {0x7, 0x8}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0xa}, {0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0x8}, {0x4, 0xa}, {0x6, 0x5}, {}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x8001, 0xc, 0x800, 0xfff7, 0x3f8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x18, 0x6, 0x24, 0x6, 0x9, 0x18, 0x12, 0xc, 0x1, 0x6, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x6c, 0x1, 0x2, 0x6c, 0x1b, 0x16, 0x4, 0x1b, 0x45, 0x1, 0x9, 0x2, 0x1, 0x6c, 0x2, 0xb, 0x18, 0x6c, 0x9, 0x6c, 0x30, 0x6c, 0x30, 0x4, 0x1, 0x24, 0x48, 0x30]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x1, 0x1b, 0x48, 0x48, 0x24, 0x5, 0x6c, 0x48, 0x1f]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc5ae, 0x3, 0x4, 0xf08, 0x9, 0x8000, 0x5, 0xfff]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xe, 0xd74, 0x9, 0x9, 0x5, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x3ae, 0x800, 0x4, 0xb, 0x5, 0xd8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x30, 0x3223, 0x4, 0x6b71, 0x9, 0xe400, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x72]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x71, 0x7, 0xe8, 0x7, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc2, 0xffff, 0x27, 0xa, 0x9, 0x7fff, 0x401, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf2e5, 0x0, 0x5, 0xfd15, 0x9, 0x2, 0x7, 0xc000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0xfff7, 0x5, 0x8, 0x200, 0x2, 0x3]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x4, 0x7}, {0x7}, {0x2, 0x9}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x3}, {0x7, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x0, 0x2}, {0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xabc, 0x9, 0x93e, 0x9, 0x2, 0x60a4, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf5, 0x7, 0x1, 0x9, 0x4, 0x9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x9ab3, 0x1, 0xe, 0x6, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x5, 0x60, 0x60, 0x60, 0xb, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x800, 0x8, 0x1000, 0x3, 0x8000, 0x2c, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x4, 0x48, 0x1, 0x6c, 0x1b, 0x2, 0x1b, 0xc, 0x30, 0x18, 0x48, 0x48]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x5}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x3}, {0x0, 0x6}, {0x4}, {0x1, 0xa}, {0x5, 0x4}, {0x5, 0x6}, {0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x7, 0x8}, {0x3, 0x4}, {0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x5, 0x8}, {0x5, 0xa}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x4, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {0x6, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x4, 0x9}, {}, {0x3, 0x5}, {0x5, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x7}, {0x1}, {0x2, 0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x11, 0x4, 0x4, 0x6b, 0xb, 0x68, 0x60, 0x0, 0x5, 0x5, 0x6, 0x16, 0x6, 0x48, 0x1b, 0x1b, 0x1b, 0x1b, 0x14, 0x30, 0x48, 0x48, 0x30]}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x7c, 0x12, 0x36, 0x2, 0x30, 0x9, 0x6, 0x30, 0x60, 0x28, 0x0, 0x16, 0x3, 0x4, 0x9, 0x12, 0x48, 0xc, 0xc, 0x36, 0x1b, 0x18, 0x34, 0x3, 0x9, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x2}, {0x5, 0xa}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x9}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x6}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0x3}, {0x4, 0x3}, {0x0, 0x5}, {0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x5, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x6}, {0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x3}, {0x6}, {0x3, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x6}, {0x3, 0x3}, {0x7, 0x9}, {0x7, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x8}, {0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x8}, {0x7, 0x2}, {0x2, 0x9}, {0x3, 0xa}, {0x4, 0x1}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x24, 0x4, 0xb, 0x1, 0x6, 0x60, 0xc, 0xb, 0x60, 0x30, 0x16, 0x1b, 0x4, 0x3f]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x48, 0x1, 0x5, 0x24, 0x3, 0x0, 0x3, 0x6, 0x48, 0x4, 0x12, 0x60, 0x2, 0x2, 0x12, 0x9]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x7}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x1, 0x3, 0x401, 0x9ba, 0x0, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x2}, {0x0, 0x1}, {0x6}, {0x7, 0x7}, {0x6, 0xa}, {0x1}, {0x3, 0x5}, {0x2, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x2, 0x2}, {0x4, 0x9}, {0x4}, {0x2, 0x9}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x3}, {0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x5, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x4}, {0x4}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x3}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0x3}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0xb}, {0x2, 0x4}, {0x1, 0xa}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x9}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x6, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x12, 0x1b, 0x0, 0x60, 0x36, 0x2, 0x12, 0x2, 0x18, 0x2d, 0x30, 0x2, 0x16, 0x5, 0x1, 0x5, 0x24, 0xc, 0x24, 0x48, 0x6, 0x5, 0x5, 0x4, 0x30, 0x3, 0x60, 0x60, 0x4, 0x16, 0x16]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e0, 0xa6e7, 0xa2, 0xafd, 0xfffa, 0x200, 0x10, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x3, 0x19, 0x1, 0xb, 0x0, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x230, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3313, 0x9, 0x4f44, 0x2, 0x3ff, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x66, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x3}, {0x7, 0x9}, {0x7}, {0x5, 0x2}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x6}, {0x4, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x2}, {0x6, 0x2}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x1}, {0x6}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0x8}, {0x6, 0x5}, {}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x9}, {0x6, 0x7}, {0x5, 0x13}, {0x7}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x5, 0x0, 0x1000, 0x8000, 0x1, 0x2, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0xeb347222dd904579, 0x30, 0x6c]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x9, 0x800, 0x1000, 0x10, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x6}, {0x3, 0x7}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0x4}, {0x1}, {0x2, 0x8}, {0x7, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x2, 0x9}, {0x5, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x6}, {0x4, 0x6}, {0x4, 0x2}, {0x3, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x3, 0x3}, {0x6, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x6, 0x9}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x7}, {0x7, 0x6}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0xa}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x8}, {0x4, 0x7}, {0x6, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x6}, {}, {0x7, 0x4}, {0x4, 0x2}, {0x5}, {0x4, 0xa}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0x5}, {0x5, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x5, 0x9}, {0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x2, 0x4}, {0x0, 0x9}, {}, {0x1, 0x6}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3ff, 0x2, 0x9, 0x2, 0x9, 0xcef]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0xc, 0x4, 0x36, 0xb, 0x4, 0x0, 0xc, 0x48, 0x30, 0x4, 0x60, 0x6, 0x30, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x1, 0x6}, {0x4}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0x9}, {0x5, 0x8}, {0x3, 0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x6}, {0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x1}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x2, 0x6, 0x4, 0x6, 0x958, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x1}, {0x0, 0x6}, {0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x8}, {0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x2}, {0x4, 0x2}, {0x5, 0xb}, {0x6, 0x7}, {0x6, 0x1}, {}, {0x6, 0x2}, {0x5, 0x3}, {0x2, 0x2}, {0x6, 0x9}, {0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x1}, {0x7, 0x2}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x2}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x6, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x1, 0x5}, {0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x3, 0x1}, {0x1, 0xa}, {0x5, 0x3}, {0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x18, 0x12, 0x3, 0x16, 0x48, 0x6c, 0x30, 0x0, 0x2, 0x2, 0x6c, 0x24, 0xb, 0x2, 0x1, 0x6, 0x60, 0x3, 0x30, 0x5, 0x12, 0x7f, 0xb, 0x48, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x12, 0x24, 0x3, 0xb, 0x4, 0x12, 0x2, 0xa, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x70, 0x5, 0xff, 0x8, 0x0, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1, 0x400, 0x4, 0x5, 0x6, 0x5, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x80, 0x2, 0x1, 0x6, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x2}, {0x2}, {0x6, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x4, 0x3}, {0x7, 0x2}, {0x4, 0x6}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x6}, {0x6, 0x5}, {0x4}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x2}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x4, 0x2}, {0x2, 0xa}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0x18}, {0x1, 0x9}, {0x2, 0xa}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x2}, {0x6, 0x9}, {0x7, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x8}, {0x1, 0x9}, {0x4}, {0x2, 0x6}, {0x6, 0x8}, {0x3, 0x4}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x3, 0x1}, {0x5, 0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x6}, {0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x6}, {}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x5}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x6}, {0x0, 0x6}, {0x2, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x80bb, 0x6, 0x6, 0x6, 0x4, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1}, {0x0, 0x1}, {0x6}, {0x5, 0x2}, {0x0, 0xa}, {0x2, 0x9}, {0x6, 0x9}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x6}, {0x5, 0xa}, {0x6}, {0x6, 0x4}, {0x3, 0xa}, {0x7, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x6, 0x12, 0x9, 0x4, 0x2, 0x3, 0x60, 0x6c, 0x36, 0x9, 0x18, 0x9, 0x6, 0x18, 0xb, 0x24, 0xc, 0x4, 0x9]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x3, 0x0, 0x46, 0x200, 0xd, 0x6, 0xd]}}]}]}, @NL80211_ATTR_TX_RATES={0x314, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x205, 0x5, 0x3c, 0x1ff, 0x3, 0xa22e, 0x0, 0xe69]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x2}, {0x6}, {0x7}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x8}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x6}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0x7}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x6, 0x6}, {0x3, 0x4}, {0x5}, {0x4, 0x2}, {0x1}, {0x7, 0x9}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0x5}, {0x5, 0x7}, {0x3, 0x4}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x0, 0x1, 0x2, 0x2, 0x24, 0x5, 0x1, 0x3, 0x48, 0x18, 0xb, 0x18, 0x6b]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb66, 0xc, 0xe, 0x8, 0x3, 0x5, 0x7312, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x5, 0x3, 0x8, 0x3, 0x94f]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0x0, 0x1, 0x7f, 0x5, 0x1, 0xfff9]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x6, 0x60, 0x16, 0x4a, 0x48, 0x18, 0x60, 0x9]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x9}, {0x3, 0x1}, {0x4, 0x9}, {0x3, 0x5}, {0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7ff, 0x0, 0x2, 0x49, 0x7, 0x1ff, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2ba3, 0x7, 0x2, 0xfff, 0x7, 0x6, 0x101, 0xb]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x5}, {0x0, 0x8}, {0x6, 0xa}, {}, {0x4, 0x3}, {0x4, 0x9}, {0x3, 0x7}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0xa}, {0x2}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x4, 0x8}, {0x7, 0xa}, {0x6, 0x7}, {0x2, 0x7}, {0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x7}, {0x1, 0xa}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x1b, 0x40, 0x12, 0x2, 0x9, 0x5, 0x48, 0x18, 0x5, 0x48, 0x1, 0x60, 0x9, 0x30, 0x2, 0x60, 0x4, 0xb, 0x1, 0x16, 0x3, 0x2, 0x24, 0x12, 0x1, 0x5]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x24, 0xb, 0x30, 0x32dc208f2f305ec7, 0xc, 0x36, 0x48, 0x12, 0x0, 0xb, 0x18, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x3, 0x10, 0x8, 0x5, 0x4, 0x4]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x2, 0x7f, 0xf, 0xba1d, 0x7fff, 0x9, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xd22, 0x5, 0x1000, 0x2, 0x58, 0x82, 0x1004]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x1b, 0xb, 0x36, 0x48, 0x16, 0x4, 0xb, 0x12, 0x36, 0x3, 0x5, 0x5, 0x2, 0x5, 0x1b, 0x1d, 0x6, 0x24, 0x12, 0x12, 0x1b, 0x24, 0x4, 0xb]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x7}, {0x5, 0xa}, {0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x2, 0x8}, {0x3, 0x7}, {0x3, 0x3}, {0x2, 0x8}, {0x6, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x7, 0x9}, {0x1}, {0x3}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x1}, {0x7}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x5}, {}, {0x5, 0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0x6}, {0x6}, {0x3, 0xa}, {0x5}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x5}, {0x5, 0x4}, {0x7, 0xa}, {0x3, 0x2}, {0x3, 0x5}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x7, 0x5}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {0x7, 0x4}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x5, 0x5}, {0x3, 0x4}, {0x5, 0x1}, {0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x3, 0x9}, {0x2, 0x3}, {0x7, 0x5}, {0x3, 0x3}, {0x4, 0x4}, {0x6}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {0x3, 0x5}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x5}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x69a, 0x40, 0xe0, 0xfff7, 0x2, 0x1000, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x2b28, 0x6, 0x14f, 0x3, 0xff, 0x9]}}]}]}]}, 0xc18}, 0x1, 0x0, 0x0, 0x10}, 0x10) 197.883385ms ago: executing program 1 (id=7743): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x224, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x100, 0x12, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}, @typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}, @typed={0xe5, 0x12a, 0x0, 0x0, @binary="8ff5bb9427ab70a33426e7c093e686a42f8e8f0d6b0f40cfe60be041b3f1f8cddfe753828af570bd1154423c4208ffbabc2d99757b21b0753a1f09ce362ffbad546905dc09b5bbfb11bf58a4f9dd181af172a96d2f7f1d37f8ae06f9b786ff845b6a3a13a6bcec6a0f6ad18b6334c2a6dac7b5786627490b9c6a04c0c82432ae0d64142b1e1c22814bf47a6a8cb7b0da337e72471875bcbbcd2436abf94b2bdfd70b25c2b7e0d5cf3df1c8adc803ca04bf42a598dc11a2fb686a4d53ab9a15a6958781d01b9c79dfe5de1d6838a3fc320ae6435a4cd7514deff3b1c1202790516f"}]}]}]}]}, @generic="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"]}, 0x224}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 148.461178ms ago: executing program 4 (id=7744): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r4) 112.221523ms ago: executing program 3 (id=7745): r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @bcast}, &(0x7f00000000c0)=0x1c, 0x800) bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040014}, 0x810) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="b19cccf18443d6a9545b509be6a8543c2fc6ea1f91f531d9ec214627c11430d1", 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0x3}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@getlink={0x28, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4043, 0x8000}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x40000) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/240, 0xf0}], 0x1}, 0x3}], 0x1, 0x2120, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000240)={r9, 0x3}, &(0x7f0000000280)=0x8) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000000)={0x30000011}) close(r12) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000480)={r9, 0x4}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r9, 0x0, 0x30}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000061107c0000000000070000000000000095000700000000003702007f620b10d3497ee45e599e4ada57c12262cbe6d337bb65db4a084461dcbe68725ef1ed481a910e44dce5bc30fc6363a11c980bedf56e2ff1aec97c4658541c96af"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f00000002c0)=""/211, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10}, 0x94) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x4, 0x4) 62.678751ms ago: executing program 1 (id=7746): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@volatile={0x4, 