last executing test programs: 1.831344192s ago: executing program 0 (id=533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES16, @ANYRES8=r4, @ANYRES64=r0, @ANYRES16=r4], 0xd4}, 0x1, 0x0, 0x0, 0x200c0010}, 0x4000010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7c26}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x2b}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4045004}, 0x90) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7], 0x3c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x0, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4f23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}, 0x1c) shutdown(r0, 0x0) r10 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c, 0x80000) accept$inet6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x1c) 1.59001283s ago: executing program 3 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500080ff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.484192397s ago: executing program 3 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}]}, 0x1c}], 0x1}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4c004}, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00010000000000000000000a00000000e1ff"], 0x18}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0), 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) bind$tipc(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.48322889s ago: executing program 1 (id=540): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001f80)={{r1}, "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"}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'bond_slave_0\x00', @broadcast}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x40000000, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3, 0x0, 0x0, 0x0, 0x7}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.420068162s ago: executing program 0 (id=541): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7, 0x80, 0xd, 0x1000, {{0x20, 0x4, 0x1, 0x4, 0x80, 0x64, 0x0, 0x45, 0x29, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x57, 0x3, 0xd, [{@private=0xa010100, 0x5}, {@broadcast, 0x7}, {@multicast2, 0x6}, {@local, 0x4}]}, @rr={0x7, 0x13, 0xb, [@loopback, @loopback, @local, @local]}, @timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x1, [{@rand_addr=0x64010100, 0x8001}]}, @timestamp_addr={0x44, 0x1c, 0x28, 0x1, 0x4, [{@multicast1, 0x4}, {@rand_addr=0x64010102, 0x5}, {@broadcast, 0x18d}]}, @generic={0x89, 0x2}, @noop, @end, @ra={0x94, 0x4, 0x1}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@private, @empty, 0x0}, &(0x7f0000000300)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x47a6, 0x342247ab, {{0xc, 0x4, 0x2, 0x18, 0x30, 0x64, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0x5, [{@empty, 0x5}, {@rand_addr=0x64010100, 0x4}, {@remote, 0x1ff}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0xffffffff, 0xb, {{0x1b, 0x4, 0x2, 0x20, 0x6c, 0x65, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x1b, 0xd, [@remote, @empty, @broadcast, @empty, @broadcast, @multicast1]}, @cipso={0x86, 0xe, 0x2, [{0x1, 0x8, "e409da65688e"}]}, @timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0xa, [{@rand_addr=0x64010102, 0xd31d}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x41, 0x3, 0x3, [{@private=0xa010100, 0xdfbd}, {@remote, 0x4}, {@multicast1, 0xfae1}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xec, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x960ee2ec19bffffc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x20045801) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000700)=0x7, &(0x7f0000000740)=0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000800)={'syztnl0\x00', r2, 0x10, 0x7, 0xffff, 0x7ff, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, {[@ssrr={0x89, 0x17, 0x73, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xb2, 0x3, 0x7, [{@multicast2, 0x2}, {@rand_addr=0x64010101, 0x40}]}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x6, [{@multicast1, 0x6}, {@remote, 0x6}, {@empty}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x55}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x2}]}, @noop]}}}}}) setsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000900)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, r10}, 0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={0x0, 0x9}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000980)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000e00)=[{&(0x7f00000009c0)="961b99be4ed60c64cb04c55fec5a461b8d5935b2059c87065fd6c44b7a41d6c45b0820ccdb347bc1dd2395f4eb0854646d1ab59381a935e198f40315067310d7e9c05136a45393bc816a9cd34bb92710f2a266a21bafdb2506420006c12bf9f97c7c4c752ef1991082000c220319934cc30f1c4e199fcfdd7c6f16a1d7d28ce4775e25b2a163a8bc7559f0dfc7a1de24a729a5d7608477492e3d389b18f72ffbdf02fdac0e7b8ed9bce11b79d569618119596b5d958959496ddcba2bbe4d3fe46f86324c223fa7ab79f6a8f18b122755aafab2c2e9512e8fa4e75828b304828d6866058dfa8225c61ea19323547e8fbd0e3038640b56", 0xf6}, {&(0x7f0000000ac0)="71ee5ce3f4f378266e0b6738d90961d900ba3ab2e266642efb6dfeb2c83e5c5bd96ee347749393bd55ae98d7a1e0201ae1ccb338dc63484eae8a824841140a455a02dfea05b47e383177c8abb7ad4dc0b70ac1307482a0c4d918c09154", 0x5d}, {&(0x7f0000000b40)="46c3f48e1811a7143d1d30a4bfc67e561507be33690d4133935c1fc9649e097bf5fa7aadbfce8f67c34ed4b30a5899bf95201213e66c28c12405c1cd25a743dc7c0e46fa9e608900d430a7ffc1161ada7009764bf4c370d5142ac2a2d07f008ff41fc92c5cdb647e6b0894420bf030d8258b8208bfbbc2a4b8988aa16bb163f51e709a9f109895797a2a8315ffe83682796b2786a2d46252a0bf7e69c09ab347f859c631f1768c68b613daa40495d3f81091ce243fd3f1c6563c92e8f89bbd1e59868d2b014c91c10640d077aa8c8d3d84cd4a9c8402b270bb375772159a6156d8", 0xe1}, {&(0x7f0000000c40)="ec2ed3ed1b4acd070c8b91fba708e53319c851926506715ea28d63e149b76c74be6a19bc5e9767969db92981a7a6af4fd4339f004af022cc2cc526551a6181ff092d68495460375444267c2d10e9e58301233baa1d56cf7de8ebf08dc2aa278524be55e8135aaa1560e229ae794f59ff22af532c67774c56dae71d5cda76cba245ed3fed228a59b33ce101019c1622e2c0a99e739aba223311e96d9feec6635495a43321c96a39ee4a2826bce6fd383c7e3540bf1e528a088c481674bb15831eb59eb4", 0xc3}, {&(0x7f0000000d40)="cdfaf899579463712f30937290e6d313a864fd4d02b0b33c4f1c63244277f8a35fd190a315b3c64a129f5357f68b74c92a22a63a317596ad814e1e126b18754932d997dcb803e9fcd53052aa", 0x4c}, {&(0x7f0000000dc0)="7f55238edfe902e904ecd92791eebf9dcc3e4b670467639b836a4fdb239914295d4a30d5f915", 0x26}], 0x6, &(0x7f0000000e80)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x9, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@remote, 0x8}]}, @cipso={0x86, 0x15, 0x3, [{0x1, 0x3, 's'}, {0x7, 0xc, "11c9c49149971b0b1d59"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6bd}}], 0x60}}, {{&(0x7f0000000f00)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000f40)="b14f1162c26e6d2d8caaa802c001da49c1bd6657278a385f958e04a2cb2cf7d79d073614efc6524c1fa622867d316178e22673c99012ef9e79f8294bb32c9d8c0bf7f0fbef6755b4542e25283c35440ed726c8fb108245ca82f499332461ea2338e9d071b5f8de290addbcabe0be34232381650cd7f4b2f2744a24b05db02ec6a6df12f417012359b962d8f993b8292cad185745fb2fb437e72522c0ea28af6b9b6ce5a054fad4f4bd62379acf3a27722595d8ac2c0656dd5e0ea3b989d292858d373f9662a0deb504f94a13de1523edb28812c1739343a4148d17f55f05f99a0622", 0xe2}, {&(0x7f0000001040)="686a89b89c5f6b1620bdb2a4b1c90f826c6448d143ae5894e599b36118d07633809698e3ce736de1e09ac506ecf92eb991ec55187c386aade786fe0717a579b2d2a09942be3c7ef2242c1986f0349d8b3b1d2c333c02fdfd48d3a76621139553e9c62b7f7bfac662d50f5d35aa6b8bb5129b679dc1cd14ee9f8adab20a489166497090f2a9b17f305c9e685878a8efc440016b71205178c164dce9c1d8e6b559a5efaa8ccbdf87218ce0c13937c6e508bf6521a7bb138b35e3d48c50f09050e85b0045dafcd8e9", 0xc7}, {&(0x7f0000001140)="02c292f85a697e1d7b2eeed7cd475089458491ad4ef55edfedb916118cb65e02e530ca3b6615b7c46d94edfc3418cbee4a7fa148b08eb2deaba87bf1b278c954d4bea036ab3d11993f82ce9f4ff60344a01b95a678f24a301095b24bcf272d44fd06dc30a44ddcf9fee750a4a35db5cbd14662591b14ba18168cc524d1ef89838ec38a46a64d9ed11377062eaeecd0953de34b827d35a7473a8671706697a77c832e88f45cd7a6a71872dc72f5dd26b7c1ad460c2dfa233f271246c48d15c8e84b971962701c9fa9", 0xc8}, {&(0x7f0000001240)="4c7cab28343b708e8c98b5168c201194a7cfa922ddbe1035a177c7484369a3b61792b4bf19ecb92a33b54d5d74b94fcce34fc17af2acb318eca0d32e2583397330fc4bf51f00eb9303ae5348a82758eb9ab88c7b74adc7e99d8542a8515338ddc76e3de425a9c442be526739117dd06de690ec41f79c63d7e744df43e9c5d0cb3cdbdb2735f041a4408ba5120656a2ba686e891e756935f342d37f48288e1f386bd4a2b9b3d134467393452c92fdf8316483b881a37e5a5824cdae585f2ca4a3ba84d7e8238ab1456b0e0fb7278ab0d67144ceaa823aefac5a04ea99ef197e35c9044c305bde9cfeff28dd6d3f8be6e54a53d677ebbead", 0xf7}, {&(0x7f0000001340)="bee77858a44bb172759bc7f0623d921442bc38ebc55b753ea0d842ba2ca42c18d4d243c05d1491a4177dc944e023caf4608d74c3e49d7c7968c41d4f9624b6e9c7e9c5127b1ce1d2ef4b54a5b7fcaa53ea44be182ceaf36059e95e78799482c8ee54b31948aa635b1d68653685ae9ef72a3253dd1f1865e9fb1da65ee18b27c612cc5bb939e3f91c73c1ce478cf428d09fe088c3c2a9b547d7a32af78239fea90ac38e35457a88afbf1364fafbe34238315f36e2a530c52133a59fe39c6fac894b0a9a27ea", 0xc5}, {&(0x7f0000001440)="4ea7cc2320a209b27f8d0308a89556334d2bbde22ae7f0a91fa8f7aa584f266848124a9dd095254d4f1aaa84cbca05f131912d62bbcda34c05d76c26db8b88a709a249312007c38980d7fe041dc91ca0fbf82a8a7ba9e4dfb213d0b0f1f409620e36152506ae2161bf1b0dc931cd7a284c9400f7ccd580a29b08a5e6", 0x7c}], 0x6}}], 0x2, 0x810) recvmsg(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000015c0)=""/147, 0x93}, {&(0x7f0000001680)=""/16, 0x10}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/37, 0x25}, {&(0x7f0000002700)=""/5, 0x5}, {&(0x7f0000002740)=""/223, 0xdf}, {&(0x7f0000002840)=""/197, 0xc5}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/250, 0xfa}], 0x9}, 0x2000) sendmsg$inet(r8, &(0x7f0000003d80)={&(0x7f0000003b40)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000003b80)="fbfec563c137f2a6013df7a4168a85e752f2b2eae720df33142b34c02be4996885e182b36fbf6d9f0206584e64255ac113c35c886a94d18452bd45442ffb07e7e9f56853d4d4e471315a831bfe866a7396bb25ff9964c0bdb086be7c80911268a59577a9c9bc379fa7aae56261a82f60e97997d464573f0e4129ad21a38a45d572e1e004a2a8d74df3881e82dbcfe6b7f397da9d", 0x94}, {&(0x7f0000003c40)="38d80c917005d260b30bfaae348cfffbd1c759a8739df6cbfe5e10db938ccceaaa6ad08bde33720b681098855fb52309b21f9262c8f929502dae842b7f103785b70777cc485172331e010a223ad2d93f94918a483e0899361b86f3b4327f9410b013dd", 0x63}], 0x2, &(0x7f0000003d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010100, @multicast2}}}], 0x68}, 0x20000840) r11 = openat$cgroup_ro(r9, &(0x7f0000003dc0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f0000003e00), &(0x7f0000003e40)=0x8) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000003e80)={r8}, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r12, &(0x7f0000003f80)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x20, 0x1410, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r13, &(0x7f00000040c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x14, r14, 0x5, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) getsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f0000004100), &(0x7f0000004140)=0x4) 1.140513534s ago: executing program 3 (id=544): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000aa11000001"], 0x0) 1.136322243s ago: executing program 1 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) (async) 1.133318001s ago: executing program 3 (id=548): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x39ee, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1}], 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006a00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r3, &(0x7f0000000300)="299b543820bbc06970cb4e2eb3f9fb5a63c652b9327fa7f11f4822b8ae11d353bda8b32a6ac02ad5a559fbb6506b1524b176e3f1809263c3093ae3b542892486bb71329f178bb6f66cae85b0e5df7245b01c3e06ace2c7ee9c4c8210db49543dd8b7fe1ba9a8ff8cb4a7cbbc3c0d3b3a1ebf33b9a23860226fbaa398d117dca238693b14ad574578dfc7903fc85c987cae619ef892baf435a96fa56ee87ef92e", 0xa0, 0x4000805, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @private2, 0x1}, 0x1c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x7fff}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x8) 1.109703415s ago: executing program 4 (id=549): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x5}, 0x4}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.091292917s ago: executing program 1 