last executing test programs: 3m3.94875009s ago: executing program 0 (id=6450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r4, 0xffffffffffffffff}, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)={0x2, 0x4, 0x5, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x4}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400}, 0x40000) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0xe0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb4, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x144}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r0) 3m2.996625515s ago: executing program 0 (id=6463): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in=@remote}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) (async) r3 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x20, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000180)=0x8, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) listen(0xffffffffffffffff, 0x5) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bbfc0100000000000000000000000000002421880b0000000000000021000086dd080088be00000000108000000100000000000000080022eb000000042000a0000200000e8600fffffff8fffe00000800655800000000"], 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68814}, 0x0) (async) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="110304000100090104006bd648c610112f01fe80000000000000000000000000002eff020000000000000000000000000001"], 0x1043) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m2.885288941s ago: executing program 0 (id=6465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000a, 0x30, r1, 0xffffc000) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1c8, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfff4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xcdbe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4e}, {0x6, 0x11, 0x3}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x4, &(0x7f0000000000), 0x4) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xab0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008000) (async) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000000c0), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r9, 0x200000, 0xffffffff, 0x0, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYRES64=r13, @ANYRES32=r9, @ANYRESOCT=r8, @ANYRES32], 0x14}}, 0x40000) 3m2.774713681s ago: executing program 0 (id=6466): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r3, 0x952de000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a9030000000012000000", 0xfff7}], 0x1}, 0x4000841) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x11, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0x12, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x24045810) read(0xffffffffffffffff, &(0x7f0000000600)=""/190, 0xbe) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x1ce0ef95c5c0bdc8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e23, @local}], 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000740)="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", 0xff}, {&(0x7f0000000840)="40d42717ef932a8be2c366b048e9c1cf11dbe69655e229ec9fa77aea40296e3dcf7a885fb5a372be5b704a70c9d85cdc14475936544d504286c6ce4cc4eac9fd82349f5ce66c40944fb344648c92418fb7e70a79899efb7bab548c2ab1911cf27434f9cb7bb27bc42c16", 0x6a}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) 3m2.404240066s ago: executing program 0 (id=6472): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x3757f80800a7abc5) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x3757f80800a7abc5) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @local}, 0x10, 0x0}, 0x20048894) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x8, 0x4}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_getnetconf={0x1c, 0x52, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044044}, 0x800) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0xffff, @loopback}, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x300}, "ffb00afe4e70"}}}}}}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}]}, 0x23c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x82, &(0x7f00000001c0)={r8, 0x40, 0x8}, 0x8) 3m2.123159001s ago: executing program 0 (id=6477): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (rerun: 64) 2m46.126155934s ago: executing program 32 (id=6477): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (rerun: 64) 2m2.762272886s ago: executing program 1 (id=7188): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, r0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x856}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x93, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f7f}, @broadcast, @broadcast, @random="1d531ab3f86b", {0x5, 0xe}, @value=@ver_80211n={0x0, 0xaf, 0x3, 0x1, 0x0, 0x2, 0x1}}, 0x1, 0x3, 0x44, @void, [{0xdd, 0x6b, "616b7bc350d1f334478f846c6341993afa69648df2aa10f3beb1a1f52074d7af159f12dc34bb1c48952d8cf8ede490b5d0c47673a2ee50892bcdeb2240e00510ab0fe77f635055c16dbb9f841f8960484092cc9d0bd3a698b257ef9bf38cd65b25a036671bf86170280dee"}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x2004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x11c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf1, 0x5, "88a6e50b74376211b06eff7aff8668d5623b74882389fcb50ce2e6604d4ea9a1c5b29ae8a40f38a4b11d9882a16609835078788dcf14d879caecbf2525f8233b9e568ebad6ee027349d5de8bf19a390f115fafc4b1af1186385ba3d1946bfa60ed47639cccade9da692b10bad0f8b54c7e4adb6ceb6a4d8d2c2985e9bc092650103cb48cb19b5830ba767f4fcabf615c0df3dbf83c6f8c23c234fd9a6946413eec11cc2916c8ef5b53c35a285457c30875ef625255b3d6a2c1468cfb1981786528b50f9221dad85b9ed10a8f1f88510526093a10c5f9ab70105e874787cbbd307694a9003548fc3202dff41753"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)={0x404, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x324, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x60, 0x5, "9fa33af13fc6857238091d6525ffb2c507487039ac5d60584a5465198d1884d6d54ff83f373c1c449b5eff47c5e8ebca2bc4788debd7be157d56b84f409da9abbdb2e22e1213bd29685468811ff2217838fe4752aba885c7e3f3dce3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x5b, 0x4, "41f3540042329d0e7beb300c0faa993428e1993cc5326cc480e417621281b9fe0a3477487fe66875532c2525ff26c21a4048831f56fa448db0e3e86a189a15dec4b0cd992c6c2bbf1c4801f4f3686b6ae2e7d231c67809"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x79e}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "1b8ab5e4529462b555c9828eed2522d9b17ebc6355c099405b2d6d41230e32af7c0bfb519b48795a2da7a68bc2d18b88fb69d34f0cf2ff6a88"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7d20babf}, @ETHTOOL_A_BITSET_BITS={0x1a0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9248}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-,$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+#\x05)+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '//]}-#}\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!!%\\@+$]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@$$*^\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000009c0)) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a40)=0x1, 0x4) bind$netlink(r6, &(0x7f0000000a80)={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000ac0)={0x0, 0x401, 0x4, 0x101, 0x6, 0x9}, &(0x7f0000000b00)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000b40)={r7, 0x25, "6603ea41eed9933123ea8ae1a951b0f8ef49ff83076a138b74ec833a1943855157d6167c7e"}, &(0x7f0000000b80)=0x2d) sendmsg$nl_route(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@ipv6_getroute={0x60, 0x1a, 0x400, 0x70bd25, 0x25dfdbfd, {0xa, 0x1ae301463e11291a, 0x0, 0x1, 0xfe, 0x3, 0xfd, 0x1, 0x100}, [@RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_EXPIRES={0x8, 0x17, 0x200}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_METRICS={0x24, 0x8, 0x0, 0x1, "4900c2793e43429f61e5d064c679295008c5ea0af01d210c8bbbc2047a835e70"}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000d00)=0x2b, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f0000000d40)={0x8000000000000000, 0x5, 0x0, 0xb, 0x0, [0x3, 0x4, 0xfffffff9, 0xfffffffd]}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000d80)={0x337, 0x8000000000000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) pipe(&(0x7f0000005ac0)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000005b00)={r7, 0xffffffff}, &(0x7f0000005b40)=0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000005c80)={&(0x7f0000005b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005bc0)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc010}, 0x40020) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000005d00), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000005e00)={&(0x7f0000005cc0), 0xc, &(0x7f0000005dc0)={&(0x7f0000005d40)={0x6c, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x13, 0xa, 'bridge_slave_1\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-,$\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000011}, 0x24040811) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000006100)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000060c0)={&(0x7f0000005ec0)={0x1f4, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private0, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x806, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x3ab}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private0, 0x81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd33f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "a7f875ac253c65bce9a4a1538cef86c833afacefbe5ac57b55fbb4cba3cba2c4c85929c55f06c6ea2f63b5aacfdb5a4877321419c58082dbe1457df68d6b1fbf38c82f0274aa33d921d57565275457e90132b2665c455fdf17cf553838ec2ee7f43813456625764f26bd352d6a6b3e0d1030a2837f09f9c9c47f7df671cf5caf15952283e6a4a2"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xae}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3791}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 2m2.630848111s ago: executing program 1 (id=7191): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRES32=r6, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) 2m2.444087446s ago: executing program 1 (id=7195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x9b, 0x72a, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8000, 0x7, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x2, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000740)={0x4f0, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xec, 0x5, "ff8716abf651b301d85a9605501ebbaa12fe7c16ddb37d9b470bfe7a11b5006b21ee58549e9f817689fc25c49ef0fb79e3b2154cf71dac4d05e41d1bfbac3c2b4f69729d951a9a24f3ae79f22d018b4fbb2ee6093013b1c42bb81d21bd29ed3de4f61253b6519045c4cbeac3feada44105c99bb023113ce670d51d3aaf6547ee8220fc86c9d7551a5c696a98e9c892ecd7db092d41f56aa3fcea11cf43b8b1206963da2b24b19ee6186df409717447b5f57612a7308b0dfbc0e592e77a5656c2a806369e64ed036669984844c9aaee7c4a63e8f217afa6766674e9a5d381824be38cae04ad72ecf6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\xd5-\\/])((\'{$$@/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'::\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',^[,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '(#&)!!,(,#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2ccb}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "391a5655a5fea7c3451c644b74030c1bcf77401930f645cc76172c4cdc14cd9ea4e3b3d8164e35f24bd3e6b310d9e533852be388b115611891e85a42f35648f20a5e1e0039cd0d5e7f89231a514a702d19d69f80429d046b247955f77d6bbbb94eebf09c16126d31ead710e59de6caaac9651c58c5c5fa93de779d01b32ea3736b40145ded1daccbe5d8a30dc1"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x74, 0x4, "b5381732c1bff043294bb897caa4908cebc282bdd085905c75ee6e2af5332bd3e159e84d0db9e94f71f913cdb3a08527c4d87dcc19edd670bb00d295b8416c47f53074181d7dcb6fa9d5064282c3b57e5e11b4e7bb15d0649bd4ff6482bf6c5dd98e89e40a902027bc7ac290fed551fa"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc2, 0x4, "c6af0077dc2a19bc0b64abb7dd65df45bb4a4fb7f0b7031fa1ab29ea8a122aa4590aa981fc4c0e4d62df1c6e9fd6b8329b74d7b6bf7df8efdfe0c9f64c007c2b875b1ff31148faf09ae4e5b34ffbe216ebe1506bb84ed38647ff9b2c47d48fe02a263c659305db4f64c2c6d22f8a29587bb53f11f757741c70bf229049dc862120c53b60de438b9379f8b25d14461386c6b0038d8bda998df2bb87168c409c3cfa599e75571cd468f6b752bbe308b53b9790c64ecc80ad890c1a9c6c9da5"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) 2m2.142056764s ago: executing program 1 (id=7199): syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000000114242"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f40)={0x30, r4, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}]}, 0x30}}, 0x20000040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000001640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xba8, r4, 0x400, 0xffffffff, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0xa}}}}, [@NL80211_ATTR_TID_CONFIG={0x11c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x4, 0x6c, 0x24, 0x16, 0x9, 0xb, 0x3, 0x1, 0x18, 0x24, 0xc, 0x6, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x100, 0xfff, 0x8, 0x9, 0x4, 0x1, 0x9]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0xe4b, 0xc, 0x1, 0x9, 0x6, 0xc99]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7, 0x4, 0x6, 0x8, 0x4, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x3, 0x3}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {}, {0x5, 0x1}, {0x4, 0x3}, {0x4, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x4}, {0x2, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x8}, {0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x4}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x60, 0x48, 0x60, 0x6c, 0x16, 0x6c, 0x12]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x21}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe14}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}]}]}, @NL80211_ATTR_TID_CONFIG={0x694, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x5, 0x75, 0x3, 0x3, 0xb800, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x1b, 0x9, 0x6, 0x18, 0x30, 0xb, 0x1, 0x16, 0x3, 0xb, 0x2e, 0x16, 0x3, 0x1b, 0x1b, 0x12, 0x5, 0x48, 0x6, 0x60, 0x3, 0xa, 0x4, 0x30, 0x60, 0x48, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x8, 0x3, 0xc, 0x9, 0xff, 0x8]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x9}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x4, 0x7, 0x8001, 0x6fc, 0x1, 0x5322]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x0, 0xc, 0x2, 0x30, 0xb, 0x1f, 0x18, 0x6, 0x4, 0xc, 0x6c, 0x48, 0x60, 0x24, 0x12, 0x2, 0x60, 0x1b, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x0, 0x4, 0x5, 0x9, 0x0, 0x800]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x26}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x2, 0x4, 0x0, 0x0, 0x200, 0x1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0xdc24, 0x9, 0x8, 0x2, 0x6, 0x2, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x7, 0x4}, {0x3, 0x8}, {0x5, 0x3}, {0x0, 0x9}, {0x4, 0x4}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0xa}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x1}, {0x4, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0x3}, {0x4}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x0, 0x3}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {0x5, 0x2}, {0x2}, {0x2, 0x6}, {0x2, 0x6}, {0x7, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x2, 0x40, 0xf0c, 0xffff, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x1, 0x1, 0x6, 0xbc, 0x6, 0xff81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x5, 0x80, 0xe, 0xfff7, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x0, 0x101, 0xdf, 0x7, 0xfff9, 0x5be]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x3}, {0x6}, {0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x3, 0x5}, {0x4, 0x7}, {0x5, 0x9}, {0x1}, {0x5, 0x6}, {0x6}, {0x4, 0x7}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x5}, {0x7}, {0x6, 0x7}, {0x2, 0x5}, {0x6, 0x2}, {0x5, 0x1}, {0x6, 0x7}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x1d}, {0x6, 0x4}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x6}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4, 0x3}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x6553, 0xc005, 0xffff, 0x3, 0x5, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x1}, {0x6, 0x1}, {0x0, 0x8}, {}, {0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x5, 0x4}, {0x1, 0x3}, {0x4}, {0x4, 0x6}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x3}, {}, {0x2, 0x3}, {0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x5, 0x6}, {0x6, 0x3}, {0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x2}, {0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x4}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0xa}]}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x32}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x2f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x18, 0x20, 0x3a, 0x30, 0xc, 0x7b, 0xc, 0x3, 0x24, 0x2, 0xb, 0x30, 0x2, 0x60, 0x6c, 0x24, 0x1, 0x30, 0x12, 0x6, 0x3, 0x3f0076f182cca826, 0x12, 0x0, 0x6c, 0x18]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x4, 0x7fff, 0x7, 0xda, 0xfff7, 0x9]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x1}, {0x2, 0x8}, {}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x6}, {0x5, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x7}, {0x5, 0x5}, {0x3}, {0x2, 0x6}, {0x4, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x1}, {0x3, 0xa}, {0x3, 0xa}, {0x3, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x9}, {0x1}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x4}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {}, {0x5, 0x5}, {0x1, 0x2}, {0x4, 0x2}, {0x7, 0x8}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x4}, {0x7, 0x1}, {0x4, 0x5}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x4}, {0x3, 0x6}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x14}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x1, 0x9, 0x764a, 0x9, 0x400, 0x51b]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x1, 0x6, 0xb, 0xb, 0x6c, 0x0, 0xb, 0x2, 0x5, 0x60, 0x18, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf3f5, 0xff96, 0x5, 0x3, 0x16, 0x6d98, 0x8, 0xf4]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x25, 0x16, 0x60, 0x60, 0x36, 0xb]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x800, 0x8, 0x3, 0xfff9, 0xfffb, 0x966, 0x1]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x6c, 0x6, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x6c, 0x5, 0x30, 0x36, 0x11, 0x0, 0x24, 0x18, 0x0, 0x6, 0x6c, 0x9, 0x0, 0xc, 0x9, 0x24, 0x5, 0x6, 0x76, 0xc, 0x60, 0x4, 0x1b, 0xb, 0xc, 0x1, 0x1, 0x12]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x36, 0x5, 0x6, 0x12, 0xb, 0x0, 0x6, 0x1, 0x42, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0xf9, 0x9, 0x9, 0xff9a, 0x8b40, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4fec, 0x0, 0x5, 0x2, 0xfffb, 0x3ff, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1000, 0x101, 0x400, 0x400, 0x1, 0x5, 0x5]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x8}, {0x4, 0x5}, {0x3, 0x9}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x3}, {0x4, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x5}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x1, 0xfff7, 0x7ff, 0x0, 0x8001, 0x8e]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x3, 0xb, 0x30, 0x30, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x3}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x9}, {0x3, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0x7}, {0x6}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x6, 0x6}, {0x6, 0x7}, {0x2, 0x2}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x4}, {0x4, 0x2}, {0x6, 0x5}, {0x6}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x3, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x8}, {0x2, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0xa}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7fff, 0x7ff, 0x400, 0x401, 0x9, 0x0, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3a8, 0x11d, 0x0, 0x1, [{0x398, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x370, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x100, 0x7, 0x5, 0xa, 0x5, 0x401]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x12, 0x12, 0x3, 0x6c, 0x1b, 0x12, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x8000, 0x1, 0x6, 0x0, 0xfffb, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x0, 0x3, 0xa, 0x5, 0xff, 0x5, 0x58]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc5f, 0x1, 0x7, 0x7e36, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x4, 0xf154, 0x4, 0x70c, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x2, 0x30, 0x6c, 0x48, 0xb, 0x4, 0x16, 0x9, 0x6c, 0x60, 0x60, 0x24, 0xc, 0x2]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x1, 0x18, 0x4, 0x6c, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8001, 0x1, 0x6, 0x8, 0xf, 0x8]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0xa}, {0x7, 0x2}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x1}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x1}, {0x0, 0x6}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x8, 0x7, 0xff, 0x40, 0x30c, 0x7, 0xa84e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x100, 0x8000, 0x0, 0x939, 0x4, 0x9, 0x4]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x3}, {0x0, 0x1}, {0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x1}, {0x1, 0x6}, {0x4, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x2, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x1}, {}, {0x6}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0xa}, {0x4, 0xa}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x101, 0xfe, 0x8000, 0x7, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0xa}, {0x1, 0x6}, {0x6, 0x5}, {0x7}, {0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x2}, {0x5, 0x4}, {0x6, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x4}, {0x4, 0x6}, {0x4, 0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x3}, {0x4, 0x6}, {0x5}, {0x7, 0x6}, {0x4}, {0x4, 0x2}, {0x3, 0xa}, {}, {0x0, 0x4}, {0x4, 0xa}, {0x1, 0x6}, {0x5, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x2, 0x6}, {0x5, 0x8}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x8}, {0x6, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x2}, {0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x3}, {0x1, 0x3}, {0x2}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x3, 0x8}, {0x2, 0x9}, {0x5, 0x7}, {0x4, 0x1}, {0x3, 0x19}, {0x0, 0x6}, {0x2, 0x9}, {0x6, 0x3}, {0x6, 0x4}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x8}, {0x6, 0x5}, {0x1}, {0x7, 0x1}, {0x7, 0x8}, {0x4, 0x9}, {0x3, 0x2}, {0x5, 0x3}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x7, 0x8, 0x3000, 0x1, 0x61a7, 0x2]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{}, {0x6, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x4, 0x4}, {0x7, 0x5}, {0x7, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x80, 0x1, 0x8, 0x9dcb, 0x3, 0x8]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1, 0x6, 0x4, 0x6, 0x8, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x1000, 0x9, 0x2, 0xfff, 0x217, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4b4, 0x7, 0x6, 0x2, 0x6, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x5, 0x2, 0x49, 0x5, 0x8, 0x4]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xfff8, 0x7ff6, 0x2, 0x6, 0x7, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf57c, 0xf8, 0x80, 0xb521, 0x2, 0x8, 0x6, 0xc]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x5, 0x30, 0x5, 0x6c, 0x18, 0x24, 0x1, 0x1b, 0x24, 0x5, 0x4, 0x30, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x4, 0x54]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0xba8}, 0x1, 0x0, 0x0, 0x40085}, 0x20048405) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x24c, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa505}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb120}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fa2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "c214070bd5fec5199c6dd1e9895612b7b3b61e96e17e7ae1bf57585ab6e1aa47cf2d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x41, 0x3, "51494ca1956cc5a107c8e468ff9d69ebb798eef6c11811c6387d6380d1729e72948ecd2429cc3f691028e244dc84546ccf22677642de7ff346fa6d15a1"}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4}, 