0x0, 0x0, 0x9, 0x4}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @enum64={0x1, 0x3, 0x0, 0x13, 0x0, 0x8, [{0x9, 0x4, 0xfffffffb}, {0x1, 0xb82, 0xb}, {0xb, 0xfff, 0x7ff}]}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000540)=""/111, 0x7c, 0x6f, 0x0, 0x10}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, r0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010000", 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000400)={{0x0, 0x7fffffffffffffff, 0x5, 0x3, 0x4, 0x3, 0x6, 0x7fffffff, 0x6, 0x3, 0x9, 0x9, 0x80, 0x6, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000e80)={r7, r8, "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", "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"}) 0s ago: executing program 2 (id=7747): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x20) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x94, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x94}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) sendmsg$key(r3, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, 0x0, 0x0, 0x20040000, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080", @ANYBLOB], 0x158}}, 0x4000) syz_emit_ethernet(0xfe4f, &(0x7f0000000000)={@broadcast, @random="0000460000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0x9c, 0x0, @wg=@response={0x2, 0x4, 0x3, "f713203d034924cefb3aa4124204a80e3111a8cba78223135637b4140dd4830a", "f215dfded9b7597b3bd7262fd608be74", {"c67e3156519335a6439de2415e73c917", "ae097b1b51983edc73255f55b35fc41d"}}}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) kernel console output (not intermixed with test programs): (slave ip6gretap1): failed to get link speed/duplex [ 696.749950][T27363] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 696.757699][T27363] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 701.280379][T27360] net_ratelimit: 89 callbacks suppressed [ 701.280399][T27360] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 701.294522][T27360] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 701.410489][T27360] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 701.418238][T27360] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 701.530438][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 701.538192][T27361] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 701.650542][T27354] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 701.658310][T27354] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 701.770505][T27360] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 701.778266][T27360] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.301025][T27363] net_ratelimit: 86 callbacks suppressed [ 706.301047][T27363] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 706.315177][T27363] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.429946][T27360] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 706.437714][T27360] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.452371][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.549955][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 706.557738][T27361] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.671360][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 706.679119][T27361] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 706.789910][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 711.310465][T27363] net_ratelimit: 87 callbacks suppressed [ 711.310486][T27363] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 711.324091][T27363] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.368685][ T53] Bluetooth: hci4: link tx timeout [ 711.374798][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 711.384163][ T53] Bluetooth: hci4: link tx timeout [ 711.389279][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 711.402249][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.439909][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 711.447660][T27361] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.560124][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 711.567885][T27361] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.679889][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 711.687653][T27361] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 711.800264][T27354] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.400036][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 715.482249][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 716.390166][T27360] net_ratelimit: 89 callbacks suppressed [ 716.390187][T27360] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 716.403918][T27360] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 716.531618][T27354] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 716.539378][T27354] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 716.600160][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.650398][T27361] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 716.658553][T27361] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 716.770398][T27349] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 716.778135][T27349] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 716.890419][T27349] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 721.409870][T27349] net_ratelimit: 87 callbacks suppressed [ 721.409889][T27349] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 721.423333][T27349] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 721.539913][T27349] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 721.547670][T27349] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 721.651658][T28251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.660485][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 721.668211][T27356] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 721.780380][T27349] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 721.788116][T27349] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 721.800031][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.452467][T29087] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 724.561498][T29091] __nla_validate_parse: 10 callbacks suppressed [ 724.561515][T29091] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6274'. [ 724.997085][T29125] : renamed from veth1_vlan (while UP) [ 725.065585][T29130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 725.144358][T29128] bridge2: entered promiscuous mode [ 725.190004][T29128] bridge2: entered allmulticast mode [ 725.458910][T29142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6284'. [ 725.464064][T29143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6285'. [ 725.528307][T29142] bond0: (slave wlan1): Releasing backup interface [ 725.795882][T29172] netlink: 'syz.2.6294': attribute type 1 has an invalid length. [ 725.806998][T29172] netlink: 'syz.2.6294': attribute type 2 has an invalid length. [ 725.826960][T29172] netlink: 'syz.2.6294': attribute type 1 has an invalid length. [ 725.898321][T29179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6297'. [ 726.024616][T29167] syzkaller0: entered promiscuous mode [ 726.030342][T29167] syzkaller0: entered allmulticast mode [ 726.048315][T29184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6298'. [ 726.058267][T29184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6298'. [ 726.271448][T29206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6306'. [ 726.297268][T29208] xt_hashlimit: size too large, truncated to 1048576 [ 726.324870][T29213] x_tables: duplicate underflow at hook 1 [ 726.431404][T27360] net_ratelimit: 110 callbacks suppressed [ 726.431423][T27360] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.470089][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.491641][T27354] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.519251][T27349] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.554478][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.556140][T29224] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6309'. [ 726.583608][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.611180][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.622323][ T1210] IPVS: starting estimator thread 0... [ 726.643567][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.679859][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.710057][T27356] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 726.713079][T29228] IPVS: using max 30 ests per chain, 72000 per kthread [ 727.576713][T14019] lec:lec_start_xmit: lec0:No lecd attached [ 728.088751][T29239] netlink: 'syz.0.6312': attribute type 16 has an invalid length. [ 728.096760][T29239] netlink: 'syz.0.6312': attribute type 3 has an invalid length. [ 728.137522][T29239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6312'. [ 728.174104][T29245] netlink: 'syz.4.6316': attribute type 1 has an invalid length. [ 728.416855][T29262] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6320'. [ 728.449095][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 728.479975][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 728.490150][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 728.509998][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 728.523385][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 728.587144][T29262] bond1: (slave ip_vti0): Device is not bonding slave [ 728.628662][T29262] bond1: option active_slave: invalid value (ip_vti0) [ 728.641736][T29262] bond1 (unregistering): Released all slaves [ 728.926621][T29289] Bluetooth: MGMT ver 1.23 [ 728.947560][ T10] IPVS: starting estimator thread 0... [ 728.999154][T29289] netem: incorrect ge model size [ 729.004795][T29289] netem: change failed [ 729.049866][T29293] IPVS: using max 32 ests per chain, 76800 per kthread [ 729.201954][T29301] xt_hashlimit: size too large, truncated to 1048576 [ 729.217083][T27361] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.254107][T27361] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.282371][T29303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.292319][T29303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.301017][T29303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.319150][T29303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.406060][T29306] tipc: Enabling of bearer rejected, failed to enable media [ 729.449580][T27361] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.510229][T27361] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.774025][T27361] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.799330][T27361] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.849539][T29337] __nla_validate_parse: 3 callbacks suppressed [ 729.849555][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6337'. [ 729.861624][T29336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6338'. [ 729.917322][T29337] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 729.976455][T27361] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.991718][T27361] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.027215][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6339'. [ 730.121118][T29358] netlink: 'syz.0.6343': attribute type 1 has an invalid length. [ 730.286370][T29366] bond1: (slave ip6gretap1): making interface the new active one [ 730.314627][T29366] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.336228][T29366] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.344422][T29366] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 730.447315][T29264] chnl_net:caif_netlink_parms(): no params data found [ 730.560943][T29382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6350'. [ 730.581752][T29386] netlink: 408 bytes leftover after parsing attributes in process `syz.0.6351'. [ 730.586151][ T1210] hid-generic 0005:0006:5508.0001: item fetching failed at offset 3/5 [ 730.601520][ T53] Bluetooth: hci3: command tx timeout [ 730.622136][ T1210] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22 [ 730.724294][T29397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6353'. [ 730.834039][T27361] .: left promiscuous mode [ 730.849530][T27361] bridge0: port 2(.) entered disabled state [ 730.929095][T27361] bridge_slave_0: left allmulticast mode [ 730.941967][T27361] bridge_slave_0: left promiscuous mode [ 730.948300][T27361] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.246150][T27361] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 731.432347][T27361] bond3 (unregistering): (slave gretap1): Releasing active interface [ 731.485608][T27361] dvmrp0 (unregistering): left allmulticast mode [ 732.200977][ T9] net_ratelimit: 173 callbacks suppressed [ 732.201002][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.350068][T27361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.361676][T27361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.372565][T27361] bond0 (unregistering): Released all slaves [ 732.468273][T27361] bond1 (unregistering): Released all slaves [ 732.480621][T27361] bond2 (unregistering): Released all slaves [ 732.492488][T27361] bond3 (unregistering): Released all slaves [ 732.594455][T27361] bond4 (unregistering): (slave veth3): Releasing active interface [ 732.604094][T27361] bond4 (unregistering): Released all slaves [ 732.684023][T28966] Bluetooth: hci3: command tx timeout [ 732.706052][T27361] bond5 (unregistering): Released all slaves [ 732.800091][T27361] bond6 (unregistering): Released all slaves [ 732.812254][T27361] bond7 (unregistering): Released all slaves [ 732.839849][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 732.847864][ C1] lec:lec_tx_timeout: lec0 [ 732.887138][T29264] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.924712][T29264] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.932368][T29264] bridge_slave_0: entered allmulticast mode [ 732.941844][T29264] bridge_slave_0: entered promiscuous mode [ 732.951294][T29264] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.958683][T29264] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.967388][T29264] bridge_slave_1: entered allmulticast mode [ 732.984645][T29264] bridge_slave_1: entered promiscuous mode [ 733.110408][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6360'. [ 733.124469][T29264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.144698][T29443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6361'. [ 733.153378][T29264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.168133][T27361] : left promiscuous mode [ 733.240132][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.270490][T29443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6361'. [ 733.284691][T29452] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 733.300110][T29452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.433089][T29443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6361'. [ 733.586739][T29264] team0: Port device team_slave_0 added [ 733.625370][T29264] team0: Port device team_slave_1 added [ 733.638501][T27361] : left promiscuous mode [ 733.919344][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.965089][T28966] Bluetooth: hci0: command 0x0406 tx timeout [ 734.072096][T27361] tipc: Left network mode [ 734.141936][T29264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.154404][T29264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.199927][T29264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.214223][T29264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.221455][T29264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.279978][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.297561][T29264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.497336][T29264] hsr_slave_0: entered promiscuous mode [ 734.504094][T29264] hsr_slave_1: entered promiscuous mode [ 734.511035][T29264] debugfs: 'hsr0' already exists in 'hsr' [ 734.516775][T29264] Cannot create hsr debugfs directory [ 734.761835][ T53] Bluetooth: hci3: command tx timeout [ 734.937731][T29529] sctp: [Deprecated]: syz.3.6375 (pid 29529) Use of int in max_burst socket option deprecated. [ 734.937731][T29529] Use struct sctp_assoc_value instead [ 735.222886][T27361] hsr_slave_0: left promiscuous mode [ 735.228697][T27361] hsr_slave_1: left promiscuous mode [ 735.238131][T27361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.246973][T27361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.278416][T27361] veth1_macvtap: left promiscuous mode [ 735.284515][T27361] veth1_vlan: left promiscuous mode [ 735.291183][T27361] veth0_vlan: left