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500085ff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 952.270478ms ago: executing program 1 (id=551): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x2, 0x300) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r9 = socket$netlink(0x10, 0x3, 0x0) pwrite64(r9, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xe96140ff6fa760c1}, 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080028bd7000fddbdf250b00000008000300", @ANYRES32=r11, @ANYBLOB="06000a00a1aa00000c000600010000000100000006000a00a0aa000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060000000000000000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="06000a00a0aa00006ebc312be7ed8b4dea7a7714452d1144c82d11369f0a86b6e6122604a2dc9bc9bc6e039dbec4d677cb2e4a75606a81f0722ab6c6b0393c037f529e5fe0272b920fe4822a67f38bde79fb7f19aaa9e4c9d0e9292d003381801cbae6d097f11123bfce0f6b7c33dbd57891f88c8c00"/131], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$rds(0x15, 0x5, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf251400000008000300", @ANYRES32=r12, @ANYBLOB="0500290000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x4004000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r15}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r16 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0900000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="feffffff00000000000000042c51ec1b966b751b68199a12000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r17}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r17}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x3f87b73a51366be5, 0x4, 0x0, 0x7, 0x50, 0x10}, @exit, @map_fd={0x18, 0xa, 0x1, 0x0, r15}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x1ff, 0x2f, &(0x7f0000000340)=""/47, 0x41000, 0x28, '\x00', r1, 0x25, r16, 0x8, &(0x7f0000000580)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x80000000, 0xb}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r17], &(0x7f0000000680)=[{0x1, 0x3, 0x0, 0x9}, {0x4, 0x1, 0xa, 0x4}, {0x2, 0x1, 0x0, 0x3}]}, 0x94) 812.77945ms ago: executing program 1 (id=554): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3ff, 0x8, 0x8}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000ffffffffffffffe50000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@dellinkprop={0x34, 0x6d, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x420a6, 0x4000}, [@IFLA_IFALIAS={0x14, 0x14, 'xfrm0\x00'}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x401) (async) listen(r7, 0x0) (async) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) shutdown(r7, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r6, &(0x7f0000000440)="2cd32fc5ae4725c74023d5f90a956e51f47119fa7e631b8566402c", &(0x7f0000000000), 0x2}, 0x20) (async) r8 = socket$inet_sctp(0x2, 0xe, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x26, "06527b27256fcb8bb44f34bc670011313dc12f6416476e5cb85619949e30949fa20dac3cb340"}, &(0x7f00000002c0)=0x2e) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000380)={r9, @in={{0x2, 0x4e21, @private=0xa010101}}}, &(0x7f0000000300)=0x84) socket$nl_rdma(0x10, 0x3, 0x14) 760.720371ms ago: executing program 4 (id=555): r0 = socket(0x8, 0x80000, 0x0) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) 682.054147ms ago: executing program 4 (id=556): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x40000000015, 0x5, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000000c0)) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401"], 0x20}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2040) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000000004"], 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) 649.499494ms ago: executing program 1 (id=557): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)="400001", 0x3}, {&(0x7f00000013c0)="1a2b936dc1fb35184db35eab1d", 0xd}], 0x2}}], 0x1, 0x4404c880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendto$inet6(r0, &(0x7f0000000140)="6eeee9ce73fc117a", 0x8, 0x20043304, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f00000044c0)=[{r3, 0x209}], 0x1, 0x8000) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x6, 0xaa, 0x7}, &(0x7f0000000040)=0x10) 536.496598ms ago: executing program 2 (id=558): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000000c0)={@default, @null, @default, 0x7, 0x1, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc000080}, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) 527.798761ms ago: executing program 4 (id=559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=@updpolicy={0x104, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d5, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3504, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3}]}]}, 0x104}}, 0x10) 467.065786ms ago: executing program 0 (id=560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=r2], 0x340a) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 451.614245ms ago: executing program 2 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x5, 0x5, {{0x6, 0x4, 0x0, 0x29, 0x18, 0x67, 0x0, 0xc, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r0}) sendmmsg$inet(r3, &(0x7f0000000380)=[{{&(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="cd6362747581ecfa6304793581b3f8eecc0a71214b3499ea583b2edd6dfe362dcdd7b64ee3de703a5700bea5dd2775df43eea1890c523376fe8867024eb5ef53f5d8cd4e226fd1bfd63ca09e34eb60381b912bae3da7ca14e8f81acb2056998afeee3c3b500f73973018c214f21e67aa623b27c2643f3685a703a64190d1e464e8cb8e92549e97440f3740c52072d7fd5ce6f273612df044ff", 0x99}], 0x1}}], 0x1, 0x80) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000003c0)) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc) pipe(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001900)={r5}) 387.966294ms ago: executing program 4 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500090ff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 387.113009ms ago: executing program 2 (id=563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500"], &(0x7f0000000040)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 259.441229ms ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x204, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1cc2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x450}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb760}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x65c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf98}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x43c}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d4, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xf, @private2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @mcast2, 0xfffffffa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "591c5f251290c3b0cadd99c845a4a5706500b935"}}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "5768c50dffb9f412c365e8ce11697c3167a2934fc91a69ce1fd02f97454e0d171311180b1c64019673587deabebff346ad45216a61f282c157b62f73e8065fb1850adf6a0879fac5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3225186e}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x38, 0x3, "1af6939e1920b04d6ad2dd2e39edeea51228660e9fe2bc2bce00de8dad8251513b5e81bd3c8e8c1b85a47b069754eee33d8bc1d5"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000780)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4d, 0xff, 0xfffc, 0xfc01, 0x200, "5a88bff3c97b711b6c868a014a5a63ba85c6f42e3912f68d7ea7bc43b2355c41c2e3b92171bf5b85142e3e0825070d759693661bc0017bece4a5c75fc3e79a3e82f0dc5008a683958c4256992877cca9b2374fb6e8c1b5eafde4fd269e0783453e7d7f66973b29bf06c213ef171d60d1eb0b19b9b6d31be1e27de23e202d8deb"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc051}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000ac0)={'netpci0\x00', 0x4000}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000b40)={0x0, @l2={0x1f, 0x0, @none, 0x7}, @phonet={0x23, 0x4, 0xa, 0x4}, @ethernet={0x1, @broadcast}, 0x9, 0x0, 0x0, 0x0, 0x9e8, &(0x7f0000000b00)='ip6_vti0\x00', 0x4, 0x10001, 0x2}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40884) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000cc0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r11, 0xc0096616, &(0x7f0000000d00)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7a49284c}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x61}, {0x8, 0x15, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x7ff}, {0x8, 0x15, 0x433}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ff0000}, {0x6, 0x11, 0x8001}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xff80}, {0x8, 0x15, 0xffffffff}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40004}, 0x48000) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000f80)=[@sack_perm, @window={0x3, 0xfff, 0x1cd}, @timestamp, @window={0x3, 0xe4, 0x3c46}, @mss={0x2, 0x9}, @mss={0x2, 0x200}, @window={0x3, 0x200, 0x88}, @window={0x3, 0x101}, @sack_perm], 0x9) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r13, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x3, 0x25}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081}, 0x20000001) r15 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r3) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000001400)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)={0x19c, r15, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x556c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfa}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x890}, 0x2000000) 257.862539ms ago: executing program 4 (id=565): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="ea835b2102c7955dba31dd25217c93b4bce500a41e653909dbbc6c60fac76e2cc545690e653dfb6181af7eb2a3e2d749e2dc682b408054e9ea4469d751d2f1530e81d2a18b15e724936d52b374e7fec28acff03e0c0a08d31f2a6d7d87729d0930c13e03c99fa54ecd320fbbbe50fcc65c36932e95d08586aa692968fab1939bf3c6b157458e7dbe788bd8fd99755effc06416650fae18084fb1fffbd0ad42748a9686a42f7a270e385258755376e2df99106fab1e79345d1a6f02772f4e1e638113205fe0faf9b09462a3d49810311c2f2c1de78519302003280a0c0e3fd7adb2d7055a170339befe55d8b2710977a610ad664c5c", 0xf5}, {&(0x7f00000001c0)="c83de12407bc93310bad3b2106009c341722264966b8e00b66b6f72b776548dd54c754c0fabd9a06e344959e247c998bb5", 0x31}, {&(0x7f0000000200)="62162990a280609ab8f64e72ce94df585b35719d4ed4a01c765e187da1a647cf6a1e042ba7defdefbf3b21dcd164b3e8a425ce51ff201681848904b021e08b2d156b527b61c13ab9caa51eb9c21f5a5c83ac71c3ba5f63b342dd1a77ab653aba7637cc3a46fd7ebd02c16af9a08ca0b467f47410da3ea407c84ac37f23efa54413517dbe68e8058c22b2b383cb5f1b0b7d529f4f6dc5c084bf791ab9805c90374dcb6cc9e67245d4e0f2e499f0778ac63ca2bf7cc27b894c725539447f7b8c4298b4d72fd801602cdabbc5c458f1d424bf", 0xd1}], 0x3, &(0x7f0000000340)="18c8d99e02cfdbc2e2108d6bd59e9a69f7430607ad28e14dd0cfa693fe548b422b3fa8e733ba1663651e23a79258bc6334f0957e83fc5479317921a2cbb4c25c8a408a76fb9bc0386edf10ab230aeffc41da1f550027f3efe8c2a1a5ca13efaf02ffffb65499db0dae89d465", 0x6c, 0x2008801}, 0x4) ppoll(&(0x7f0000000400)=[{r0, 0x4008}], 0x1, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480), 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40080d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "12c5c21754be3e6e712c627f3f0b9369"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x63}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c010}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000007c0)=0x6, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)="6688964538d43548992e33b1f84328404000014c1468aa03e4a6aa919332b9b908", 0x21, 