0x44) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5610067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf8, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r10, 0xc, &(0x7f00000000c0)={0xffffffff, 0x1}, 0x8}, 0x94) 2m1.928984072s ago: executing program 1 (id=7204): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2m1.783861406s ago: executing program 1 (id=7206): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1e, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) (async, rerun: 64) listen(r3, 0x0) (rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x1405, 0x800, 0x70bd2b, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000000}, 0x4c804) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r9, 0x0) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r10, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x20, 0xffffffff, 0x94, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x68, 0x0, 0xa7, 0x4, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x7, [{@local, 0x8}]}]}}}}}) (rerun: 64) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000400)={r11, 0x1, 0x6, @remote}, 0x10) 1m46.734986769s ago: executing program 33 (id=7206): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1e, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) (async, rerun: 64) listen(r3, 0x0) (rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002600010026bdf000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x1405, 0x800, 0x70bd2b, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000000}, 0x4c804) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r9, 0x0) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r10, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x20, 0xffffffff, 0x94, {{0x8, 0x4, 0x0, 0x2, 0x20, 0x68, 0x0, 0xa7, 0x4, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x7, [{@local, 0x8}]}]}}}}}) (rerun: 64) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000400)={r11, 0x1, 0x6, @remote}, 0x10) 4.38136283s ago: executing program 4 (id=8598): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x6, 0x80000000, 0xa9, @private2, @loopback, 0x8000, 0x7800, 0x80000000, 0x7}}) r2 = socket$inet6_sctp(0xa, 0xf, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5, 0x6, [0x1ff, 0x6, 0x32, 0x2, 0x46d, 0x9]}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x26, "da157e66e907394292b293ddfb3292cae9d8326b379cd7a22125655e3bf113b7895900e1ec86"}, &(0x7f0000000380)=0x2e) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r3, 0x1, 0x6, 0x3, 0x4, 0xf6f5, 0x6, 0x7, {r4, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0x1}}, 0x4, 0x6, 0x10, 0xff, 0xfffffff8}}, &(0x7f0000000480)=0xb0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1d, 0x4, 0x0, 0x8, 0x1000, r0, 0xfffffff9, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) 4.183758614s ago: executing program 4 (id=8599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x29, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[], 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffa}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x71ca8e11, 0xd6, &(0x7f0000000380)=""/214, 0x41000, 0x30, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xc, 0x3, 0xffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x5, 0x2, 0xb, 0x2}, {0x2, 0x4, 0xb, 0x3}, {0x5, 0x1, 0x9, 0xb}, {0x4, 0x5, 0x6, 0x4}, {0x0, 0x1, 0xf, 0x6}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r2, 0x0, 0x2, 0x24, &(0x7f0000000680)="97ee", &(0x7f00000006c0)=""/36, 0xa8e, 0x0, 0x1000, 0xe, &(0x7f0000000700)="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", &(0x7f0000001700)="75a9bc6fe9999b5cccba88bb804a", 0x1, 0x0, 0x401}, 0x50) 3.154138029s ago: executing program 4 (id=8617): syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) 2.786834155s ago: executing program 4 (id=8620): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="72eb6d51046ebc7fd50f4b7cddb383c023a10704dea6095e575a82f8f9347bac61e52a2db3a9340b7d140ba5c6397716922374e1dc48270a2c0fa8d702de33e78958b04b0a72f95cb82441095996740c54a6b2785bdfe51cc4de634e74fd4c94c6fb213b1106695ccf715e746b6cf96c36c363e1f00bed49f3478e1f"], 0x9) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x4b, 0xff, 0x1, 0x2, @empty, @mcast1, 0x7800, 0x5b8ee6506137b295, 0x60}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0x3, 0xffff}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x24084084) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0x80c0) 2.463750542s ago: executing program 4 (id=8629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8881) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.336024898s ago: executing program 4 (id=8630): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000007f000000000000000a00007cdad10018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000007f000000000000000a00007cdad10018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000b70900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000089000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) (async) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xff3e57821bb42d75}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0xc4}}, 0x20000851) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x58, r8, 0x4761a3aaa1c00dfb, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x19, 0x13, [{0x6, 0x1}, {0x239d135d612d6414, 0x1}, {0x36, 0x1}, {0x18}, {0xec6b4d5701ac9932, 0x1}, {0x1b, 0x1}, {0x12, 0x1}, {0x48, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0xc}, {0x6}, {0x30}, {0x16, 0x1}, {0x16, 0x1}, {0x3}, {0x48}, {0x60}, {0x60, 0x1}, {0x6c, 0x1}, {}]}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x12f}]}, 0x58}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000328bd7006ffdbdf25790000000400f4000400f400"], 0x1c}, 0x1, 0x0, 0x0, 0x804c844}, 0x2000) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x171}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000200)=""/19) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000003c0)={'veth1\x00', @local}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.276189482s ago: executing program 2 (id=8631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="021000000b00000006000000f3fbffff005800001194923afed740cf49046d06", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="01000000010000000200"/28], 0x50) (async) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r7) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x6c, r8, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x947}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x6c}}, 0x4044844) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0xc) r9 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000000c0)=0x2, 0x4) (async) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.127201675s ago: executing program 5 (id=8634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x5}, &(0x7f00000020c0)=0xb354, 0x0, 0x7fffffffffffffff, 0x1, 0xc555, 0x7, 0x10, 0x6}}], 0x58}, 0x0) 1.871832836s ago: executing program 6 (id=8635): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) 1.868351636s ago: executing program 2 (id=8636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180700008510000002000000c6000200fffffffffff5ffff0000000085000000530000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 1.788004862s ago: executing program 5 (id=8637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "c82868a4bfb2af8f2763743003d18d6d56e434ecf2c3de59d121554d2e2b1ffe63903ea7dc5bb99575a2c83026211c9550fa48c25ec1339bc61eeef27bcab5a165a3fc77f0c4622033f9143c67b2dd42382090f4c2cbdeb32d57322fc80a43bc1555fb24ca6478c4b388b2fecf6c65477d2a1214b06772c2d2a033e4a53d5e5d9e596672006a06bc8b4fc9b3ba80d437b15099cf6f728cb22d32c7c5dc519a54bfd09e86fc"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "30164d1641d20c7177bab7ac8be8f20dc43e171dfb10"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe9f}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9809}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff01}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_FRAME={0xe8, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xf}, @broadcast, @from_mac=@device_b, @device_b, {0x7, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x26, "02eb8b1aa5a2464446b5564a942516f89181793cf8dd8038f3a7160b8246d5425241155271ad"}, {@broadcast, @device_b, 0x84, "2786c8b94a1a355e80bd15fdd41f69209f744f244f94fe049ba94f08922d0cb780480a5c55976534e8f6d4b8bf23ad9a6a3151bc14ad715925e7225c6203ce5e616c3f122dd06579720d3403792a42287371f1cfb868373ec8443e6a59f202d65fb32c10c1ae96727360e5ffb29b0247030eb38605cd7684132e33539be9d347f29f6287"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x120}, 0x1, 0x0, 0x0, 0x48e1}, 0x801) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000010}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x240, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "f0853ad0f69765066dea496b7f172a66474430b715c7118d1846e17413aa0065b962e66b5dce18229be40fde37441f285fe649afcc91c40ded441fcf33c8fe2c9d8666633687a6b864b21162c420f9dfd455957dfb00652e047f34b61a1ad0ab4db2b6000a7c0c858a87575793fc5c3d3ef743cdc2b142b315e2158f732011c64a735ffabaae9377cb41e3ec6d8dedf911228b38a7b2b8c1e3f721d850310aa93c9f70d0a758ba54f516ee60581647f9e1ef49129754f7e101b892d169dc4acfa4881626d0db42eb0eb10baac4140a04c405e44f10d4377e25a090"}, @ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "641c5c0294eb19553058b6e960318ad1a7fd161b977eb90581678331bf7711eb0966ac1bf0e7b293e2e71f1a62999a22a5dc85641bad5e97ee6385645c98635aee5a3b3a5c9d54e0595b33e6c112ccdf81e60ef22687623cd1438f9c4d42f347c806e9241bb513a1eb49bb7883d0905aaa3ee6ab40e3fb50c9e7fa5898d8b90381ef00ae4dbc79db76d95a9e3d7633af1b11186c4a8e3a55f001ca64c800d568801fb73eb381fa1b4d21ddd3b28b6bb94d49beaee7bf542661b4564c528da095146a8f475b38be8e5a7b35068384a59210e7636f09df1de1cff763197729882d99b3ce9c9e29511841cce7c68f7f5f2660be8bb62e"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x739}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000a40)={r2, &(0x7f0000000940)='veth1_to_bridge\x00', 0x2000, &(0x7f0000000980)={@_ha_fsid={[0x3, 0x137a]}, {0x9, 0x4, 0x5, 0x5}}, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x7}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2a}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x153}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) bind$unix(r6, &(0x7f0000000c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x8c, r8, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) r9 = accept(r0, &(0x7f0000000e40)=@in6={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000ec0)=0x80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r6) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, r10, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004051}, 0x4040000) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x6c, r10, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_FRAME_MATCH={0x39, 0x5b, "30ca9c8a5d001ca603480226bef23fd17e9b8be7abae9d2b489385c0f318da56a64194203bbab18687c9e565ea53954bed47d0a17e"}, @NL80211_ATTR_FRAME_MATCH={0xf, 0x5b, "95e766c37ee8674bc143e8"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x404c480) r11 = socket(0x23, 0x0, 0x5) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000001180)={'vcan0\x00', {0x2, 0x4e21, @local}}) ppoll(&(0x7f00000011c0)=[{r9, 0x8010}, {r9, 0x8000}, {r0, 0x9030}, {r11, 0xd2b8}], 0x4, &(0x7f0000001200)={0x77359400}, &(0x7f0000001240)={[0x6]}, 0x8) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r9) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001580)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001300)={0x238, r12, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4e}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xfff1}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x6df}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xffff}, {0x5}, {0x6}, {0x8, 0xb, 0x80000001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x355}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x9}}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x20008894) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, r7, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x34, 0x13}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x85b, 0x80}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffc0, 0x2e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x52}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001740), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x54, r13, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0xfffffffa, 0x80000, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x54) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000001880)={0x0, 0x8}, 0x8) 1.781313706s ago: executing program 6 (id=8638): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @private=0xa0100ff}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x1f8, 0x0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'wg0\x00', {0xff}, {0xff}, 0x3b, 0xff, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xffffffff, 0x0, 0xffffff00, 0xffffff00], 0x4, 0x1, {0x4}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 'wlan1\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x9, 0x7, 0x10}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x4, 0xb5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1a4, 0x1000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 1.694628178s ago: executing program 2 (id=8640): unshare(0x22020600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@remote}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x100004e23, @hyper}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socket$netlink(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}], 0x1, 0x2090) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}]}, 0x3c}}, 0x0) 1.548071095s ago: executing program 3 (id=8641): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x34, 0x4, "5451678a5119cbb94cd12cfe5c872a9b9d46304a8f67fdb17f0a3b6942e722f932dce538860433fe71571ca3b8f9f988"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8011}, 0x8801) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8805}, 0x20000000) syz_emit_ethernet(0x172, &(0x7f00000002c0)={@broadcast, @random="e80bafd8944c", @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x7, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0xa, 0x0, 0x1}], @ipv4=@generic={{0x16, 0x4, 0x3, 0x26, 0x154, 0x66, 0x0, 0x1, 0x89, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @local]}, @lsrr={0x83, 0x7, 0x9e, [@broadcast]}, @lsrr={0x83, 0x1b, 0xe8, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @private=0xa010101, @broadcast, @broadcast]}, @generic={0x94, 0xc, "a7abae896c9a2364ec12"}]}}, "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"}}}}}, &(0x7f0000000440)={0x1, 0x1, [0x292, 0x96e, 0xca1, 0x53f]}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0xd1, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x30, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x22, 0x0, 0x0, [0x2]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x3, 0xd1, 0x10, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0xb, 0x758}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000f80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b00)={0x414, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xae04}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff5}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x188, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb51}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x6, 0xf9, 0x800}, {0x6, 0xd, 0x8, 0x19}, {0x3, 0x9, 0x0, 0x4}, {0x8df, 0xa2, 0x4, 0x7c42}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}]}}, {{0x8, 0x1, r10}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa9}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x44}, 0x8010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001100)={'gretap0\x00', &(0x7f0000001000)={'gretap0\x00', r4, 0x8000, 0x10, 0x7, 0x1ff, {{0x34, 0x4, 0x1, 0x3e, 0xd0, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @private=0xa010101, {[@generic={0x82, 0xe, "b8c5b8d785a93a6e2ed92a95"}, @ssrr={0x89, 0x7, 0x97, [@loopback]}, @rr={0x7, 0x17, 0x22, [@remote, @loopback, @multicast1, @multicast2, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x4c, 0x11, 0x1, 0x0, [{@multicast2, 0x5}, {@loopback, 0x9}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0xa1d}, {@local, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x49}]}, @timestamp_prespec={0x44, 0x44, 0x15, 0x3, 0x0, [{@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xa}, {@loopback, 0x5}, {@rand_addr=0x64010101, 0x7fff}, {@multicast2, 0x8d0}, {@rand_addr=0x64010101, 0x40800000}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000fc0), 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@ipv4_getaddr={0x20, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0x2, 0x3f, 0x0, 0xc8, r11}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) (async, rerun: 64) splice(r0, &(0x7f0000001200)=0x2043, r0, &(0x7f0000001240)=0xe, 0xe5d, 0x3) (async, rerun: 64) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)="478beecb4e7eea56877f0c03c73986c00655f3c4bb12fa8c256d061114a8b02283dc4b6c998a97c78caf7b2b9a42dc5d", 0x30}, 0x1, 0x0, 0x0, 0x20008010}, 0x83) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0xa, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffff0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}]}, &(0x7f0000001400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0xf, 0xffffffff, 0x8d}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000014c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001500)=[{0x0, 0x2, 0x5, 0x5}, {0x4, 0x5, 0x4, 0xb}, {0x0, 0x3, 0xf, 0x9}, {0x0, 0x4, 0xb, 0xc}], 0x10, 0x5}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001600)=@generic={&(0x7f0000001340)='./file0\x00', r12}, 0x18) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000018c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001680)={0x1fc, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5e1c, 0x2f}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x300, {0x2, 0xf, 0xcd9c, 0x1bc}}}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "86deb62228"}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x0, 0x1, 0x7, 0x0, {0x7, 0x8, 0x0, 0x9, 0x0, 0x1, 0x1}, 0x6, 0x5, 0x90}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, {0x14, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac02, 0x0, 0xfac13, 0xfac02]}, @NL80211_ATTR_SAE_PASSWORD={0x7f, 0x115, "6c11287d24479be509c3eb3992864f6f84d48d7877e3071d7f53c9491ae2e4277b7a2e2310efa486057b040a576192f41068c20dba1344a2f3bb466d97362d1e820753c8267c5da99770a8d5cb0df111a1e0a42ec2c2f53a81f9b0a0c9819bc8d0319fae5ee4fbee4804dd7131fddd85f7a765714092d2d919daec"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9a1}, @NL80211_ATTR_SAE_PASSWORD={0x70, 0x115, "f0f40349c827bbafb6fb677ffc24a59c97f142de6f8b5172bae59cd505b43fdc8c75eef079084d5c1cc1fd396b6f8848d72a2fd838c89c3ac94a150f299b3c802e7439354d0724330464809cbc59821aec1b181409424bb7b5516e3b54a8af698d3bd659135bfe928b1f5312"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac01, 0xfac05]}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x30004080}, 0x4) (async) r13 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r13, 0x4010942a, &(0x7f0000001900)={0x1, 0x8}) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003240)={&(0x7f0000001980)={0x18b4, 0xd, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x185c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x140, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2d}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}]}}}, {0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x101}]}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0x12ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "d312c2c124bc73735858a91d4fb96204695739128b66bc36fc45279935ce2ebf659bcebdb90673b5bfaca922d122872dd500714c3610081a73854d2183293603e52609813a8f81a64027d53ade0b6fa61e565a925877dc3fc3ddcda08a19c36161cabf83a1c9f61aad342202dca538add3789f521701110ebc1e8f61d2762529e01413be10db714fc39de78efb19d89c43570d0f973b07b0a7fe2ab791a8051622b77446b100a10e200b2b1d1023c7571a3fcfec250f73f885af0e7a9e1181623e1bf4932a43ae63d8a210fc1e040c46eced7795fa867f5a17f041eb21b6f8dbea008572d99eac38394993db03a86d"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x10a0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "7242daa75e15f9"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x13c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x45, 0x1, "88678a9b3f688b07a03d4a8be365e2180d93cfd88b0b7b90d00ae065761d2d2723ccf3305077a4e2488be5ae646fef435caa7517d0ac760bcc337a6a1d9e7dc21d"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x59, 0x1, "b00f0be3f134d45ba1796ec37e64414b53a4ce38cfd9a2096cbd1cac58efced355a70ca0ebd3f43779af313e1b63251c70737d6635994aa8a4fd22247e015090c3c4fe21c6bf5e28d16e9d5d17103ce331d4e430e5"}, @NFTA_DATA_VALUE={0x1e, 0x1, "d39247c5f53bf3a6f68413e5fe47ebf1bc68e4ffde3165efd56f"}]}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "8d9dc33189b251218a941f205d1ffa40d5fbb2ffcecc8a085ac3bafae0f1be52b7428bda75044a2610e7baeed1feb2ddaaba79382e83b7cf2d530ca634d79719c78754c1185e01b4b00b3c75bf7b623adec42a7e92990af9234ba544731a4139b193b7cac67eb1ef2a9ff28b5d0a3317e7baabf62477bae87b1476d8b00b03fa6bcadc7c1ecf2dfd6a24dedfd35bf2384b"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x2ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x1c, 0x6, 0x1, 0x0, "18424fe19b4cbf09dbcbf5440fea1adb2a731ba30827bc56"}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x72, 0x6, 0x1, 0x0, "4ee923a5d59e01f8fd5e56d24bd58d5fc34592f6aa5a439f92f0f47e78bdacbe707e7d34a19aeadd4a39a372a827517b54bba481cf067028356dc51f1b27af023dbca8134111b5ba97427340232167c59f4cfbc4e3cdbe9e0b4d4b86ddcaafcf0ae309b7372147189875c491e51c"}, @NFTA_SET_ELEM_KEY={0x21c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "874a67a22db7aa22b3ed2661421637ab98cdf405f523d175cf2b5629a7769cad8ccb52c2f746a71178cd5ad7d6b7c00d8f06"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb8, 0x1, "55581b447653eecc6a35ab8767fb4fbf4c8ac69a6ae16e7948ade83fcbea35570dd7dd835dd0cc68ea5bba1081062a0d79a1bda9c1dd9d6dca8c30ca1d6f3a52bf569a6864def3a644b86bed5f89c9ab43c4d1b8f2e745c9549f5189c12355f41195ec8794b33053c26a8083c4c5d8ae5db049859d15970733e1afd2862c49692d3a367a9ca7953d38eb6f0666d3b4f48b19d4e668726b3c43724f97546bedcec0e5984f519e1c4e78ecdefb2a488b5bd97dae9d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf1, 0x1, "751b66550b62649ceb1ba91811438ab83f01cc9c0feb59c99143b52a5c27a7e9018bce2432246c3bf660f4e1d0db0cb2d47a953adb8675c3ba7a292e60876898f39ec053e7046e004f3fbb303b69e1e10e5b926af6ba8a2806e56997dfd89d278dbc9bbe228001bcf53f582a7f4cee89129ce0e75cac2296db677477d18c765311cbbfc554e49215d5bfd3ce5cfbe70d271c05a1d9aa478f84db93bedc8ad93eba2cb3353ff8fd385143e6391f26cc8798e2de986f9fc9fd0569065d8735692aa978003800cc0f5e26663d04cfea8409d98652ace1e07b9c68be0a0e48093d3c70adee27b6c25b20a8dee14749"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x18b4}, 0x1, 0x0, 0x0, 0x20004054}, 0x1) r14 = openat$cgroup(0xffffffffffffffff, &(0x7f00000032c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003300)={r12, r14, 0x1, 0x0, @void}, 0x10) (async) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r15, &(0x7f0000004200)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000041c0)={&(0x7f0000003380)={0xe0c, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0xd2b4}, 0x8, 0x40, 0x4, 0x7, 0x4, 'syz0\x00', "2538c27e8517e88c4cd0dabbaf13b3a20a81879819e809a6e94187a7c746a3cb", "f5c7e73b8abf23aac78b4431aa13a2f0f6380f1b5724a54d545aa550d89ca98e", [{0x8, 0x0, {0x0, 0x3}}, {0xdf, 0xaad, {0x1, 0x1}}, {0x3, 0x6, {0x0, 0xf31}}, {0x5, 0x200, {0x1, 0xa}}, {0x8, 0x7, {0x1, 0xfffffff7}}, {0x9, 0x7, {0x0, 0x9}}, {0x4, 0x6513, {0x0, 0x4}}, {0x40, 0xfffb, {0x3, 0x10}}, {0x1, 0xfff, {0x0, 0x80000001}}, {0x5, 0x5, {0x3, 0x3}}, {0x9be, 0x1, {0x1, 0x8}}, {0x9, 0x0, {0x0, 0xffffffff}}, {0x1, 0x0, {0x2, 0x5}}, {0xc452, 0x1, {0x0, 0xbe}}, {0x8, 0x9e36, {0x3, 0xffffc3f8}}, {0xc, 0x7fff, {0x0, 0x8}}, {0xb, 0x40, {0x2, 0x176}}, {0x1, 0x8, {0x3, 0x400000}}, {0xfffa, 0xb, {0x3, 0x2}}, {0x3, 0x800}, {0x1, 0x5, {0x3, 0xffffffff}}, {0xa, 0x3, {0x1, 0x80000000}}, {0x6, 0x260, {0x1, 0x2}}, {0x6, 0x0, {0x0, 0x628}}, {0xf, 0x9, {0x1}}, {0x4, 0x4, {0x0, 0x7f}}, {0x1, 