promiscuous mode [ 735.320764][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.376406][T27361] pimreg3 (unregistering): left allmulticast mode [ 735.716405][T27361] team0 (unregistering): Port device team_slave_1 removed [ 735.919149][T29537] openvswitch: netlink: IPv6 tunnel dst address is zero [ 736.004150][T27354] smc: removing ib device syz0 [ 736.131781][ T9] syz0: Port: 1 Link DOWN [ 736.362244][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.841434][ T53] Bluetooth: hci3: command tx timeout [ 736.908031][T29478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.919947][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.954222][T29264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 737.086260][T29264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 737.129968][T29550] __nla_validate_parse: 4 callbacks suppressed [ 737.129987][T29550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6380'. [ 737.150215][T27356] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 737.188005][T29264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 737.200417][T27356] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 737.276700][T29264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 737.401878][T29560] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 737.438594][ T9] net_ratelimit: 1 callbacks suppressed [ 737.438611][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.716253][T29586] ip6t_REJECT: ECHOREPLY is not supported [ 737.915628][T29592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6388'. [ 738.102902][T29264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.168271][T29607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6391'. [ 738.225447][T29264] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.286242][T27360] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.293451][T27360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.379483][T27360] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.386739][T27360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.435486][T27361] IPVS: stop unused estimator thread 0... [ 738.454729][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.899139][T29264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.955198][T29643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6399'. [ 738.964911][T29639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6398'. [ 739.083309][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 739.164200][T29655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6404'. [ 739.175017][T29655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6404'. [ 739.187096][T29655] IPVS: set_ctl: invalid protocol: 6491 10.1.1.1:20002 [ 739.212085][T29264] veth0_vlan: entered promiscuous mode [ 739.269492][T29264] veth1_vlan: entered promiscuous mode [ 739.290524][T29657] syzkaller1: entered promiscuous mode [ 739.297797][T29657] syzkaller1: entered allmulticast mode [ 739.306480][T29663] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6406'. [ 739.338488][T29657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6403'. [ 739.350000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.364024][T29660] netlink: 'syz.4.6405': attribute type 4 has an invalid length. [ 739.378322][T27352] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.394722][T27352] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.412709][T27352] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.422203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.441478][T29670] netlink: 'syz.4.6405': attribute type 4 has an invalid length. [ 739.480764][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.565636][T27352] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.595886][T29264] veth0_macvtap: entered promiscuous mode [ 739.650482][T29264] veth1_macvtap: entered promiscuous mode [ 739.692856][T29686] netlink: 'syz.0.6411': attribute type 5 has an invalid length. [ 739.714200][T29264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.760930][T29264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.772645][T29690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6413'. [ 739.797963][T27364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.850691][T27364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.884761][T27364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.905365][T27364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.961505][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.185260][T27360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.220373][T27360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.277568][T27360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.302763][T27360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.314946][T29719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.324433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.351759][T29719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.363064][T29717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.387203][T29722] syzkaller1: entered promiscuous mode [ 740.392887][T29722] syzkaller1: entered allmulticast mode [ 740.756848][T29745] netlink: 'syz.4.6425': attribute type 29 has an invalid length. [ 740.816274][T29751] netlink: 'syz.4.6425': attribute type 29 has an invalid length. [ 740.854594][T29756] netlink: 'syz.2.6428': attribute type 4 has an invalid length. [ 740.863729][T29745] netlink: 'syz.4.6425': attribute type 29 has an invalid length. [ 740.889876][T29742] syzkaller1: entered promiscuous mode [ 740.912727][T29742] syzkaller1: entered allmulticast mode [ 740.928300][T29745] netlink: 'syz.4.6425': attribute type 29 has an invalid length. [ 740.950431][T29745] netlink: 'syz.4.6425': attribute type 29 has an invalid length. [ 741.037738][T29745] netlink: 'syz.4.6425': attribute type 29 has an invalid length. [ 741.496810][T28263] IPVS: starting estimator thread 0... [ 741.589845][T29803] IPVS: using max 39 ests per chain, 93600 per kthread [ 742.270003][T29866] __nla_validate_parse: 4 callbacks suppressed [ 742.270021][T29866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6457'. [ 742.318088][T29861] xt_hashlimit: size too large, truncated to 1048576 [ 742.601256][ T1210] net_ratelimit: 10 callbacks suppressed [ 742.601274][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.714817][T29895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6463'. [ 742.732507][T29895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6463'. [ 742.920164][T29902] IPv6: NLM_F_CREATE should be specified when creating new route [ 742.937999][T29902] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6465'. [ 742.951180][T29902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6465'. [ 743.033191][T29904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6467'. [ 743.133609][T29894] IPVS: ip_vs_add_dest(): server weight less than zero [ 743.176913][T29913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6470'. [ 743.393111][T29927] sctp: [Deprecated]: syz.3.6473 (pid 29927) Use of int in maxseg socket option. [ 743.393111][T29927] Use struct sctp_assoc_value instead [ 743.641174][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.654014][T29942] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6478'. [ 743.695170][T29948] syzkaller0: entered promiscuous mode [ 743.700913][T29948] syzkaller0: entered allmulticast mode [ 743.761956][T29952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6481'. [ 744.068405][T29970] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 744.105729][T29975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6486'. [ 744.626255][T30000] validate_nla: 7 callbacks suppressed [ 744.626273][T30000] netlink: 'syz.4.6495': attribute type 9 has an invalid length. [ 744.642187][T30000] netlink: 'syz.4.6495': attribute type 11 has an invalid length. [ 744.654813][T30000] netlink: 'syz.4.6495': attribute type 12 has an invalid length. [ 744.682975][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.710182][T30002] bond1: entered promiscuous mode [ 744.725940][T30002] bond1: entered allmulticast mode [ 744.740612][T30007] sctp: [Deprecated]: syz.4.6495 (pid 30007) Use of int in max_burst socket option deprecated. [ 744.740612][T30007] Use struct sctp_assoc_value instead [ 744.761223][T30002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.815068][T30016] openvswitch: netlink: IP tunnel dst address not specified [ 744.820794][T30007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.831285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.861834][T30021] netlink: 'syz.3.6500': attribute type 2 has an invalid length. [ 744.871001][T30021] netlink: 'syz.3.6500': attribute type 3 has an invalid length. [ 745.053287][T30028] veth5: entered promiscuous mode [ 745.125256][T30038] syzkaller0: entered promiscuous mode [ 745.160318][T30038] syzkaller0: entered allmulticast mode [ 745.166166][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.415910][T30055] syzkaller0: entered promiscuous mode [ 745.422811][T30055] syzkaller0: entered allmulticast mode [ 745.732776][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.601588][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.764607][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.250457][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.256473][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.263594][T27364] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.275357][T27364] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.300353][T27364] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.313667][T30098] vlan1: entered allmulticast mode [ 747.332579][T30098] veth0_vlan: entered allmulticast mode [ 747.368209][T27364] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.434945][T30097] Bluetooth: MGMT ver 1.23 [ 747.490256][T30114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.587117][T30114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.687094][T30114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.726574][T30136] __nla_validate_parse: 14 callbacks suppressed [ 747.726591][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6532'. [ 747.800356][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.871775][T30147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6533'. [ 747.905350][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6536'. [ 747.915694][T30147] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 747.917621][T30151] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6536'. [ 748.108972][ T10] IPVS: starting estimator thread 0... [ 748.118604][T30162] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 748.200672][T30164] IPVS: using max 27 ests per chain, 64800 per kthread [ 748.201498][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.276447][T30171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'. [ 748.291329][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6541'. [ 748.320849][T30172] openvswitch: netlink: Flow key attr not present in new flow. [ 748.334040][T30175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6544'. [ 748.341607][T30172] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6541'. [ 748.351101][T30177] team_slave_0: entered promiscuous mode [ 748.358065][T30177] team_slave_1: entered promiscuous mode [ 748.375117][T30177] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 748.382928][T30177] team0: Device macvlan2 is already an upper device of the team interface [ 748.393450][T30177] team_slave_0: left promiscuous mode [ 748.398888][T30177] team_slave_1: left promiscuous mode [ 748.427921][T30175] geneve2: entered promiscuous mode [ 748.500246][T30171] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 748.523309][T30180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.677173][T30180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.824688][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.841874][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.865350][T30196] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 748.981092][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.028690][T30209] netlink: 'syz.3.6551': attribute type 1 has an invalid length. [ 749.031670][T30212] netlink: 'syz.2.6554': attribute type 2 has an invalid length. [ 749.052810][T30212] : entered promiscuous mode [ 749.188553][T27360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.301588][T30231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.324178][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 749.359291][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6561'. [ 749.474562][T30240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6562'. [ 749.618141][T30255] bond3: entered promiscuous mode [ 749.634587][T30255] bond3: entered allmulticast mode [ 749.644853][T30255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 749.665737][T30259] macvlan2: entered promiscuous mode [ 749.673321][T30259] macvlan2: entered allmulticast mode [ 749.681375][T30259] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 749.714937][T30261] xt_policy: too many policy elements [ 749.885639][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.431897][T30279] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.439657][T30279] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.715585][T30279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.750833][T30279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.932347][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.144900][T27354] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.160604][T27354] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.193303][T27354] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.214777][T27354] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.263315][T27354] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.290737][T27354] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.326668][T30327] veth5: entered promiscuous mode [ 751.335933][T27354] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.349774][T27354] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.392152][T30335] netlink: 'syz.1.6587': attribute type 39 has an invalid length. [ 751.439297][T30337] netlink: 'syz.0.6588': attribute type 12 has an invalid length. [ 751.457761][T30337] netlink: 'syz.0.6588': attribute type 29 has an invalid length. [ 751.672850][T30355] ip6gre1: entered allmulticast mode [ 752.839847][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.847908][ C1] lec:lec_tx_timeout: lec0 [ 753.001710][ T10] net_ratelimit: 8 callbacks suppressed [ 753.001729][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.030875][T30289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.044882][T30332] netlink: 'syz.1.6587': attribute type 11 has an invalid length. [ 753.054787][T30332] __nla_validate_parse: 10 callbacks suppressed [ 753.054802][T30332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6587'. [ 753.525586][T30448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.547404][T30448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.562275][T30448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.587269][T30448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.607847][T30448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.621825][T30448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.634222][T30448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.655991][T30458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.686713][T30458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.833175][T30467] rdma_op ffff888054c1c9f0 conn xmit_rdma 0000000000000000 [ 753.860144][T27360] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.891313][T27360] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.933886][T27364] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.953456][T27364] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.026470][T30481] netlink: 'syz.0.6618': attribute type 11 has an invalid length. [ 754.104656][T30480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6617'. [ 754.323477][T30492] syzkaller0: entered allmulticast mode [ 754.455270][T30500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6623'. [ 754.482975][T30500] netlink: 'syz.3.6623': attribute type 7 has an invalid length. [ 754.491522][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6623'. [ 754.558263][T30506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6627'. [ 755.088101][T30552] netlink: 'syz.1.6640': attribute