0x80, &(0x7f0000000840)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r4, &(0x7f0000000880)="3dd45be8b437336fbcaa2a5d643bc2b51cad5d0d55cd4ccd5650e9c57ddd17b0ab7cbd86e0a8e4be0a81789ac28aad6d99914accebc8415a84945d32bce47a3af1011e5b6083606d8cdf46dafda80b49521f92f45e3815e59b4e35cfb7e2097641ddff41ac841afb5bd339cbb109e039af180cf39669c25e7d9aed7e76a3a0eaa3dfde389d769f4d8ff0460ea7fdbc6ad9bd0ee03d6a8e48d3820ee6bcc527af1118a5e44f15aa20149652c1861717eabba2f1bf621b6daed4c27a5457006f51e071c5d9abdc8432057142145844513da0f585035f9500294004506da58971bd814334b9b9beb3ded0d466ecef401c12f4eeb4e52b33c0cef6eccc03bcb2063022ec88405b577c7bebea03730e76fa7b21ddf7e58be7cef97378bf67e9f1a34d90d8c6fd1729b732cbbd4228d91943ceaf8b473b37f17802a1b412e6c7793b081c1838379b179042db3a6f780c185e9336760112b1b5c85f32af8a0a65e68971a8e2b75d7fc195c642c018aaf2f37dabf623b7e0daa70e79845152b027a1e3099c7577b2833c6a8c5c944b53a5114533433fbaa11ff049ff38d9b5a04e8486f58a874666043e6cec051873b44d748a4233c977b7a9112cfede5304c4eee89757f64f0c80c7fbd3afaa7e145e408219e11750359d772991b295038bd5fc2582a5533e2de7e47f873567571a81960010473726ea62301fbde6cc7337d571823f5bcfc3ba52cfddb30916d1222ba758d11b6bbb0eeec9f19cb54f21339ca24127f2bf491d38e58d34e3611e7ba30d9383367f4a92cf5c5d1e7ee92ed71d0d1384fb83cf81933d7207f84264ead0685f8367c58bd398ed106312057b4aa71692e59c67915eb549e424840a5d0cee46279ca51f06ef0d2acb8eec162c8596880aa32827b4a99788bf6619fbfdec143ad40e7c9ae741637ac597ef20b9c607381f4b3634619a1b257f5dd5df7eb4b24859cdd9151d7ba49e1a23073b3be72b9657eacc20330a243bc40d88d2181eb5cdce22466f0243a2e98a59504997fd8a01e06cbdc0f588d313177720a2dc1233d3b8905c62621e6b5272c85ab8763dd746beaf215fdc0b3a77db3fd27c1f35bdec886dfbfec0831c6d3c8c88cb9025792b16aab28d3195bacb4d24a22692368ce1f37ec8e8444d7dcde6b674e8b28c212d7f51047ab4034c8e103bee524f1ac75d292678ea38b4adc7fd40fde50f68a6836f8fa5544ecc2ef06a8b4ffd09ef581e100d06795f77ea9d18de98fcc9c4f5e0e9752d7ee6030737e1fe5aa959555fb0cbd852b46eefe08900c207cd0de3b38e75dd2a95d21edc7b0b08722a9031d21f97b382ac36744bd0eddf908569891999d2cb76bbcc7afb6633e066c854e5da1e1302e1efd713e5cc4a3e92da24c84657b1d7bebbe7b5c6df5416b6e595eba29b4714affc7b97a7c35d16affa587c60b75aae1ae3a9c823a9be5ece722b2a8b4cd101e3ebd793b54ca4d91d2681e323a583df634b0a404a1841ec3707e0ef66fb45f8c103c2ce0ce45c00b9a5b26732b16499d207152c31fd551b1dcb033322223dc7892b6417346c4bf608628a248b499d85f53ca48a838b7b0756ce073a0fff548bfb61623c95208d1fda7030a6919a4603cc5097985d77d1fb40b6786dd2896420f47711b55f64555fe7888177627234c75c2136022c5290f9046bb8dd4c1311dca3b6696b0bedde1e0dee7537476505331a140becbd30f472e9ed9158cf413578eb7cabdaa4c7f41ff7924dea6de4c23c2a95986f9ca432633990c639021b652e72a5fd4a2f8c7644376fab9c24c2e77d49119796bc272032f52eae0ac5ba8533c3375f4d663dccc69a095957c1e2379d2116f5fccf7a592dac354537b0f2c7ca4f658ead2ad4729236ce046af1466803b9b68b96e1235b7da295b8e53aea41c0fb3426807ea3c5afd49409db7ae1d15f2765379e8e0fab1e722798471114b69983b6c0c1f7c01703d2e7f4816626aa07182cf61c08e2442f466da6bc8785190feb119e1566432e46e3f2429a9a52da699aa97b5e436fa044b237a348d58c98adb194d6e3ca2a928dde13d35f61bca3b730f182985c76782d1b17ddce5658720bad7a8bf589d60e8d6eb3b28738b8b662f6d17fb31286c54fc951e7ad9b39bd14f0998478f89c673931477479c778f990c445c3dac53b94e86ec7a07ebcbb75692a7f85e267aa06b0b75fb7c7a49886fbef90b15ab49a1d338eeeef3375d4e5188cf92adbc81ab8ec07d0fe8b8e62ca8686361a558c7fea2877cbbaa706385a18ff344d33593e3a0b77fa12199d94995ca4a5fc492a3d029321ffbe94274be2b54afef9ecea33e9c945f40bbced95f319e58ef70ada39ac4e0bb2d65a7dab1e6b0adbfa030065e2fed5f8d5d96eec1eec16013dcf12bb5f4c12e62665bcd8196395fec0afca8f65a9a73c5c2e9272118eea561e596e4531e85ce64ee35eb6479e18932e17b8e996529d4bbd6f689c5b3f5c4413e86d5bd14f43e72084109dd9abda0886df1767e5add84ac84a20cf001936269cb1cb88966ca5e925c08dd9549c472db0cfc7a359a1d7e3ffe8e3c1ee907d356c43135c1cef9e49b78709d91071789a6a5621a8ba15c5dcd85d18371110ad2569c67ffb7df27dcd0900a7f4903c2b83804ae103c321972367de69edb6a42997cb0a5a797130392505d8d322c85c9403f36386f7039d9d7b567f775ee904cb3ffbc966446095ff8a2bbcaeb55f427f733b21de4ccbe21d101dc7a0e5aed7229671dc275ce285948dde0fc4b0ac1a203c82bb73d76a33e01bc1a1468d3740c9cc9d4ebf76aed8d13f846d43480c9544aa181519864904d05068b40909bd60ca0fb036fafd18dcc0440845f481ab4750fa5a792c9ca1b5418681bbd6eb0673545567ca4eb8ab98e47b929ed6b87db2ad0c0a66db5d1675807948867d3091858dcac50d453fd074b9b4b1554156cd9b0b092bf51922e98aa350d0f040c03c0742f74d7ddce7f88366ad897496d54c01a9319d6163e735af39f147d178a0855581ef5d458675ec31e938a12399df57e024ae7a32b4612a298ff1eda9705a1eb7ec465ea7fda42a918b8cafcc545d7676fdf61bc3e31f316866fd16b91e783be5799ac9c8a1c97442add7b723fffbfdae0c70caca1b61675980a6a67ba45d0c50bf1d85acf9766b8c339fb0e9ed2842823ec3b88782a840f3ccdcfb71033662f1233cb5f24ec6d554b7a6abe5602775c83bc412b19bddfbeed5951d7631126dc1498dca6c348be8b39b67eb3d94ef4f9b7215053159b46153d540aa2410e7476808cb6678ab0d46725cce5ca73cc4ceaa19bbe27ef6db926ec0772319f29d9529e01ef19851ea712c72c4d4e18d196b160fc9d765e4c294d0cd2ff7a94397ee832845e269eaf953da985eb2d4abcd3ccc8232be25e9df17c314e92185e5876fd41690f18d8ed051c8734778f78380cb9652579c8050b7b9f06e64e9c704656d239b66bc9abe6111ae3570febdadafb46769fae5aacb64eb0b6615b62110b69f2646d77b25448d92a17f867e7a9d6db9a054b2810ca4fc1309088a1f2847d62c0ec2398c1fcce23d3f7df798aa276379e1655f5e943e1aa8f265d46e4bca0fff975faca03a0d7d638f7bb3a5e126de2c8efecb493d449fbfc9cf5d0832cbcc2f18670f63c4a8088d33925aaeed6d1d7c8c1220e180fff41116c3c48366b0fa2498b9c9f2dd7b0fb852b2c8bc189b9de5e6243a971e35f29fb2b3f37fabcd948cc06c7694251e905a784b5fcdcd62c14a9c8f32acbec6006fd354e1e42f053c53ca97483f0464b954d078c63f62dbb2237ade41860aaf775bf4184437b8b7bf870e8da0d47867483a209df7d8809d5167175539c81f82f4104a9f7d41775e33043656c73f6b20b795d54408394f006897c4d4c00a2f866eb621926d30efd4bb25a6e6b3597eb0ce8e9e95b7577485be4c2a04ddfd703efd4aa43d94b1b7226249f37c2e27ff5db25d56ca1cf86e47c8be0b082977bc9c75d7e436222e493e322fecac837842b4b02bf2698046f55b0e4e6edc2097e66ce8fb590f8ecbb123cf0e9fc8c7123046d449c9bd6eaae38e25c2605dcc7b8dbb77fd8de8cf3eee2a095f2e73efa7cba91da63b1a9e30149a1c30ffd571a8eeda80e330b8f584deb5a9295268f6ab57cb0d73cba2b18921f4d3e66d8579c736dff72714479be031ff71dc0398d0dad7f420a4cdb8ed25c5d223d697d86506b93afc18084f95a11b188cd48f5d38a2b219d5cfa9a95152ec459aff876914ec294b387baabe658d1ed7703cad54c54d98ffd73629690a64b36fa05177fd8234a93669befc027f7e5cd9f3e2e791c178bcd14fab80143c515f67d7c9b2ed61d9f26349bec36c803e0924e7ee04e3834ebb492e16576ab59dccb7f8d3849e2d8f1c3fc7b9337d88a88ecc881c10a8693f63c9aa277851a839f3149db174ff265b504aefc7ae9e2cba75f38dbd210dfe06890b1e0779418db164cd57975dfabd2deb6a69e7769823d1fce0ca35980e393651f667b3768a66e2f1fb31353c734976aa4cdd2436902517391b196c9f3678564245984adadc04b37bcfe557003e30ee0fca94d357c13898f35a5fe3420e6c8a244a957464671c6203dd622864c209f669b389a8238a8d815729996596d0a81851e29f08f370fdc769d0faea1befdad0fd105bcb4f6ea0c31b73f7afdf18d2fb9cf271895cf4da001bad410b372159e1fab0e29a4bfe56b3af926b0e1f792ccdfaaaf91e02cba5cf3f71bbabc3c4edb2d52a0050a8c49aa47187dc9eba37f8ac40ebcd664fead4fd2e4c18b321eda6d97e61144f650c03605b555e902da22626b903a84591cb969a023db198c64b84baa3fee3023d9b6fd7ef97fc4343e073ffe19c965b50f6df192c0a2e3911b9a61fa339f1c1c305561806c00ad1fe048579bd7f96a6e1a53a09a55fdd79c96cb20511ba432632aa1bf3de852e13cbf0e5fb972d70cfeef6f24c330f8b5eb9b4b75a65a52dc52d5aebfb17ac06b4905a6d61c27626544ad414ae752b0f06eb1097dff8480ab3508f512fc7dbacfe83ebc9b1c51db429843c9466953e4a8f87441e8b35980b79d9f195f618a781d1686fc30cfbcf808b439d5043f94a92f377346656183226a3dc6759c4a7afae69ff891285b2ac602ab9b3284e1412d9539c3d6ba2e2aaaaca68cf6930d7212e0044e36563aace0d9463a15e62c7331f107d8f7c198902c16bb1120aa0bfe92cb67b499a4003d1153a6df3383c8ee86b80e271708f3fa856cad9d99f6de5b5263fe27af80ae84e616a126b3e492da4727fd02560d6c4ac4644440d5fb0fc321dff86c7733b1130c1bc67bf5b7fc0351c8b0d881dd1660114e76811c7ee2cfe44246df2ea0850cc58a450933dddf649e24328d9d118ae9f9a5de570ec4dca8e97af3d6366da249092e5905543cdfeac32ad3cb3d9d97c59f10beabcd587c0f4228c9df3cf43d5cb0c6fe1f65498d37ad0e69372662cbf8478a316d11ea76c92af29c3204cb738b83b1914da2fc394a19ac958da590f950e78b0985a7644c20cc1b96c6e380895543406be43cf85dd182c66219ec460138d685992b9550ef533413f8aaa5c76c48220c43757e149117a95f07a68fc6f6a0322befe0898aac36a8625b8db1db17b0c0ea5b5add6cdbafe68482c8853776bfc9dc67715cc9a9f8b349f22f74b19da6cf1d810dba861edaecbe34a0b82163af433ff57d7964b17bd79606c8188fe6dfd5d65dd482bf4f85b3855dd13128d42428d1baaa6ac439d011ae047ae", 0x1000, 0x11, &(0x7f0000001880)={0xa, 0x0, 0x1000, @mcast2, 0x7, 0x1}, 0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001900), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x20008000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001a40), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008000) epoll_pwait(0xffffffffffffffff, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x4, &(0x7f0000001bc0)={[0x6381]}, 0x8) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000001c00)=""/86, &(0x7f0000001c80)=0x56) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r8, &(0x7f0000001cc0)=""/53, 0x35, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'team0\x00', 0x0}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001ec0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xf, &(0x7f0000001dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @generic={0xf2, 0x8, 0x4, 0x3, 0x409}]}, &(0x7f0000001e40)='syzkaller\x00', 0x1fe4c5f8, 0x0, 0x0, 0x41000, 0x4, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000001f00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001f40)={0x3, 0x8, 0xfff, 0x4000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r13, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) sendmsg$nl_route_sched(r9, &(0x7f00000023c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10100002}, 0xc, &(0x7f0000002380)={&(0x7f00000021c0)=@gettaction={0x198, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4fb7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x502}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x55d}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x198}, 0x1, 0x0, 0x0, 0x60000800}, 0x20048041) 235.883957ms ago: executing program 3 (id=566): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)={0x24, r4, 0xccd495925cefb39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000801) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x10, 0x1, 0x1, 0x1006, 0x3, 0xec4, 0xb32a, [{0x6, 0x80000001, 0x1e, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x22401, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r15, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r14}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24}}, {0x8, 0x6, r13}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0x154, r15, 0x8, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r12) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r16 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 227.14466ms ago: executing program 0 (id=567): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xc3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x502, 0x3}, 0xc) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0x45) 157.876636ms ago: executing program 2 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @private=0xa010101}, 0x3, 0x1}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703020059feffff7f00002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x8891) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newtclass={0x89c, 0x28, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {0x5, 0x7}, {0xffe0}}, [@tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x848, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x8, 0x4, 0x0, 0x8001, 0x5, 0x5367cc9d, 0x101, 0x5, 0x7f, 0xffff, 0x329, 0x5, 0x7, 0xb1, 0x2, 0x2c65, 0x1000, 0x1, 0x8, 0x82e, 0x562c, 0x4, 0x80000000, 0x10, 0x7, 0x2, 0x0, 0xffff61d8, 0x5, 0xfffffffe, 0x100, 0x0, 0xad, 0x0, 0x6, 0x2, 0x3, 0x3, 0x1, 0x4, 0xe1, 0x666, 0x10001, 0x8, 0xfffffffe, 0xd7, 0xf7, 0x6, 0xdfa, 0x0, 0x1, 0x93ef, 0xfffffff9, 0xb, 0xfff, 0x10000000, 0x0, 0xf1df, 0xa, 0x49, 0x5f3f, 0x8001, 0x7, 0x1, 0x4, 0x9, 0x10, 0x8, 0x4, 0x1, 0x8, 0xf, 0x3, 0x7fff, 0x4, 0x7f, 0xbbf2, 0x3ff, 0x4, 0x1, 0x8, 0x10000, 0x8454, 0x7, 0x6, 0xff, 0xfffffff9, 0xfffffff7, 0x9, 0xd814, 0x6, 0x80000000, 0xd, 0x6, 0x96, 0x2, 0x6, 0x1000, 0x5, 0xe6, 0xffffffbd, 0x0, 0x0, 0xffffc5fe, 0x7, 0x3, 0x9, 0xfffffff3, 0x7e, 0x3, 0xa26, 0x5, 0x2, 0x40, 0x3, 0x7, 0x10, 0x1e, 0x5, 0x3, 0x5, 0x27, 0x0, 0x1, 0x7f, 0xfffffffc, 0x6, 0x8, 0x8, 0x8c, 0x1, 0x0, 0x3, 0x1961, 0x3, 0x8, 0xedcb, 0x401, 0x1, 0xeb, 0xff, 0x7968, 0x4, 0x9, 0x101, 0x800, 0x1, 0x8, 0x10001, 0x2, 0x4, 0x2, 0x6, 0x8, 0xfffffffe, 0x20000, 0x8, 0x5, 0x1, 0x7, 0x7aac, 0x6e8, 0x8, 0x7, 0x7fff, 0x8, 0x0, 0x0, 0x905, 0x9, 0xf7, 0x8000, 0x8, 0xffffff80, 0xfff, 0x1, 0x80000000, 0x5, 0x4, 0xd37, 0x9, 0x7fffffff, 0x0, 0x1, 0x2, 0x2, 0x8, 0x75, 0x6, 0x9, 0x6d848046, 0x6, 0x2, 0x5, 0xe8, 0x3, 0x80, 0x674, 0x92, 0xc6, 0x3, 0x8, 0xd, 0x80000001, 0x7ff, 0x1, 0x81, 0x9, 0xfb0, 0x83f, 0x101, 0x9, 0x21990474, 0x26, 0xe, 0x5bff, 0x0, 0xfe, 0x8641d03e, 0x10000, 0x2, 0x1, 0x39, 0x20, 0x8, 0x400, 0x6, 0x6, 0x0, 0x800, 0xf0, 0x2, 0x7, 0xc, 0x0, 0x40, 0x2, 0x9, 0x4, 0x2, 0x4, 0xc, 0xf72, 0x7, 0xfffffe01, 0x7ff, 0x7, 0xff, 0x3, 0x10001, 0x8, 0x7e08f326, 0x8, 0x3, 0xd]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x400, 0x5, 0x10, 0x7}, {0x7f, 0x1, 0x3, 0x9, 0x6, 0x80000001}, 0x8, 0x4, 0x8, 0x2, 0x2}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0xb1, 