0x4, {0x2, 0x5}}, {0x6, 0x100, {0x3, 0x6}}, {0xa, 0x7ff, {0x2, 0xfffff45a}}, {0x2, 0x7, {0x0, 0x9}}, {0x1, 0x0, {0x3, 0x9}}, {0xad08, 0x1ff, {0x1, 0x4}}, {0xf168, 0x1ff, {0x1, 0x1000}}, {0x8, 0xff, {0x2, 0x569}}, {0x5, 0x7fff, {0x0, 0x7}}, {0x3, 0x7, {0x0, 0x7}}, {0x5, 0x7, {0x3, 0x5}}, {0x81, 0x1, {0x0, 0x1}}, {0x2, 0x6, {0x1, 0x9}}, {0x0, 0x8, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x3f9}, 0x9, 0x2, 0x9, 0x8, 0x24, 'syz1\x00', "4e4d14a39521384b6cc697e0051af6f5c17f7d188b47078e3dce8bcb831cb8d9", "c62f5deb2c71446cd628cd83dad94680189fd74a006b280ad7720c9805632e62", [{0x5b2, 0x8, {0x3, 0x60}}, {0x7, 0x9, {0x3, 0x7}}, {0x8, 0x7, {0x1, 0x8}}, {0x6, 0x6, {0x3, 0x800}}, {0x8, 0x4, {0x2, 0x1}}, {0x0, 0x4, {0x0, 0x1}}, {0x6, 0x7ae, {0x2, 0xb8}}, {0xd2e, 0x3, {0x0, 0x5}}, {0x32, 0x1000, {0x0, 0xffff}}, {0x8, 0x101, {0x2, 0x6}}, {0x5, 0x1ff, {0x0, 0x8be4}}, {0x1, 0x200, {0x0, 0x2}}, {0xa0, 0x1000, {0x3, 0x7}}, {0xb8ab, 0x0, {0x0, 0x8}}, {0x0, 0x8, {0x2, 0x80}}, {0x6f, 0x2, {0x3, 0x4}}, {0x5, 0x7, {0x2, 0xf}}, {0x2, 0x9, {0x0, 0x3}}, {0x222, 0x8, {0x3, 0x1}}, {0x8000, 0xfffc, {0x2, 0x80}}, {0x0, 0x890, {0x2, 0x4}}, {0x2, 0x9, {0x1, 0x101}}, {0x9, 0x8, {0x0, 0xfff}}, {0x3, 0x3, {0x2, 0x5}}, {0x100, 0x7, {0x2, 0xe7}}, {0xb, 0x400, {0x0, 0x9}}, {0x6, 0x9, {0x1, 0x5d}}, {0x7, 0x3, {0x0, 0x81}}, {0xf6d, 0xf2, {0x1, 0x1000}}, {0x7, 0x101, {0x0, 0x8000}}, {0x0, 0x4, {0x0, 0x5}}, {0x2, 0x6, {0x3, 0x4}}, {0x604, 0x8, {0x0, 0x3}}, {0x6, 0x2, {0x0, 0xffffffff}}, {0x4, 0x8, {0x2, 0xcb0a}}, {0x2, 0x40, {0x3, 0xfffffffd}}, {0x7, 0x4, {0x3, 0x1}}, {0x7, 0x3ff, {0x2, 0x3}}, {0x8600, 0x8, {0x1, 0x5}}, {0x3, 0x4, {0x0, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0xb, 0xfd, 0x8, 0x992a, 0x2, 'syz1\x00', "bdf2fe0be0b388af02a300879d8321964fbd74caa8d0c39a06f6ff24b4f46f69", "84832d749cb0c3fc870f49cd7d93f1c7e7c9eefff16a55d4a502e8f76fe53474", [{0xfffa, 0x2, {0x0, 0x7}}, {0xe, 0xc, {0x2, 0x332}}, {0x5, 0x4, {0x3, 0xfffffffc}}, {0x9, 0xfffa, {0x1, 0xff}}, {0x400, 0x5, {0x1, 0x902}}, {0x6, 0xe77a, {0x0, 0x2}}, {0x7, 0x6, {0x1, 0x1}}, {0x5, 0xe912, {0x3, 0x6}}, {0x7ff, 0x5, {0x1, 0x5db}}, {0x100, 0xe, {0x3, 0x2806}}, {0xd, 0x2, {0x0, 0xa0000000}}, {0x1000, 0x3a, {0x2, 0x80}}, {0x2, 0xe0, {0x1, 0x1}}, {0x1, 0x8d5, {0x1, 0x5}}, {0x2655, 0x4, {0x2, 0x11e40000}}, {0x0, 0x4, {0x3, 0xa}}, {0xf, 0x3, {0x3, 0x9}}, {0x6, 0x4, {0x1, 0x7fffffff}}, {0x1, 0x8, {0x1, 0x7f}}, {0x1, 0x8, {0x2, 0xec4}}, {0x8, 0x1ea, {0x0, 0x10}}, {0x863, 0x3, {0x0, 0x910}}, {0xffff, 0x7, {0x3, 0x9}}, {0xfff, 0x8, {0x0, 0x6}}, {0x7, 0xe4, {0x2, 0x8}}, {0x0, 0x7f, {0x1, 0x64b5b4ef}}, {0x1, 0x2, {0x1, 0x5}}, {0x3, 0x987, {0x1, 0x1}}, {0x3, 0x4, {0x2, 0x3a52}}, {0x1000, 0x7f, {0x2, 0x85}}, {0x7, 0x6, {0x1, 0x2b2}}, {0x5, 0x1, {0x0, 0x8001}}, {0x600, 0x0, {0x3, 0x2f0}}, {0x8000, 0x1}, {0x7ff, 0x4, {0x0, 0x200}}, {0xe7, 0xf2, {0x1, 0x8185}}, {0x800, 0xfffb, {0x0, 0x3}}, {0x1, 0x6, {0x0, 0x5}}, {0xa, 0x4, {0x1, 0x800}}, {0x200, 0x5, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x5, 0x6d, 0x3, 0x0, 0x13, 'syz1\x00', "386fefaece3e2ca2aa5bb9e689e2664990318f3de7ed92da017ad2697aa5fdee", "0042e9bca962fd2f3f52328af1b8a8c82516c36569d84112eedea6864c03991e", [{0x0, 0x96cc, {0x1, 0x3}}, {0xf, 0x7, {0x3, 0x62e}}, {0x0, 0x7fff, {0x2, 0x9bd}}, {0x1, 0x5, {0x3, 0x2}}, {0x3, 0x60, {0x0, 0x9}}, {0x2, 0x6, {0x2, 0x1}}, {0x7c2, 0xfc00, {0x3, 0x7}}, {0x400, 0x5, {0x2, 0xb8c}}, {0x2d14, 0x8, {0x1, 0x7}}, {0x6, 0x2f1, {0x3, 0x5}}, {0xfffd, 0x8a0, {0x1, 0x3}}, {0x8, 0xae89, {0x0, 0x7}}, {0x0, 0xfff, {0x1, 0x9}}, {0xf94, 0x9, {0x1, 0x4}}, {0x1, 0xddd, {0x3, 0x3ff}}, {0x0, 0xfff7}, {0x5, 0x6182, {0x3, 0x3}}, {0x7, 0x5ad, {0x0, 0x8}}, {0x9, 0x7fff, {0x0, 0x7ff}}, {0x7, 0x4, {0x3, 0x7}}, {0xca, 0xc0, {0x3, 0x7fffffff}}, {0x4, 0x4, {0x1, 0x1a7fd475}}, {0x101, 0x401, {0x3, 0x5}}, {0x81, 0x401}, {0x6, 0x9, {0x0, 0x7f4}}, {0xd93b, 0x180, {0x3, 0x4}}, {0x3, 0x7, {0x1, 0x8}}, {0xe000, 0x6146, {0x3, 0x6}}, {0x7, 0xff, {0x1, 0x6}}, {0x0, 0x7, {0x3, 0x6}}, {0x4, 0x0, {0x1, 0x32c}}, {0x81, 0x7c, {0x2, 0x1}}, {0x8, 0x1ff, {0x1, 0x10001}}, {0x1, 0x5, {0x1, 0x8}}, {0x2, 0x2, {0x3, 0x7}}, {0xfff9, 0x1, {0x1, 0x7}}, {0x200, 0x86d1, {0x2, 0x6}}, {0x3, 0x6, {0x2, 0x800}}, {0x7, 0xfa, {0x1, 0x5}}, {0x3cdb, 0x9, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x60, 0x2, 0x2, 0xd334, 0x1e, 'syz0\x00', "358c0af44c1b1a49555db63b529333ef1ebe3b1005148b9ceaf3440b91d01ba8", "c1e8118109ac5de94ecad471abf9b440c573125771904bcc227516f39a47279f", [{0x6, 0x4, {0x2, 0x2f5}}, {0x3, 0x400, {0x3, 0x10000}}, {0x3, 0x0, {0x0, 0x8001}}, {0x7, 0x354, {0x3, 0x9}}, {0xa, 0x8, {0x7b8d6b6bb6b91414, 0x2}}, {0x2, 0x8f, {0x0, 0x9}}, {0xa, 0xa, {0x1, 0x7}}, {0x8, 0x5, {0x2, 0x9}}, {0x6ab7, 0x5, {0x0, 0x3}}, {0x1, 0x9, {0x3, 0x5}}, {0x4, 0x8, {0x1, 0x3}}, {0x100, 0x2, {0x2, 0x2}}, {0x995, 0x6, {0x0, 0x400}}, {0x0, 0x9, {0x0, 0x8a}}, {0x6, 0x2, {0x2, 0x956}}, {0x280, 0x2}, {0x6, 0x2, {0x2, 0xffff}}, {0x40, 0x4, {0x3, 0x9d1}}, {0x3, 0x5, {0x0, 0x9}}, {0x0, 0x7, {0x1, 0xd}}, {0x6, 0xe1d, {0x2}}, {0x7, 0xc34e, {0x2, 0xff}}, {0x401, 0x0, {0x0, 0x9}}, {0x81, 0x1ff, {0x0, 0x9b9}}, {0x6ea5, 0xc, {0x3, 0x9}}, {0x81, 0x5, {0x0, 0x6}}, {0x6, 0xce7, {0x1, 0x7}}, {0x1, 0x7, {0x2, 0x80000000}}, {0x2, 0x1, {0x3, 0x6}}, {0x8, 0xfff, {0x3, 0x81}}, {0x6, 0x401, {0x1, 0x6}}, {0x6, 0x4, {0x2, 0xfff}}, {0x8ef, 0xfff9, {0x2, 0x7}}, {0x3, 0x5, {0x1, 0x2}}, {0x114, 0xf373, {0x2, 0xd668}}, {0x2, 0xfffc, {0x1, 0x400}}, {0xd, 0xe, {0x0, 0x5}}, {0x10, 0x9, {0x2, 0x5}}, {0xbde, 0x2, {0x3, 0x6}}, {0x8, 0x6, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x8, 0x7, 0x3, 0x5, 0x0, 'syz1\x00', "de9a65ef25266aaa4e62cdc9255257b870fc76dfd75518798b2d8ace38ef2771", "9bdb57183fcf8549298c3d0272e860002806b78c8c70532f157fe72577729eda", [{0x9, 0x7, {0x0, 0xfffffc00}}, {0x2, 0xc67, {0x3, 0x1}}, {0x4, 0x8, {0x1, 0x5}}, {0x7, 0x5, {0x0, 0xfffffff7}}, {0x7, 0x2, {0x2, 0x4}}, {0x401, 0x6, {0x2, 0x7fffffff}}, {0x0, 0x2, {0x1, 0x9}}, {0x83d5, 0x5, {0x3, 0x5}}, {0x4, 0x7, {0x1, 0x4}}, {0x4, 0x8, {0x3, 0x6d3}}, {0x0, 0x0, {0x1, 0x4}}, {0x0, 0xf, {0x0, 0x7}}, {0x7, 0x4, {0x2, 0x278}}, {0xc, 0x0, {0x0, 0x400}}, {0x7, 0x5, {0x1}}, {0x94, 0x8, {0x1, 0x1}}, {0xd, 0x9, {0x1, 0x2}}, {0x8, 0x1ff, {0x3, 0x6}}, {0x8, 0x3, {0x3, 0x4}}, {0xecdb, 0x5, {0x0, 0x1ff}}, {0x81, 0x1, {0x3, 0xada7}}, {0x3ff, 0x3, {0x0, 0x1}}, {0xd83, 0x500, {0x1, 0x401}}, {0x4, 0x2, {0x1, 0x200}}, {0x13, 0x9, {0x1, 0x6}}, {0x0, 0x3, {0x3, 0x7fff}}, {0x6, 0x38, {0x1, 0x3}}, {0x4, 0x0, {0x3, 0x3aaf}}, {0x9, 0x8, {0x1, 0xffff0000}}, {0x2f9, 0x650, {0x2, 0x7}}, {0x101, 0x2, {0x0, 0x6d}}, {0x400, 0x1, {0x0, 0x40}}, {0x5, 0x7, {0x1, 0x5390}}, {0x8, 0x9, {0x1, 0x9}}, {0x1000, 0x6, {0x3, 0x4}}, {0xe, 0x9, {0x0, 0x8c}}, {0x1, 0x3, {0x3, 0x7}}, {0x0, 0x8, {0x3, 0x2}}, {0x6, 0x9, {0x3, 0x8}}, {0xe, 0x0, {0x2, 0x1}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x404c004}, 0x840) (async) socket$inet6_udp(0xa, 0x2, 0x0) 1.470185183s ago: executing program 2 (id=8642): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000280)='v', 0x1}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x64, r6, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffc, 0x2344edab, 0x8000, 0x4, 0x6, 0xe8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x100, 0xd, 0xfffffff6, 0x0, 0xffffffffffffc148}}]}}}]}, 0x78}}, 0x20000040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x18, 0x7, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES16=r5, @ANYBLOB="57bb830a50336611f1235510e5caff79a1967a7ed330551a813239c7cf61de13e02b6e147f3a6e1ba8937cd16bcd2f25e14db71b2a056065d7d8655a69312d494d75cd9a2aa6c6d87a39b578ef8e3ec24c6120af4101d9f8b52d209c211fe9d5a5f5166c514a13dde0d26e6bd97a9945d6a7819c85ce0a6bba8f9f30ec63a42a4255c49fee5b5e09e8a5520726698b4d3a4eca2b9f0f0ddd051d6d01becb9e3577d9ce44ef03ddd8f0a88e6a", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="6377b276757ee189d938a5b848dc60c9ffeb06796c86486fd7834027507c99915c6da581b6a0088ecf560b9755440f08135b5fd7e7d23204f8fec4866797f13829866c4a7999e092e7817f1006013851b8121a98e0433bbbf0c8b2aee3450810fe047164e7966c59079fd79368cdcd289fad93d582f89fedbec12700daba231d493c7fa3cd630e28ae929cec74aed78ecfbb112bd0253ee167"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.379537972s ago: executing program 6 (id=8643): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="029dd1951ee5e731922ebbc9370200090a00000000000014000000000300060000000e0002000000e000000900000000000000000208000300050000000000020000007f000001000000000000000000"], 0x50}}, 0x0) 1.238562995s ago: executing program 6 (id=8644): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="021c4c260a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES8=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="021c4c260a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES8=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) 1.107348245s ago: executing program 3 (id=8645): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e7", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}], 0x20, 0x4855}, 0x24000052) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r4 = socket(0x40000000015, 0x5, 0x0) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000808000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000780)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001e40)={r6, &(0x7f0000000800)="d0d48a0229696956a4092e09cd52f368e1201b034ea0928f41cf83c763d1e90b", &(0x7f0000000e40)=""/4096}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000007ff589afbf44d4c6c785b6cc5fe3d2edc71781470cd78dcb9a13c40b2936ff6f13954704e629a533d2df0e8b5a6eca3eb894e742f3a045a1842dd782e421d2854c7b41e9879e7f4797224958f8230a177bc3569b1f838dec0f9e29660cf3d008fc46333c10c4c428b84ed62be6faeb20c89930f404c7bf916fe57dd35f8f2e781f4aed950032ca2fd984d44b846fc4985bee6d4be6a4c47eb4ffbd9ef736d42a12bb0b67d335c4704a0e3f0e104b1383951647eba986fad5ebb3187394140022811c42cd8fc140be3c2693641e3fd2395bd91caeed1deb04e2004b10afe236", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100ffffffff1c0004800500030001000000050003000000000005000300070000000800020003000000"], 0x40}}, 0x4000000) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x2040, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000000)='@+^(#-.&#\x00', 0x400040, &(0x7f00000001c0)={@_ha_fsid={[0xfffffff7, 0x6]}, {0xfffa, 0x3, 0x2, 0x1000}}, 0x9, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x1}) sendmsg$L2TP_CMD_TUNNEL_GET(r12, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf250400000008001100000000000500070002000000050013000e000000"], 0x2c}}, 0x20004801) (async) sendmsg$can_raw(r4, &(0x7f00000006c0)={&(0x7f0000000400), 0x10, &(0x7f0000000680)={&(0x7f0000000600)=@canfd={{0x1}, 0x35, 0x2, 0x0, 0x0, "3e5b5e5e0bf793de82192f50dfb3282c148552a48500c1cbeb04233264dc7763460880eff300d866c9515b6c74d14919eb825e94a6d54040c1f355c7ae8347ef"}, 0x48}, 0x1, 0x0, 0x0, 0x4850}, 0x88b5) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRESHEX=r3, @ANYBLOB="24005a8020000180140003000000000000000000000000000100000004000200040001"], 0x40}, 0x1, 0x0, 0x0, 0x4045}, 0x0) 999.936283ms ago: executing program 2 (id=8646): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) 995.74762ms ago: executing program 6 (id=8647): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x98, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x75d}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x1, 0x4, {0x965, @struct={0x7fffffff}, 0x0, 0x1ff, 0x17, 0x93, 0xe2a2, 0x100, 0x3, @struct={0x32}, 0x1, 0x8, [0xffffffff80000001, 0x9, 0x9, 0xe6bc, 0xfffffffffffffffe, 0xaf]}, {0x6, @usage=0x2, 0x0, 0x3, 0xed1, 0x4, 0x6, 0x80, 0x8, @usage=0xfffffffffffffeff, 0x8, 0x400, [0x6, 0x8, 0xfffffffffffffffc, 0x6, 0x8, 0x8]}, {0x49, @struct={0x5, 0x4}, 0x0, 0xfffffffffffffffa, 0x8943, 0x5, 0xb, 0x8000000000000001, 0x40c, @usage=0x2, 0x8, 0x1, [0x1, 0x0, 0x6, 0x9f, 0x620, 0xfff]}, {0x1, 0x7fff, 0x2}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000800)={r5, 0x100000000, 0x5, 0x1}) 858.83041ms ago: executing program 6 (id=8648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0xf, 0x2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x49, &(0x7f0000000040), 0x4) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000580)={{&(0x7f00000000c0)=[{0x6, 0x6, 0x40, {0x5, 0x1}, 0x1ff, 0x1, 0x7fffffff}, {0x100000000, 0x2, 0xfff, {0xfffffffffffffff8, 0x4}, 0x2, 0x100000000}, {0x10, 0x9, 0x7, {0x7ff, 0x7}, 0x6, 0x4, 0xee}, {0x7, 0x8d, 0xa425, {0xb49, 0x100000000}, 0x1, 0x5e0, 0x100}], 0x4, 0x40, 0x38, 0x4}, {&(0x7f0000000240)=[{0x101, 0x50e}, {0x1, 0xfffffffffffffc01}, {0x0, 0x17}, {0x8, 0x6}, {0xc0, 0x1ff}], 0x5, 0x10, 0x7, 0x10}, {&(0x7f00000002c0)=[0x8, 0x57c9, 0x9, 0x40, 0x3182, 0x1], 0x6, 0x8, 0x4, 0x8001}, {&(0x7f0000000300)=[{0xffffffff, 0x4, 0x81, 0xd, 0x8}, {0x0, 0xe, 0x1000, 0x2, 0xfffffffd}, {0x726, 0x5, 0x7, 0x9, 0x913}], 0x3, 0x28, 0x4, 0x6}, {&(0x7f0000000500)=[0xfff, 0x0, 0x4, 0xfff, 0x101, 0x1, 0x40, 0x8000000000000000, 0x8], 0x9, 0x8, 0xe, 0x2}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000be7000005c00400000000000", @ANYRES32, @ANYBLOB="0000000000000000000000deffffc500ffffff00", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000200"/28], 0x50) 817.088751ms ago: executing program 3 (id=8649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 724.169125ms ago: executing program 5 (id=8650): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum]}, {0x0, [0x2e]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x2}, 0x10}, 0x94) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000040)=0x5) 694.528353ms ago: executing program 3 (id=8651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a3300000000f02c6d71030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r4, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="b5040000000000400000", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4008c}, 0x4000000) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000040), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000e7ffff090000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000092c72c75c0dead46f00000000140000001100010000000000000000000200000a7c6166eff911240af18bbc234cd6488385f4000000000000004332ba75109289"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f00000001c0)='tls', 0x30002, &(0x7f0000000200)={@_ha_fsid={[0x0, 0x3e]}, {0x10, 0x1, 0x9, 0x101}}, 0xd3c8, &(0x7f00000002c0), &(0x7f0000000300)=0xaf1}) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2044}, 0x4004) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x12, 0x4f, 0x1}, 0x14}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x1410, 0x410, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x0, 0x2}, 0x10) (async) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x21}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x925f1c2acd314821}, 0x20040006) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000040), 0x3) 652.054427ms ago: executing program 5 (id=8652): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x86, &(0x7f0000000440), 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, r5, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40c0005) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xb2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x100, 0x1003, 0x100, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000340)={0x2}, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x1}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x4001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3929617ddb3a8967e3bc66d673000004", @ANYRES16=r9, @ANYBLOB="010829bd70000000000007000000050013000900000014000800"/42], 0x30}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 351.632575ms ago: executing program 5 (id=8653): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x25, 0x4, 0x30, 0x66, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c80353c54d08004705000000000000000690780a010102ac1414aa01070704020002000000ce3716d6d548954e83659abc42a65589db275f1db4a0cdf72fd09c457d940cb7cd90d8e581dc993c1e4199c41724e088be2d4aad4d112022cbab57654e94", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000790780000"], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 351.152544ms ago: executing program 3 (id=8654): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000200), 0x12) r2 = accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80800) bind$x25(r2, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 266.46967ms ago: executing program 3 (id=8655): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100037047f00"/20, @ANYRES32=0x0, @ANYBLOB="19ac2494b0f0e42f7de408fa72970cc28588ce5ed1980b0f128baf8d2c1a846c2204326f9cf02735e65a1e840f1ffad531b5c3ad92358f1fdfa7bdfaadeffb33504fc176895e87111b7babe28c95c71ab95e74e8e43e002f80e19c522c5aabc03380c9c001a1eb7c6c9799cda7151179d17c47bdd0fcb9d4249e0f9d46a10ea63fd78031636833e8808d5249cb68ccb49634063ec28fec5a02a6b3a94e0d8cedf9e784a136c79f622db9"], 0x40}}, 0x0) 139.879191ms ago: executing program 5 (id=8656): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2cc, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f258ee3f89909116"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="070988b05398b674860489ec4e1893f3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9a068233157fa20f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6b8855e0adbf147fffcc0fcde3829de396c24d6a6e275eb6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "23d6eb06e1697cf3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="17019aca52f8e3644c7f80a12ceab555"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="04dd2a9f9fe7051f815a1f17c26613d5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5f0d}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="30f13117caf36bfa3b038bb7622dbfe2fa6dfb22321767f9792e5ed64a6dda02"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="43b9e1cba8e9076c5b2b8ad410a530f7e7bb87824259a938"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "951589d522dd85ed"}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e3ae79d634fd1aa04601746e0768213253b937b1eeb728f7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6f44acac07fe2e72b1030790fc42fe2115e5b3d29fd82f2948a7b245f3a04a73"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2d3c6842c5401cfcccf02f52e28c04b6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c30c942758a33355b8e48bea4ec40f65"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2143}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a9dcb42d6c00c4298e11173ebad6636ebc08fe4921be640488f80af124b13f57"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "541a6f27b3c5a65e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="03bcc68a0925b41c90c45cdd6b879dc1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9127c876bde51bd4d09f972f25e9d9f7a732ab475735752c380900d22a06a5ca"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84c5d4d7d66d3a18"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bf5037ee4960ea94d6e026f1e793b8b3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0c5d8d7db301674c0c889e7187a829e23549cd6d8b88617b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6d4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb66}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8d9a5cc309ad5d2d1fa3d0787fc5f1b8feb3c8fdb0694188"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="76febd62ed8080c3f59edefbc158baf9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3a5c1e0683c2d41643067ceeb7079792"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3af448c5adddad35835df374be7b102a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2382d84fa41454cc75c67370dd0a1ded"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="39894c3f1fa4043cd6b6be08f70fbbba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5005cc1163c7bcfd"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f0000000400)='&+(\x00', 0x2100, &(0x7f0000000440)={@_ha_fsid={[0x8, 0x7]}, {0x7, 0x0, 0x6b85, 0x4}}, 0x6, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x9}, {[0xff, 0x9, 0x800, 0xa]}, 0xfd33, 0x12, &(0x7f0000000500)=""/18}) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}}]}]}, 0x64}}, 0x40004) (async) r3 = gettid() sendmsg$nl_generic(r2, &(0x7f0000001a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000000740)={0x12f4, 0x2f, 0x2, 0x70bd2a, 0x25dfdbfb, {0x11}, [@generic="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", @typed={0x8, 0x1, 0x0, 0x0, @pid=r3}, @generic="54538777ff2d2bdc86b304cb575743ca0cf885de375cc3a3abf109bf39db015d108da54b719d92cae1d5a5d71650b6750bfb67ca75a8ecf525c8f451c40d6fb8f883468b20a3abe07c2db41d255d3b188c2a8be5a9c6a6fc76ff835ba6a3d0d1a69a5979b320345e30bef3ae805ceae9dcb440cdbfa408dc07a5cb8f24b7c10b214e79e5ddcf1c593128df8bb172939c548ba14394302119bb482d3fa5881199cb415e372531187092ae2fa661715a57d3013df7f2cb121ca7663305ba5da4f2def7d334078aa7d2457eb4f9dad3d2310e82a365ee2bff88ab3e5b", @nested={0x195, 0x11a, 0x0, 0x1, [@generic="02a4f8292729c2b165f93c4eb32c3d898df6a48b3b94eeb7536044035af77e3b0c87bc9e002a4eb34be4ff14248c207d2395cbd7ef09a3837a6863070725f81c6aab8336d8faddea417bb122916fd609d6da7bfc3748aa80846bdc4e092aff27b547daa264225b59b406578a73d96893a936a3f56f9b6946f14f49e5b0b5c8372e85653410d2308a2114076ba2253a92e996324a5ac504ac5777eef69429", @nested={0x4, 0x89}, @nested={0x4, 0x23}, @generic="43cdfb304854b60c5f74a05696811e957e5ec7e8481bb0d765295becd04d67e9331fd2e278f319c1d2ef032070df428e7418b870e1109266c0b3c592095a3667119754e46d6a3dfb0663961cde63f13caf97424b643f4b01710adb87172291f5f89bef0559fa9a77efd38b37dcac27fdd9cb538b428c85d7e8c52a2ab4d8e5f7d0f86806dd014f5ca62180735fb2e7801b359c2fcf111566a6601d7849b92c2db620d9e6955fb1f27ff39d6b06d432adcf3e831321991edc5f6ec01232b48734095adf017207937030e9a7c1c7f3ac11fd47cfc3e7118cdada776ef34aad32e832a1acb614c3cd5dcb6cd7"]}, @generic="7255c10ad22148731ac83fa91167a84b63609bd4c01d968c0605443a5f5e33786d58e1da0ffab3835ef8fcfd3952ef3c18b8409b684f0f07231d096c2c3751c5e85fa0a11cfcf6c977bb924428a14eafc2929d4eb12cec98e99251447cedd3bc9d38"]}, 0x12f4}, 0x1, 0x0, 0x0, 0x4008051}, 0x240098e0) (async, rerun: 32) r4 = socket(0x1, 0x6, 0xc74c) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001b40)={'syztnl1\x00', &(0x7f0000001ac0)={'erspan0\x00', 0x0, 0x700, 0x4711072b390631dd, 0x5, 0x0, {{0xa, 0x4, 0x1, 0x3e, 0x28, 0x64, 0x0, 0xa8, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0x20, 0x0, 0xa, [0x6, 0x8, 0xd6f1, 0x5]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001c00)={'syztnl1\x00', &(0x7f0000001b80)={'syztnl0\x00', r5, 0x29, 0x1, 0xe, 0x4, 0x0, @empty, @local, 0x8, 0x7, 0x42788ea5, 0x3bec}}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000001c40)) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x78, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001e00)=0x0) r8 = getpid() sendmsg$nl_generic(r2, &(0x7f0000002500)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001e40)={0x658, 0x39, 0x200, 0x70bd26, 0x25dfdbfc, {0x13}, [@nested={0x10, 0x21, 0x0, 0x1, [@nested={0x4, 0x143}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, @typed={0x8, 0x14b, 0x0, 0x0, @fd=r2}, @nested={0x6c, 0x5, 0x0, 0x1, [@generic="3a7d6ed707af5662b4baa013827787c4329131c512cbdd9e333dff6c0fab5be7f3b0a7c389bb56cb74c2c29fd813b9b8d21dbd687003a5fcbc4027e5b5b8119a4001520d75b43282b434462d9a98d3fdcdf2a73a6f53f5e4e62eac6f5de425ff6918666d4855b6c9"]}, @nested={0x1ae, 0x13f, 0x0, 0x1, [@generic="f21fc1c4934224cdaaa3795ee768e7a825caa88c681c91903cfdfc56fbbf86a6e447cf8998a08f6bec4849f93a6dc114a11693a987026f07524342dd0a9a6d492946ef7ded670d0ae13ac1eced3aef65e5f63a3fe192ee39979e153eb9e16061f2e97e91099661db9dbd025db2da82d6d082e4b1bb4380113dbc0741bacf68fae6b890802cbb0fc7e0c77f8ca4f8ca74c55fe50691bab6e1f217f11071d725d166b32240ef1c95ea36fd744296f2cb508adb32a89d679db1632a68e0e052ae5612fcf3cba2be92c2e4", @nested={0x4, 0x5e}, @generic="96be52eceb1b1239ec1cd6a8fb26690ef2cc2d157d6519da2d7b35ee68646b9c2d0b3f5d08a04a6a7583f4b725ac2311453b3b9633f353fc9f4e044abe2a91835ae526b4d1791d7e4463cb68d7860d231df0d69bd8036d304df1680d6b93cf7672f30710a4b66a873e0cd01d4ff7f6528bba18876149ae75bd05c4b2df127b500ddb7d1b033d2bfe548adc18a02e3d80fc53bc5b3c2f1dc7", @generic="199b1eb440652aba750743f48a75bfb814bf790c4e91755e5ec22677a6e85f81917108e09c47176c3f9720d530151d8e384fdecfcca1d877709f4b07afb48f645dbaf333cb"]}, @nested={0x1cb, 0x93, 0x0, 0x1, [@generic="aafbd3fac7c281f81b66a0537472f79e64f6099c4c719e0559ea2a3d9332cf30268d6a59f219e9437f8b639b39eb8679905fa6af2b2ba50a19692c67", @typed={0x8, 0x4, 