type 21 has an invalid length. [ 755.111093][T30552] netlink: 'syz.1.6640': attribute type 22 has an invalid length. [ 755.125014][T30552] netlink: 'syz.1.6640': attribute type 23 has an invalid length. [ 755.146353][T30552] netlink: 'syz.1.6640': attribute type 25 has an invalid length. [ 755.174888][T30552] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6640'. [ 755.242571][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6643'. [ 755.317334][T30572] tipc: Started in network mode [ 755.331622][T30572] tipc: Node identity 9ef2797bdc5, cluster identity 4711 [ 755.348724][T30572] tipc: Enabled bearer , priority 0 [ 755.395496][T30571] tipc: Enabling of bearer rejected, already enabled [ 755.410806][T30573] syzkaller0: entered promiscuous mode [ 755.416274][T30573] syzkaller0: entered allmulticast mode [ 755.437894][T30572] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 755.641735][T30583] netlink: 'syz.0.6648': attribute type 1 has an invalid length. [ 755.672153][T30573] tipc: Resetting bearer [ 755.714857][T30573] tipc: Disabling bearer [ 755.766505][T30583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 755.795129][T30588] bond3: (slave geneve2): making interface the new active one [ 755.806475][T30588] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 755.845936][T30590] netlink: 'syz.4.6651': attribute type 1 has an invalid length. [ 755.860318][T27360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.885869][T27360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.019989][T27349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.145164][T27349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.271101][T30614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 756.311243][T30618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6660'. [ 756.314938][T30616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6659'. [ 756.581802][T30639] 8021q: VLANs not supported on ip6tnl0 [ 756.688741][ T30] audit: type=1804 audit(1770474609.645:4): pid=30648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6669" name="/newroot/114/cgroup.controllers" dev="tmpfs" ino=603 res=1 errno=0 [ 756.696040][T30644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6668'. [ 756.759512][ T30] audit: type=1800 audit(1770474609.675:5): pid=30648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6669" name="cgroup.controllers" dev="tmpfs" ino=603 res=0 errno=0 [ 756.915969][T30662] vlan2: entered allmulticast mode [ 756.927848][T30662] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 757.009382][T30671] validate_nla: 1 callbacks suppressed [ 757.009401][T30671] netlink: 'syz.3.6676': attribute type 58 has an invalid length. [ 757.308323][T30695] lo: entered allmulticast mode [ 757.321448][T30695] lo: left allmulticast mode [ 757.438767][T30708] netlink: 'syz.2.6689': attribute type 33 has an invalid length. [ 757.551157][T30710] xt_hashlimit: size too large, truncated to 1048576 [ 758.205016][T30750] __nla_validate_parse: 5 callbacks suppressed [ 758.205034][T30750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6703'. [ 758.240744][ T10] net_ratelimit: 246 callbacks suppressed [ 758.240762][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.252999][T30750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6703'. [ 758.255993][T30751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6703'. [ 758.324144][T30751] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 758.344429][T30751] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 758.355322][T30751] gretap1: entered promiscuous mode [ 758.362388][T30751] gretap1: entered allmulticast mode [ 758.440195][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.467718][T30767] netlink: 'syz.1.6708': attribute type 1 has an invalid length. [ 758.575295][T30776] Cannot find add_set index 2 as target [ 758.696114][T30774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6710'. [ 758.737538][T30774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6710'. [ 758.785389][T30789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 758.822326][T30777] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6710'. [ 758.841110][T30789] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 758.865326][T30789] gretap1: entered promiscuous mode [ 758.897897][T30789] gretap1: entered allmulticast mode [ 758.929894][T30799] netlink: zone id is out of range [ 758.935727][T30799] netlink: zone id is out of range [ 758.941662][T30799] netlink: zone id is out of range [ 758.948103][T30799] netlink: zone id is out of range [ 758.982469][T30799] netlink: zone id is out of range [ 758.988048][T30799] netlink: zone id is out of range [ 759.002007][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.040395][T30799] netlink: zone id is out of range [ 759.077170][T30809] netlink: 'syz.2.6723': attribute type 12 has an invalid length. [ 759.169223][T30823] sctp: [Deprecated]: syz.3.6724 (pid 30823) Use of int in max_burst socket option. [ 759.169223][T30823] Use struct sctp_assoc_value instead [ 759.273260][T30813] nbd0: detected capacity change from 0 to 63 [ 759.286800][T28966] block nbd0: Receive control failed (result -104) [ 759.563006][T30859] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6731'. [ 759.609472][T30859] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6731'. [ 759.702040][T30861] block nbd1: server does not support multiple connections per device. [ 759.711276][T30861] block nbd1: shutting down sockets [ 760.057279][T30898] tls_set_device_offload_rx: netdev not found [ 760.113455][T30903] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20003 [ 760.123297][T30899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6737'. [ 760.180877][T30908] tipc: Started in network mode [ 760.192068][T30908] tipc: Node identity ac14140f, cluster identity 4711 [ 760.209427][T30908] tipc: New replicast peer: 255.255.255.255 [ 760.231671][T30908] tipc: Enabled bearer , priority 10 [ 760.258439][T30908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6743'. [ 760.344195][T30916] syzkaller0: entered promiscuous mode [ 760.357227][T30916] syzkaller0: entered allmulticast mode [ 760.381819][T30916] tipc: Started in network mode [ 760.392433][T30916] tipc: Node identity 86227d360ffb, cluster identity 4711 [ 760.420853][T30916] tipc: Enabled bearer , priority 0 [ 760.459308][T30915] tipc: Resetting bearer [ 760.528292][T30915] tipc: Disabling bearer [ 761.360078][T28263] tipc: Node number set to 2886997007 [ 761.645814][T31009] netlink: 'syz.1.6772': attribute type 1 has an invalid length. [ 761.654703][T31009] netlink: 'syz.1.6772': attribute type 2 has an invalid length. [ 762.236524][T31059] team0: Device ip6gre1 is of different type [ 762.258092][T31056] netlink: 'syz.1.6781': attribute type 1 has an invalid length. [ 762.268025][T28966] block nbd1: Receive control failed (result -32) [ 762.365386][T31076] xt_hashlimit: size too large, truncated to 1048576 [ 763.482768][ T1210] net_ratelimit: 72 callbacks suppressed [ 763.482785][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.635344][T31150] netlink: 'syz.2.6799': attribute type 12 has an invalid length. [ 763.643723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.661306][T31150] netlink: 'syz.2.6799': attribute type 29 has an invalid length. [ 763.669133][T31150] __nla_validate_parse: 8 callbacks suppressed [ 763.669149][T31150] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6799'. [ 763.700029][T31150] netlink: 'syz.2.6799': attribute type 2 has an invalid length. [ 763.710957][T31150] netlink: 23 bytes leftover after parsing attributes in process `syz.2.6799'. [ 763.837646][T31157] x9: renamed from bridge_slave_0 (while UP) [ 763.926675][T31159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6803'. [ 764.125869][T31167] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6806'. [ 764.136821][T31168] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6806'. [ 764.200860][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.457139][T31178] tipc: Enabling of bearer rejected, failed to enable media [ 764.520535][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.528656][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.654871][T31183] syzkaller0: entered promiscuous mode [ 764.660942][T31183] syzkaller0: entered allmulticast mode [ 764.863153][T31183] mac80211_hwsim hwsim89 : renamed from wlan1 (while UP) [ 765.158014][T31191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.167414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.244105][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.442680][T31196] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.6816'. [ 765.561625][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.962465][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.854844][T31214] netlink: 'syz.2.6819': attribute type 29 has an invalid length. [ 766.872847][T31216] delete_channel: no stack [ 767.086958][T31231] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6826'. [ 767.214905][T31242] netlink: 'syz.1.6832': attribute type 4 has an invalid length. [ 767.538855][T31259] Cannot find del_set index 1 as target [ 767.715399][T31267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6838'. [ 767.744197][T31267] team1: entered promiscuous mode [ 767.749327][T31267] team1: entered allmulticast mode [ 768.650867][T31205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.679934][ T1210] net_ratelimit: 9 callbacks suppressed [ 768.679951][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.931088][T31293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6842'. [ 768.956636][T31293] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6842'. [ 769.006738][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.033561][T31293] gretap2: entered promiscuous mode [ 769.060079][T31293] gretap2: entered allmulticast mode [ 769.173368][T31298] netlink: 'syz.3.6847': attribute type 2 has an invalid length. [ 769.600143][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.681513][T31308] ip6gre1: entered promiscuous mode [ 769.696718][T31308] ip6gre1: entered allmulticast mode [ 769.708380][T31310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.716776][T31309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.724538][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.727238][T27349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.750598][T28261] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.759568][T27349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 769.786256][T31275] syz.4.6841 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 769.800059][T31275] CPU: 1 UID: 0 PID: 31275 Comm: syz.4.6841 Not tainted syzkaller #0 PREEMPT(full) [ 769.800085][T31275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 769.800097][T31275] Call Trace: [ 769.800106][T31275] [ 769.800114][T31275] dump_stack_lvl+0xe8/0x150 [ 769.800141][T31275] dump_header+0xd3/0x4c0 [ 769.800164][T31275] oom_kill_process+0x3ab/0x970 [ 769.800187][T31275] out_of_memory+0x106c/0x1410 [ 769.800204][T31275] ? percpu_ref_put+0x19/0x180 [ 769.800223][T31275] ? __pfx___mutex_lock+0x10/0x10 [ 769.800248][T31275] ? __pfx_out_of_memory+0x10/0x10 [ 769.800262][T31275] ? do_raw_spin_unlock+0xf5/0x210 [ 769.800289][T31275] try_charge_memcg+0xc53/0x1560 [ 769.800332][T31275] ? __pfx_try_charge_memcg+0x10/0x10 [ 769.800345][T31275] ? xa_load+0x60/0x210 [ 769.800366][T31275] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 769.800385][T31275] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 769.800405][T31275] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 769.800428][T31275] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 769.800454][T31275] __read_swap_cache_async+0x212/0x480 [ 769.800484][T31275] swap_cluster_readahead+0x358/0x680 [ 769.800518][T31275] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 769.800554][T31275] ? get_vma_policy+0x27b/0x3c0 [ 769.800577][T31275] swapin_readahead+0x196/0xc50 [ 769.800603][T31275] ? swap_table_get+0x1e/0x260 [ 769.800630][T31275] ? __pfx_swapin_readahead+0x10/0x10 [ 769.800654][T31275] ? swap_table_get+0x1e/0x260 [ 769.800674][T31275] ? swap_table_get+0x1e/0x260 [ 769.800691][T31275] ? swap_table_get+0x1e/0x260 [ 769.800713][T31275] ? swap_table_get+0x216/0x260 [ 769.800736][T31275] ? swap_cache_get_folio+0x513/0x520 [ 769.800765][T31275] do_swap_page+0x8ce/0x5e10 [ 769.800808][T31275] ? ___pte_offset_map+0x29/0x240 [ 769.800833][T31275] ? ___pte_offset_map+0x29/0x240 [ 769.800855][T31275] ? do_swap_page+0x18b/0x5e10 [ 769.800875][T31275] ? __pfx_do_swap_page+0x10/0x10 [ 769.800897][T31275] ? __lock_acquire+0x6b5/0x2cf0 [ 769.800920][T31275] ? __pfx_default_wake_function+0x10/0x10 [ 769.800946][T31275] ? ___pte_offset_map+0x1ae/0x240 [ 769.800972][T31275] ? pte_offset_map_rw_nolock+0xea/0x160 [ 769.800998][T31275] handle_mm_fault+0x12d2/0x32a0 [ 769.801036][T31275] ? handle_mm_fault+0xee/0x32a0 [ 769.801067][T31275] ? __pfx_handle_mm_fault+0x10/0x10 [ 769.801087][T31275] ? lock_vma_under_rcu+0x45a/0x500 [ 769.801132][T31275] do_user_addr_fault+0xa73/0x1360 [ 769.801164][T31275] ? rcu_is_watching+0x15/0xb0 [ 769.801183][T31275] ? trace_page_fault_user+0x84/0x1c0 [ 769.801203][T31275] exc_page_fault+0x6a/0xc0 [ 769.801223][T31275] asm_exc_page_fault+0x26/0x30 [ 769.801244][T31275] RIP: 0033:0x7fc6d0c6894c [ 769.801262][T31275] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 769.801278][T31275] RSP: 002b:00007ffcd280e680 EFLAGS: 00010206 [ 769.801299][T31275] RAX: 0000000000000000 RBX: 00007fc6d1015fa0 RCX: 0000555592c26808 [ 769.801311][T31275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 769.801320][T31275] RBP: 00007fc6d1017da0 R08: 0000000000000000 R09: 0000000000000000 [ 769.801336][T31275] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000bbe0c [ 769.801347][T31275] R13: 00007fc6d101618c R14: 00000000000bbb5c R15: 00007fc6d1016180 [ 769.801377][T31275] [ 769.804423][T31275] memory: usage 307200kB, limit 307200kB, failcnt 454 [ 770.258361][T31275] memory+swap: usage 307312kB, limit 9007199254740988kB, failcnt 0 [ 770.275154][T31317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6852'. [ 770.366456][T31275] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 770.374332][T31275] Memory cgroup stats for /syz4: [ 770.374636][T31275] cache 0 [ 770.382719][T31275] rss 0 [ 770.386304][T31275] rss_huge 0 [ 770.389519][T31275] shmem 0 [ 770.428663][T31275] mapped_file 0 [ 770.448689][T28261] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 770.488804][T31275] dirty 0 [ 770.514930][T31275] writeback 0 [ 770.536472][T31322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6852'. [ 770.549364][T31275] workingset_refault_anon 8 [ 770.576088][T31275] workingset_refault_file 0 [ 770.606922][T31275] swap 114688 [ 770.625298][T31275] swapcached 20480 [ 770.657437][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.678881][T31275] pgpgin 89545 [ 770.680194][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.682634][T28263] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 770.715449][T31275] pgpgout 89540 [ 770.718942][T31275] pgfault 192728 [ 770.736571][T31275] pgmajfault 6 [ 770.746684][T31275] inactive_anon 8192 [ 770.756795][T31275] active_anon 12288 [ 770.767918][T31330] syzkaller0: entered promiscuous mode [ 770.775593][T31334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.777135][T31275] inactive_file 0 [ 770.813590][T31275] active_file 0 [ 770.817093][T31275] unevictable 0 [ 770.820436][T31330] syzkaller0: entered allmulticast mode [ 770.842331][T31275] hierarchical_memory_limit 314572800 [ 770.860121][T31275] hierarchical_memsw_limit 9223372036854771712 [ 770.876628][T31275] total_cache 0 [ 770.917608][T31275] total_rss 0 [ 770.921790][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.940153][T31275] total_rss_huge 0 [ 770.950151][T31275] total_shmem 0 [ 770.953623][T31275] total_mapped_file 0 [ 770.991058][T31275] total_dirty 0 [ 770.994547][T31275] total_writeback 0 [ 771.047880][T31275] total_workingset_refault_anon 8 [ 771.082667][T31275] total_workingset_refault_file 0 [ 771.108351][T31275] total_swap 114688 [ 771.123927][T31275] total_swapcached 20480 [ 771.128189][T31275] total_pgpgin 89546 [ 771.146510][T31275] total_pgpgout 89541 [ 771.156612][T31275] total_pgfault 192736 [ 771.166735][T31275] total_pgmajfault 6 [ 771.180391][T31275] total_inactive_anon 8192 [ 771.199742][T31275] total_active_anon 12288 [ 771.214225][T31275] total_inactive_file 0 [ 771.218410][T31275] total_active_file 