0x8, 0xfd, 0xffffff8d, 0x0, 0x0, 0xffffffff, 0x6, 0x6, 0x0, 0x7fff, 0xa89, 0x0, 0x6, 0x10001, 0x2, 0x8c25, 0x200, 0x800, 0xff, 0x9, 0x4, 0x7, 0x800, 0x2c5, 0x7, 0x1, 0x7ff, 0x10001, 0x7, 0x5, 0x101, 0x1, 0x6, 0x8, 0x1, 0x70, 0x5, 0xee, 0x8, 0x1, 0x32, 0x9, 0x2, 0x0, 0x5, 0x7fffffff, 0x52, 0x6, 0x7, 0x5, 0x0, 0x0, 0xfeb59bb, 0x9, 0x4, 0x300000, 0x4, 0x5, 0x98, 0x0, 0x6436, 0x8, 0x0, 0x6, 0x6, 0x9, 0x4, 0x2, 0x0, 0x6, 0x3ff, 0x9, 0x3, 0x3, 0x4, 0xfff, 0xd, 0x5, 0x6, 0x8, 0x0, 0x2, 0x4902, 0x36, 0x40, 0x8, 0xfffffff9, 0x3, 0x0, 0x10, 0x6a75, 0x9, 0xb7, 0xc, 0x7f, 0x0, 0xf, 0x1, 0x9, 0x80000001, 0x1a73, 0x6, 0x8, 0x13c5, 0xffffffff, 0x6, 0x400, 0x6cec159, 0x1, 0x3, 0xd5, 0xe, 0x4, 0x7, 0x7fffffff, 0x4, 0x2, 0x7ff, 0x5272, 0x4, 0x8, 0x2, 0x6, 0x9, 0x8, 0x6000000, 0xa60a4bb, 0x6, 0x274, 0x6, 0x8001, 0xfff, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x9, 0x9, 0x4, 0xff, 0x5, 0x5, 0xa, 0x2, 0x8, 0x6, 0x0, 0xffffabf5, 0xffffff45, 0x2, 0x3, 0xeb, 0x3ff, 0x40, 0x1, 0x200, 0xa79, 0xffffffff, 0x9, 0x5, 0x8001, 0x1, 0x8000, 0x1, 0x7fff, 0x5, 0x3ff, 0x88, 0x7, 0xfffffffd, 0x0, 0xde8e, 0x2, 0xc5, 0x3, 0xcaff, 0x9, 0xfffffffb, 0x162, 0x4, 0x8, 0x3, 0xc39f, 0xfffffffd, 0xa, 0x1, 0xfffffffa, 0x4e7, 0xfffffffe, 0x80, 0x20400000, 0x2, 0x2, 0x10001, 0x101, 0x4, 0x2, 0x6ccd, 0x3, 0x6, 0x7, 0x10000, 0x4, 0x9197, 0x7fff, 0x6ed, 0x8001, 0x2, 0x8, 0x1, 0x7, 0x1, 0x55a, 0x81, 0x2, 0x9, 0x3, 0xfff, 0x22, 0x0, 0x2, 0x2, 0xa11, 0x3, 0x8, 0xc, 0x7, 0x200, 0x6, 0x0, 0xaa60, 0x2, 0x0, 0xfb32, 0x5, 0x5, 0x3, 0xfffffff7, 0x1, 0xffffeeae, 0x6, 0x9, 0x92e3, 0x2, 0x0, 0xffffffff, 0x10000, 0x2, 0x5107bc05, 0x10, 0x80, 0x9, 0x6]}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x89c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0x4, 0x9, 0x10, 0x1}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x3) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000034006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8802ffff90780000080a00010009000000520000"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x80, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x0, 0x20000006}]}}}}}}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000009c0)=[{{&(0x7f0000000600)=@llc={0x1a, 0x201, 0x9, 0x5d, 0x6, 0x4, @multicast}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)="408ec820c68bb2d4c398e587f19fd7c0ecdbc9fe1379b201288d622d78779abfe0a0dab4167666174d65cc325ef3f06df33cefb3feefda670045f875588bb07c470a51ab3890ce6d6737515656eaf8413f1fe429c00f0be1c0508d83edb499469d315126e549e412c74f5428a3c7f3a70ee34db5f1350616e3fa60146684cce0830b0b6251f39235623dda6c6eeb476bc4323bef4473a99a52cca88dd166a7d71363b50704b76628c3c6eb7bf0051b30299ae56ebaf4b28b5bc011903769864bf66284e2daa7a0acaac843d291842673e492174a189d18cbdcda2c969a4e633b8ca61578d70804ba98b47ea2909b2880", 0xf0}, {&(0x7f0000000780)="a7e3c04b2161993e688032f623edc5eee9d5f14e4906e958408f8254707315c5daea2d4235492ac57be5fc06ecad2acc8c872848b7c216a557e9c2a4f6ddf1fe8daeddce876aa2e1f76e42bff8acd7a2b0a6cf636cf6244b735a9941eea69ec1de8a63664a9d926d8b6e3782bc5a85ed8d2c986affaacf1b68980bc482204146f652346f15520eff81bb2e9d84f79995b4d685777254126be0b7e0d317b59c4bace9590d573525eed0fa", 0xaa}], 0x2}}, {{&(0x7f0000000880)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000900)="d4d575cba09eb5309d6cd69d6df41c8c4e5c1a28835ba5cc4a37bbc134a85685f282a89de93ea1278863a09aed24b59ec98c5e5b3de8268f88de160d1a97463ea11871b4ea455b576abd78406a6af80ed898a6d252a5ca49a2a4cddec7dc7a4aa22dda6d4827963ea8b56a2fa1357b2ddb84d8", 0x73}], 0x1}}], 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 48.581109ms ago: executing program 0 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@can_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "dd5f392602cc3057"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}}]}, 0x40}}, 0x0) 46.99439ms ago: executing program 3 (id=570): r0 = socket(0x15, 0x6, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x890, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r5, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5, @ANYBLOB="595be4b260b289d5bffefc3395147d59268d64302703c9c4e1c0b4b86f24f2ca163e4d49fa3e820b0a647659ebda5b7a12e12ba7a7dd0efb44a188981308b6ec279421d10d35d1926aabc763c0000000"], 0x24}}, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r5, 0x1, {0x0, 0xf0}, 0x1}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r0, 0x0, 0x4008801) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a010100000000000000000100000008000b400000000014000480080002400000000008000140006000000900010073797a30"], 0xa0}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r14, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x288, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x7, 0x4}, {0x7, 0x7}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x9}, {0x6}, {0x3}, {0x6, 0x3}, {0x7, 0x6}, {0x3, 0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7ff, 0x5, 0x1, 0x7fff, 0xfff9, 0x6, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7ff, 0x3ef, 0xe2fe, 0x3, 0x8, 0x80, 0x747]}}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b, 0x1, 0x5, 0x39, 0x8, 0xfff6, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x6, 0x3ff, 0x0, 0x1, 0xd8, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x1, 0x5, 0x3, 0x1, 0x6, 0x9, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9885, 0x7, 0x10, 0x5, 0x1ff, 0x3, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x45a2, 0x9, 0x9, 0x7, 0xfffe, 0x401, 0x2, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5d0, 0x6, 0xc38, 0x7, 0x0, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x12, 0x24, 0x48, 0x2, 0x3, 0x24, 0x3, 0x1b, 0x12, 0x1, 0x30, 0xeb4e4f5a96d6059f, 0x6, 0x60, 0x6, 0x2, 0x60, 0x30, 0x7, 0x4, 0x9, 0x3, 0x3, 0x16, 0x30, 0x1, 0x5, 0x2]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x5, 0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x3, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1ff, 0x4, 0x2, 0x9, 0x9, 0xffff, 0xe4d]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0xa}, {0x3, 0x9}, {0x5, 0x6}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x1}, {0x4, 0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0x4}, {0x2}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0xa}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x6}, {0x7, 0x4}, {0x2, 0x4}, {0x2}, {}, {0x7, 0x2}, {0x7, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x3, 0x6}, {0x6, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x70, 0x0, 0x9, 0x7, 0x7fff, 0x1, 0x9]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff1, 0x4, 0xa7df, 0x81, 0xffff, 0x4, 0x8, 0x4]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x8}, {0x5, 0x5}, {0x7}, {0x4, 0x1}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x5, 0x2}, {0x2}, {0x2, 0x7}, {}, {0x2, 0x2}, {0x4, 0x2}, {0x3, 0x5}, {0x1}, {0x0, 0x3}, {0x7, 0x9}, {0x5, 0x2}, {0x0, 0x6}, {0x1}, {0x4, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x7}, {0x7, 0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x400, 0x21, 0x55, 0x7, 0x3, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x7}, {}, {0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0xa}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x4, 0xa}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x5}, {0x1, 0x3}, {0x7}, {0x0, 0x2}, {0x1}, {0x7}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x7, 0x6}, {0x6}, {0x0, 0x8}, {0x3, 0x3}, {0x2, 0x8}, {0x4}, {0x5}, {0x4}, {0x4, 0x5}, {0x2, 0x4}, {0x7}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x5, 0x5}, {0x4, 0x8}, {0x1}, {0x6, 0x5}, {0x6, 0x7}, {0x6, 0x5}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x7}, {0x7, 0x2}, {0x3}, {0x4, 0xa}, {0x2, 0x3}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0x8}, {0x3, 0x5}, {0x3, 0x6}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6e1d, 0x6, 0xff, 0x200, 0x2, 0x1, 0x200, 0x4]}}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x800) 46.19723ms ago: executing program 0 (id=571): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x3}]}}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000040)=0x7ff, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x10}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8000000006"], 0x174}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@default, @default, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x7ff, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d0000340000200000009078ac1e00016401010001441c19017f00000100000100000000000000"], 0x0) 0s ago: executing program 2 (id=572): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/217, 0xd9}, {&(0x7f0000000180)}, {&(0x7f0000000280)=""/180, 0xb4}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f00000001c0)=""/79, 0x4f}], 0x5, &(0x7f0000000640)=[{0x110, 0x0, 0x0, ""/250}, {0x18, 0x0, 0x0, ""/2}, {0x1010, 0x0, 0x0, ""/4096}], 0x1138, 0x40000302}, 0x38, 0x40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="e5f1fddfe175759743a2d6055bef6ad67f4806ff6ac3a93555c1b5b84294df29b09e92680ca8bd3dc842c3147716237f0ad0c3ab59f41083aeb894e76f", 0x3d}], 0x1}, 0x20000044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 67.509219][ T5813] cgroup: Unknown subsys name 'net' [ 67.656572][ T5813] cgroup: Unknown subsys name 'cpuset' [ 67.664778][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.084767][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.287216][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.293604][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.311591][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.320941][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.328693][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.336951][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.344554][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.352402][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.360320][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.366742][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.367914][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.382914][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.384266][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.391331][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.405441][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.405608][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.412869][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.420403][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.435521][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.443183][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.472572][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.473779][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.483915][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.494508][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.495408][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.501751][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.546503][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.912630][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 74.210792][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.218012][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.225945][ T5835] bridge_slave_0: entered allmulticast mode [ 74.232890][ T5835] bridge_slave_0: entered promiscuous mode [ 74.251391][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 74.280677][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.287901][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.295689][ T5835] bridge_slave_1: entered allmulticast mode [ 74.304029][ T5835] bridge_slave_1: entered promiscuous mode [ 74.364006][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 74.402047][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.422636][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 74.439688][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.449118][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 74.550651][ T5835] team0: Port device team_slave_0 added [ 74.597416][ T5835] team0: Port device team_slave_1 added [ 74.611952][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.619149][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.626669][ T5825] bridge_slave_0: entered allmulticast mode [ 74.633700][ T5825] bridge_slave_0: entered promiscuous mode [ 