0x0, 0x0, @uid=r7}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x5f}, @nested={0x4, 0x66}, @generic, @generic="1db77ff67aeba512a77a5585a5084bcf113950b8b138efa36dad7f14a233bf43ab5273046e41b1b59e17d64cbe477b7c55e4b9a13cccc1e4ef11a6710e5f70eda628522d2b855ac596fb14c8783071be0638778dae592d6810a678e2eec38a95a78139b4edfabff2080f5b7740d06afb4185f9b23d8dc92fbd67b1ace7cc0e8439d765e383ad9417e664653ff0bcf84a14c247179edc3118eb4ff6a1cb52b7", @generic="7705a23da1f67b2fe64c12c9ce6d2caab35c13ee03132a38c842341ca7dfbd0a92eb75f31b811af2f7524d1b7ea7068e586b83c85c73ae091fe1a6062ca673e9066b09a75a6b58b9313eb3a7b430399af4fb1173759a35d1adfb001668baab700bfaee79ea038743f9e3b109f6af84446c50709769ea7672e32c0bb32c69bfe7d529bb1e693d95d6baeba872a93136b36317bad8c8f0c26f342644b49a07366e6c1aebea427ee9b4c4868489b07dc82344566a5683af507214b5f7b5", @nested={0x4, 0x91}]}, @nested={0x114, 0x24, 0x0, 0x1, [@typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="bbd8b433b18f3ef823b4c768569ba516fd0358ddaa34749db41ec08999238c32e663a58be5a74fadb194fe1e9b4b874cc0ea136fe1ce0fbdfc728cf916aad6a68656dbb0840b469f6895a98f9e7d22009b87c165b98774dd218fe14e4dd72d1cc2c575e245b62e94837ce0f2b2200449ad1b34d3007671235da68422fcb82cce02ac75479b66853a28e44c128db99f7dbfea4a3dea49d30484c8c150311a04ac2273f72a9c615cf3804ac05be85aad8a63a9f9fbec806c25f703ab9f04c929238b22df8ba5e598c3277cb924cf7cfd6a92084f24812e0e3a3cf8d929ce35481abf411069", @nested={0x4, 0xf7}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x4b, 0x2, 0x0, 0x1, [@generic="c336af078225b40f7feed341825e1e73a6483c15e48f7e90d29b1ae040910e9c8c1f31", @typed={0x8, 0x48, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x15f}, @typed={0xc, 0x11b, 0x0, 0x0, @u64=0x7f}, @typed={0x8, 0x54, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x55}]}, @generic="f0af8872d32ec76e458b2bd0984c8af3b205cb57dd402552a0466956c073702fead06ad9a6813d99877767cfd26119940b036453a6b2aad99fb7dbd89fbd2534ff987ac1769394c33ee573cf3f88f7580bf352acc428f1ec45ee88ae12a1988a57abfbdf9e0cd2036deaab44aa7c8b376355e905655e0c13d5eff11c63a54b213e4a99599480b05297fd7300e24b442d0bca1882d887bc339132a37d33c3443d98060d6ee6bafd33cb95fd8f53664fd7ad6188aff24c32313e790f542813c6341b40dfb8391545784aebd8f8dc7f5f619748d19bace4e0a74e9dfac96f8de009dd"]}, 0x658}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}]}, 0x48}}, 0x40080) (async, rerun: 32) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000002680), &(0x7f00000026c0)=0x4) (rerun: 32) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002740), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x2c, r11, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c010) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000029c0), r2) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x38, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002ac0)={0x655458a0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b00)=r14, 0x4) syz_emit_ethernet(0x85, &(0x7f0000002b40)={@broadcast, @broadcast, @void, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0x4}, {0x1, 0x0, 0x1}], @llc={@llc={0x8a, 0x2, '\v', "5e3611e64339a69e10c84fcf63bb033253496afb100c2d6e01fa58f69a2299df5317a75eb142e46671f8ff0969b6ef2c3bf8d1bd23915578d206548fec8b2190b3c35850eb36a7f36b0c53b4c7727aa66b38d42de614a4610c6412a8c16c763e5a503b955870bd4d"}}}}}}, &(0x7f0000002c00)={0x0, 0x1, [0x15f, 0xbd3, 0xc27, 0xf34]}) (async) recvmsg(r13, &(0x7f0000003040)={&(0x7f0000002c40)=@x25, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002cc0)=""/171, 0xab}, {&(0x7f0000002d80)=""/135, 0x87}, {&(0x7f0000002e40)=""/179, 0xb3}], 0x3, &(0x7f0000002f40)=""/216, 0xd8}, 0x100) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000004}, 0x1) 0s ago: executing program 2 (id=8657): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r2, 0x8, "e6d695c1ff660111"}, &(0x7f0000000180)=0x10) kernel console output (not intermixed with test programs): us mode [ 661.913154][T30786] geneve1: entered promiscuous mode [ 661.938442][T30786] vlan2: entered allmulticast mode [ 661.957455][T30786] geneve1: entered allmulticast mode [ 662.057778][T30808] netlink: 'syz.4.6566': attribute type 1 has an invalid length. [ 662.637129][T30834] netlink: 788 bytes leftover after parsing attributes in process `syz.4.6572'. [ 662.987236][T30852] IPv6: NLM_F_CREATE should be specified when creating new route [ 664.835484][T30871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6577'. [ 665.023401][T30886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6578'. [ 665.047898][T30876] gre1: entered promiscuous mode [ 665.062492][T30886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6578'. [ 665.172568][T30886] macsec1: entered promiscuous mode [ 665.198454][T30886] bridge0: entered promiscuous mode [ 665.223241][T30886] macsec1: entered allmulticast mode [ 665.236580][T30886] bridge0: entered allmulticast mode [ 665.325543][ T12] hsr_slave_0: left promiscuous mode [ 665.344122][ T12] hsr_slave_1: left promiscuous mode [ 665.365917][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.389724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.405400][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.413788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.427834][ T12] veth0_macvtap: left promiscuous mode [ 665.436498][ T12] veth1_vlan: left allmulticast mode [ 665.444015][ T12] veth1_vlan: left promiscuous mode [ 665.450579][ T12] veth0_vlan: left promiscuous mode [ 665.847009][T30927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6585'. [ 666.026162][ T12] team0 (unregistering): Port device team_slave_1 removed [ 666.050519][ T12] team0 (unregistering): Port device team_slave_0 removed [ 666.560519][ T12] IPVS: stop unused estimator thread 0... [ 666.613026][T30960] syzkaller0: entered promiscuous mode [ 666.623525][T30960] syzkaller0: entered allmulticast mode [ 667.654864][ T4948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.663157][ T4948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.673894][ T4948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.682724][ T4948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.691355][ T4948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.797225][T30871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.097989][T31005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6596'. [ 668.118049][T31005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6596'. [ 668.309170][T30978] lo speed is unknown, defaulting to 1000 [ 668.368267][T31023] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6600'. [ 668.403500][T31023] xt_policy: neither incoming nor outgoing policy selected [ 668.673507][T31042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 668.701713][T31045] xt_ecn: cannot match TCP bits for non-tcp packets [ 668.752990][T31045] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode [ 668.787562][T31045] batman_adv: batadv0: Adding interface: wlan0 [ 668.806630][T31045] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.845520][T31045] batman_adv: batadv0: Interface activated: wlan0 [ 668.910191][T31054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6610'. [ 669.127127][T31054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.159472][T31056] gre2: entered promiscuous mode [ 669.261864][T31058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.751161][T25670] Bluetooth: hci2: command tx timeout [ 669.862054][T30978] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.880274][T30978] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.898080][T30978] bridge_slave_0: entered allmulticast mode [ 669.921933][T30978] bridge_slave_0: entered promiscuous mode [ 669.943468][T30978] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.962634][T30978] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.980147][T30978] bridge_slave_1: entered allmulticast mode [ 669.999505][T30978] bridge_slave_1: entered promiscuous mode [ 670.087143][T30978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.126422][T30978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.228710][T30978] team0: Port device team_slave_0 added [ 670.254242][T30978] team0: Port device team_slave_1 added [ 670.353764][T30978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.382824][T30978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.445411][T30978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.460631][T31130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6627'. [ 670.470009][T31134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6630'. [ 670.486100][T31132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6629'. [ 670.489215][T30978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.522629][T30978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.549287][T31137] netlink: 'syz.1.6630': attribute type 1 has an invalid length. [ 670.566133][T30978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.757445][T30978] hsr_slave_0: entered promiscuous mode [ 670.770151][T30978] hsr_slave_1: entered promiscuous mode [ 670.778462][T30978] debugfs: 'hsr0' already exists in 'hsr' [ 670.784661][T31149] xt_hashlimit: size too large, truncated to 1048576 [ 670.797461][T30978] Cannot create hsr debugfs directory [ 670.989011][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bb2b400: rx timeout, send abort [ 671.386515][T30978] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 671.407734][T30978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.418570][T30978] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 671.429990][T30978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.439738][T30978] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 671.466010][T30978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.482411][T30978] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 671.489160][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880914f5c00: rx timeout, send abort [ 671.497439][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bb2b400: abort rx timeout. Force session deactivation [ 671.607787][T30978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.805188][T31201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6644'. [ 671.831650][T25670] Bluetooth: hci2: command tx timeout [ 671.868216][T30978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.920614][T30978] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.957355][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.964557][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.989226][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880914f5c00: abort rx timeout. Force session deactivation [ 672.025999][T28865] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.033158][T28865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.433336][T31231] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6649'. [ 672.912819][T31266] netlink: 'syz.1.6655': attribute type 13 has an invalid length. [ 672.971642][T31262] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 673.023751][T31262] bond1: (slave lo): Enslaving as an active interface with an up link [ 673.036137][T31262] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 673.348487][T31289] __nla_validate_parse: 1 callbacks suppressed [ 673.348505][T31289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6661'. [ 673.376763][T30978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.490623][T31298] syzkaller0: entered promiscuous mode [ 673.497847][T31298] syzkaller0: entered allmulticast mode [ 673.540509][T31298] tipc: Enabled bearer , priority 0 [ 673.559685][T31297] tipc: Resetting bearer [ 673.633587][T31297] tipc: Disabling bearer [ 673.911173][T25670] Bluetooth: hci2: command tx timeout [ 673.985959][T30978] veth0_vlan: entered promiscuous mode [ 674.000161][T30978] veth1_vlan: entered promiscuous mode [ 674.066806][T30978] veth0_macvtap: entered promiscuous mode [ 674.088411][T30978] veth1_macvtap: entered promiscuous mode [ 674.126865][T30978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.134940][T31334] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6673'. [ 674.174718][T30978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.179034][T31334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6673'. [ 674.203897][T28869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.241922][T28869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.255573][T31334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 674.279745][T28869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.327244][T28869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.608454][T31359] netlink: 'syz.2.6679': attribute type 1 has an invalid length. [ 674.641695][T28866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.642177][T31359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6679'. [ 674.673851][T28866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.730189][T28866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.739438][T28866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.899528][T31374] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6591'. [ 674.972678][T31377] bond0: (slave bond_slave_0): Releasing backup interface [ 675.076895][T31389] netlink: 'syz.2.6688': attribute type 3 has an invalid length. [ 675.183653][T31391] gtp0: entered allmulticast mode [ 675.196504][T31391] team0: Device gtp0 is of different type [ 675.279990][T28863] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 675.470109][T31415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6695'. [ 675.677607][T31426] syzkaller0: entered promiscuous mode [ 675.684091][T31426] syzkaller0: entered allmulticast mode [ 675.723546][T31428] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6700'. [ 675.810459][T31430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6701'. [ 675.892674][T31434] gre0: Caught tx_queue_len zero misconfig [ 675.993093][T25670] Bluetooth: hci2: command tx timeout [ 676.016247][T31395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.195640][T31442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6707'. [ 676.211978][T31442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6707'. [ 676.222299][T31442] netlink: 'syz.3.6707': attribute type 12 has an invalid length. [ 676.230435][T31442] netlink: 'syz.3.6707': attribute type 11 has an invalid length. [ 676.592455][T31457] syzkaller0: entered promiscuous mode [ 676.606644][T31457] syzkaller0: entered allmulticast mode [ 677.006533][T31489] syzkaller0: entered promiscuous mode [ 677.020795][T31489] syzkaller0: entered allmulticast mode [ 677.174010][T28863] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.188200][T28863] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.228821][T28863] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.242238][T28863] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 677.407725][T31517] netlink: 'syz.2.6729': attribute type 1 has an invalid length. [ 677.492998][T31524] team0: Port device team_slave_0 removed [ 677.569914][T31517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 677.720530][T31537] netlink: 'syz.3.6736': attribute type 2 has an invalid length. [ 677.747048][T31537] netlink: 'syz.3.6736': attribute type 11 has an invalid length. [ 678.075297][T31560] syzkaller1: entered promiscuous mode [ 678.081155][T31560] syzkaller1: entered allmulticast mode [ 678.094160][T31560] netlink: 'syz.5.6743': attribute type 1 has an invalid length. [ 678.359885][T31584] netlink: 'syz.1.6749': attribute type 21 has an invalid length. [ 678.383590][T31584] netlink: 'syz.1.6749': attribute type 6 has an invalid length. [ 678.394240][T31584] __nla_validate_parse: 25 callbacks suppressed [ 678.394255][T31584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6749'. [ 678.413698][T31590] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 678.422249][T31590] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 678.452673][T31591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6752'. [ 678.587308][T31591] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 678.621885][T31591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 678.623268][T31600] sctp: [Deprecated]: syz.5.6753 (pid 31600) Use of int in max_burst socket option deprecated. [ 678.623268][T31600] Use struct sctp_assoc_value instead [ 678.678141][T31591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 678.740263][T31607] sctp: [Deprecated]: syz.3.6754 (pid 31607) Use of int in max_burst socket option deprecated. [ 678.740263][T31607] Use struct sctp_assoc_value instead [ 678.994624][T31613] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 679.188799][T31627] netlink: 'syz.1.6760': attribute type 1 has an invalid length. [ 679.200560][T31627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.054392][T31659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6771'. [ 681.698792][T31655] tun0: tun_chr_ioctl cmd 1074025675 [ 681.704868][T31655] tun0: persist disabled [ 681.858565][T31668] validate_nla: 1 callbacks suppressed [ 681.858582][T31668] netlink: 'syz.3.6775': attribute type 1 has an invalid length. [ 681.946799][T31674] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6776'. [ 682.026531][T31668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.080025][T31673] bond2: (slave veth0_to_bond): making interface the new active one [ 682.109772][T31689] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 682.127176][T31693] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6781'. [ 682.136493][T31673] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 682.163467][T31684] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6779'. [ 682.250641][T31696] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6783'. [ 682.288268][T31696] bond0: Caught tx_queue_len zero misconfig [ 682.338269][T31699] syzkaller0: entered promiscuous mode [ 682.348191][T31699] syzkaller0: entered allmulticast mode [ 682.365592][T31705] syzkaller0: entered promiscuous mode [ 682.396864][T31705] syzkaller0: entered allmulticast mode [ 682.653793][T31718] netlink: 'syz.3.6790': attribute type 13 has an invalid length. [ 682.733596][T31727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6794'. [ 683.215576][T31767] Unsupported ieee802154 address type: 0 [ 683.256043][T31769] netlink: 'syz.2.6809': attribute type 1 has an invalid length. [ 683.432524][T31786] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 683.476565][T31790] __nla_validate_parse: 7 callbacks suppressed [ 683.476581][T31790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6816'. [ 683.511956][T31790] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6816'. [ 683.555220][T31790] gretap1: entered promiscuous mode [ 683.569134][T31795] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 683.597716][T31790] gretap1: entered allmulticast mode [ 683.656307][T31805] netlink: 'syz.2.6820': attribute type 1 has an invalid length. [ 683.756104][ T30] audit: type=1804 audit(1780633139.054:18): pid=31814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6822" name="/newroot/206/cgroup.controllers" dev="tmpfs" ino=1066 res=1 errno=0 [ 683.829396][ T30] audit: type=1800 audit(1780633139.054:19): pid=31814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6822" name="cgroup.controllers" dev="tmpfs" ino=1066 res=0 errno=0 [ 683.917510][T31824] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6818'. [ 683.935662][T31824] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6818'. [ 683.953190][T31826] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6825'. [ 683.966976][T31826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6825'. [ 684.105079][T31832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6828'. [ 684.138894][T31832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6828'. [ 684.256875][T31845] netlink: 'syz.1.6832': attribute type 1 has an invalid length. [ 684.307925][T31845] netlink: 'syz.1.6832': attribute type 1 has an invalid length. [ 684.534751][T31858] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6833'. [ 684.555862][T31858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6833'. [ 684.596285][T31860] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.630148][T31860] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.468008][T31902] netlink: 'syz.4.6844': attribute type 1 has an invalid length. [ 685.484200][T31915] netlink: 'syz.2.6847': attribute type 10 has an invalid length. [ 685.526863][T31915] veth1_macvtap: left promiscuous mode [ 685.568327][T31915] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 685.672181][T28865] wlan1: Trigger new scan to find an IBSS to join [ 685.738596][T31929] openvswitch: netlink: Duplicate key (type 2). [ 685.890917][T31929] openvswitch: netlink: IP tunnel dst address not specified [ 685.916151][T31929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.992452][T31945] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 686.430540][ T5293] netdevsim netdevsim1 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 686.495066][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.641472][T31964] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 0, id = 0 [ 686.824403][T31981] netlink: 'syz.3.6861': attribute type 12 has an invalid length. [ 686.914366][T31984] veth3: entered allmulticast mode [ 687.021205][T31991] lo: Caught tx_queue_len zero misconfig [ 687.217353][T32014] lo: Caught tx_queue_len zero misconfig [ 687.396680][T25670] block nbd5: Receive control failed (result -1) [ 687.462617][T32021] netlink: 'syz.4.6872': attribute type 3 has an invalid length. [ 687.523838][T32023] netlink: 'syz.5.6873': attribute type 1 has an invalid length. [ 687.622290][T32034] lo: entered promiscuous mode [ 687.663028][T32034] netlink: 'syz.2.6875': attribute type 2 has an invalid length. [ 687.681819][T32034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.768126][T32046] Cannot find set identified by id 65534 to match [ 687.796056][ T30] audit: type=1804 audit(1780633143.094:20): pid=32046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6879" name="/newroot/187/cgroup.controllers" dev="tmpfs" ino=967 res=1 errno=0 [ 687.874115][ T30] audit: type=1800 audit(1780633143.094:21): pid=32046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6879" name="cgroup.controllers" dev="tmpfs" ino=967 res=0 errno=0 [ 688.094044][T32058] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 688.116745][T32058] macvlan3: entered promiscuous mode [ 688.123476][T32058] macvlan3: entered allmulticast mode [ 688.129407][T32058] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 688.169183][T32068] netlink: 'syz.3.6883': attribute type 12 has an invalid length. [ 688.275943][T32072] vcan0: tx address claim with different name [ 688.290647][T32072] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 688.344313][T32072] bond5: (slave lo): Enslaving as an active interface with an up link [ 688.376925][T32072] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 688.481316][T32075] tipc: Started in network mode [ 688.507515][T32075] tipc: Node identity 2eac78e5eda6, cluster identity 4711 [ 688.551611][T32075] tipc: Enabled bearer , priority 0 [ 688.573006][T32082] syzkaller0: entered promiscuous mode [ 688.582686][T32082] syzkaller0: entered allmulticast mode [ 688.634415][T32074] tipc: Resetting bearer [ 688.645570][T32095] netlink: 'syz.5.6892': attribute type 1 has an invalid length. [ 688.664736][T32095] netlink: 'syz.5.6892': attribute type 4 has an invalid length. [ 688.674249][T32095] __nla_validate_parse: 18 callbacks suppressed [ 688.674262][T32095] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6892'. [ 688.711932][T28866] wlan1: Trigger new scan to find an IBSS to join [ 688.720601][T32074] tipc: Disabling bearer [ 688.832333][T32107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6895'. [ 688.941822][T32111] tipc: Enabling of bearer rejected, already enabled [ 689.033981][T32120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6900'. [ 689.061763][T32120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6900'. [ 689.275593][T32132] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 689.407381][T32142] syzkaller0: entered promiscuous mode [ 689.446133][T32142] syzkaller0: entered allmulticast mode [ 