0 [ 771.281858][T31275] total_unevictable 0 [ 771.300808][T31275] anon_cost 0 [ 771.304124][T31275] file_cost 0 [ 771.307411][T31275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6841,pid=31275,uid=0 [ 771.381727][T31275] Memory cgroup out of memory: Killed process 31275 (syz.4.6841) total-vm:98560kB, anon-rss:1216kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 771.406500][T31347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.415340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.659246][T31356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6860'. [ 771.669165][T31356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6860'. [ 773.526593][T31372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6864'. [ 773.544930][T31371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6864'. [ 773.569351][T31376] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 773.583381][T31371] netlink: 'syz.1.6864': attribute type 4 has an invalid length. [ 773.609520][T31371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6864'. [ 773.630328][T31372] netlink: 'syz.1.6864': attribute type 4 has an invalid length. [ 773.643482][T31372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6864'. [ 773.724686][T28261] net_ratelimit: 9 callbacks suppressed [ 773.724705][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.802217][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.879996][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.891530][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.016619][T31402] netlink: 'syz.4.6873': attribute type 10 has an invalid length. [ 774.040607][T31402] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6873'. [ 774.146579][T31409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6875'. [ 774.281986][T31409] netlink: 'syz.0.6875': attribute type 1 has an invalid length. [ 774.312016][T31409] netlink: 'syz.0.6875': attribute type 1 has an invalid length. [ 774.355502][T31424] netlink: 'syz.1.6878': attribute type 1 has an invalid length. [ 774.415697][T31424] bond2: entered promiscuous mode [ 774.422550][T31424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.446325][T31435] can: request_module (can-proto-4) failed. [ 774.473041][T31424] bond2: (slave bridge1): making interface the new active one [ 774.484178][T31424] bridge1: entered promiscuous mode [ 774.493478][T31424] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 774.646738][T31452] xt_TPROXY: Can be used only with -p tcp or -p udp [ 774.709323][T31455] xt_l2tp: v2 sid > 0xffff: 1114112 [ 774.715046][T31456] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6889'. [ 774.727957][T31456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6889'. [ 774.799934][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.813861][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.824703][T31456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.850769][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.897252][T31466] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6889'. [ 774.907415][T31466] sctp: [Deprecated]: syz.3.6889 (pid 31466) Use of int in max_burst socket option deprecated. [ 774.907415][T31466] Use struct sctp_assoc_value instead [ 774.929459][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.938708][T31464] syzkaller1: entered promiscuous mode [ 774.944770][T31464] syzkaller1: entered allmulticast mode [ 774.956002][T31464] netlink: 'syz.2.6893': attribute type 4 has an invalid length. [ 775.107328][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6897'. [ 775.124427][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6897'. [ 775.135471][T31473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6897'. [ 775.145105][T31473] x_tables: unsorted underflow at hook 1 [ 775.161028][T31476] x_tables: unsorted underflow at hook 1 [ 775.172906][T31475] siw: device registration error -23 [ 775.401433][T31497] IPVS: length: 239 != 24 [ 775.458464][T31498] netlink: 'syz.1.6904': attribute type 10 has an invalid length. [ 775.496001][T31498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 775.510561][T31504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6906'. [ 775.664068][T31514] netlink: 'syz.1.6911': attribute type 29 has an invalid length. [ 775.683852][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6911'. [ 775.701856][T31516] netlink: 'syz.1.6911': attribute type 29 has an invalid length. [ 775.755677][T31520] netlink: 'syz.2.6910': attribute type 21 has an invalid length. [ 775.887180][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.897527][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.116376][T31551] netlink: 'syz.2.6920': attribute type 4 has an invalid length. [ 776.149227][T31552] netlink: 'syz.2.6920': attribute type 4 has an invalid length. [ 776.193158][T31551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.271542][T31551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.313330][T31565] x_tables: duplicate underflow at hook 4 [ 776.476778][T31569] bond1: entered promiscuous mode [ 776.486286][T31569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.583848][T31585] syzkaller1: entered promiscuous mode [ 776.589467][T31585] syzkaller1: entered allmulticast mode [ 776.635815][T31590] veth1_macvtap: left promiscuous mode [ 776.949572][T31613] sctp: [Deprecated]: syz.4.6938 (pid 31613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.949572][T31613] Use struct sctp_sack_info instead [ 777.100339][T31626] xt_l2tp: v2 doesn't support IP mode [ 777.371377][ T30] audit: type=1107 audit(1770474630.325:6): pid=31646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='c0Y>*|*Kİ&d AU>vBƸ[f~OdW">"Qf`҇(&`jfM̈́$ã4{&Sܠ,=yT ⊧i2yǯ4gM5ffIF 3 -7wAEbA+wq6PCz^8֏>7u1Mtnmk] YRys' [ 777.648788][T31668] gretap1: entered promiscuous mode [ 777.728041][T31676] IPv6: NLM_F_REPLACE set, but no existing node found! [ 777.759125][T31668] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 777.793135][T31668] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 778.013801][T31695] tipc: MTU too low for tipc bearer [ 778.782505][T31761] "syz.1.6985" (31761) uses obsolete ecb(arc4) skcipher [ 778.936455][T28261] net_ratelimit: 13 callbacks suppressed [ 778.936473][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.000480][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.066824][T31791] __nla_validate_parse: 16 callbacks suppressed [ 779.066843][T31791] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6995'. [ 779.084323][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.212124][T31799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6996'. [ 779.256325][T31806] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 779.259785][T31799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6996'. [ 779.363682][T31812] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7000'. [ 779.524151][T31831] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7006'. [ 779.552168][T31831] 8021q: VLANs not supported on gre0 [ 779.639672][T31837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7007'. [ 779.673450][T31840] validate_nla: 8 callbacks suppressed [ 779.673467][T31840] netlink: 'syz.0.7008': attribute type 1 has an invalid length. [ 779.733442][T31840] bond4: entered promiscuous mode [ 779.739587][T31840] bond4: entered allmulticast mode [ 779.745535][T31840] 8021q: adding VLAN 0 to HW filter on device bond4 [ 779.758339][T31845] macvlan2: entered promiscuous mode [ 779.791893][T31845] macvlan2: entered allmulticast mode [ 779.802659][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.842675][T31845] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 779.926919][T31847] gtp0: entered promiscuous mode [ 779.953336][T31847] gtp0: entered allmulticast mode [ 780.040137][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.071363][T31866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7013'. [ 780.120355][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.274643][T31878] netlink: 340 bytes leftover after parsing attributes in process `syz.4.7018'. [ 780.287749][T31878] Bluetooth: MGMT ver 1.23 [ 780.302808][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7017'. [ 780.312575][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7017'. [ 780.616140][T31912] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.623839][T31912] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.865960][T31931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 780.873269][T31931] IPv6: NLM_F_CREATE should be set when creating new route [ 781.022904][T31949] xt_socket: unknown flags 0xe4 [ 781.081003][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.125531][T31955] netlink: 'syz.1.7038': attribute type 39 has an invalid length. [ 781.161036][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.227770][T31963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.282360][T31963] syzkaller0: entered promiscuous mode [ 781.296437][T31963] syzkaller0: entered allmulticast mode [ 781.567452][T31981] syzkaller0: entered promiscuous mode [ 781.574304][T31981] syzkaller0: entered allmulticast mode [ 781.626919][T31990] ipt_REJECT: ECHOREPLY no longer supported. [ 781.843681][T32009] tipc: Started in network mode [ 781.866264][T32009] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 781.885766][T32009] tipc: Enabled bearer , priority 2 [ 781.975200][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.044885][T32022] netlink: 'syz.4.7057': attribute type 1 has an invalid length. [ 782.120312][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.439888][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 782.480216][T32058] netlink: 'syz.1.7067': attribute type 21 has an invalid length. [ 782.485645][T32057] netlink: 'syz.1.7067': attribute type 21 has an invalid length. [ 782.763464][T32035] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 782.963635][T32078] netlink: 'syz.1.7072': attribute type 1 has an invalid length. [ 783.009872][T28262] tipc: Node number set to 10463914 [ 783.234612][T32091] netlink: 'syz.2.7078': attribute type 83 has an invalid length. [ 783.248626][T32096] x_tables: duplicate underflow at hook 3 [ 783.393641][T32098] pim6reg1: entered promiscuous mode [ 783.399063][T32098] pim6reg1: entered allmulticast mode [ 784.036498][T32148] pim6reg527: entered allmulticast mode [ 784.084911][T32153] net_ratelimit: 9 callbacks suppressed [ 784.084928][T32153] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 784.200501][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.282474][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.312794][T32171] __nla_validate_parse: 15 callbacks suppressed [ 784.312811][T32171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7099'. [ 784.420090][T32179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7103'. [ 784.502081][T32190] xt_l2tp: missing protocol rule (udp|l2tpip) [ 784.639488][T32199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7106'. [ 784.727337][T32204] netlink: 'syz.3.7107': attribute type 7 has an invalid length. [ 784.768927][T32204] netlink: 'syz.3.7107': attribute type 7 has an invalid length. [ 784.969303][T32216] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7111'. [ 785.241984][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.320466][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.881322][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.124751][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.281366][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.360003][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.921676][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.159975][T28263] net_ratelimit: 5 callbacks suppressed [ 789.159989][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.401942][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.481665][ T25] block nbd0: Possible stuck request ffff88806ad80000: control (read@0,1024B). Runtime 30 seconds [ 789.481685][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.501949][ T25] block nbd0: Possible stuck request ffff88806ad80200: control (read@1024,1024B). Runtime 30 seconds [ 789.513890][ T25] block nbd0: Possible stuck request ffff88806ad80400: control (read@2048,1024B). Runtime 30 seconds [ 789.524843][ T25] block nbd0: Possible stuck request ffff88806ad80600: control (read@3072,1024B). Runtime 30 seconds [ 790.440276][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.521043][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.480636][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.560056][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.961291][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.100996][T14019] lec:lec_start_xmit: lec0:No lecd attached [ 792.200791][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.521119][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.603688][ T1210] net_ratelimit: 3 callbacks suppressed [ 794.603708][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.680070][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.000715][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.241945][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.640104][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.720999][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.524279][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.680825][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.760035][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.722089][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.879806][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 797.887830][ C1] lec:lec_tx_timeout: lec0 [ 799.719925][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.800679][ T1210] net_ratelimit: 5 callbacks suppressed [ 799.800692][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.882043][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.840810][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.921240][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.081521][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.091191][T27349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.101058][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.110403][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.320203][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.880282][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.001024][T29683] net_ratelimit: 10 callbacks suppressed [ 805.001043][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.080451][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.040697][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.123072][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.131218][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.760230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.080473][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.160882][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.169009][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.401234][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.684695][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 808.690769][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 810.200861][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.200860][T29683] net_ratelimit: 4 callbacks suppressed [ 810.200879][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.280093][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.440262][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.240427][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.320442][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.280522][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.360082][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.241816][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.320635][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.879762][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.887785][ C1] lec:lec_tx_timeout: lec0 [ 815.400247][ T1210] net_ratelimit: 7 callbacks suppressed [ 815.400265][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.480335][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.730508][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.284685][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.440049][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.520540][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.520563][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.481955][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.561294][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.520785][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.286855][ T5195] udevd[5195]: worker [30237] /devices/virtual/block/nbd0 is taking a long time [ 819.563844][ T25] block nbd0: Possible stuck request ffff88806ad80000: control (read@0,1024B). Runtime 60 seconds [ 819.575390][ T25] block nbd0: Possible stuck request ffff88806ad80200: control (read@1024,1024B). Runtime 60 seconds [ 819.586542][ T25] block nbd0: Possible stuck request ffff88806ad80400: control (read@2048,1024B). Runtime 60 seconds [ 819.598612][ T25] block nbd0: Possible stuck request ffff88806ad80600: control (read@3072,1024B). Runtime 60 seconds [ 820.601450][T29683] net_ratelimit: 5 callbacks suppressed [ 820.601463][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.682948][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.640737][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.720010][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.360558][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.600886][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.682735][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.760177][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.720477][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.800249][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.644606][T28261] net_ratelimit: 4 callbacks suppressed [ 825.644619][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.801202][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.880721][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.840552][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.919964][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.880156][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.960596][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.450411][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.690091][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.920728][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.000100][ T10] net_ratelimit: 3 callbacks suppressed [ 831.000118][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.079974][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.480940][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.720092][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.050751][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.130261][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.080015][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.170994][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.640092][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.120128][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.210119][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.201424][T29683] net_ratelimit: 5 callbacks suppressed [ 836.201442][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.280090][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.242494][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.330518][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.560346][T28262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.801328][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.280770][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.360021][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.320834][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.403752][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.401012][ T10] net_ratelimit: 4 callbacks suppressed [ 841.401030][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.480049][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.440107][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.520409][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.045459][T32245] netlink: 'syz.2.7117': attribute type 4 has an invalid length. [ 843.073922][T32245] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7117'. [ 843.196149][T32258] gtp1: entered promiscuous mode [ 843.481101][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.561420][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.640303][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.841824][T32300] netlink: 'syz.3.7132': attribute type 39 has an invalid length. [ 843.880293][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.052914][T32307] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7135'. [ 844.098553][T32310] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7136'. [ 844.521377][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.523435][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.611937][T32333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.908028][T32351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7154'. [ 844.945108][T32353] netlink: 'syz.4.7153': attribute type 2 has an invalid length. [ 844.969990][T32354] netlink: 'syz.4.7153': attribute type 2 has an invalid length. [ 844.994145][T32353] 9: entered promiscuous mode [ 845.106174][T32357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 845.278215][T32345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.329247][T32345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7151'. [ 845.375557][T32387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7161'. [ 845.423812][T32390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7163'. [ 845.476770][T32396] netlink: 'syz.1.7164': attribute type 1 has an invalid length. [ 845.505997][T32396] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7164'. [ 845.527058][T32396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7164'. [ 845.542939][T32397] netlink: 'syz.1.7164': attribute type 1 has an invalid length. [ 845.604742][T32404] xt_TCPMSS: Only works on TCP SYN packets [ 845.748555][T32414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7171'. [ 846.204244][T32436] nbd2: detected capacity change from 0 to 127 [ 846.232624][T28966] block nbd2: Receive control failed (result -104) [ 846.600621][T29683] net_ratelimit: 4 callbacks suppressed [ 846.600641][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.677939][T32469] nbd: must specify a size in bytes for the device [ 846.685696][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.701183][T32469] netlink: 'syz.3.7186': attribute type 1 has an invalid length. [ 846.920008][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.928730][T32486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.938006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.371392][T32522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 847.380659][T32522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 847.389279][T32522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 847.398521][T32522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 847.407020][T32522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 847.416309][T32522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 847.640647][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.649005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.703687][T32546] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 847.747402][T32560] netlink: 'syz.0.7214': attribute type 39 has an invalid length. [ 848.680179][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.643880][ T25] block nbd0: Possible stuck request ffff88806ad80000: control (read@0,1024B). Runtime 90 seconds [ 849.654830][ T25] block nbd0: Possible stuck request ffff88806ad80200: control (read@1024,1024B). Runtime 90 seconds [ 849.665918][ T25] block nbd0: Possible stuck request ffff88806ad80400: control (read@2048,1024B). Runtime 90 seconds [ 849.677977][ T25] block nbd0: Possible stuck request ffff88806ad80600: control (read@3072,1024B). Runtime 90 seconds [ 849.720145][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.186849][T32501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.374393][T32570] __nla_validate_parse: 6 callbacks suppressed [ 850.374414][T32570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7217'. [ 850.421573][T32570] netlink: 'syz.0.7217': attribute type 1 has an invalid length. [ 850.482922][T32570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 850.610927][T32599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.821708][T32615] IPVS: length: 239 != 24 [ 850.830292][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7231'. [ 850.865332][T32618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7232'. [ 850.949295][T32628] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7234'. [ 850.965556][T32630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7236'. [ 851.800123][ T10] net_ratelimit: 38 callbacks suppressed [ 851.800137][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.814161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.840292][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.848637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.000146][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.803965][T32614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.880451][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.888839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.991105][T32658] netlink: 'syz.3.7242': attribute type 13 has an invalid length. [ 854.008990][T32662] openvswitch: netlink: IPv4 tun info is not correct [ 854.025975][T32662] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.7245'. [ 854.046685][T32662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7245'. [ 854.120725][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.145505][T32672] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7247'. [ 854.181221][T32672] nbd: illegal input index -8454144 [ 854.202654][T32678] IPVS: Unknown mcast interface: syzkaller1 [ 854.206366][T32672] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 854.237804][T32679] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7250'. [ 854.252158][T32672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.291788][T32672] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 854.339766][T32672] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7247'. [ 854.636292][T32702] syzkaller0: entered promiscuous mode [ 854.696691][T32702] syzkaller0: entered allmulticast mode [ 855.186568][T32749] netlink: 'syz.4.7268': attribute type 1 has an invalid length. [ 855.226820][T32751] netlink: 'syz.3.7269': attribute type 1 has an invalid length. [ 855.291557][T32751] bond5: (slave ip6gretap1): making interface the new active one [ 855.297887][T32757] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 855.300833][T32751] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 855.314598][T32751] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 855.322996][T32751] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 855.423586][T32764] __nla_validate_parse: 9 callbacks suppressed [ 855.423610][T32764] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7275'. [ 855.460370][T32765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7273'. [ 855.628588][ T309] netlink: 'syz.2.7279': attribute type 10 has an invalid length. [ 855.683920][ T309] team0: Device veth1_macvtap failed to register rx_handler [ 855.925014][ T335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7287'. [ 855.987971][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7287'. [ 856.018938][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7287'. [ 856.121640][T14019] lec:lec_start_xmit: lec0:No lecd attached [ 856.809787][ T321] net_ratelimit: 7144 callbacks suppressed [ 856.809807][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.826430][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.837381][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.848480][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.858630][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.868585][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.878556][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.888813][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.898776][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 856.908715][ T321] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 858.960637][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7290'. [ 859.014237][ T371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7290'. [ 859.040044][ T371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7290'. [ 859.167970][ T388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7294'. [ 859.216049][ T388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7294'. [ 859.543525][ T418] xt_TCPMSS: Only works on TCP SYN packets [ 860.643134][ T473] netlink: 'syz.4.7323': attribute type 1 has an invalid length. [ 860.652162][ T473] netlink: 'syz.4.7323': attribute type 2 has an invalid length. [ 860.896275][ T483] netlink: 'syz.0.7326': attribute type 21 has an invalid length. [ 861.879933][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 861.888030][ C1] lec:lec_tx_timeout: lec0 [ 862.120817][T28261] net_ratelimit: 24252 callbacks suppressed [ 862.120830][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.439937][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.185422][ T453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.483351][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.501929][ T503] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 863.524104][ T518] mac80211_hwsim hwsim79 : renamed from wlan1 (while UP) [ 863.574177][ T517] syzkaller0: entered promiscuous mode [ 863.590508][ T517] syzkaller0: entered allmulticast mode [ 863.703593][ T529] __nla_validate_parse: 5 callbacks suppressed [ 863.703611][ T529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7341'. [ 863.990465][ T547] netlink: 'syz.4.7346': attribute type 1 has an invalid length. [ 864.008473][ T547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7346'. [ 864.037420][ T547] netlink: 658 bytes leftover after parsing attributes in process `syz.4.7346'. [ 864.079797][ T547] netlink: 'syz.4.7346': attribute type 1 has an invalid length. [ 864.107845][ T566] openvswitch: netlink: Flow key attr not present in new flow. [ 864.402770][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7356'. [ 864.440109][ T585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7356'. [ 864.440484][ T580] netlink: 'syz.4.7354': attribute type 1 has an invalid length. [ 864.498196][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7354'. [ 864.522571][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.531347][ T595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.560080][ T591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7354'. [ 864.615225][ T580] bond2: entered promiscuous mode [ 864.637163][ T580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 864.648390][ T600] syzkaller0: entered promiscuous mode [ 864.655281][ T600] syzkaller0: entered allmulticast mode [ 864.767918][ T601] bond2: (slave bridge3): making interface the new active one [ 864.826824][ T601] bridge3: entered promiscuous mode [ 864.870471][ T601] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 865.051620][ T619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7363'. [ 865.165145][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.436359][ T30] audit: type=1107 audit(1770474718.395:7): pid=639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{|վ29Ԇ~:/v9$cޙ*;&/.L 38?