74.702186][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.709655][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.716996][ T5825] bridge_slave_1: entered allmulticast mode [ 74.724687][ T5825] bridge_slave_1: entered promiscuous mode [ 74.736264][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.743183][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.769195][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.785445][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.792553][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.799949][ T5830] bridge_slave_0: entered allmulticast mode [ 74.806906][ T5830] bridge_slave_0: entered promiscuous mode [ 74.829773][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.836860][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.862765][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.884851][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.892014][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.899787][ T5830] bridge_slave_1: entered allmulticast mode [ 74.906927][ T5830] bridge_slave_1: entered promiscuous mode [ 74.980158][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.001174][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.008393][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.016228][ T5832] bridge_slave_0: entered allmulticast mode [ 75.023050][ T5832] bridge_slave_0: entered promiscuous mode [ 75.030185][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.037444][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.044606][ T5823] bridge_slave_0: entered allmulticast mode [ 75.051427][ T5823] bridge_slave_0: entered promiscuous mode [ 75.060837][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.072532][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.091540][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.098826][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.106033][ T5832] bridge_slave_1: entered allmulticast mode [ 75.112872][ T5832] bridge_slave_1: entered promiscuous mode [ 75.119604][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.130737][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.137902][ T5823] bridge_slave_1: entered allmulticast mode [ 75.144795][ T5823] bridge_slave_1: entered promiscuous mode [ 75.154106][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.226955][ T5825] team0: Port device team_slave_0 added [ 75.267330][ T5835] hsr_slave_0: entered promiscuous mode [ 75.273710][ T5835] hsr_slave_1: entered promiscuous mode [ 75.281919][ T5825] team0: Port device team_slave_1 added [ 75.290005][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.301993][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.313090][ T5830] team0: Port device team_slave_0 added [ 75.321281][ T5830] team0: Port device team_slave_1 added [ 75.339700][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.351033][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.435370][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.442320][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.468677][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.480316][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.487392][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.513429][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.524424][ T5150] Bluetooth: hci1: command tx timeout [ 75.524703][ T5833] Bluetooth: hci4: command tx timeout [ 75.544337][ T5823] team0: Port device team_slave_0 added [ 75.551872][ T5832] team0: Port device team_slave_0 added [ 75.565381][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.572315][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.598298][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.609041][ T5150] Bluetooth: hci2: command tx timeout [ 75.614674][ T5844] Bluetooth: hci0: command tx timeout [ 75.620577][ T5833] Bluetooth: hci3: command tx timeout [ 75.627095][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.634167][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.660035][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.672465][ T5823] team0: Port device team_slave_1 added [ 75.679715][ T5832] team0: Port device team_slave_1 added [ 75.803041][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.810638][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.836542][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.848935][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.856190][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.882180][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.908897][ T5830] hsr_slave_0: entered promiscuous mode [ 75.915607][ T5830] hsr_slave_1: entered promiscuous mode [ 75.921566][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 75.927761][ T5830] Cannot create hsr debugfs directory [ 75.939172][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.946267][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.972248][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.984210][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.991149][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.017460][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.044911][ T5825] hsr_slave_0: entered promiscuous mode [ 76.051467][ T5825] hsr_slave_1: entered promiscuous mode [ 76.057651][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 76.063519][ T5825] Cannot create hsr debugfs directory [ 76.228625][ T5832] hsr_slave_0: entered promiscuous mode [ 76.234887][ T5832] hsr_slave_1: entered promiscuous mode [ 76.240886][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 76.246708][ T5832] Cannot create hsr debugfs directory [ 76.281412][ T5823] hsr_slave_0: entered promiscuous mode [ 76.288214][ T5823] hsr_slave_1: entered promiscuous mode [ 76.294582][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 76.300302][ T5823] Cannot create hsr debugfs directory [ 76.593825][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.624134][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.634721][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.674026][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.758262][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.774833][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.784571][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.794830][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.881537][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.898488][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.908538][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.920599][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.034184][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.045759][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.065433][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.077442][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.096105][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.171761][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.230811][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.238061][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.262135][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.272982][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.285527][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.292585][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.317078][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.324022][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.336980][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.359826][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.391580][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.416517][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.423664][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.439064][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.472113][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.479202][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.488620][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.495719][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.536440][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.543642][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.567109][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.605132][ T5833] Bluetooth: hci4: command tx timeout [ 77.610546][ T5833] Bluetooth: hci1: command tx timeout [ 77.674723][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.694807][ T5150] Bluetooth: hci2: command tx timeout [ 77.700423][ T5150] Bluetooth: hci0: command tx timeout [ 77.706091][ T5833] Bluetooth: hci3: command tx timeout [ 77.753001][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.760148][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.775598][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.782724][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.852681][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.920161][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.941824][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.990846][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.042732][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.049889][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.090447][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.115640][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.122756][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.250914][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.344460][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.368874][ T5835] veth0_vlan: entered promiscuous mode [ 78.419722][ T5835] veth1_vlan: entered promiscuous mode [ 78.476750][ T5825] veth0_vlan: entered promiscuous mode [ 78.497111][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.521280][ T5825] veth1_vlan: entered promiscuous mode [ 78.546638][ T5835] veth0_macvtap: entered promiscuous mode [ 78.572191][ T5835] veth1_macvtap: entered promiscuous mode [ 78.646123][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.689213][ T5825] veth0_macvtap: entered promiscuous mode [ 78.698004][ T5832] veth0_vlan: entered promiscuous mode [ 78.716867][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.729617][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.742343][ T5825] veth1_macvtap: entered promiscuous mode [ 78.751412][ T5832] veth1_vlan: entered promiscuous mode [ 78.801683][ T1026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.818119][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.833513][ T1026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.858337][ T1026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.867358][ T1026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.879948][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.906265][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.933027][ T5832] veth0_macvtap: entered promiscuous mode [ 78.939859][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.949203][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.986343][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.004809][ T5832] veth1_macvtap: entered promiscuous mode [ 79.086165][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.091082][ T5830] veth0_vlan: entered promiscuous mode [ 79.114170][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.134799][ T5823] veth0_vlan: entered promiscuous mode [ 79.159932][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.182391][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.187537][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.197512][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.205356][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.205380][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.251251][ T5823] veth1_vlan: entered promiscuous mode [ 79.261699][ T5830] veth1_vlan: entered promiscuous mode [ 79.296412][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.300666][ T1026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.323905][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.341680][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.351009][ T1161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.395562][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.406037][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.428797][ T5823] veth0_macvtap: entered promiscuous mode [ 79.464888][ T5823] veth1_macvtap: entered promiscuous mode [ 79.502770][ T5948] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 79.516188][ T5830] veth0_macvtap: entered promiscuous mode [ 79.532734][ T5948] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.537499][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.549113][ T5948] block nbd0: not configured, cannot reconfigure [ 79.577575][ T5830] veth1_macvtap: entered promiscuous mode [ 79.635512][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.688524][ T5833] Bluetooth: hci1: command tx timeout [ 79.694613][ T5150] Bluetooth: hci4: command tx timeout [ 79.738760][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.746758][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.755847][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.764929][ T5833] Bluetooth: hci2: command tx timeout [ 79.774218][ T5833] Bluetooth: hci3: command tx timeout [ 79.779649][ T5150] Bluetooth: hci0: command tx timeout [ 79.790150][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.799959][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.824539][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.828299][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.839698][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.917749][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.927670][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.945944][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.954099][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.976043][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.991460][ T5961] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 79.999590][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7'. [ 80.029821][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.064707][ T5961] dummy0: entered promiscuous mode [ 80.080616][ T5961] bridge0: port 3(dummy0) entered blocking state [ 80.089987][ T5961] bridge0: port 3(dummy0) entered disabled state [ 80.097562][ T5961] dummy0: entered allmulticast mode [ 80.106277][ T5961] bridge0: port 3(dummy0) entered blocking state [ 80.112815][ T5961] bridge0: port 3(dummy0) entered forwarding state [ 80.247872][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.299619][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.349607][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.359475][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.368428][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.378881][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.387832][ T5964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.420828][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.436415][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.811329][ T5972] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 81.080396][ T5988] FAULT_INJECTION: forcing a failure. [ 81.080396][ T5988] name failslab, interval 1, probability 0, space 0, times 1 [ 81.150134][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.4.11 Not tainted syzkaller #0 PREEMPT(full) [ 81.150160][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.150176][ T5988] Call Trace: [ 81.150183][ T5988] [ 81.150191][ T5988] dump_stack_lvl+0x189/0x250 [ 81.150223][ T5988] ? __pfx____ratelimit+0x10/0x10 [ 81.150244][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.150265][ T5988] ? __pfx__printk+0x10/0x10 [ 81.150286][ T5988] ? __pfx___might_resched+0x10/0x10 [ 81.150303][ T5988] ? fs_reclaim_acquire+0x7d/0x100 [ 81.150328][ T5988] should_fail_ex+0x414/0x560 [ 81.150354][ T5988] should_failslab+0xa8/0x100 [ 81.150371][ T5988] kmem_cache_alloc_node_noprof+0x77/0x710 [ 81.150392][ T5988] ? __alloc_skb+0x112/0x2d0 [ 81.150406][ T5988] ? netlink_autobind+0xdb/0x300 [ 81.150426][ T5988] __alloc_skb+0x112/0x2d0 [ 81.150444][ T5988] netlink_sendmsg+0x5c6/0xb30 [ 81.150469][ T5988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.150490][ T5988] ? aa_sock_msg_perm+0xf1/0x1d0 [ 81.150513][ T5988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 81.150528][ T5988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.150544][ T5988] __sock_sendmsg+0x21c/0x270 [ 81.150564][ T5988] ____sys_sendmsg+0x505/0x830 [ 81.150587][ T5988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.150613][ T5988] ? import_iovec+0x74/0xa0 [ 81.150632][ T5988] ___sys_sendmsg+0x21f/0x2a0 [ 81.150648][ T5988] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.150689][ T5988] ? __fget_files+0x2a/0x420 [ 81.150702][ T5988] ? __fget_files+0x3a0/0x420 [ 81.150722][ T5988] __x64_sys_sendmsg+0x19b/0x260 [ 81.150749][ T5988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 81.150773][ T5988] ? __pfx_ksys_write+0x10/0x10 [ 81.150799][ T5988] ? do_syscall_64+0xbe/0xfa0 [ 81.150825][ T5988] do_syscall_64+0xfa/0xfa0 [ 81.150845][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.150867][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.150883][ T5988] ? clear_bhb_loop+0x60/0xb0 [ 81.150903][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.150919][ T5988] RIP: 0033:0x7fb1bc18f6c9 [ 81.150942][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.150955][ T5988] RSP: 002b:00007fb1bcfd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.150973][ T5988] RAX: ffffffffffffffda RBX: 00007fb1bc3e5fa0 RCX: 00007fb1bc18f6c9 [ 81.150983][ T5988] RDX: 00000000240000c4 RSI: 00002000000003c0 RDI: 0000000000000003 [ 81.150993][ T5988] RBP: 00007fb1bcfd9090 R08: 0000000000000000 R09: 0000000000000000 [ 81.151003][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.151012][ T5988] R13: 00007fb1bc3e6038 R14: 00007fb1bc3e5fa0 R15: 00007ffe54a99fb8 [ 81.151039][ T5988] [ 81.777028][ T5150] Bluetooth: hci1: command tx timeout [ 81.782576][ T5150] Bluetooth: hci4: command tx timeout [ 81.791056][ T5998] netlink: 'syz.0.12': attribute type 12 has an invalid length. [ 81.833501][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 81.845179][ T5833] Bluetooth: hci0: command tx timeout [ 81.850684][ T5833] Bluetooth: hci3: command tx timeout [ 81.853951][ T5150] Bluetooth: hci2: command tx timeout [ 81.887569][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 81.906552][ T6003] Unsupported xt match [ 81.906568][ T6003] unable to load match [ 81.953567][ T5998] netlink: 'syz.0.12': attribute type 12 has an invalid length. [ 81.961410][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 82.050709][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 82.069670][ T1161] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.082296][ T1161] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.102501][ T5998] Zero length message leads to an empty skb [ 82.133503][ T1161] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.155856][ T1161] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.327996][ T6022] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 82.344915][ T6020] sctp: Trying to GSO but underlying device doesn't support it. [ 82.488877][ T6029] syzkaller0: entered promiscuous mode [ 82.536989][ T6029] syzkaller0: entered allmulticast mode [ 82.587706][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.655061][ T6046] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.681607][ T6029] tipc: Started in network mode [ 82.688646][ T6029] tipc: Node identity 4a759b2bb94a, cluster identity 4711 [ 82.697083][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 82.713642][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 82.724731][ T6029] tipc: Enabled bearer , priority 0 [ 82.770340][ T6051] bridge0: port 3(vlan2) entered blocking state [ 82.778415][ T6051] bridge0: port 3(vlan2) entered disabled state [ 82.787381][ T6051] vlan2: entered allmulticast mode [ 82.792608][ T6051] bridge0: entered allmulticast mode [ 82.805661][ T6051] vlan2: left allmulticast mode [ 82.810527][ T6051] bridge0: left allmulticast mode [ 82.811965][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 82.831899][ T6028] tipc: Resetting bearer [ 82.847534][ T6028] tipc: Disabling bearer [ 83.283669][ T6075] netlink: 'syz.0.35': attribute type 12 has an invalid length. [ 83.319138][ T6075] netlink: 'syz.0.35': attribute type 12 has an invalid length. [ 83.731507][ T6086] bond0: entered allmulticast mode [ 83.739280][ T6086] bond_slave_0: entered allmulticast mode [ 83.765220][ T6086] bond_slave_1: entered allmulticast mode [ 83.872824][ T6093] syzkaller0: entered promiscuous mode [ 83.883447][ T6093] syzkaller0: entered allmulticast mode [ 83.921191][ T6093] tipc: Started in network mode [ 83.936070][ T6093] tipc: Node identity fee546ac526, cluster identity 4711 [ 83.947740][ T6093] tipc: Enabled bearer , priority 0 [ 83.961900][ T6092] tipc: Resetting bearer [ 83.990334][ T6092] tipc: Disabling bearer [ 84.261169][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.291526][ T6104] bond0: (slave rose0): Enslaving as an active interface with an up link [ 84.735670][ T6133] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET) [ 84.821913][ T6139] __nla_validate_parse: 5 callbacks suppressed [ 84.821929][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 85.009691][ T6143] syzkaller0: entered promiscuous mode [ 85.033094][ T6143] syzkaller0: entered allmulticast mode [ 85.064214][ T6151] netlink: 'syz.4.57': attribute type 2 has an invalid length. [ 85.154840][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 85.203906][ T6156] tipc: Started in network mode [ 85.208796][ T6156] tipc: Node identity 2e4a7e11dd02, cluster identity 4711 [ 85.240738][ T6156] tipc: Enabled bearer , priority 0 [ 85.279174][ T6141] tipc: Resetting bearer [ 85.315027][ T6141] tipc: Disabling bearer [ 85.648100][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 85.937467][ T6188] netlink: 56 bytes leftover after parsing attributes in process `syz.4.68'. [ 86.075616][ T5150] block nbd0: Receive control failed (result -32) [ 86.222642][ T6202] netlink: 96 bytes leftover after parsing attributes in process `syz.0.71'. [ 86.542046][ T6220] syzkaller0: entered promiscuous mode [ 86.556301][ T6220] syzkaller0: entered allmulticast mode [ 86.651124][ T980] cfg80211: failed to load regulatory.db [ 86.667558][ T6220] tipc: Started in network mode [ 86.685628][ T6220] tipc: Node identity 72f7cf237c77, cluster identity 4711 [ 86.714016][ T6220] tipc: Enabled bearer , priority 0 [ 86.736215][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 86.754103][ T6234] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 86.773948][ T6232] sctp: [Deprecated]: syz.0.79 (pid 6232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.773948][ T6232] Use struct sctp_sack_info instead [ 86.808054][ T6218] tipc: Resetting bearer [ 86.839758][ T6218] tipc: Disabling bearer [ 86.973103][ T6249] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 87.118711][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 87.127807][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 87.334608][ T6267] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.381378][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 87.404120][ T6271] netlink: 696 bytes leftover after parsing attributes in process `syz.3.92'. [ 87.463175][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.479529][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.502962][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.621321][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.657134][ T6290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.729144][ T6279] syzkaller0: entered promiscuous mode [ 87.745344][ T6279] syzkaller0: entered allmulticast mode [ 87.752479][ T6287] tipc: Enabled bearer , priority 0 [ 87.876730][ T6291] bond0: (slave bond_slave_1): Releasing backup interface [ 87.895562][ T6291] bond_slave_1 (unregistering): left allmulticast mode [ 88.712847][ T6346] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 89.321303][ T6278] tipc: Resetting bearer [ 89.341345][ T6278] tipc: Disabling bearer [ 89.386783][ T5944] tipc: Node number set to 4081031979 [ 89.644497][ T6361] netlink: 'syz.3.114': attribute type 14 has an invalid length. [ 89.693102][ T6361] netlink: 'syz.3.114': attribute type 13 has an invalid length. [ 90.151271][ T6393] team0: Device gtp0 is of different type [ 90.348434][ T6401] __nla_validate_parse: 9 callbacks suppressed [ 90.348450][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 90.751601][ T6422] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20003 [ 91.103644][ T6439] warning: `syz.1.