689.462182][T32145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6910'. [ 689.482289][T32145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6910'. [ 689.563961][T32142] tipc: Enabled bearer , priority 0 [ 689.618322][T32139] tipc: Resetting bearer [ 689.662710][T32158] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 689.675408][T32139] tipc: Disabling bearer [ 689.711466][T32163] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 689.720314][T32158] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6913'. [ 689.745713][T32158] netlink: 'syz.3.6913': attribute type 2 has an invalid length. [ 689.995707][T32180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6915'. [ 690.049201][T32179] syzkaller0: entered promiscuous mode [ 690.060522][T32179] syzkaller0: entered allmulticast mode [ 690.085395][T32182] vlan2: entered promiscuous mode [ 690.090523][T32182] bridge0: entered promiscuous mode [ 690.097622][T32179] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 690.160415][T32179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6917'. [ 690.178232][T32179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6917'. [ 690.227415][T32179] erspan0: entered promiscuous mode [ 690.306996][T32179] erspan0: left promiscuous mode [ 690.325643][T32189] syzkaller0: entered promiscuous mode [ 690.334067][T32189] syzkaller0: entered allmulticast mode [ 690.460325][T32199] netlink: zone id is out of range [ 690.466642][T32199] netlink: del zone limit has 4 unknown bytes [ 690.497095][T32201] netlink: 'syz.2.6925': attribute type 23 has an invalid length. [ 690.638898][T32209] syzkaller0: entered promiscuous mode [ 690.650896][T32209] syzkaller0: entered allmulticast mode [ 690.958392][T32214] ip6_vti0: entered allmulticast mode [ 690.980087][T32226] tipc: Started in network mode [ 690.986307][T32226] tipc: Node identity 425a7b7f64c9, cluster identity 4711 [ 691.013882][T32226] tipc: Enabled bearer , priority 0 [ 691.075644][T32206] tipc: Resetting bearer [ 691.102998][T32206] tipc: Disabling bearer [ 691.203037][T32242] tunl0: entered promiscuous mode [ 691.227041][T32242] gre0: entered promiscuous mode [ 691.299096][T32242] gretap0: entered promiscuous mode [ 691.406536][T32242] erspan0: entered promiscuous mode [ 691.432736][T32242] ip_vti0: entered promiscuous mode [ 691.516247][ T5755] hid-generic 0005:0C45:0FFF.0002: item fetching failed at offset 0/1 [ 691.525456][ T5755] hid-generic 0005:0C45:0FFF.0002: probe with driver hid-generic failed with error -22 [ 691.666394][T32269] syzkaller0: entered promiscuous mode [ 691.679990][T32269] syzkaller0: entered allmulticast mode [ 691.683807][T28869] wlan1: Trigger new scan to find an IBSS to join [ 691.924023][T32299] syzkaller0: entered promiscuous mode [ 691.945714][T32299] syzkaller0: entered allmulticast mode [ 692.174597][T32307] syzkaller0: entered promiscuous mode [ 692.180278][T32307] syzkaller0: entered allmulticast mode [ 692.229289][T32316] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 692.242402][T32316] bond4 (unregistering): Released all slaves [ 692.422405][T32330] syzkaller0: entered promiscuous mode [ 692.430630][T32330] syzkaller0: entered allmulticast mode [ 692.465061][T32333] syzkaller0: entered promiscuous mode [ 692.473481][T32333] syzkaller0: entered allmulticast mode [ 692.602295][T28869] wlan1: Creating new IBSS network, BSSID ea:7b:4b:67:9b:50 [ 693.010479][T32349] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 694.650016][T32272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.803382][T32360] __nla_validate_parse: 6 callbacks suppressed [ 694.803401][T32360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6971'. [ 694.909522][T32372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.935772][T32371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6974'. [ 694.946194][T32361] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6971'. [ 694.959469][T32371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6974'. [ 694.977986][T32374] mac80211_hwsim hwsim79 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.997766][T32371] netlink: 'syz.2.6974': attribute type 14 has an invalid length. [ 695.024884][T32371] netlink: 'syz.2.6974': attribute type 13 has an invalid length. [ 695.048614][T32382] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 695.131295][T32389] netlink: 'syz.3.6977': attribute type 2 has an invalid length. [ 695.200474][T32385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6976'. [ 695.264495][T32393] syzkaller0: entered promiscuous mode [ 695.270109][T32393] syzkaller0: entered allmulticast mode [ 695.325795][T32393] tipc: Enabled bearer , priority 0 [ 695.356432][T32392] tipc: Resetting bearer [ 695.412954][T32392] tipc: Disabling bearer [ 695.458060][T32403] netlink: 'syz.3.6983': attribute type 2 has an invalid length. [ 695.479098][T32403] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6983'. [ 695.490067][T32408] netlink: 'syz.2.6984': attribute type 9 has an invalid length. [ 695.862558][T32430] syzkaller0: entered promiscuous mode [ 695.868156][T32430] syzkaller0: entered allmulticast mode [ 695.978118][T32439] syzkaller0: entered promiscuous mode [ 695.986280][T32439] syzkaller0: entered allmulticast mode [ 695.994387][T32441] netlink: 'syz.1.6997': attribute type 12 has an invalid length. [ 696.068703][T32439] tipc: Enabled bearer , priority 0 [ 696.099941][T32437] tipc: Resetting bearer [ 696.143313][T32437] tipc: Disabling bearer [ 696.167060][T32450] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7000'. [ 696.177519][T32449] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7000'. [ 696.212919][T32445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6999'. [ 696.346601][T32456] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 696.479824][T32464] IPv6: NLM_F_REPLACE set, but no existing node found! [ 696.509281][T32464] openvswitch: netlink: IP tunnel dst address not specified [ 696.526985][T32466] bond7: option all_slaves_active: invalid value (222) [ 696.532192][T32464] netlink: 'syz.2.7005': attribute type 1 has an invalid length. [ 696.544417][T32466] bond7 (unregistering): Released all slaves [ 696.609704][T32470] netlink: 'syz.4.7006': attribute type 1 has an invalid length. [ 696.886395][T32499] syzkaller0: entered promiscuous mode [ 696.895683][T32499] syzkaller0: entered allmulticast mode [ 697.004037][T32504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7015'. [ 697.672474][T28865] wlan1: Trigger new scan to find an IBSS to join [ 698.231392][T25670] Bluetooth: hci2: command tx timeout [ 699.708455][T32477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 699.983811][T32522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7021'. [ 700.134930][T32531] xt_hashlimit: max too large, truncated to 1048576 [ 700.224160][T32534] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7027'. [ 700.251120][T32534] netlink: 'syz.2.7027': attribute type 10 has an invalid length. [ 700.273365][T32534] syz_tun: entered promiscuous mode [ 700.296137][T32534] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 700.332019][T32542] syzkaller0: entered promiscuous mode [ 700.357863][T32542] syzkaller0: entered allmulticast mode [ 700.378095][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.429415][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.436502][T32537] tipc: Enabled bearer , priority 0 [ 700.460145][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.477937][T32545] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 700.481481][T32536] tipc: Resetting bearer [ 700.496539][T32545] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 700.516787][T32550] netlink: 'syz.5.7032': attribute type 1 has an invalid length. [ 700.527437][T32550] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7032'. [ 700.537302][T32545] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 700.547159][T32550] netlink: 658 bytes leftover after parsing attributes in process `syz.5.7032'. [ 700.574360][T32550] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7032'. [ 700.586775][T32536] tipc: Disabling bearer [ 700.595209][T32559] sctp: [Deprecated]: syz.2.7034 (pid 32559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.595209][T32559] Use struct sctp_sack_info instead [ 700.631382][T28867] wlan1: Trigger new scan to find an IBSS to join [ 700.644957][T32545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 700.724858][T32561] sctp: [Deprecated]: syz.3.7035 (pid 32561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.724858][T32561] Use struct sctp_sack_info instead [ 700.793254][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.819535][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.833625][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.864326][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.878895][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.888398][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.912878][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.920240][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.972445][T32545] wg1 speed is unknown, defaulting to 1000 [ 700.979890][T32545] wg1 speed is unknown, defaulting to 1000 [ 701.022844][T32545] wg1 speed is unknown, defaulting to 1000 [ 701.098266][T32581] netlink: 'syz.3.7042': attribute type 1 has an invalid length. [ 701.147745][T32581] bond5: entered promiscuous mode [ 701.153268][T32581] 8021q: adding VLAN 0 to HW filter on device bond5 [ 701.161534][T32581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7042'. [ 701.170579][T32581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7042'. [ 701.252491][T32599] syzkaller0: entered promiscuous mode [ 701.258105][T32599] syzkaller0: entered allmulticast mode [ 701.393339][T32599] tipc: Started in network mode [ 701.409777][T32599] tipc: Node identity 1e6d98ab4ed8, cluster identity 4711 [ 701.435630][T32599] tipc: Enabled bearer , priority 0 [ 701.457459][T32606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7049'. [ 701.489203][T32606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7049'. [ 701.489786][T32598] tipc: Resetting bearer [ 701.623948][T32598] tipc: Disabling bearer [ 701.686908][T32615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7052'. [ 701.707577][T32608] mac80211_hwsim hwsim78 wlan0: entered promiscuous mode [ 702.052868][T32635] netlink: 'syz.4.7058': attribute type 83 has an invalid length. [ 702.087602][T32637] netlink: 'syz.2.7059': attribute type 27 has an invalid length. [ 702.105271][T32637] netlink: 'syz.2.7059': attribute type 4 has an invalid length. [ 702.197782][T32644] hsr_slave_1 (unregistering): left promiscuous mode [ 702.364999][T32652] syzkaller0: entered promiscuous mode [ 702.385397][T32652] syzkaller0: entered allmulticast mode [ 702.450556][T32652] tipc: Enabled bearer , priority 0 [ 702.514842][T32650] tipc: Resetting bearer [ 702.587522][T32650] tipc: Disabling bearer [ 702.758139][T32667] gretap0: entered promiscuous mode [ 702.811364][T32667] gretap0: left promiscuous mode [ 703.162150][T32702] netlink: 'syz.5.7074': attribute type 1 has an invalid length. [ 703.244746][T32693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 703.272271][T32711] netlink: 'syz.2.7079': attribute type 13 has an invalid length. [ 703.302841][T32711] macsec0: entered allmulticast mode [ 703.323143][T32712] ip6tnl0: Caught tx_queue_len zero misconfig [ 703.652294][T32733] syzkaller0: entered promiscuous mode [ 703.665490][T32733] syzkaller0: entered allmulticast mode [ 703.673680][T28869] wlan1: Trigger new scan to find an IBSS to join [ 703.726375][T32733] tipc: Enabled bearer , priority 0 [ 703.748803][T32730] tipc: Resetting bearer [ 703.790011][T32730] tipc: Disabling bearer [ 704.186584][T32754] sch_fq: defrate 0 ignored. [ 704.234977][ T301] bond5: (slave lo): Releasing backup interface [ 704.306356][ T301] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 704.381511][ T301] bond0: (slave syz_tun): Releasing backup interface [ 704.447044][ T301] bond0: (slave dummy0): Releasing backup interface [ 704.526381][ T301] bridge_slave_0: left allmulticast mode [ 704.537710][ T301] bridge_slave_0: left promiscuous mode [ 704.544281][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.570220][ T301] bridge_slave_1: left allmulticast mode [ 704.585479][T28866] wlan1: Creating new IBSS network, BSSID 0a:d0:7b:b8:65:9a [ 704.598532][ T301] bridge_slave_1: left promiscuous mode [ 704.608938][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.636536][ T301] bond0: (slave bond_slave_0): Releasing backup interface [ 704.665434][ T301] bond0: (slave bond_slave_1): Releasing backup interface [ 704.728276][ T301] team0: Port device team_slave_1 removed [ 704.762428][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.782707][ T301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.804379][ T301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.823958][ T301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.840160][ T301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 705.186548][ T332] syzkaller0: entered promiscuous mode [ 705.200831][ T332] syzkaller0: entered allmulticast mode [ 705.226063][ T332] tipc: Enabled bearer , priority 0 [ 705.272471][ T328] tipc: Resetting bearer [ 705.315999][ T343] __nla_validate_parse: 19 callbacks suppressed [ 705.316014][ T343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7102'. [ 705.356219][ T328] tipc: Disabling bearer [ 705.381112][ T341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7103'. [ 705.391422][ T350] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 705.541030][ T362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7109'. [ 705.798740][ T370] sit0: entered promiscuous mode [ 705.826936][ T370] netlink: 'syz.5.7112': attribute type 1 has an invalid length. [ 705.847744][ T376] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 705.855467][ T370] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7112'. [ 705.864630][ T375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7112'. [ 705.877853][ T377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7113'. [ 706.175836][ T398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.183161][ T398] IPv6: NLM_F_CREATE should be set when creating new route [ 706.190412][ T398] IPv6: NLM_F_CREATE should be set when creating new route [ 706.230697][ T398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.567900][ T419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 706.621535][ T439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7129'. [ 706.648331][ T439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7129'. [ 706.692271][ T439] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7129'. [ 706.725553][ T439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7129'. [ 706.802874][ T421] syzkaller0: entered promiscuous mode [ 706.809871][ T421] syzkaller0: entered allmulticast mode [ 707.272456][ T459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.380426][ T467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.396372][ T467] netlink: 'syz.3.7138': attribute type 10 has an invalid length. [ 708.869211][ T450] netlink: 'syz.2.7131': attribute type 29 has an invalid length. [ 708.892349][ T467] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.932223][ T467] bond0: (slave team0): Enslaving as an active interface with an up link [ 709.558721][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.566367][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.679019][ T518] bridge0: Device is already in use. [ 710.272741][ T566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.406697][ T575] __nla_validate_parse: 132 callbacks suppressed [ 710.406714][ T575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7173'. [ 710.644228][ T595] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 710.656038][ T595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.756383][ T605] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7183'. [ 710.772620][ T605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7183'. [ 710.828103][ T613] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 711.096665][ T632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7191'. [ 711.115217][ T632] netlink: 'syz.1.7191': attribute type 1 has an invalid length. [ 711.123655][ T632] netlink: 'syz.1.7191': attribute type 2 has an invalid length. [ 711.360299][ T644] team0: Caught tx_queue_len zero misconfig [ 711.378848][ T650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7196'. [ 711.387975][ T648] vlan3: entered allmulticast mode [ 711.387993][ T648] bridge_slave_0: entered allmulticast mode [ 711.415764][ T623] netlink: 'syz.5.7186': attribute type 1 has an invalid length. [ 711.433498][ T623] netlink: 'syz.5.7186': attribute type 2 has an invalid length. [ 711.437968][ T654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7196'. [ 711.452844][ T623] netlink: 'syz.5.7186': attribute type 1 has an invalid length. [ 711.573903][ T658] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7198'. [ 711.610356][ T661] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7199'. [ 711.732772][ T663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.243123][ T709] syzkaller0: entered promiscuous mode [ 712.248818][ T709] syzkaller0: entered allmulticast mode [ 712.307751][ T709] tipc: Enabled bearer , priority 0 [ 712.327178][ T708] tipc: Resetting bearer [ 712.357400][ T708] tipc: Disabling bearer [ 712.470110][ T717] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7214'. [ 712.628343][ T729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7217'. [ 712.843567][ T739] netlink: 'syz.3.7221': attribute type 58 has an invalid length. [ 712.853559][ T745] netlink: 'syz.3.7221': attribute type 58 has an invalid length. [ 712.967010][ T750] netlink: 'syz.4.7225': attribute type 21 has an invalid length. [ 712.976729][ T750] IPv6: NLM_F_CREATE should be specified when creating new route [ 713.011562][ T752] syzkaller0: entered promiscuous mode [ 713.031031][ T752] syzkaller0: entered allmulticast mode [ 713.070273][ T752] tipc: Enabled bearer , priority 0 [ 713.084386][ T751] tipc: Resetting bearer [ 713.127594][ T751] tipc: Disabling bearer [ 713.325203][ T773] netlink: 'syz.4.7234': attribute type 1 has an invalid length. [ 713.426301][ T771] netlink: 'syz.5.7231': attribute type 16 has an invalid length. [ 713.529149][ T784] bridge1: entered allmulticast mode [ 713.724577][ T797] sctp: [Deprecated]: syz.4.7241 (pid 797) Use of int in maxseg socket option. [ 713.724577][ T797] Use struct sctp_assoc_value instead [ 713.768899][T25670] Bluetooth: hci2: link tx timeout [ 713.778244][T25670] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 713.893917][ T799] syzkaller0: entered promiscuous mode [ 713.900001][ T799] syzkaller0: entered allmulticast mode [ 713.923602][ T799] tipc: Enabled bearer , priority 0 [ 713.935278][ T798] tipc: Resetting bearer [ 713.976596][ T798] tipc: Disabling bearer [ 714.456102][T25670] Bluetooth: hci2: link tx timeout [ 714.462688][T25670] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 714.888589][ T855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.898803][ T855] bond6: (slave bond7): making interface the new active one [ 714.909262][ T855] bond6: (slave bond7): Enslaving as an active interface with an up link [ 714.965226][ T855] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 715.187920][ T882] 8021q: adding VLAN 0 to HW filter on device bond8 [ 715.271717][ T892] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 715.696735][ T922] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 715.708181][ T922] tipc: Enabled bearer , priority 10 [ 715.774465][T25670] Bluetooth: hci2: link tx timeout [ 715.780396][T25670] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 715.847111][T25670] Bluetooth: hci2: command 0x0406 tx timeout [ 715.926550][ T936] __nla_validate_parse: 12 callbacks suppressed [ 715.926567][ T936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7285'. [ 716.080298][ T950] xt_cgroup: path and classid specified [ 716.169528][ T958] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7290'. [ 716.416681][ T980] validate_nla: 5 callbacks suppressed [ 716.416698][ T980] netlink: 'syz.4.7295': attribute type 26 has an invalid length. [ 716.472340][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7295'. [ 716.516367][ T984] pim6reg: entered allmulticast mode [ 716.538455][ T980] netlink: 'syz.4.7295': attribute type 26 has an invalid length. [ 716.591193][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7295'. [ 716.765503][ T1006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7299'. [ 716.868216][ T1017] netlink: 'syz.2.7301': attribute type 1 has an invalid length. [ 716.914651][ T1017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7301'. [ 716.955705][ T1017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7301'. [ 716.982595][T21885] tipc: Node number set to 647199615 [ 716.996533][ T1017] netlink: 'syz.2.7301': attribute type 2 has an invalid length. [ 717.042209][ T1017] netlink: 'syz.2.7301': attribute type 2 has an invalid length. [ 717.091518][ T1017] netlink: 'syz.2.7301': attribute type 2 has an invalid length. [ 717.292729][ T1044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7304'. [ 717.344051][ T1043] ip6tnl1: entered promiscuous mode [ 717.357205][ T1043] ip6tnl1: entered allmulticast mode [ 717.544759][ T1070] netlink: 'syz.2.7308': attribute type 3 has an invalid length. [ 717.580400][ T1070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7308'. [ 718.065088][ T1097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7314'. [ 718.328641][T21885] IPVS: starting estimator thread 0... [ 718.421470][ T1116] IPVS: using max 31 ests per chain, 74400 per kthread [ 718.633399][ T1124] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 718.651085][ T1124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.674794][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.853052][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.142756][ T1153] syzkaller0: entered promiscuous mode [ 719.153501][ T1153] syzkaller0: entered allmulticast mode [ 719.223190][ T1153] tipc: Enabled bearer , priority 0 [ 719.235877][ T1151] tipc: Resetting bearer [ 719.245920][ T1157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.288289][ T1151] tipc: Disabling bearer [ 719.375410][ T1164] ip6tnl0: Caught tx_queue_len zero misconfig [ 719.403814][ T1164] netlink: 'syz.3.7330': attribute type 13 has an invalid length. [ 719.415860][ T1164] netlink: 'syz.3.7330': attribute type 58 has an invalid length. [ 719.557818][ T30] audit: type=1800 audit(1780633174.854:22): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7337" name="memory.events" dev="tmpfs" ino=1237 res=0 errno=0 [ 719.770062][ T1192] netlink: 'syz.3.7338': attribute type 21 has an invalid length. [ 719.928019][ T1197] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 719.971426][T14439] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 720.128503][ T1216] tipc: Cannot configure node identity twice [ 720.393615][ T1224] bond7: entered promiscuous mode [ 720.399256][ T1224] 8021q: adding VLAN 0 to HW filter on device bond7 [ 721.479229][ T1304] syzkaller0: entered promiscuous mode [ 721.486152][ T1304] syzkaller0: entered allmulticast mode [ 721.764941][ T1327] team_slave_1: Caught tx_queue_len zero misconfig [ 721.844966][ T1336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.980809][ T1341] can: request_module (can-proto-0) failed. [ 722.169825][ T1359] __nla_validate_parse: 10 callbacks suppressed [ 722.169844][ T1359] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7386'. [ 722.216505][ T1363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7387'. [ 722.234122][ T1363] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.7387'. [ 722.283925][ T1365] syzkaller0: entered promiscuous mode [ 722.289532][ T1365] syzkaller0: entered allmulticast mode [ 722.334729][ T1365] tipc: Enabled bearer , priority 0 [ 722.350145][ T1364] tipc: Resetting bearer [ 722.385987][ T1364] tipc: Disabling bearer [ 722.602107][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.900388][ T1407] syzkaller0: entered promiscuous mode [ 722.908476][ T1407] syzkaller0: entered allmulticast mode [ 722.940000][ T1409] syzkaller1: entered promiscuous mode [ 722.956997][ T1409] syzkaller1: entered allmulticast mode [ 722.973203][ T1407] tipc: Enabled bearer , priority 0 [ 722.992929][ T1405] tipc: Resetting bearer [ 723.019748][ T1405] tipc: Disabling bearer [ 723.179773][ T1416] unsupported nlmsg_type 40 [ 725.112002][ T1438] veth0_to_bridge: entered promiscuous mode [ 725.132234][ T1440] veth0_to_bridge: left promiscuous mode [ 725.347181][ T1457] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 725.358937][ T1457] bond9 (unregistering): Released all slaves [ 725.516712][ T1464] validate_nla: 3 callbacks suppressed [ 725.516729][ T1464] netlink: 'syz.2.7418': attribute type 2 has an invalid length. [ 725.683558][ T1482] gtp0: entered promiscuous mode [ 725.688648][ T1482] gtp0: entered allmulticast mode [ 725.774031][ T1491] --map-set only usable from mangle table [ 725.899437][ T1495] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 725.999679][ T1503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7431'. [ 726.027059][ T1503] Cannot find set identified by id 65534 to match [ 726.045937][ T1506] openvswitch: netlink: Unknown key attributes 2 [ 726.170970][ T1510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7434'. [ 726.171516][ T1512] netlink: 'syz.5.7435': attribute type 3 has an invalid length. [ 726.305448][ T1522] netlink: 'syz.5.7438': attribute type 1 has an invalid length. [ 726.366757][ T1522] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7438'. [ 726.439317][ T1522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7438'. [ 726.486826][ T1522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.600326][ T1546] syzkaller0: entered promiscuous mode [ 726.623676][ T1546] syzkaller0: entered allmulticast mode [ 726.670142][ T1546] tipc: Enabled bearer , priority 0 [ 726.708898][ T1544] tipc: Resetting bearer [ 726.748810][ T1544] tipc: Disabling bearer [ 726.760095][ T1555] netlink: 'syz.2.7447': attribute type 23 has an invalid length. [ 727.032274][ T1570] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7452'. [ 727.064032][ T1570] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7452'. [ 727.164497][T25670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 727.179861][T25670] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 727.189317][T25670] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 727.199713][T25670] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 727.210281][T25670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 727.756831][ T1575] lo speed is unknown, defaulting to 1000 [ 727.892897][ T1607] syzkaller0: entered promiscuous mode [ 727.898494][ T1607] syzkaller0: entered allmulticast mode [ 727.927239][ T1607] tipc: Enabled bearer , priority 0 [ 727.943477][ T1605] tipc: Resetting bearer [ 727.983113][ T1605] tipc: Disabling bearer [ 728.062908][ T1575] wg1 speed is unknown, defaulting to 1000 [ 728.613497][ T1632] syzkaller0: entered promiscuous mode [ 728.629981][ T1632] syzkaller0: entered allmulticast mode [ 728.726322][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.734863][ T1575] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.742539][ T1575] bridge_slave_0: entered allmulticast mode [ 728.753440][ T1575] bridge_slave_0: entered promiscuous mode [ 728.762736][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.769993][ T1575] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.779733][ T1575] bridge_slave_1: entered allmulticast mode [ 728.789263][ T1575] bridge_slave_1: entered promiscuous mode [ 728.834368][ T1575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.857324][ T1575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.861351][ T1647] xt_nat: multiple ranges no longer supported [ 728.961715][ T1575] team0: Port device team_slave_0 added [ 728.979297][ T1575] team0: Port device team_slave_1 added [ 729.051312][ T1575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.073103][ T1575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.136559][ T1575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.167440][ T1575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.174974][ T1575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.201999][ T1575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.271575][T25670] Bluetooth: hci6: command tx timeout [ 729.448376][ T1575] hsr_slave_0: entered promiscuous mode [ 729.456866][ T1575] hsr_slave_1: entered promiscuous mode [ 729.469659][ T1575] debugfs: 'hsr0' already exists in 'hsr' [ 729.488129][ T1575] Cannot create hsr debugfs directory [ 730.013191][ T1575] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 730.036524][ T1575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.054271][ T1575] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 730.105063][ T1575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.132721][ T1575] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 730.166974][ T1575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 730.176413][ T1575] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 730.198367][ T1575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 730.224741][ T1719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7491'. [ 730.239768][ T1719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7491'. [ 730.258100][ T1728] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7492'. [ 731.351248][T25670] Bluetooth: hci6: command tx timeout [ 733.077941][ T1709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.367405][ T1575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.431251][T25670] Bluetooth: hci6: command tx timeout [ 733.443827][ T1575] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.457179][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.464367][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.506391][ T1765] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7502'. [ 733.529679][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.536857][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.672264][ T1778] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.716845][ T1781] bridge0: port 3(veth1_to_bridge) entered blocking state [ 733.725635][ T1778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7504'. [ 733.734903][ T1781] bridge0: port 3(veth1_to_bridge) entered disabled state [ 733.791122][ T1781] veth1_to_bridge: entered allmulticast mode [ 733.804387][ T1781] veth1_to_bridge: entered promiscuous mode [ 733.889912][T25670] Bluetooth: hci5: command 0x0406 tx timeout [ 734.060408][ T1793] netlink: 'syz.2.7509': attribute type 33 has an invalid length. [ 734.171660][ T1798] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7510'. [ 734.342533][ T1819] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7515'. [ 734.419559][ T1820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7516'. [ 734.475262][ T1819] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7515'. [ 734.502309][ T1819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7515'. [ 734.548637][ T1822] lo speed is unknown, defaulting to 1000 [ 734.879460][ T1575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.949137][ T1822] wg1 speed is unknown, defaulting to 1000 [ 735.266430][ T1575] veth0_vlan: entered promiscuous mode [ 735.312989][ T1575] veth1_vlan: entered promiscuous mode [ 735.382963][ T1575] veth0_macvtap: entered promiscuous mode [ 735.394986][ T1575] veth1_macvtap: entered promiscuous mode [ 735.422634][ T1575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.444201][ T1575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.476603][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.498697][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.511777][T25670] Bluetooth: hci6: command tx timeout [ 735.539805][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.560494][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.819822][T28863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.857427][T28863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.894209][ T1892] netlink: 'syz.5.7530': attribute type 3 has an invalid length. [ 735.976574][T28869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.009720][T28869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.174896][ T1904] tipc: New replicast peer: 172.20.20.187 [ 736.196673][ T1904] tipc: Enabled bearer , priority 10 [ 736.233743][ T1908] __nla_validate_parse: 4 callbacks suppressed [ 736.233758][ T1908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7451'. [ 736.288901][ T1916] netlink: 'syz.2.7539': attribute type 4 has an invalid length. [ 736.374502][ T1921] ipt_REJECT: ECHOREPLY no longer supported. [ 736.413202][ T1926] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 736.794569][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 737.003069][ T1972] netlink: 'syz.4.7551': attribute type 1 has an invalid length. [ 737.038705][ T1972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.167755][ T1981] netlink: 'syz.2.7555': attribute type 29 has an invalid length. [ 737.184001][ T1981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7555'. [ 737.224876][ T1980] netlink: 'syz.2.7555': attribute type 29 has an invalid length. [ 737.238741][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7555'. [ 737.313547][T21889] tipc: Node number set to 167296321 [ 737.432229][ T2003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.442748][ T2000] syzkaller0: entered promiscuous mode [ 737.453257][ T2000] syzkaller0: entered allmulticast mode [ 737.478607][ T1998] bridge_slave_1: left allmulticast mode [ 737.491961][ T1998] bridge_slave_1: left promiscuous mode [ 737.508759][ T1998] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.537042][ T1998] bridge_slave_0: left allmulticast mode [ 737.556174][ T1998] bridge_slave_0: left promiscuous mode [ 737.570510][ T1998] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.678169][ T2014] tipc: Enabled bearer , priority 0 [ 737.733702][ T1999] tipc: Resetting bearer [ 737.793971][ T1999] tipc: Disabling bearer [ 737.976852][ T2029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7572'. [ 738.096274][ T2041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7570'. [ 738.119066][ T2042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7574'. [ 738.393836][ T2059] pim6reg: entered allmulticast mode [ 738.425978][ T2064] syzkaller0: entered promiscuous mode [ 738.438988][ T2064] syzkaller0: entered allmulticast mode [ 738.494730][ T2064] tipc: Enabled bearer , priority 0 [ 738.530652][ T2063] tipc: Resetting bearer [ 738.578414][ T2063] tipc: Disabling bearer [ 738.831510][ T2096] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7591'. [ 739.208228][ T2122] syzkaller0: entered promiscuous mode [ 739.215127][ T2122] syzkaller0: entered allmulticast mode [ 739.279569][ T2122] tipc: Enabled bearer , priority 0 [ 739.305743][ T2120] tipc: Resetting bearer [ 739.362724][ T2120] tipc: Disabling bearer [ 739.397462][ T2133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7601'. [ 739.546482][ T2143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 739.816938][ T2159] netlink: 'syz.2.7608': attribute type 1 has an invalid length. [ 739.842044][ T2140] batman_adv: batadv0: Interface deactivated: wlan0 [ 739.852983][ T2159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7608'. [ 739.863199][ T2157] ip6t_srh: unknown srh invflags 4000 [ 739.957927][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7607'. [ 739.979835][ T2157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.009461][ T2162] tipc: Started in network mode [ 740.024852][ T2162] tipc: Node identity fac355c42584, cluster identity 4711 [ 740.040970][ T2162] tipc: Enabled bearer , priority 0 [ 740.118387][ T2162] syzkaller0: entered promiscuous mode [ 740.128516][ T2162] syzkaller0: entered allmulticast mode [ 740.136752][ T2164] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 740.268292][ T2162] tipc: Resetting bearer [ 740.297643][ T2162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.425407][ T2160] tipc: Resetting bearer [ 740.477607][ T2160] tipc: Disabling bearer [ 740.781883][ T2211] netlink: 'syz.5.7616': attribute type 3 has an invalid length. [ 740.814672][ T2202] syzkaller0: entered promiscuous mode [ 740.833898][ T2202] syzkaller0: entered allmulticast mode [ 740.858872][ T2211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 740.920366][ T2203] tipc: Enabled bearer , priority 10 [ 740.934190][ T2202] tipc: Enabled bearer , priority 0 [ 741.044646][ T2198] tipc: Resetting bearer [ 741.134928][ T2198] tipc: Disabling bearer [ 741.476951][ T2251] __nla_validate_parse: 6 callbacks suppressed [ 741.476969][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7628'. [ 741.511903][ T2257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7630'. [ 741.893421][ T2284] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 741.956161][ T2284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.008053][ T2285] bond3: invalid ARP target 0.0.0.0 specified for addition [ 742.053403][ T2285] bond3: option arp_ip_target: invalid value (0) [ 742.068859][ T2285] bond3 (unregistering): Released all slaves [ 742.140157][ T2296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.347314][ T2303] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 742.600381][ T2321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.604596][ T2324] sctp: [Deprecated]: syz.4.7646 (pid 2324) Use of int in max_burst socket option deprecated. [ 742.604596][ T2324] Use struct sctp_assoc_value instead [ 742.634713][ T2324] netlink: 'syz.4.7646': attribute type 2 has an invalid length. [ 742.643184][ T2324] netlink: 'syz.4.7646': attribute type 8 has an invalid length. [ 742.657082][ T2324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7646'. [ 742.679351][ T2328] netlink: 'syz.6.7648': attribute type 21 has an invalid length. [ 742.715438][ T2328] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 742.738621][ T2328] bond1 (unregistering): Released all slaves [ 743.019747][ T2362] netlink: 'syz.2.7654': attribute type 32 has an invalid length. [ 743.044188][ T2362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7654'. [ 743.095273][ T2348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.258406][ T2362] bond9: option coupled_control: invalid value (192) [ 743.313190][ T2362] bond9 (unregistering): Released all slaves [ 743.768962][ T2411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7665'. [ 743.807755][ T2417] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7666'. [ 743.813840][ T2416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7664'. [ 743.826080][ T2417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7666'. [ 743.957233][ T2417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 743.977180][ T2417] bond4 (unregistering): Released all slaves [ 744.000007][ T2432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7668'. [ 744.010570][ T2432] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7668'. [ 744.044317][T28865] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.056611][T28865] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.065848][T28865] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.074908][T28865] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.186379][ T2439] xt_TCPMSS: Only works on TCP SYN packets [ 746.505627][ T2389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 746.735808][ T2460] __nla_validate_parse: 2 callbacks suppressed [ 746.735824][ T2460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7676'. [ 746.771461][ T2461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7677'. [ 746.881511][ T2472] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 746.977017][ T2480] openvswitch: netlink: Key type 59 is out of range max 32 [ 747.277874][ T2506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7690'. [ 747.336074][ T2506] netlink: 'syz.2.7690': attribute type 75 has an invalid length. [ 747.358202][ T2513] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7691'. [ 747.394536][ T2518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7691'. [ 747.418097][ T2518] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 747.419323][ T2513] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 747.437079][ T2526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7689'. [ 748.022709][ T2551] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 748.069064][ T2554] netlink: 'syz.4.7696': attribute type 1 has an invalid length. [ 748.078368][ T2554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7696'. [ 750.280096][ T2509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 750.573600][ T2577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7701'. [ 750.614841][ T2577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7701'. [ 750.648278][ T2577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7701'. [ 751.122624][ T2630] xt_l2tp: invalid flags combination: 0 [ 751.509159][ T2663] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 751.544016][ T2668] nbd: illegal input index -8454144 [ 751.746638][ T2683] pimreg: entered allmulticast mode [ 751.870926][ T2700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.893147][ T2701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.984828][ T2709] __nla_validate_parse: 8 callbacks suppressed [ 751.984844][ T2709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7733'. [ 752.054139][ T2709] team1: entered promiscuous mode [ 752.059333][ T2709] team1: entered allmulticast mode [ 752.329801][ T2731] syzkaller0: entered promiscuous mode [ 752.359390][ T2731] syzkaller0: entered allmulticast mode [ 752.446060][ T2744] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7744'. [ 752.586079][ T2731] tipc: Enabled bearer , priority 0 [ 752.615935][ T2763] netlink: 'syz.2.7749': attribute type 5 has an invalid length. [ 752.655220][ T2730] tipc: Resetting bearer [ 752.729715][ T2730] tipc: Disabling bearer [ 753.367995][ T2841] netlink: 'syz.5.7763': attribute type 10 has an invalid length. [ 753.383850][ T2842] syzkaller1: entered promiscuous mode [ 753.398169][ T2842] syzkaller1: entered allmulticast mode [ 753.419442][ T2841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.437057][ T2841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.463892][ T2841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.473362][ T2841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.596287][ T2867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.823036][ T2883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7772'. [ 753.863797][ T2891] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 754.099832][ T2910] xt_TCPMSS: Only works on TCP SYN packets [ 754.399912][ T2933] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7778'. [ 754.446789][ T2917] syzkaller0: entered promiscuous mode [ 754.453780][ T2917] syzkaller0: entered allmulticast mode [ 754.863454][ T2959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7785'. [ 755.508942][ T2981] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 757.019644][ T2956] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 757.051625][ T2956] bond5: (slave lo): Enslaving as an active interface with an up link [ 757.080432][ T2956] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 757.104493][ T2959] netlink: 'syz.3.7785': attribute type 1 has an invalid length. [ 757.117110][ T2959] netlink: 'syz.3.7785': attribute type 2 has an invalid length. [ 757.381737][ T12] batadv0: left allmulticast mode [ 757.388312][ T12] batadv0: left promiscuous mode [ 757.394414][ T12] bridge0: port 3(batadv0) entered disabled state [ 757.407631][ T12] bridge_slave_1: left allmulticast mode [ 757.414144][ T12] bridge_slave_1: left promiscuous mode [ 757.419966][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.443482][ T12] bridge_slave_0: left allmulticast mode [ 757.449239][ T12] bridge_slave_0: left promiscuous mode [ 757.463998][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.525773][ T3019] netlink: 'syz.4.7798': attribute type 21 has an invalid length. [ 757.855912][ T12] pimreg: left allmulticast mode [ 758.211011][ T12] team0: Port device geneve1 removed [ 758.567560][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.578379][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.588532][ T12] .` (unregistering): Released all slaves [ 758.598920][ T12] bond2 (unregistering): Released all slaves [ 758.616827][ T12] bond1 (unregistering): Released all slaves [ 758.631789][ T12] bond0 (unregistering): Released all slaves [ 758.648181][ T12] bond3 (unregistering): Released all slaves [ 758.669247][ T12] bond4 (unregistering): (slave lo): Releasing backup interface [ 758.677357][ T12] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 758.688819][ T12] bond4 (unregistering): Released all slaves [ 758.708465][ T12] bond5 (unregistering): Released all slaves [ 758.724051][ T12] bond6 (unregistering): Released all slaves [ 758.738250][ T12] bond7 (unregistering): Released all slaves [ 758.756249][ T3003] syzkaller0: entered promiscuous mode [ 758.761901][ T3003] syzkaller0: entered allmulticast mode [ 758.786486][ T3019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7798'. [ 758.809668][ T3023] tipc: Enabled bearer , priority 0 [ 758.849177][ T2997] tipc: Resetting bearer [ 758.946002][ T2997] tipc: Disabling bearer [ 759.048593][ T12] tipc: Left network mode [ 759.136354][ T3053] tipc: Enabling of bearer rejected, failed to enable media [ 759.146093][ T3053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7804'. [ 759.351633][ T4948] Bluetooth: hci1: command 0x0406 tx timeout [ 759.426720][ T3055] syzkaller0: entered promiscuous mode [ 759.475911][ T3055] syzkaller0: entered allmulticast mode [ 759.711452][ T3075] netem: change failed [ 760.231940][ T3107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 760.272332][ T3099] tipc: Enabled bearer , priority 0 [ 760.296279][ T3103] syzkaller0: entered promiscuous mode [ 760.304845][ T3103] syzkaller0: entered allmulticast mode [ 760.331854][ T3098] tipc: Resetting bearer [ 760.387295][ T3098] tipc: Disabling bearer [ 760.584897][ T3121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7823'. [ 760.825972][ T3147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7828'. [ 760.837791][ T3147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7828'. [ 760.847377][ T3147] netlink: 'syz.6.7828': attribute type 1 has an invalid length. [ 760.855426][ T3147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7828'. [ 760.864772][ T3147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7828'. [ 760.896583][ T3147] netlink: 'syz.6.7828': attribute type 1 has an invalid length. [ 760.956643][ T3148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7828'. [ 760.997493][ T3147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7828'. [ 761.043495][ T3157] netlink: 'syz.5.7830': attribute type 1 has an invalid length. [ 761.223680][ T3170] nbd: must specify a size in bytes for the device [ 761.233427][ T12] hsr_slave_0: left promiscuous mode [ 761.240316][ T3173] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 761.253692][ T12] hsr_slave_1: left promiscuous mode [ 761.276796][ T12] veth1_vlan: left allmulticast mode [ 761.285607][ T3170] nbd: must specify a size in bytes for the device [ 761.291643][ T12] veth1_vlan: left promiscuous mode [ 761.304295][ T12] veth0_macvtap: left promiscuous mode [ 761.320594][ T12] veth0_vlan: left promiscuous mode [ 761.873273][ T12] team0 (unregistering): Port device team_slave_1 removed [ 761.905051][ T12] team0 (unregistering): Port device team_slave_0 removed [ 762.104979][T28866] smc: removing ib device sz1 [ 762.156438][T28866] smbdirect: ib_dev[sz1] removed [ 762.414317][ T3244] netlink: 'syz.3.7846': attribute type 11 has an invalid length. [ 762.636454][ T3240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.060594][ T3282] netlink: 'syz.2.7852': attribute type 2 has an invalid length. [ 763.469334][ T3294] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 763.569540][ T3294] bond4: (slave lo): Enslaving as an active interface with an up link [ 763.584093][ T3300] netlink: 'syz.5.7857': attribute type 1 has an invalid length. [ 763.613358][ T3294] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 763.852106][ T3313] netlink: 'syz.4.7861': attribute type 11 has an invalid length. [ 763.989192][ T3314] __nla_validate_parse: 10 callbacks suppressed [ 763.989210][ T3314] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7861'. [ 764.600146][ T3357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7868'. [ 764.627931][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7869'. [ 764.742753][ T3347] syzkaller0: entered promiscuous mode [ 764.766533][ T3347] syzkaller0: entered allmulticast mode [ 765.327558][ T3375] netlink: 'syz.5.7871': attribute type 1 has an invalid length. [ 765.436402][ T3393] x_tables: duplicate underflow at hook 1 [ 767.908862][ T3371] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 767.929990][ T3390] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 767.937047][ T3390] syzkaller1: group set to 0 [ 767.969432][ T3375] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 768.064166][ T3413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7876'. [ 768.082426][ T3413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7876'. [ 768.091450][ T3413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7876'. [ 768.385355][ T12] IPVS: stop unused estimator thread 0... [ 768.773375][ T3466] netlink: 'syz.4.7887': attribute type 10 has an invalid length. [ 768.781878][ T3466] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 768.912761][ T3473] netlink: 'syz.4.7888': attribute type 10 has an invalid length. [ 768.941497][ T3473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7888'. [ 768.957053][ T3473] team0: Port device geneve1 added [ 768.964062][ T3472] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7888'. [ 768.975742][T28869] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.995042][T28869] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.017597][T28869] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.036117][T28869] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.087113][ T3481] tipc: Resetting bearer [ 769.599039][T25670] Bluetooth: hci4: command 0x0406 tx timeout [ 769.742607][ T4948] Bluetooth: hci2: link tx timeout [ 769.747809][ T4948] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 771.309558][ T3430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.510254][ T3532] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7897'. [ 771.573861][ T3540] netlink: 'syz.4.7899': attribute type 11 has an invalid length. [ 771.602912][ T3540] netlink: 'syz.4.7899': attribute type 5 has an invalid length. [ 771.623987][ T3540] netlink: 6548 bytes leftover after parsing attributes in process `syz.4.7899'. [ 771.660274][ T3549] netlink: 'syz.2.7900': attribute type 4 has an invalid length. [ 771.708563][ T3549] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7900'. [ 771.786507][ T3549] .