ᗜdŔ1휮e.kڙ=bK9q%ݞ%rzsO#J~œ#C=f ' [ 865.493556][ T641] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7366'. [ 865.510991][ T641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7366'. [ 865.563756][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.286573][ T695] siw: device registration error -23 [ 866.339032][ T699] netlink: 'syz.1.7382': attribute type 64 has an invalid length. [ 866.463479][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 866.595539][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 866.618681][ T710] syzkaller0: entered promiscuous mode [ 866.630978][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.652208][ T710] syzkaller0: entered allmulticast mode [ 867.080236][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 867.259980][ T748] netlink: 'syz.2.7392': attribute type 2 has an invalid length. [ 867.339488][ T758] netlink: 'syz.0.7394': attribute type 1 has an invalid length. [ 867.534748][ T759] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 867.640509][ T1210] net_ratelimit: 1 callbacks suppressed [ 867.640528][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.762155][ T782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.778618][ T791] netlink: 'syz.1.7401': attribute type 10 has an invalid length. [ 867.814941][ T791] bridge0: port 3(team0) entered blocking state [ 867.830914][ T791] bridge0: port 3(team0) entered disabled state [ 867.839405][ T791] team0: entered allmulticast mode [ 867.847070][ T791] team_slave_0: entered allmulticast mode [ 867.854235][ T791] team_slave_1: entered allmulticast mode [ 867.873266][ T791] team0: entered promiscuous mode [ 867.889401][ T791] team_slave_0: entered promiscuous mode [ 867.907067][ T791] team_slave_1: entered promiscuous mode [ 867.932190][ T791] bridge0: port 3(team0) entered blocking state [ 867.938666][ T791] bridge0: port 3(team0) entered forwarding state [ 868.133840][ T809] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 868.144449][ T809] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 868.157828][ T809] team0: Failed to send options change via netlink (err -105) [ 868.181151][ T809] team0: Port device batadv1 added [ 868.201751][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.371926][ T833] 8021q: VLANs not supported on syzkaller1 [ 868.385946][ T832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 868.393240][ T832] IPv6: NLM_F_CREATE should be set when creating new route [ 868.558298][ T843] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 868.606334][ T843] team0: Device macvlan2 is already an upper device of the team interface [ 868.658630][ T858] netlink: 'syz.0.7413': attribute type 10 has an invalid length. [ 868.682757][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.744844][ T862] __nla_validate_parse: 9 callbacks suppressed [ 868.744865][ T862] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7417'. [ 868.854421][ T858] team0 (unregistering): Port device team_slave_0 removed [ 868.872387][ T858] team0 (unregistering): Port device team_slave_1 removed [ 868.898196][ T858] team0 (unregistering): Port device batadv1 removed [ 869.156972][ T885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7423'. [ 869.203606][ T886] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7424'. [ 869.278208][ T893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7427'. [ 869.294263][ T885] syzkaller1: entered promiscuous mode [ 869.301333][ T893] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 869.326007][ T885] syzkaller1: entered allmulticast mode [ 869.616402][ T913] macvlan3: entered promiscuous mode [ 869.622993][ T913] macvlan3: entered allmulticast mode [ 869.628791][ T913] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 869.702731][ T916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7432'. [ 869.721500][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.756775][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7433'. [ 869.771586][ T919] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 869.815527][ T922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7434'. [ 870.044362][ T941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7438'. [ 870.137297][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 870.150987][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.292682][ T960] syzkaller0: entered promiscuous mode [ 870.307944][ T960] syzkaller0: entered allmulticast mode [ 870.505371][ T977] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7446'. [ 870.519437][ T977] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7446'. [ 870.616011][ T987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 870.712029][ T991] xt_l2tp: invalid flags combination: 8 [ 870.741543][ T993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.766764][T29683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.921397][ T30] audit: type=1800 audit(1770474723.875:8): pid=1006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7456" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1814 res=0 errno=0 [ 871.000107][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 871.000299][T28966] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 871.053949][ T1020] netlink: 'syz.4.7459': attribute type 30 has an invalid length. [ 871.241684][T28261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.329289][ T1047] netlink: 'syz.3.7465': attribute type 11 has an invalid length. [ 871.464646][ T1055] wireguard0: entered promiscuous mode [ 871.471862][ T1055] wireguard0: entered allmulticast mode [ 871.531996][ T1067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.566583][ T1055] team0: Device wireguard0 is of different type [ 871.658301][T27363] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 871.753950][ T1076] bond2: entered promiscuous mode [ 871.759984][ T1076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 871.854409][ T1076] bond2: (slave xfrm1): refused to change device type [ 871.980399][ T1089] netlink: 'syz.3.7472': attribute type 1 has an invalid length. [ 872.202945][ T1103] netlink: 'syz.3.7478': attribute type 64 has an invalid length. [ 872.512277][ T1123] erspan0: entered promiscuous mode [ 872.853484][ T1210] net_ratelimit: 1 callbacks suppressed [ 872.853501][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.102582][ T1169] netlink: 'syz.4.7500': attribute type 83 has an invalid length. [ 873.242375][ T1179] netlink: 'syz.4.7504': attribute type 12 has an invalid length. [ 873.277188][ T1180] netlink: 'syz.2.7502': attribute type 1 has an invalid length. [ 873.296410][ T1185] netlink: 'syz.1.7505': attribute type 4 has an invalid length. [ 873.323449][ T1185] netlink: 'syz.1.7505': attribute type 1 has an invalid length. [ 873.424767][ T1192] syzkaller0: entered promiscuous mode [ 873.431739][ T1192] syzkaller0: entered allmulticast mode [ 873.439377][ T1192] tipc: Enabled bearer , priority 0 [ 873.489128][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.498446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.543681][ T1191] tipc: Resetting bearer [ 873.571697][ T1191] tipc: Disabling bearer [ 873.660855][ T1206] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 873.672714][ T1205] netlink: 'syz.3.7511': attribute type 4 has an invalid length. [ 873.711814][ T1205] netlink: 'syz.3.7511': attribute type 4 has an invalid length. [ 873.835325][ T1205] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.843018][ T1205] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.887241][ T1219] __nla_validate_parse: 20 callbacks suppressed [ 873.887261][ T1219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7514'. [ 874.017199][ T1205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.041542][ T1205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.216488][T27363] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.228981][T27363] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.238628][T27363] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.259978][T27363] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.297962][T27363] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.319908][T27363] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.342117][T27363] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.364344][T27363] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.475904][ T1248] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 874.505372][ T1249] syzkaller0: entered promiscuous mode [ 874.512179][ T1249] syzkaller0: entered allmulticast mode [ 874.718782][ T1265] xt_TPROXY: Can be used only with -p tcp or -p udp [ 875.879947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 875.888023][ C1] lec:lec_tx_timeout: lec0 [ 876.521388][ T50] block nbd2: Possible stuck request ffff888025d60000: control (read@0,1024B). Runtime 30 seconds [ 876.532223][ T50] block nbd2: Possible stuck request ffff888025d60200: control (read@1024,1024B). Runtime 30 seconds [ 876.543491][ T50] block nbd2: Possible stuck request ffff888025d60400: control (read@2048,1024B). Runtime 30 seconds [ 876.554715][ T50] block nbd2: Possible stuck request ffff888025d60600: control (read@3072,1024B). Runtime 30 seconds [ 876.825598][ T1223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.998684][ T1285] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7534'. [ 877.027098][ T1296] netlink: 'syz.0.7537': attribute type 1 has an invalid length. [ 877.051619][ T1296] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7537'. [ 877.067262][ T1297] vlan4: entered promiscuous mode [ 877.083878][ T1297] bridge0: entered promiscuous mode [ 877.088828][ T1296] netlink: 658 bytes leftover after parsing attributes in process `syz.0.7537'. [ 877.130036][ T1296] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7537'. [ 877.171456][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7533'. [ 877.481764][ T1334] netlink: 'syz.0.7545': attribute type 1 has an invalid length. [ 877.500940][ T1334] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7545'. [ 877.544078][ T1334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7545'. [ 877.595709][ T1334] bridge4: entered promiscuous mode [ 877.603170][ T1334] bridge4: entered allmulticast mode [ 877.611365][ T1348] tipc: Enabled bearer , priority 0 [ 877.679212][ T1347] tipc: Disabling bearer [ 878.050973][ T1387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7557'. [ 878.074053][ T1387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7557'. [ 878.200955][ T1399] netlink: 'syz.2.7560': attribute type 5 has an invalid length. [ 878.263004][ T1399] geneve2: entered promiscuous mode [ 878.300727][ T1399] geneve2: entered allmulticast mode [ 878.356231][T27354] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 878.371078][T27354] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 878.405084][ T1414] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 878.454429][T27354] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 878.474381][T27354] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 878.512786][ T1416] : entered promiscuous mode [ 878.525518][ T1418] tipc: Enabled bearer , priority 0 [ 878.538192][ T1414] syzkaller0: entered promiscuous mode [ 878.569228][ T1414] syzkaller0: entered allmulticast mode [ 878.649557][ T1430] netlink: 'syz.3.7568': attribute type 8 has an invalid length. [ 878.715283][ T1418] tipc: Resetting bearer [ 878.798443][ T1411] tipc: Resetting bearer [ 878.848337][ T1411] tipc: Disabling bearer [ 878.866146][ T1439] pimreg: entered allmulticast mode [ 878.949258][ T1443] __nla_validate_parse: 4 callbacks suppressed [ 878.949279][ T1443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7573'. [ 878.993736][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7572'. [ 879.004862][ T1445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7572'. [ 879.020471][ T1445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7572'. [ 879.032552][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7572'. [ 879.050059][ T1445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7572'. [ 879.100346][ T1445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7572'. [ 879.110912][ T1455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7576'. [ 879.126562][ T1455] geneve2: entered promiscuous mode [ 879.137581][T27361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.160844][T27361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.170309][ T1458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7577'. [ 879.288384][T27361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.310100][T27364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.480729][ T1476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7582'. [ 879.502193][ T1467] team0: Port device team_slave_0 removed [ 879.632380][ T1476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.726867][ T25] block nbd0: Possible stuck request ffff88806ad80000: control (read@0,1024B). Runtime 120 seconds [ 879.738054][ T25] block nbd0: Possible stuck request ffff88806ad80200: control (read@1024,1024B). Runtime 120 seconds [ 879.749476][ T25] block nbd0: Possible stuck request ffff88806ad80400: control (read@2048,1024B). Runtime 120 seconds [ 879.761024][ T25] block nbd0: Possible stuck request ffff88806ad80600: control (read@3072,1024B). Runtime 120 seconds [ 879.912730][ T1496] netlink: 'syz.4.7589': attribute type 1 has an invalid length. [ 879.983272][ T1498] netlink: 'syz.1.7590': attribute type 16 has an invalid length. [ 880.030151][ T1498] netlink: 'syz.1.7590': attribute type 17 has an invalid length. [ 880.165295][ T1498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 880.465031][ T1523] netlink: 'syz.0.7598': attribute type 4 has an invalid length. [ 880.821953][ T1541] netlink: 'syz.1.7602': attribute type 8 has an invalid length. [ 881.562389][ T1570] netlink: 'syz.0.7609': attribute type 21 has an invalid length. [ 882.167656][ T1616] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 882.598875][ T1649] netlink: 'syz.3.7628': attribute type 29 has an invalid length. [ 882.737515][ T1663] netlink: 'syz.3.7631': attribute type 12 has an invalid length. [ 882.801266][ T1663] bond6: option primary_reselect: invalid value (255) [ 882.814119][ T1663] bond6 (unregistering): Released all slaves [ 882.984878][ T1671] netlink: zone id is out of range [ 882.990244][ T1671] netlink: zone id is out of range [ 882.995370][ T1671] netlink: zone id is out of range [ 883.003079][ T1671] netlink: zone id is out of range [ 883.008223][ T1671] netlink: zone id is out of range [ 883.010359][ T1675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.018134][ T1671] netlink: zone id is out of range [ 883.050090][ T1671] netlink: zone id is out of range [ 883.308379][ T1692] 0{X: renamed from gretap0 (while UP) [ 883.352476][ T1692] 0{X: entered allmulticast mode [ 883.381074][ T1692] x_tables: duplicate underflow at hook 3 [ 883.989201][ T1764] netlink: 'syz.4.7665': attribute type 2 has an invalid length. [ 884.227580][ T1789] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 884.345273][ T1793] gre0: entered promiscuous mode [ 884.351519][ T1793] gre0: entered allmulticast mode [ 884.414911][ T1799] netlink: 'syz.4.7673': attribute type 29 has an invalid length. [ 884.434199][ T1799] __nla_validate_parse: 29 callbacks suppressed [ 884.434219][ T1799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7673'. [ 884.563401][ T1813] netlink: 'syz.2.7677': attribute type 1 has an invalid length. [ 884.575789][ T1813] netlink: 'syz.2.7677': attribute type 3 has an invalid length. [ 884.584647][ T1813] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7677'. [ 884.594773][ T1813] NCSI netlink: No device for ifindex 813332851 [ 884.795641][ T1828] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7682'. [ 884.806761][ T1829] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7682'. [ 884.897244][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746363 [ 884.908498][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746362 [ 884.923079][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746361 [ 884.932483][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746360 [ 884.942329][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746359 [ 884.952211][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746358 [ 884.961678][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746357 [ 884.971023][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746356 [ 884.981053][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746355 [ 884.990442][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746354 [ 884.999910][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746353 [ 885.009545][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746352 [ 885.021102][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746351 [ 885.030395][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746350 [ 885.039610][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746349 [ 885.049412][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746348 [ 885.060021][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746347 [ 885.069294][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746346 [ 885.079537][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746345 [ 885.089204][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746344 [ 885.105978][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746343 [ 885.115596][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746342 [ 885.124987][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746341 [ 885.135221][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746340 [ 885.144563][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746339 [ 885.153868][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746338 [ 885.164034][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746337 [ 885.173370][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746336 [ 885.183478][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746335 [ 885.193687][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746334 [ 885.203483][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746333 [ 885.204639][ T1839] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.213320][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746332 [ 885.223658][ T1839] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.230971][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746331 [ 885.236322][ T1839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.247864][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746330 [ 885.269158][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746329 [ 885.278976][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746328 [ 885.288423][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746327 [ 885.298652][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746326 [ 885.326418][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746325 [ 885.335941][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746324 [ 885.346242][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746323 [ 885.356689][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746322 [ 885.366249][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746321 [ 885.376361][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746320 [ 885.438880][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746319 [ 885.481874][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746318 [ 885.543899][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746317 [ 885.569188][ T1856] Cannot find set identified by id 3 to match [ 885.571106][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746316 [ 885.577560][ T1851] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 885.603024][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746315 [ 885.611598][ T1851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7690'. [ 885.617088][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746314 [ 885.632542][ T1853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7690'. [ 885.661514][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746313 [ 885.674929][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746312 [ 885.689530][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746311 [ 885.703729][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746310 [ 885.728321][ T1862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7693'. [ 885.750734][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746309 [ 885.753655][ T1864] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7694'. [ 885.770739][ T1861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7693'. [ 885.773598][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746308 [ 885.807164][ T1864] tipc: Cannot configure node identity twice [ 885.839803][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746307 [ 885.861805][ T1871] xt_TCPMSS: Only works on TCP SYN packets [ 885.883451][ T1873] netlink: 'syz.4.7696': attribute type 39 has an invalid length. [ 885.891915][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746306 [ 885.901453][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746305 [ 885.919105][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746304 [ 885.961628][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746303 [ 885.996475][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746302 [ 886.012799][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746301 [ 886.022867][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746300 [ 886.033627][ T1834] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746299 [ 886.048456][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746363 [ 886.070260][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746362 [ 886.104399][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746361 [ 886.113754][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746360 [ 886.124371][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746359 [ 886.151841][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746358 [ 886.179401][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746357 [ 886.191611][ T1885] syzkaller0: entered promiscuous mode [ 886.194142][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746356 [ 886.197106][ T1885] syzkaller0: entered allmulticast mode [ 886.210038][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746355 [ 886.223625][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746354 [ 886.237694][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746353 [ 886.247160][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746352 [ 886.257852][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746351 [ 886.268985][ T1888] netlink: 'syz.4.7702': attribute type 29 has an invalid length. [ 886.277202][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746350 [ 886.322352][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746349 [ 886.381427][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746348 [ 886.395683][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746347 [ 886.407739][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746346 [ 886.422585][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746345 [ 886.493292][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746344 [ 886.520176][ T1904] bond8: option all_slaves_active: invalid value (222) [ 886.547464][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746343 [ 886.561935][ T1904] bond8 (unregistering): Released all slaves [ 886.598622][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746342 [ 886.627884][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746341 [ 886.661961][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746340 [ 886.700560][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746339 [ 886.736184][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746338 [ 886.779911][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746337 [ 886.799444][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746336 [ 886.809206][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746335 [ 886.825081][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746334 [ 886.862405][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746333 [ 886.894429][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746332 [ 886.919844][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746331 [ 886.929198][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746330 [ 886.967278][ T1943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7715'. [ 886.997239][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746329 [ 887.016344][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746328 [ 887.025705][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746327 [ 887.080258][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746326 [ 887.091231][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746325 [ 887.128522][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746324 [ 887.141520][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746323 [ 887.157416][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746322 [ 887.178010][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746321 [ 887.180669][ T1949] netlink: 'syz.4.7716': attribute type 13 has an invalid length. [ 887.187977][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746320 [ 887.211434][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746319 [ 887.221119][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746318 [ 887.230879][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746317 [ 887.240470][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746316 [ 887.252071][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746315 [ 887.262776][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746314 [ 887.272186][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746313 [ 887.281629][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746312 [ 887.291262][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746311 [ 887.300753][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746310 [ 887.310156][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746309 [ 887.319771][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746308 [ 887.329261][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746307 [ 887.339605][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746306 [ 887.348911][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746305 [ 887.360098][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746304 [ 887.380575][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746303 [ 887.398594][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746302 [ 887.428202][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746301 [ 887.438246][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746300 [ 887.452996][ T1833] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1390746298/1390746299 [ 887.604771][ T1957] 0{X: entered promiscuous mode [ 887.619897][ T1957] 0{X: left allmulticast mode [ 887.655823][ T1958] gre0: left promiscuous mode [ 887.671123][ T1958] gre0: left allmulticast mode [ 887.677736][ T1958] 0{X: left promiscuous mode [ 887.696487][ T1958] net_ratelimit: 3 callbacks suppressed [ 887.696493][ T1958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 887.739935][ T1965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 887.924307][ T1983] nft_compat: unsupported protocol 0 [ 888.209852][ T2010] ip6gre0: Master is either lo or non-ether device [ 888.616705][ T2044] netlink: 'syz.3.7737': attribute type 1 has an invalid length. [ 888.794628][ T2059] openvswitch: netlink: Flow actions attr not present in new flow. [ 888.937372][ T2064] [ 888.939725][ T2064] ====================================================== [ 888.946737][ T2064] WARNING: possible circular locking dependency detected [ 888.953756][ T2064] syzkaller #0 Not tainted [ 888.958165][ T2064] ------------------------------------------------------ [ 888.965161][ T2064] syz.4.7744/2064 is trying to acquire lock: [ 888.971118][ T2064] ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 888.980594][ T2064] [ 888.980594][ T2064] but task is already holding lock: [ 888.987956][ T2064] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 888.997558][ T2064] [ 888.997558][ T2064] which lock already depends on the new lock. [ 888.997558][ T2064] [ 889.007963][ T2064] [ 889.007963][ T2064] the existing dependency chain (in reverse order) is: [ 889.016967][ T2064] [ 889.016967][ T2064] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 889.024875][ T2064] _raw_spin_lock_bh+0x36/0x50 [ 889.030164][ T2064] nr_rt_ioctl+0x40c/0xf90 [ 889.035092][ T2064] sock_do_ioctl+0x101/0x320 [ 889.040193][ T2064] sock_ioctl+0x5c6/0x7f0 [ 889.045038][ T2064] __se_sys_ioctl+0xfc/0x170 [ 889.050151][ T2064] do_syscall_64+0xe2/0xf80 [ 889.055163][ T2064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.061566][ T2064] [ 889.061566][ T2064] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 889.069561][ T2064] _raw_spin_lock_bh+0x36/0x50 [ 889.074852][ T2064] nr_rt_ioctl+0x215/0xf90 [ 889.079820][ T2064] sock_do_ioctl+0x101/0x320 [ 889.084924][ T2064] sock_ioctl+0x5c6/0x7f0 [ 889.089771][ T2064] __se_sys_ioctl+0xfc/0x170 [ 889.094872][ T2064] do_syscall_64+0xe2/0xf80 [ 889.099892][ T2064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.106302][ T2064] [ 889.106302][ T2064] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 889.114119][ T2064] __lock_acquire+0x15a5/0x2cf0 [ 889.119481][ T2064] lock_acquire+0x106/0x330 [ 889.124496][ T2064] _raw_spin_lock_bh+0x36/0x50 [ 889.129802][ T2064] nr_rt_device_down+0xbe/0x860 [ 889.135183][ T2064] nr_device_event+0x137/0x150 [ 889.140539][ T2064] notifier_call_chain+0x19d/0x3a0 [ 889.146154][ T2064] __dev_notify_flags+0x16d/0x310 [ 889.151697][ T2064] netif_change_flags+0xe8/0x1a0 [ 889.157143][ T2064] dev_change_flags+0x130/0x260 [ 889.162529][ T2064] dev_ioctl+0x7b4/0x1150 [ 889.167365][ T2064] sock_do_ioctl+0x23e/0x320 [ 889.172460][ T2064] sock_ioctl+0x5c6/0x7f0 [ 889.177307][ T2064] __se_sys_ioctl+0xfc/0x170 [ 889.182411][ T2064] do_syscall_64+0xe2/0xf80 [ 889.187421][ T2064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.193831][ T2064] [ 889.193831][ T2064] other info that might help us debug this: [ 889.193831][ T2064] [ 889.204044][ T2064] Chain exists of: [ 889.204044][ T2064] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 889.204044][ T2064] [ 889.217852][ T2064] Possible unsafe locking scenario: [ 889.217852][ T2064] [ 889.225288][ T2064] CPU0 CPU1 [ 889.230638][ T2064] ---- ---- [ 889.236003][ T2064] lock(nr_neigh_list_lock); [ 889.240670][ T2064] lock(&nr_node->node_lock); [ 889.248114][ T2064] lock(nr_neigh_list_lock); [ 889.255306][ T2064] lock(nr_node_list_lock); [ 889.259886][ T2064] [ 889.259886][ T2064] *** DEADLOCK *** [ 889.259886][ T2064] [ 889.268011][ T2064] 2 locks held by syz.4.7744/2064: [ 889.273105][ T2064] #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 889.281898][ T2064] #1: ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 889.291901][ T2064] [ 889.291901][ T2064] stack backtrace: [ 889.297774][ T2064] CPU: 1 UID: 0 PID: 2064 Comm: syz.4.7744 Not tainted syzkaller #0 PREEMPT(full) [ 889.297793][ T2064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 889.297805][ T2064] Call Trace: [ 889.297814][ T2064] [ 889.297823][ T2064] dump_stack_lvl+0xe8/0x150 [ 889.297844][ T2064] print_circular_bug+0x2e1/0x300 [ 889.297863][ T2064] check_noncircular+0x12e/0x150 [ 889.297883][ T2064] __lock_acquire+0x15a5/0x2cf0 [ 889.297909][ T2064] ? __lock_acquire+0x6b5/0x2cf0 [ 889.297932][ T2064] ? dsa_user_netdevice_event+0x495/0x2850 [ 889.297950][ T2064] ? nr_rt_device_down+0xbe/0x860 [ 889.297970][ T2064] lock_acquire+0x106/0x330 [ 889.297990][ T2064] ? nr_rt_device_down+0xbe/0x860 [ 889.298012][ T2064] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 889.298031][ T2064] ? nr_rt_device_down+0xbe/0x860 [ 889.298051][ T2064] _raw_spin_lock_bh+0x36/0x50 [ 889.298074][ T2064] ? nr_rt_device_down+0xbe/0x860 [ 889.298094][ T2064] nr_rt_device_down+0xbe/0x860 [ 889.298119][ T2064] nr_device_event+0x137/0x150 [ 889.298139][ T2064] notifier_call_chain+0x19d/0x3a0 [ 889.298160][ T2064] __dev_notify_flags+0x16d/0x310 [ 889.298181][ T2064] ? __pfx___dev_notify_flags+0x10/0x10 [ 889.298200][ T2064] ? __dev_change_flags+0x4c6/0x690 [ 889.298221][ T2064] ? __pfx___dev_change_flags+0x10/0x10 [ 889.298242][ T2064] ? full_name_hash+0x92/0xe0 [ 889.298262][ T2064] netif_change_flags+0xe8/0x1a0 [ 889.298284][ T2064] dev_change_flags+0x130/0x260 [ 889.298305][ T2064] dev_ioctl+0x7b4/0x1150 [ 889.298324][ T2064] sock_do_ioctl+0x23e/0x320 [ 889.298341][ T2064] ? __pfx_sock_do_ioctl+0x10/0x10 [ 889.298354][ T2064] ? do_futex+0x333/0x420 [ 889.298382][ T2064] sock_ioctl+0x5c6/0x7f0 [ 889.298405][ T2064] ? __pfx_sock_ioctl+0x10/0x10 [ 889.298427][ T2064] ? __fget_files+0x2a/0x420 [ 889.298445][ T2064] ? __fget_files+0x3a0/0x420 [ 889.298461][ T2064] ? __fget_files+0x2a/0x420 [ 889.298479][ T2064] ? bpf_lsm_file_ioctl+0x9/0x20 [ 889.298503][ T2064] ? __pfx_sock_ioctl+0x10/0x10 [ 889.298524][ T2064] __se_sys_ioctl+0xfc/0x170 [ 889.298547][ T2064] do_syscall_64+0xe2/0xf80 [ 889.298565][ T2064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.298581][ T2064] ? trace_irq_disable+0x37/0x100 [ 889.298597][ T2064] ? clear_bhb_loop+0x60/0xb0 [ 889.298614][ T2064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.298630][ T2064] RIP: 0033:0x7fc6d0d9aeb9 [ 889.298646][ T2064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.298661][ T2064] RSP: 002b:00007fc6d1b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 889.298678][ T2064] RAX: ffffffffffffffda RBX: 00007fc6d1015fa0 RCX: 00007fc6d0d9aeb9 [ 889.298690][ T2064] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 889.298702][ T2064] RBP: 00007fc6d0e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 889.298712][ T2064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.298723][ T2064] R13: 00007fc6d1016038 R14: 00007fc6d1015fa0 R15: 00007ffcd280e518 [ 889.298742][ T2064]