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.937581][ T6462] openvswitch: netlink: Key type 31 is not supported [ 91.952371][ T6453] bond1: entered promiscuous mode [ 91.960861][ T6453] bond1: entered allmulticast mode [ 91.966446][ T6453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.043847][ T6468] netlink: 516 bytes leftover after parsing attributes in process `syz.0.142'. [ 92.069882][ T6454] tun0: tun_chr_ioctl cmd 1074025675 [ 92.090198][ T6454] tun0: persist disabled [ 92.347687][ T6487] netlink: 68 bytes leftover after parsing attributes in process `syz.0.152'. [ 92.381747][ T6487] wlan0: mtu less than device minimum [ 92.495246][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 92.546243][ T6502] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 92.573957][ T6502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.579848][ T6504] netlink: 112 bytes leftover after parsing attributes in process `syz.4.158'. [ 92.596544][ T6504] netlink: 'syz.4.158': attribute type 21 has an invalid length. [ 92.616427][ T6502] netlink: 'syz.3.156': attribute type 13 has an invalid length. [ 92.631331][ T6504] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.647172][ T6502] netlink: 'syz.3.156': attribute type 17 has an invalid length. [ 92.788200][ T6502] bond0: left allmulticast mode [ 92.793397][ T6502] bond_slave_0: left allmulticast mode [ 92.812674][ T6502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.030532][ T6528] gre1: entered promiscuous mode [ 93.058071][ T6528] gre1: entered allmulticast mode [ 93.264806][ T6543] netlink: 256 bytes leftover after parsing attributes in process `syz.4.171'. [ 93.441585][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 93.489082][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.497069][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.730693][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 93.795065][ T6573] Bluetooth: MGMT ver 1.23 [ 93.860032][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 93.896263][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 93.911218][ T6579] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 94.032615][ T6582] syzkaller0: entered promiscuous mode [ 94.038287][ T6582] syzkaller0: entered allmulticast mode [ 94.223414][ T6588] bridge1: entered promiscuous mode [ 94.228652][ T6588] bridge1: entered allmulticast mode [ 94.249678][ T6594] xt_hashlimit: size too large, truncated to 1048576 [ 94.581571][ T6605] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 94.589094][ T5945] IPVS: starting estimator thread 0... [ 94.703469][ T6614] IPVS: using max 27 ests per chain, 64800 per kthread [ 95.039264][ T6629] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.082079][ T6629] xt_SECMARK: invalid mode: 9 [ 95.153632][ T6629] sctp: [Deprecated]: syz.1.199 (pid 6629) Use of int in maxseg socket option. [ 95.153632][ T6629] Use struct sctp_assoc_value instead [ 95.375358][ T6646] tipc: Enabling of bearer rejected, failed to enable media [ 95.429709][ T6644] tipc: New replicast peer: 255.255.255.255 [ 95.437355][ T6644] tipc: Enabled bearer , priority 10 [ 95.446337][ T5886] IPVS: starting estimator thread 0... [ 95.454086][ T6648] __nla_validate_parse: 2 callbacks suppressed [ 95.454100][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 95.508247][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 95.552705][ T6653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.577528][ T6651] IPVS: using max 26 ests per chain, 62400 per kthread [ 95.869495][ T6674] netlink: 56 bytes leftover after parsing attributes in process `syz.3.212'. [ 95.956207][ T6682] raw_sendmsg: syz.4.213 forgot to set AF_INET. Fix it! [ 96.397618][ T6700] tipc: Enabled bearer , priority 0 [ 96.420457][ T6710] netlink: 68 bytes leftover after parsing attributes in process `syz.0.222'. [ 96.442777][ T6706] syzkaller0: entered promiscuous mode [ 96.449651][ T6706] syzkaller0: entered allmulticast mode [ 96.480932][ T6699] tipc: Resetting bearer [ 96.576863][ T6699] tipc: Disabling bearer [ 96.588101][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.224'. [ 96.597546][ T6724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.224'. [ 96.608782][ T6719] wg1: entered promiscuous mode [ 96.615139][ T6719] wg1: entered allmulticast mode [ 96.628060][ T980] tipc: Node number set to 2894415532 [ 96.640854][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 96.657983][ T6724] netlink: 80 bytes leftover after parsing attributes in process `syz.2.224'. [ 96.702211][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 96.737709][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.227'. [ 97.147703][ T6748] netlink: 'syz.4.234': attribute type 13 has an invalid length. [ 97.312658][ T6753] : renamed from hsr0 (while UP) [ 97.470049][ T6761] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 97.478166][ T6761] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 97.863157][ T6780] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 97.883684][ T6780] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 98.457938][ T6807] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 98.779329][ T6814] openvswitch: netlink: EtherType 50a is less than min 600 [ 98.892484][ T6818] netlink: zone id is out of range [ 98.897684][ T6818] netlink: zone id is out of range [ 98.902815][ T6818] netlink: zone id is out of range [ 98.908666][ T6818] netlink: zone id is out of range [ 98.914325][ T6818] netlink: zone id is out of range [ 98.919435][ T6818] netlink: zone id is out of range [ 98.925199][ T6818] netlink: zone id is out of range [ 98.930350][ T6818] netlink: zone id is out of range [ 98.938080][ T6818] netlink: zone id is out of range [ 99.290973][ T6809] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 99.455284][ T6841] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 100.061438][ T6869] tipc: Enabling of bearer rejected, failed to enable media [ 100.485813][ T5150] Bluetooth: hci0: command 0x0c20 tx timeout [ 100.665235][ T6890] __nla_validate_parse: 12 callbacks suppressed [ 100.665252][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.290'. [ 100.858677][ T6897] ip6gre1: entered allmulticast mode [ 101.152144][ T6909] syzkaller0: entered promiscuous mode [ 101.170615][ T6909] syzkaller0: entered allmulticast mode [ 101.506567][ T6920] tipc: Enabled bearer , priority 0 [ 101.607115][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 101.689138][ T6920] syzkaller0: entered promiscuous mode [ 101.704628][ T6920] syzkaller0: entered allmulticast mode [ 101.717974][ T6912] infiniband syû: set active [ 101.723561][ T6920] tipc: Resetting bearer [ 101.732962][ T6912] infiniband syû: added bond_slave_0 [ 101.763561][ T6928] bond0: entered promiscuous mode [ 101.768613][ T6928] bond_slave_0: entered promiscuous mode [ 101.795200][ T6928] bond_slave_1: entered promiscuous mode [ 101.811445][ T6928] gretap0: entered promiscuous mode [ 101.819835][ T6912] RDS/IB: syû: added [ 101.824398][ T6912] smc: adding ib device syû with port count 1 [ 101.830735][ T6912] smc: ib device syû port 1 has no pnetid [ 101.838384][ T6928] hsr1: entered promiscuous mode [ 101.859113][ T6920] tipc: Resetting bearer [ 102.893006][ T6920] tipc: Disabling bearer [ 103.076521][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 103.085552][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 103.230018][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 104.284044][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.339293][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.391054][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.442802][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.030502][ T7025] batadv_slave_0: entered promiscuous mode [ 105.124861][ T7025] batman_adv: batadv0: Adding interface: macsec1 [ 105.161868][ T7025] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.214556][ T7035] sctp: [Deprecated]: syz.3.331 (pid 7035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.214556][ T7035] Use struct sctp_sack_info instead [ 105.224551][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.243249][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.256756][ T7025] batman_adv: batadv0: Interface activated: macsec1 [ 105.317450][ T7035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 105.419561][ T7041] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 105.460757][ T7043] sctp: [Deprecated]: syz.2.334 (pid 7043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.460757][ T7043] Use struct sctp_sack_info instead [ 105.510981][ T7043] sctp: [Deprecated]: syz.2.334 (pid 7043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.510981][ T7043] Use struct sctp_sack_info instead [ 105.553240][ T7052] net_ratelimit: 32 callbacks suppressed [ 105.553256][ T7052] netlink: zone id is out of range [ 105.614524][ T7052] netlink: zone id is out of range [ 105.620069][ T7052] netlink: zone id is out of range [ 105.645449][ T7052] netlink: get zone limit has 4 unknown bytes [ 105.810505][ T7060] netlink: 56 bytes leftover after parsing attributes in process `syz.2.338'. [ 105.849724][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 105.892030][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 105.923571][ T7060] netlink: 31 bytes leftover after parsing attributes in process `syz.2.338'. [ 105.938613][ T7060] netlink: 'syz.2.338': attribute type 2 has an invalid length. [ 105.971224][ T7060] netlink: 31 bytes leftover after parsing attributes in process `syz.2.338'. [ 106.167242][ T7075] delete_channel: no stack [ 106.385036][ T7080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.344'. [ 106.416581][ T7083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.344'. [ 106.673689][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 106.714201][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 107.107319][ T7110] netlink: 'syz.0.351': attribute type 21 has an invalid length. [ 107.176193][ T7110] netlink: 156 bytes leftover after parsing attributes in process `syz.0.351'. [ 107.685419][ T7141] netlink: 'syz.1.362': attribute type 13 has an invalid length. [ 107.743996][ T7141] gretap0: refused to change device tx_queue_len [ 107.752997][ T7141] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 108.042005][ T7150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.194769][ T7160] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 108.746788][ T7180] bond2: entered promiscuous mode [ 108.751945][ T7180] bond2: entered allmulticast mode [ 108.757675][ T7180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.825810][ T7189] netlink: 'syz.1.378': attribute type 8 has an invalid length. [ 109.557223][ T7221] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 109.588509][ T7226] netlink: 'syz.2.391': attribute type 4 has an invalid length. [ 109.745375][ T7231] macvlan3: entered promiscuous mode [ 109.760973][ T7231] macvlan3: entered allmulticast mode [ 109.774278][ T7231] bond1: (slave macvlan3): Opening slave failed [ 110.073139][ T7235] geneve2: entered promiscuous mode [ 110.079447][ T7235] geneve2: entered allmulticast mode [ 110.099792][ T7236] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 110.245678][ T7242] netlink: 'syz.1.396': attribute type 25 has an invalid length. [ 110.350046][ T7244] netlink: 'syz.3.397': attribute type 75 has an invalid length. [ 110.690564][ T7273] syzkaller0: entered promiscuous mode [ 110.699343][ T7273] syzkaller0: entered allmulticast mode [ 110.967881][ T7283] __nla_validate_parse: 11 callbacks suppressed [ 110.967897][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'. [ 111.102234][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 111.114716][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 111.380416][ T7308] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 111.537405][ T7322] netlink: 14 bytes leftover after parsing attributes in process `syz.3.422'. [ 111.842022][ T7322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.877163][ T7322] bond0 (unregistering): Released all slaves [ 111.938255][ T7341] tipc: Enabling of bearer rejected, failed to enable media [ 111.970083][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 112.142078][ T7352] pim6reg: entered allmulticast mode [ 112.145331][ T7354] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20003 [ 112.293131][ T7371] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 112.382159][ T7371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.448849][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.440'. [ 112.503044][ T7377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.512136][ T7384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.435'. [ 112.528909][ T7377] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.559137][ T7384] block nbd0: reconnected socket [ 112.578393][ T7377] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 112.609626][ T7371] veth3: entered promiscuous mode [ 112.618537][ T7371] bond1: (slave veth3): Enslaving as an active interface with a down link [ 112.647337][ T7389] pim6reg: entered allmulticast mode [ 112.657428][ T7395] pim6reg: left allmulticast mode [ 112.681382][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.435'. [ 112.718837][ T7371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.756709][ T5150] block nbd0: Receive control failed (result -32) [ 112.844055][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.445'. [ 113.361451][ T7429] netlink: 340 bytes leftover after parsing attributes in process `syz.3.450'. [ 113.488547][ T7431] ip6tnl0: Caught tx_queue_len zero misconfig [ 113.675256][ C1] Unknown status report in ack skb [ 114.155239][ T7480] x_tables: duplicate underflow at hook 3 [ 115.235590][ T7500] syzkaller1: entered allmulticast mode [ 115.305520][ T7513] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.314442][ T7515] netlink: 'syz.3.478': attribute type 21 has an invalid length. [ 115.331698][ T7513] bond2: (slave lo): Enslaving as a backup interface with an up link [ 115.371488][ T7513] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 116.126478][ T7541] __nla_validate_parse: 49 callbacks suppressed [ 116.126495][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 116.152437][ T7546] netlink: 'syz.0.486': attribute type 8 has an invalid length. [ 116.161150][ T7543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.487'. [ 116.315048][ T7559] netlink: 48 bytes leftover after parsing attributes in process `syz.2.489'. [ 116.364986][ T7563] openvswitch: netlink: Message has 8 unknown bytes. [ 116.562995][ T7576] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 116.594947][ T7574] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 116.622062][ T7574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 116.639635][ T7579] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 116.648649][ T7579] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 116.891126][ T7590] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 116.910332][ T7590] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 116.926811][ T7590] team0: Port device dummy0 added [ 116.934500][ T7590] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 116.946000][ T7590] team0: Port device dummy0 removed [ 116.953816][ T7590] dummy0: entered promiscuous mode [ 116.959501][ T7590] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.085979][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.506'. [ 117.141807][ T5946] IPVS: starting estimator thread 0... [ 117.233978][ T7599] IPVS: using max 26 ests per chain, 62400 per kthread [ 117.287980][ T7604] delete_channel: no stack [ 117.293159][ T7604] netlink: 740 bytes leftover after parsing attributes in process `syz.0.509'. [ 117.402108][ T7613] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 117.466751][ T7618] netlink: set zone limit has 8 unknown bytes [ 117.519499][ T7613] bond3 (unregistering): Released all slaves [ 117.721009][ T7621] ip6tnl1: entered promiscuous mode [ 117.736226][ T7621] ip6tnl1: entered allmulticast mode [ 117.839676][ T7613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.512'. [ 117.839676][ T7634] netlink: 'syz.0.518': attribute type 26 has an invalid length. [ 117.860876][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 117.861977][ T7636] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 117.879288][ T7636] netlink: 17 bytes leftover after parsing attributes in process `syz.1.519'. [ 117.895868][ T7637] team1: entered promiscuous mode [ 117.900916][ T7637] team1: entered allmulticast mode [ 118.065929][ T7642] xt_ecn: cannot match TCP bits for non-tcp packets [ 118.220760][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.525'. [ 118.235827][ T7655] batadv_slave_1: entered promiscuous mode [ 118.266300][ T7653] batadv_slave_1: left promiscuous mode [ 118.272955][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 118.354510][ T7649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.361906][ T7649] IPv6: NLM_F_CREATE should be set when creating new route [ 118.497472][ T7674] syzkaller0: entered promiscuous mode [ 118.503032][ T7674] syzkaller0: entered allmulticast mode [ 119.042570][ T7677] lo: Caught tx_queue_len zero misconfig [ 119.069129][ T7686] tipc: Enabling of bearer rejected, failed to enable media [ 119.098122][ T7691] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 119.185353][ T7691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.254922][ T7695] xt_hashlimit: invalid rate [ 119.665501][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.686822][ T7725] netlink: 'syz.4.546': attribute type 11 has an invalid length. [ 119.810879][ T7736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.947553][ T7745] openvswitch: netlink: Flow key attr not present in new flow. [ 119.990824][ T7748] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 120.866007][ T7794] [ 120.868360][ T7794] ====================================================== [ 120.875373][ T7794] WARNING: possible circular locking dependency detected [ 120.882396][ T7794] syzkaller #0 Not tainted [ 120.886802][ T7794] ------------------------------------------------------ [ 120.893972][ T7794] syz.0.571/7794 is trying to acquire lock: [ 120.899843][ T7794] ffffffff8f4263b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 120.909314][ T7794] [ 120.909314][ T7794] but task is already holding lock: [ 120.916654][ T7794] ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 120.926202][ T7794] [ 120.926202][ T7794] which lock already depends on the new lock. [ 120.926202][ T7794] [ 120.936578][ T7794] [ 120.936578][ T7794] the existing dependency chain (in reverse order) is: [ 120.945566][ T7794] [ 120.945566][ T7794] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 120.953454][ T7794] lock_acquire+0x120/0x360 [ 120.958462][ T7794] _raw_spin_lock_bh+0x36/0x50 [ 120.963727][ T7794] nr_rt_ioctl+0x390/0xd50 [ 120.968644][ T7794] sock_do_ioctl+0xdc/0x300 [ 120.973653][ T7794] sock_ioctl+0x576/0x790 [ 120.978482][ T7794] __se_sys_ioctl+0xfc/0x170 [ 120.983572][ T7794] do_syscall_64+0xfa/0xfa0 [ 120.988576][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.994969][ T7794] [ 120.994969][ T7794] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 121.002942][ T7794] lock_acquire+0x120/0x360 [ 121.007946][ T7794] _raw_spin_lock_bh+0x36/0x50 [ 121.013211][ T7794] nr_rt_ioctl+0x193/0xd50 [ 121.018125][ T7794] sock_do_ioctl+0xdc/0x300 [ 121.023139][ T7794] sock_ioctl+0x576/0x790 [ 121.027969][ T7794] __se_sys_ioctl+0xfc/0x170 [ 121.033066][ T7794] do_syscall_64+0xfa/0xfa0 [ 121.038077][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.044471][ T7794] [ 121.044471][ T7794] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 121.052273][ T7794] validate_chain+0xb9b/0x2140 [ 121.057541][ T7794] __lock_acquire+0xab9/0xd20 [ 121.062718][ T7794] lock_acquire+0x120/0x360 [ 121.067720][ T7794] _raw_spin_lock_bh+0x36/0x50 [ 121.072986][ T7794] nr_rt_device_down+0xa9/0x720 [ 121.078339][ T7794] nr_device_event+0x137/0x150 [ 121.083607][ T7794] notifier_call_chain+0x1b6/0x3e0 [ 121.089217][ T7794] __dev_notify_flags+0x18d/0x2e0 [ 121.094742][ T7794] netif_change_flags+0xe8/0x1a0 [ 121.100177][ T7794] dev_change_flags+0x130/0x260 [ 121.105522][ T7794] dev_ioctl+0x7b4/0x1150 [ 121.110353][ T7794] sock_do_ioctl+0x22c/0x300 [ 121.115444][ T7794] sock_ioctl+0x576/0x790 [ 121.120271][ T7794] __se_sys_ioctl+0xfc/0x170 [ 121.125370][ T7794] do_syscall_64+0xfa/0xfa0 [ 121.130378][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.136770][ T7794] [ 121.136770][ T7794] other info that might help us debug this: [ 121.136770][ T7794] [ 121.147064][ T7794] Chain exists of: [ 121.147064][ T7794] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 121.147064][ T7794] [ 121.160868][ T7794] Possible unsafe locking scenario: [ 121.160868][ T7794] [ 121.168298][ T7794] CPU0 CPU1 [ 121.173642][ T7794] ---- ---- [ 121.178983][ T7794] lock(nr_neigh_list_lock); [ 121.183674][ T7794] lock(&nr_node->node_lock); [ 121.190941][ T7794] lock(nr_neigh_list_lock); [ 121.198125][ T7794] lock(nr_node_list_lock); [ 121.202698][ T7794] [ 121.202698][ T7794] *** DEADLOCK *** [ 121.202698][ T7794] [ 121.210820][ T7794] 2 locks held by syz.0.571/7794: [ 121.215817][ T7794] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 121.224596][ T7794] #1: ffffffff8f426358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 121.234580][ T7794] [ 121.234580][ T7794] stack backtrace: [ 121.240459][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.0.571 Not tainted syzkaller #0 PREEMPT(full) [ 121.240475][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.240483][ T7794] Call Trace: [ 121.240490][ T7794] [ 121.240495][ T7794] dump_stack_lvl+0x189/0x250 [ 121.240515][ T7794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.240532][ T7794] ? __pfx__printk+0x10/0x10 [ 121.240546][ T7794] ? print_lock_name+0xde/0x100 [ 121.240560][ T7794] print_circular_bug+0x2ee/0x310 [ 121.240577][ T7794] check_noncircular+0x134/0x160 [ 121.240595][ T7794] validate_chain+0xb9b/0x2140 [ 121.240612][ T7794] ? rt6_disable_ip+0x6b3/0x720 [ 121.240632][ T7794] ? __lock_acquire+0xab9/0xd20 [ 121.240645][ T7794] __lock_acquire+0xab9/0xd20 [ 121.240660][ T7794] ? nr_rt_device_down+0xa9/0x720 [ 121.240673][ T7794] lock_acquire+0x120/0x360 [ 121.240685][ T7794] ? nr_rt_device_down+0xa9/0x720 [ 121.240704][ T7794] ? nr_rt_device_down+0xa9/0x720 [ 121.240718][ T7794] _raw_spin_lock_bh+0x36/0x50 [ 121.240734][ T7794] ? nr_rt_device_down+0xa9/0x720 [ 121.240748][ T7794] nr_rt_device_down+0xa9/0x720 [ 121.240763][ T7794] ? do_raw_spin_unlock+0x122/0x240 [ 121.240781][ T7794] nr_device_event+0x137/0x150 [ 121.240795][ T7794] notifier_call_chain+0x1b6/0x3e0 [ 121.240813][ T7794] __dev_notify_flags+0x18d/0x2e0 [ 121.240827][ T7794] ? __pfx___dev_notify_flags+0x10/0x10 [ 121.240840][ T7794] ? __dev_change_flags+0x4cc/0x6d0 [ 121.240854][ T7794] ? __pfx___dev_change_flags+0x10/0x10 [ 121.240868][ T7794] ? full_name_hash+0x92/0xe0 [ 121.240884][ T7794] netif_change_flags+0xe8/0x1a0 [ 121.240899][ T7794] dev_change_flags+0x130/0x260 [ 121.240913][ T7794] dev_ioctl+0x7b4/0x1150 [ 121.240932][ T7794] sock_do_ioctl+0x22c/0x300 [ 121.240949][ T7794] ? __pfx_sock_do_ioctl+0x10/0x10 [ 121.240970][ T7794] sock_ioctl+0x576/0x790 [ 121.240986][ T7794] ? __pfx_sock_ioctl+0x10/0x10 [ 121.241002][ T7794] ? __fget_files+0x3a0/0x420 [ 121.241014][ T7794] ? __fget_files+0x2a/0x420 [ 121.241027][ T7794] ? bpf_lsm_file_ioctl+0x9/0x20 [ 121.241041][ T7794] ? __pfx_sock_ioctl+0x10/0x10 [ 121.241056][ T7794] __se_sys_ioctl+0xfc/0x170 [ 121.241073][ T7794] do_syscall_64+0xfa/0xfa0 [ 121.241090][ T7794] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.241107][ T7794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.241125][ T7794] ? clear_bhb_loop+0x60/0xb0 [ 121.241139][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.241153][ T7794] RIP: 0033:0x7fa27478f6c9 [ 121.241166][ T7794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.241176][ T7794] RSP: 002b:00007fa2756c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.241191][ T7794] RAX: ffffffffffffffda RBX: 00007fa2749e5fa0 RCX: 00007fa27478f6c9 [ 121.241201][ T7794] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 121.241210][ T7794] RBP: 00007fa274811f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.241218][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.241226][ T7794] R13: 00007fa2749e6038 R14: 00007fa2749e5fa0 R15: 00007fffd9962e28 [ 121.241241][ T7794]