`: renamed from bond0 (while UP) [ 771.803683][ T3557] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.7901'. [ 771.833176][T25670] Bluetooth: hci2: command 0x0406 tx timeout [ 772.194432][ T3577] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7907'. [ 772.216446][ T3589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7905'. [ 774.753301][ T3557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.203023][ T3712] netlink: 'syz.6.7914': attribute type 2 has an invalid length. [ 775.289029][ T3722] syzkaller0: entered promiscuous mode [ 775.305298][ T3722] syzkaller0: entered allmulticast mode [ 775.384440][ T3726] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7920'. [ 775.608703][ T3740] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 775.646865][ T3743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7926'. [ 775.667013][ T3743] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 775.730180][ T3745] netlink: 'syz.4.7927': attribute type 1 has an invalid length. [ 775.859436][ T3745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 775.942758][ T3749] bond5: (slave gretap2): making interface the new active one [ 775.964342][ T3749] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 776.108326][ T3764] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7933'. [ 776.127916][ T3764] netlink: 21 bytes leftover after parsing attributes in process `syz.4.7933'. [ 776.134186][ T3767] netlink: 'syz.5.7931': attribute type 5 has an invalid length. [ 776.488247][ T3791] netlink: 'syz.5.7938': attribute type 10 has an invalid length. [ 777.060165][ T3833] __nla_validate_parse: 4 callbacks suppressed [ 777.060199][ T3833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7949'. [ 777.407991][ T3851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7954'. [ 777.420137][ T3851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7954'. [ 777.429859][ T3851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7954'. [ 777.439947][ T3851] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7954'. [ 777.574471][ T3857] bridge5: entered promiscuous mode [ 777.579885][ T3857] bridge5: entered allmulticast mode [ 777.863749][ T3875] bridge0: port 4(veth1_to_bridge) entered blocking state [ 777.871179][ T3875] bridge0: port 4(veth1_to_bridge) entered disabled state [ 777.878604][ T3875] veth1_to_bridge: entered allmulticast mode [ 777.886878][ T3875] veth1_to_bridge: entered promiscuous mode [ 777.937849][ T3880] netlink: 'syz.2.7965': attribute type 4 has an invalid length. [ 777.964905][ T3880] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7965'. [ 777.988009][ T3880] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.7965'. [ 778.054692][ T3887] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 778.332740][ T3898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 778.462400][ T3889] syzkaller0: entered promiscuous mode [ 778.474912][ T3889] syzkaller0: entered allmulticast mode [ 778.902054][ T3916] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7977'. [ 778.915825][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7977'. [ 780.805725][ T3934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.809384][ T3935] netlink: 'syz.3.7984': attribute type 1 has an invalid length. [ 780.851361][ T3934] Cannot find map_set index 135 as target [ 780.899028][ T3937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7984'. [ 781.041453][ T3960] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 781.049632][ T3959] netlink: 'syz.6.7988': attribute type 12 has an invalid length. [ 781.463208][ T3987] netlink: 'syz.2.8001': attribute type 5 has an invalid length. [ 781.493937][ T3984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 781.578048][ T3989] vlan3: entered allmulticast mode [ 781.591885][ T3989] bond0: entered allmulticast mode [ 781.597142][ T3989] bond_slave_0: entered allmulticast mode [ 781.608357][ T3989] bond_slave_1: entered allmulticast mode [ 781.616839][ T3989] team0: entered allmulticast mode [ 781.622738][ T3989] team_slave_0: entered allmulticast mode [ 781.628512][ T3989] team_slave_1: entered allmulticast mode [ 782.247799][ T4034] netlink: 'syz.4.8014': attribute type 4 has an invalid length. [ 782.295037][ T4034] bridge0: port 5(syz_tun) entered blocking state [ 782.303899][ T4034] bridge0: port 5(syz_tun) entered disabled state [ 782.310517][ T4034] syz_tun: entered allmulticast mode [ 782.318878][ T4034] syz_tun: entered promiscuous mode [ 782.326493][ T4034] bridge0: port 5(syz_tun) entered blocking state [ 782.333066][ T4034] bridge0: port 5(syz_tun) entered forwarding state [ 782.353712][ T4032] netlink: 'syz.6.8015': attribute type 1 has an invalid length. [ 782.381204][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.398965][ T4031] batadv_slave_1: entered promiscuous mode [ 782.546383][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8018'. [ 782.645590][ T4062] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8020'. [ 782.751619][ T4067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8023'. [ 782.926212][ T4073] netlink: 'syz.6.8025': attribute type 1 has an invalid length. [ 783.194884][ T4080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.212601][ T4091] netlink: 'syz.2.8029': attribute type 1 has an invalid length. [ 783.229854][ T4062] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8020'. [ 783.241285][ T4091] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8029'. [ 783.305726][ T4099] netlink: 'syz.2.8029': attribute type 1 has an invalid length. [ 783.430597][ T4108] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8030'. [ 783.448142][ T4108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8030'. [ 783.485947][ T4108] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8030'. [ 783.495748][ T4108] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8030'. [ 783.692163][ T4121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8035'. [ 785.736401][ T4121] erspan0: entered promiscuous mode [ 785.742507][ T4121] gretap0: entered promiscuous mode [ 785.850568][ T4159] netlink: 'syz.3.8045': attribute type 1 has an invalid length. [ 785.877980][ T4163] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 785.909037][ T4159] macvlan3: entered promiscuous mode [ 785.916040][ T4159] macvlan3: entered allmulticast mode [ 785.923640][ T4159] bond9: entered promiscuous mode [ 785.929567][ T4159] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 785.960303][ T4159] bond9: left promiscuous mode [ 785.994065][ T4166] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 786.008517][ T4166] tipc: Enabled bearer , priority 10 [ 786.014881][ T4074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 786.086271][ T4175] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 786.847125][ T4221] veth1_virt_wifi: entered promiscuous mode [ 786.911475][ T4225] netlink: 'syz.4.8066': attribute type 12 has an invalid length. [ 786.932701][ T4225] netlink: 'syz.4.8066': attribute type 29 has an invalid length. [ 786.998040][ T4227] xt_cgroup: invalid path, errno=-2 [ 787.120896][ T808] tipc: Node number set to 3745994180 [ 787.294891][ T4244] xt_l2tp: invalid flags combination: 8 [ 787.382424][ T4252] Cannot find add_set index 4 as target [ 787.596693][ T4250] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.645632][ T4267] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 787.710222][ T4273] __nla_validate_parse: 16 callbacks suppressed [ 787.710240][ T4273] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8080'. [ 787.837326][ T4250] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.977452][ T4250] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.242938][ T4250] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.309587][ T4305] netlink: 'syz.4.8090': attribute type 1 has an invalid length. [ 788.319014][T25670] Bluetooth: hci4: command 0x0406 tx timeout [ 788.351826][ T4305] netlink: 280 bytes leftover after parsing attributes in process `syz.4.8090'. [ 788.609153][T28857] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.741953][ T4321] bond2: (slave ip6gretap0): making interface the new active one [ 788.776432][ T4321] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 789.019215][ T4250] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.215862][ T4339] xt_l2tp: unknown flags: 10 [ 789.296155][ T4341] netlink: 'syz.5.8097': attribute type 4 has an invalid length. [ 789.528951][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8101'. [ 789.685565][ T4357] netlink: 'syz.5.8103': attribute type 10 has an invalid length. [ 789.724320][ T4355] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 789.736265][ T4355] bond6 (unregistering): Released all slaves [ 789.800057][ T4357] syz_tun: entered promiscuous mode [ 790.083330][T25670] Bluetooth: hci3: command 0x0406 tx timeout [ 791.195779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.939318][ T4382] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 791.948873][ T4382] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 791.963768][ T4382] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 792.084466][ T4387] netlink: 'syz.5.8112': attribute type 4 has an invalid length. [ 792.122528][ T4387] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8112'. [ 792.185755][ T4387] .`: renamed from bond0 (while UP) [ 792.214452][ T4398] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8115'. [ 792.369339][ T4407] openvswitch: netlink: Missing valid actions attribute. [ 792.393668][ T4407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.579072][ T4424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8125'. [ 792.673155][ T4427] bridge_slave_0: left allmulticast mode [ 792.678984][ T4427] bridge_slave_0: left promiscuous mode [ 792.685981][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.708378][ T4427] bridge_slave_1: left allmulticast mode [ 792.723636][ T4427] bridge_slave_1: left promiscuous mode [ 792.742323][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.765950][ T4427] bond0: (slave bond_slave_0): Releasing backup interface [ 792.804882][ T4427] bond0: (slave bond_slave_1): Releasing backup interface [ 792.864678][ T4427] team0: Port device team_slave_0 removed [ 792.895697][ T4427] team0: Port device team_slave_1 removed [ 792.911929][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.941399][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.957383][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.968202][ T4427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 793.035103][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.049112][ T4433] team0: Mode changed to "roundrobin" [ 793.069876][ T4438] vlan0: entered promiscuous mode [ 793.124315][ T4438] team0: Port device vlan0 added [ 793.170568][ T4442] tipc: Enabled bearer , priority 0 [ 793.239715][ T4454] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 793.283578][ T4454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.498475][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8133'. [ 793.585055][ T4471] : entered promiscuous mode [ 793.773148][ T4481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.802531][ T4484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8135'. [ 793.886244][ T4484] xt_HMARK: spi-set and port-set can't be combined [ 794.132252][ T4510] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 794.170528][ T4511] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 794.185896][ T4519] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8141'. [ 794.230624][ T4524] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.8140'. [ 794.280665][ T4526] lo: entered allmulticast mode [ 794.286857][ T4520] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8141'. [ 794.304460][ T4524] 8021q: VLANs not supported on sit0 [ 794.338910][ T4524] netlink: 'syz.6.8140': attribute type 1 has an invalid length. [ 794.383918][ T4524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8140'. [ 794.407655][ T4530] netlink: 'syz.3.8142': attribute type 1 has an invalid length. [ 794.423836][ T4529] x_tables: duplicate underflow at hook 2 [ 794.437484][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8140'. [ 794.469121][ T4532] bond2: (slave veth0_to_bond): Releasing active interface [ 794.579785][ T4530] 8021q: adding VLAN 0 to HW filter on device bond10 [ 794.605336][ T4526] bond10: entered promiscuous mode [ 794.613524][ T4526] bond10: entered allmulticast mode [ 794.665663][ T4532] macvlan3: entered promiscuous mode [ 794.672055][ T4532] macvlan3: entered allmulticast mode [ 794.678800][ T4532] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 794.728839][ T4544] tipc: Enabling of bearer rejected, failed to enable media [ 794.924340][ T4552] syzkaller0: entered promiscuous mode [ 794.938399][ T4552] syzkaller0: entered allmulticast mode [ 795.475573][ T4594] netlink: 'syz.5.8158': attribute type 1 has an invalid length. [ 795.509167][ T4594] netlink: 'syz.5.8158': attribute type 1 has an invalid length. [ 795.537051][ T4594] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.8158'. [ 795.562554][ T4595] netlink: 'syz.5.8158': attribute type 1 has an invalid length. [ 795.576305][ T4595] netlink: 'syz.5.8158': attribute type 1 has an invalid length. [ 795.595046][ T4595] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.8158'. [ 795.776167][ T4606] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 796.236967][ T4627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 796.284876][ T4630] bond11: Removing last ns target with arp_interval on [ 796.717260][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8175'. [ 797.607436][ T4726] netlink: 'syz.3.8188': attribute type 1 has an invalid length. [ 797.657185][ T4726] 8021q: adding VLAN 0 to HW filter on device bond12 [ 797.707490][ T4726] bond12: (slave veth7): Enslaving as an active interface with a down link [ 797.748170][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 797.767916][ T4726] bond12: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 797.800538][ T4734] xt_connbytes: Forcing CT accounting to be enabled [ 798.009816][ T4753] IPv6: sit1: Disabled Multicast RS [ 798.024415][ T4753] sit1: entered allmulticast mode [ 798.289986][ T4770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 798.349841][ T4776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.393116][ T4774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 798.449867][ T4792] veth1_to_team: entered promiscuous mode [ 798.457896][ T4792] gretap0: entered promiscuous mode [ 798.465627][ T4792] debugfs: 'hsr1' already exists in 'hsr' [ 798.483554][ T4792] Cannot create hsr debugfs directory [ 798.520065][ T4792] hsr1: entered promiscuous mode [ 798.527867][ T4801] No such timeout policy "syz1" [ 798.688729][ T4812] __nla_validate_parse: 9 callbacks suppressed [ 798.688748][ T4812] netlink: 256 bytes leftover after parsing attributes in process `syz.6.8207'. [ 798.754073][ T4812] netlink: 'syz.6.8207': attribute type 21 has an invalid length. [ 798.766858][ T4815] syzkaller0: entered promiscuous mode [ 798.772934][ T4815] syzkaller0: entered allmulticast mode [ 798.780325][ T4812] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8207'. [ 798.855027][ T4817] nbd6: detected capacity change from 0 to 127 [ 798.893581][ T4948] block nbd6: Receive control failed (result -104) [ 799.038303][ T4827] openvswitch: netlink: IPv4 tun info is not correct [ 799.067645][ T4824] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 799.083078][ T4824] bond5 (unregistering): Released all slaves [ 799.418574][ T4844] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8217'. [ 799.540567][ T4852] netlink: 'syz.6.8219': attribute type 29 has an invalid length. [ 799.585286][ T4852] netlink: 'syz.6.8219': attribute type 29 has an invalid length. [ 799.617701][ T4848] batadv0: Caught tx_queue_len zero misconfig [ 799.625604][ T4852] netlink: 'syz.6.8219': attribute type 32 has an invalid length. [ 799.638926][ T4852] netlink: 500 bytes leftover after parsing attributes in process `syz.6.8219'. [ 799.661475][ T4848] netlink: 'syz.3.8218': attribute type 4 has an invalid length. [ 799.719145][ T4865] syzkaller0: entered promiscuous mode [ 799.725970][ T4865] syzkaller0: entered allmulticast mode [ 799.735642][ T4865] TC_ACT_REPEAT abuse ? [ 800.063946][ T4881] syzkaller1: entered promiscuous mode [ 800.098767][ T4881] syzkaller1: entered allmulticast mode [ 800.230150][ T4903] sctp: [Deprecated]: syz.6.8234 (pid 4903) Use of int in max_burst socket option. [ 800.230150][ T4903] Use struct sctp_assoc_value instead [ 800.363833][ T4912] netlink: 'syz.6.8234': attribute type 1 has an invalid length. [ 800.498023][ T4908] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 800.562422][ T4908] bond13: option packets_per_slave: allowed values 0 - 65535 [ 800.596317][ T4908] bond13 (unregistering): Released all slaves [ 800.670203][ T4927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8238'. [ 800.684043][ T4933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8238'. [ 800.834312][ T4908] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 800.883083][ T4908] bond13: option packets_per_slave: allowed values 0 - 65535 [ 800.904259][ T4908] bond13 (unregistering): Released all slaves [ 800.933359][ T4940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.044225][ T4956] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 801.067551][ T4955] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 801.086697][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8245'. [ 801.096811][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8245'. [ 801.122557][ T4956] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8245'. [ 801.178388][ T4908] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 801.188518][ T4908] bond13: option packets_per_slave: allowed values 0 - 65535 [ 801.214868][ T4908] bond13 (unregistering): Released all slaves [ 801.615784][ T4994] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8254'. [ 801.706102][ T4996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.779858][ T5003] netlink: 'syz.5.8258': attribute type 9 has an invalid length. [ 801.890459][ T5006] batadv_slave_0: Caught tx_queue_len zero misconfig [ 801.939037][ T5015] mac80211_hwsim hwsim96 syzkaller0: entered promiscuous mode [ 801.963052][ T5015] mac80211_hwsim hwsim96 syzkaller0: entered allmulticast mode [ 802.302223][ T5045] netlink: 'syz.4.8270': attribute type 1 has an invalid length. [ 802.317372][ T5045] openvswitch: netlink: IP tunnel TTL not specified. [ 802.479568][ T5054] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 802.496194][ T5055] tunl0: entered promiscuous mode [ 802.508560][ T5055] netlink: 'syz.3.8271': attribute type 3 has an invalid length. [ 802.749516][ T5069] netlink: 'syz.4.8276': attribute type 4 has an invalid length. [ 805.157196][ T5031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.513247][ T5095] __nla_validate_parse: 6 callbacks suppressed [ 805.513265][ T5095] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8282'. [ 805.610077][ T5100] netlink: 'syz.6.8286': attribute type 13 has an invalid length. [ 805.628691][ T5100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8286'. [ 805.675223][ T5100] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8286'. [ 805.717072][ T5113] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001 [ 805.743072][ T5098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8284'. [ 806.194304][ T5131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.601575][ T5157] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 806.628746][ T5147] bond9 (unregistering): Released all slaves [ 806.647531][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8301'. [ 806.857876][ T5171] netlink: 'syz.5.8303': attribute type 4 has an invalid length. [ 806.916749][ T5171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8303'. [ 806.974218][ T5180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8306'. [ 807.044804][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8305'. [ 807.089830][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8305'. [ 807.290226][ T5195] vlan4: entered promiscuous mode [ 807.369426][ T5207] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.8314'. [ 807.443315][ T5206] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 807.464178][ T5206] bond6: option packets_per_slave: allowed values 0 - 65535 [ 807.478030][ T5206] bond6 (unregistering): Released all slaves [ 807.517569][ T5203] syzkaller1: entered promiscuous mode [ 807.536725][ T5203] syzkaller1: entered allmulticast mode [ 807.612606][ T5220] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 807.622857][ T5220] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 808.118792][ T5247] netlink: 'syz.6.8325': attribute type 1 has an invalid length. [ 808.700306][ T5296] netlink: 'syz.2.8336': attribute type 4 has an invalid length. [ 808.711921][ T5289] pim6reg: entered allmulticast mode [ 808.718765][ T5289] pim6reg: left allmulticast mode [ 809.626267][ T5310] netlink: 'syz.5.8342': attribute type 8 has an invalid length. [ 811.557193][ T5280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.577549][ T5305] netlink: 'syz.4.8341': attribute type 11 has an invalid length. [ 811.609776][ T5305] netlink: 'syz.4.8341': attribute type 5 has an invalid length. [ 811.629895][ T5305] __nla_validate_parse: 4 callbacks suppressed [ 811.629911][ T5305] netlink: 6548 bytes leftover after parsing attributes in process `syz.4.8341'. [ 811.762881][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8345'. [ 811.774513][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8345'. [ 811.904559][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8345'. [ 811.973267][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8349'. [ 812.003409][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8349'. [ 812.019692][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8345'. [ 812.085026][ T5343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8348'. [ 812.107577][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8345'. [ 812.125119][ T5343] netlink: 'syz.3.8348': attribute type 30 has an invalid length. [ 812.137427][ T5329] tipc: Enabled bearer , priority 0 [ 812.154679][ T5334] syzkaller0: entered allmulticast mode [ 812.163547][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8349'. [ 812.175533][T28869] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.261975][ T5328] tipc: Disabling bearer [ 812.277741][T28869] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.288246][T28869] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.384389][ T5354] netlink: 'syz.6.8354': attribute type 2 has an invalid length. [ 812.393147][ T5354] netlink: 'syz.6.8354': attribute type 1 has an invalid length. [ 812.428750][T28869] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.950331][ T5388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.155506][ T5408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.207206][ T5411] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 813.217809][ T5411] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 813.228826][ T5411] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 813.349844][ T5419] xt_TPROXY: Can be used only with -p tcp or -p udp [ 813.434950][ T5431] ipt_ECN: cannot use operation on non-tcp rule [ 813.590343][ T5439] syzkaller0: entered promiscuous mode [ 813.625082][ T5439] syzkaller0: entered allmulticast mode [ 813.693776][ T5444] netlink: 'syz.4.8376': attribute type 6 has an invalid length. [ 813.887812][ T5446] syzkaller0: entered promiscuous mode [ 813.907752][ T5446] syzkaller0: entered allmulticast mode [ 813.955009][ T5446] tipc: Enabled bearer , priority 4 [ 813.991863][ T5445] tipc: Resetting bearer [ 814.080300][ T5445] tipc: Disabling bearer [ 814.433722][ T5465] netlink: 'syz.2.8383': attribute type 83 has an invalid length. [ 814.467770][ T5465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.486647][ T5468] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 814.686249][ T5485] netlink: 'syz.4.8389': attribute type 4 has an invalid length. [ 814.741455][ T5489] netlink: 'syz.4.8389': attribute type 4 has an invalid length. [ 815.117999][ T5513] netlink: 'syz.4.8398': attribute type 4 has an invalid length. [ 815.223970][ T5521] sctp: [Deprecated]: syz.2.8400 (pid 5521) Use of int in maxseg socket option. [ 815.223970][ T5521] Use struct sctp_assoc_value instead [ 815.289516][ T5524] openvswitch: netlink: IPv6 tunnel dst address is zero [ 815.597349][ T5554] Cannot find del_set index 4 as target [ 815.859393][ T5573] netem: incorrect gi model size [ 815.870011][ T5573] netem: change failed [ 815.883659][ T5580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 815.912866][ T5583] x_tables: duplicate underflow at hook 1 [ 815.928627][ T5583] syzkaller0: entered promiscuous mode [ 815.935305][ T5583] syzkaller0: entered allmulticast mode [ 816.775959][ T5613] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 816.792918][ T5610] netlink: 'syz.5.8428': attribute type 1 has an invalid length. [ 816.798000][ T5605] __nla_validate_parse: 10 callbacks suppressed [ 816.798036][ T5605] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8426'. [ 816.823169][ T5610] netlink: 'syz.5.8428': attribute type 1 has an invalid length. [ 816.838296][ T5617] netlink: 'syz.2.8430': attribute type 1 has an invalid length. [ 816.842336][ T5610] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8428'. [ 817.008478][ T5623] tipc: Enabling of bearer rejected, failed to enable media [ 817.084146][ T5626] netlink: 'syz.3.8434': attribute type 11 has an invalid length. [ 817.153414][ T5635] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8435'. [ 817.166550][ T5628] netlink: 'syz.2.8433': attribute type 1 has an invalid length. [ 817.510253][ T5657] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8443'. [ 817.567487][ T5664] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8444'. [ 817.613501][ T5664] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8444'. [ 817.628285][ T5663] syzkaller0: entered promiscuous mode [ 817.637314][ T5663] syzkaller0: entered allmulticast mode [ 817.659527][ T5669] tipc: Enabled bearer , priority 0 [ 817.705513][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 817.714398][ T5663] tipc: Enabled bearer , priority 10 [ 817.733065][ T5661] tipc: Resetting bearer [ 817.774192][ T5661] tipc: Disabling bearer [ 817.818207][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 817.828616][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 817.863637][ T5677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8449'. [ 817.944433][ T5685] tipc: Enabling of bearer rejected, media not registered [ 817.958943][ T5677] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8449'. [ 817.970314][ T5691] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8452'. [ 817.986924][ T5677] 0·: renamed from hsr0 (while UP) [ 818.004993][ T5677] 0·: entered allmulticast mode [ 818.016869][ T5677] hsr_slave_0: entered allmulticast mode [ 818.034494][ T5677] hsr_slave_1: entered allmulticast mode [ 818.047836][ T5677] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 818.429675][ T5673] infiniband syz1: set down [ 818.437232][T21886] xfrm0 speed is unknown, defaulting to 1000 [ 818.469473][ T5673] infiniband syz1: added xfrm0 [ 818.477707][ T5719] sctp: [Deprecated]: syz.5.8458 (pid 5719) Use of int in max_burst socket option. [ 818.477707][ T5719] Use struct sctp_assoc_value instead [ 818.522830][ T5673] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 818.559973][ T5673] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 818.580302][ T5673] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 818.640219][ T5673] RDS/IB: syz1: added [ 818.645612][ T5673] smc: adding ib device syz1 with port count 1 [ 818.653943][ T5673] smc: ib device syz1 port 1 has no pnetid [ 818.663962][T21886] xfrm0 speed is unknown, defaulting to 1000 [ 818.672501][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 818.837748][ T5746] syzkaller1: entered promiscuous mode [ 818.858322][ T5746] syzkaller1: entered allmulticast mode [ 818.945251][ T5749] syzkaller0: entered promiscuous mode [ 818.957564][ T5749] syzkaller0: entered allmulticast mode [ 819.082796][ T5749] tipc: Enabled bearer , priority 0 [ 819.126299][ T5748] tipc: Resetting bearer [ 819.165824][ T5748] tipc: Disabling bearer [ 819.176814][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 819.292232][ T5771] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 819.445947][ T5782] gre2: entered promiscuous mode [ 819.593670][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 819.625649][ T5791] validate_nla: 1 callbacks suppressed [ 819.625665][ T5791] netlink: 'syz.3.8472': attribute type 11 has an invalid length. [ 819.881725][ T5798] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8475'. [ 819.902126][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 820.158324][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 820.400198][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 820.630341][ T5824] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 820.748476][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 820.921674][ T5838] netlink: 'syz.5.8489': attribute type 1 has an invalid length. [ 821.014966][ T5838] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 821.188450][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 821.375971][ T5855] netlink: 'syz.6.8496': attribute type 4 has an invalid length. [ 821.419072][ T5842] netlink: 'syz.3.8490': attribute type 16 has an invalid length. [ 821.422345][ T5857] syzkaller0: entered promiscuous mode [ 821.446314][ T5842] netlink: 'syz.3.8490': attribute type 17 has an invalid length. [ 821.448375][ T5857] syzkaller0: entered allmulticast mode [ 821.488818][ T5842] tunl0: left promiscuous mode [ 821.523427][ T5842] ip6_vti0: left allmulticast mode [ 821.539361][ T5842] bridge0: port 3(veth1_to_bridge) entered blocking state [ 821.546662][ T5842] bridge0: port 3(veth1_to_bridge) entered listening state [ 821.554201][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.561367][ T5842] bridge0: port 2(bridge_slave_1) entered listening state [ 821.568714][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.575907][ T5842] bridge0: port 1(bridge_slave_0) entered listening state [ 821.627521][ T5842] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 821.701854][ T5842] mac80211_hwsim hwsim78 wlan0: left promiscuous mode [ 821.713544][ T5842] vlan2: left promiscuous mode [ 821.718363][ T5842] geneve1: left promiscuous mode [ 821.726923][ T5842] vlan2: left allmulticast mode [ 821.733975][ T5842] geneve1: left allmulticast mode [ 821.742608][ T5842] macsec1: left promiscuous mode [ 821.747722][ T5842] macsec1: left allmulticast mode [ 821.753955][ T5842] bridge0: left allmulticast mode [ 821.761260][ T5842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 821.769030][ T5842] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 821.781178][ T5842] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 821.799616][ T5861] tipc: Enabled bearer , priority 0 [ 821.813775][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 821.848000][ T5856] tipc: Resetting bearer [ 821.905901][ T5856] tipc: Disabling bearer [ 822.067490][ T5867] netlink: 'syz.6.8499': attribute type 1 has an invalid length. [ 822.164624][ T5867] 8021q: adding VLAN 0 to HW filter on device bond5 [ 822.197481][ T5882] netlink: 'syz.5.8500': attribute type 1 has an invalid length. [ 822.254999][ T5882] netlink: 'syz.5.8500': attribute type 1 has an invalid length. [ 822.272848][ T5882] __nla_validate_parse: 9 callbacks suppressed [ 822.272865][ T5882] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.8500'. [ 822.318888][ T5876] ip_vti0: entered promiscuous mode [ 822.384469][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8503'. [ 822.483187][ T5891] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8503'. [ 822.542809][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 822.870227][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.884725][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.893266][ T5923] bridge_slave_0: entered allmulticast mode [ 822.910043][ T5923] bridge_slave_0: entered promiscuous mode [ 822.917779][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.924948][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.113177][ T5673] xfrm0 speed is unknown, defaulting to 1000 [ 823.534209][ T5955] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8519'. [ 823.591663][ C0] bridge0: port 3(veth1_to_bridge) entered blocking state [ 823.600235][ T5915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.923363][ T5971] netlink: 'syz.5.8525': attribute type 1 has an invalid length. [ 823.954851][ T5977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 823.963554][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8525'. [ 824.069126][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8526'. [ 824.107109][ T5990] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8529'. [ 824.437302][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8534'. [ 824.745324][ T6024] netlink: 'syz.3.8539': attribute type 13 has an invalid length. [ 824.823424][ T6034] netlink: 'syz.2.8537': attribute type 29 has an invalid length. [ 824.832787][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8537'. [ 824.989996][ T6034] netlink: 'syz.2.8537': attribute type 29 has an invalid length. [ 825.001712][ T6037] batman_adv: batadv0: Interface activated: wlan0 [ 825.022467][T28867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.030365][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8537'. [ 825.055585][T28867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.076400][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.394765][ T6066] ip6gre1: entered allmulticast mode [ 826.134678][ T6116] netlink: 'syz.2.8566': attribute type 5 has an invalid length. [ 826.155073][ T6117] netlink: 'syz.2.8566': attribute type 5 has an invalid length. [ 826.203579][ T6122] lo: Caught tx_queue_len zero misconfig [ 826.272923][ T6114] IPVS: dh: FWM 3 0x00000003 - no destination available [ 826.500094][ T6133] wg1 speed is unknown, defaulting to 1000 [ 826.540387][ T6133] xfrm0 speed is unknown, defaulting to 1000 [ 826.616636][ T4948] Bluetooth: hci6: link tx timeout [ 826.625982][ T4948] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 826.698363][T25670] Bluetooth: hci6: link tx timeout [ 826.705718][T25670] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 826.722495][T25670] Bluetooth: hci6: link tx timeout [ 826.728413][T25670] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 826.786840][ T6151] netlink: 'syz.5.8573': attribute type 1 has an invalid length. [ 827.079140][T25670] Bluetooth: hci6: link tx timeout [ 827.085344][T25670] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 827.434794][T25670] Bluetooth: hci6: link tx timeout [ 827.440079][T25670] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 827.746159][ T6159] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 827.765153][ T6159] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 827.786921][ T6201] __nla_validate_parse: 10 callbacks suppressed [ 827.786936][ T6201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8580'. [ 827.885451][ T6159] batman_adv: batadv0: Interface deactivated: wlan0 [ 827.945298][ T6159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 827.969419][ T6159] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 828.061776][ T6159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 828.067814][ T6159] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 828.118729][ T6159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 828.137527][ T6159] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 828.165956][T25670] Bluetooth: hci6: link tx timeout [ 828.173031][T25670] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 828.229799][T25670] Bluetooth: hci6: link tx timeout [ 828.240755][T25670] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 828.256109][ T6159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 828.277221][ T6159] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 828.293586][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8586'. [ 828.503948][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8590'. [ 828.518254][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8590'. [ 828.635403][T25670] Bluetooth: hci6: link tx timeout [ 828.640824][T25670] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 828.713331][T25670] Bluetooth: hci6: command 0x0406 tx timeout [ 828.741431][ T6159] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 828.751774][ T6159] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 828.979800][ T25] block nbd6: Possible stuck request ffff888027a37000: control (read@0,1024B). Runtime 30 seconds [ 828.997360][ T25] block nbd6: Possible stuck request ffff888027a371c0: control (read@1024,1024B). Runtime 30 seconds [ 829.009436][ T25] block nbd6: Possible stuck request ffff888027a37380: control (read@2048,1024B). Runtime 30 seconds [ 829.020929][ T25] block nbd6: Possible stuck request ffff888027a37540: control (read@3072,1024B). Runtime 30 seconds [ 829.064882][ T6159] tipc: Resetting bearer [ 829.352380][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8595'. [ 829.380017][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8597'. [ 829.430426][ T6274] netlink: 'syz.5.8597': attribute type 21 has an invalid length. [ 829.456647][ T6270] bond1: option mode: unable to set because the bond device has slaves [ 829.543748][ T6279] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.8600'. [ 829.555125][ T6276] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 829.665280][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8601'. [ 829.682250][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8599'. [ 829.711212][ T6290] netlink: 'syz.4.8599': attribute type 22 has an invalid length. [ 829.729998][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8599'. [ 829.805018][ T6290] netlink: 'syz.4.8599': attribute type 22 has an invalid length. [ 829.826310][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.856407][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.887792][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.898679][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.909556][ T6292] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 829.917686][ T6292] syzkaller1: group set to 0 [ 831.157932][ T6395] syzkaller1: entered promiscuous mode [ 831.176744][ T6395] syzkaller1: entered allmulticast mode [ 831.220563][ T6402] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 831.287077][ T6406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.313645][ T6407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.469797][ T6413] tipc: Enabled bearer , priority 0 [ 831.503969][ T6414] tipc: Enabling of bearer rejected, already enabled [ 831.701757][ T6430] sch_fq: defrate 4096 ignored. [ 831.720184][ T6431] atomic_op ffff88803373e998 conn xmit_atomic 0000000000000000 [ 832.010306][ T6452] netlink: 'syz.3.8639': attribute type 29 has an invalid length. [ 832.039020][ T6455] IPVS: length: 8 != 1152 [ 833.067826][ T6508] netlink: 'syz.3.8651': attribute type 1 has an invalid length. [ 833.116501][ T6510] __nla_validate_parse: 20 callbacks suppressed [ 833.116518][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8651'. [ 833.512775][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8655'. [ 833.674575][ T6526] [ 833.676954][ T6526] ====================================================== [ 833.684001][ T6526] WARNING: possible circular locking dependency detected [ 833.691084][ T6526] syzkaller #0 Not tainted [ 833.695517][ T6526] ------------------------------------------------------ [ 833.702586][ T6526] syz.3.8655/6526 is trying to acquire lock: [ 833.708567][ T6526] ffff888027869828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 833.718101][ T6526] [ 833.718101][ T6526] but task is already holding lock: [ 833.725468][ T6526] ffff888027869300 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 833.735675][ T6526] [ 833.735675][ T6526] which lock already depends on the new lock. [ 833.735675][ T6526] [ 833.746075][ T6526] [ 833.746075][ T6526] the existing dependency chain (in reverse order) is: [ 833.755083][ T6526] [ 833.755083][ T6526] -> #6 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 833.763752][ T6526] blk_alloc_queue+0x546/0x680 [ 833.769066][ T6526] __blk_mq_alloc_disk+0x197/0x390 [ 833.774742][ T6526] nbd_dev_add+0x499/0xb50 [ 833.779753][ T6526] nbd_init+0x168/0x1f0 [ 833.784503][ T6526] do_one_initcall+0x250/0x870 [ 833.789784][ T6526] do_initcall_level+0x104/0x190 [ 833.795282][ T6526] do_initcalls+0x59/0xa0 [ 833.800128][ T6526] kernel_init_freeable+0x2a6/0x3e0 [ 833.805847][ T6526] kernel_init+0x1d/0x1d0 [ 833.810764][ T6526] ret_from_fork+0x514/0xb70 [ 833.815893][ T6526] ret_from_fork_asm+0x1a/0x30 [ 833.821180][ T6526] [ 833.821180][ T6526] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 833.828398][ T6526] fs_reclaim_acquire+0x71/0x100 [ 833.833863][ T6526] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 833.840191][ T6526] __alloc_skb+0x1d0/0x7d0 [ 833.845132][ T6526] __ip6_append_data+0x2d3c/0x3f60 [ 833.850835][ T6526] ip6_append_data+0x10f/0x280 [ 833.856121][ T6526] rawv6_sendmsg+0x12d3/0x18e0 [ 833.861428][ T6526] ____sys_sendmsg+0x80a/0x9f0 [ 833.866710][ T6526] ___sys_sendmsg+0x2a5/0x360 [ 833.871904][ T6526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 833.877364][ T6526] do_syscall_64+0x174/0x580 [ 833.882479][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.888887][ T6526] [ 833.888887][ T6526] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 833.896622][ T6526] lock_sock_nested+0x41/0x100 [ 833.901903][ T6526] inet_shutdown+0x6a/0x390 [ 833.906967][ T6526] nbd_mark_nsock_dead+0x2e9/0x560 [ 833.912603][ T6526] recv_work+0x1c2e/0x1d40 [ 833.917540][ T6526] process_scheduled_works+0xb5d/0x1860 [ 833.923619][ T6526] worker_thread+0xa53/0xfc0 [ 833.928729][ T6526] kthread+0x389/0x470 [ 833.933320][ T6526] ret_from_fork+0x514/0xb70 [ 833.938428][ T6526] ret_from_fork_asm+0x1a/0x30 [ 833.943711][ T6526] [ 833.943711][ T6526] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 833.951354][ T6526] __mutex_lock+0x1a3/0x1550 [ 833.956466][ T6526] nbd_queue_rq+0x37b/0x1100 [ 833.961582][ T6526] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 833.967652][ T6526] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 833.974544][ T6526] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 833.981056][ T6526] blk_mq_run_hw_queue+0x348/0x4f0 [ 833.986700][ T6526] blk_mq_dispatch_list+0xd16/0xe10 [ 833.992419][ T6526] blk_mq_flush_plug_list+0x48d/0x570 [ 833.998312][ T6526] __blk_flush_plug+0x3ed/0x4d0 [ 834.003689][ T6526] __submit_bio+0x28d/0x580 [ 834.008719][ T6526] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 834.014872][ T6526] block_read_full_folio+0x599/0x830 [ 834.020701][ T6526] filemap_read_folio+0x137/0x3b0 [ 834.026288][ T6526] do_read_cache_folio+0x358/0x590 [ 834.031930][ T6526] read_part_sector+0xb6/0x2b0 [ 834.037261][ T6526] adfspart_check_ICS+0xb1/0x960 [ 834.042723][ T6526] bdev_disk_changed+0x817/0x1770 [ 834.048275][ T6526] blkdev_get_whole+0x380/0x510 [ 834.053706][ T6526] bdev_open+0x31e/0xd30 [ 834.058470][ T6526] blkdev_open+0x470/0x610 [ 834.063408][ T6526] do_dentry_open+0x822/0x13a0 [ 834.068691][ T6526] vfs_open+0x3b/0x340 [ 834.073283][ T6526] path_openat+0x2e08/0x3860 [ 834.078415][ T6526] do_file_open+0x23e/0x4a0 [ 834.083454][ T6526] do_sys_openat2+0x113/0x200 [ 834.088654][ T6526] __x64_sys_openat+0x138/0x170 [ 834.094025][ T6526] do_syscall_64+0x174/0x580 [ 834.099139][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.105552][ T6526] [ 834.105552][ T6526] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 834.112761][ T6526] __mutex_lock+0x1a3/0x1550 [ 834.117872][ T6526] nbd_queue_rq+0xc6/0x1100 [ 834.122898][ T6526] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 834.128963][ T6526] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 834.135813][ T6526] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 834.142320][ T6526] blk_mq_run_hw_queue+0x348/0x4f0 [ 834.147953][ T6526] blk_mq_dispatch_list+0xd16/0xe10 [ 834.153677][ T6526] blk_mq_flush_plug_list+0x48d/0x570 [ 834.159572][ T6526] __blk_flush_plug+0x3ed/0x4d0 [ 834.164940][ T6526] __submit_bio+0x28d/0x580 [ 834.169962][ T6526] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 834.176119][ T6526] block_read_full_folio+0x599/0x830 [ 834.181926][ T6526] filemap_read_folio+0x137/0x3b0 [ 834.187485][ T6526] do_read_cache_folio+0x358/0x590 [ 834.193171][ T6526] read_part_sector+0xb6/0x2b0 [ 834.198464][ T6526] adfspart_check_ICS+0xb1/0x960 [ 834.203920][ T6526] bdev_disk_changed+0x817/0x1770 [ 834.209463][ T6526] blkdev_get_whole+0x380/0x510 [ 834.214835][ T6526] bdev_open+0x31e/0xd30 [ 834.219596][ T6526] blkdev_open+0x470/0x610 [ 834.224540][ T6526] do_dentry_open+0x822/0x13a0 [ 834.229827][ T6526] vfs_open+0x3b/0x340 [ 834.234427][ T6526] path_openat+0x2e08/0x3860 [ 834.239545][ T6526] do_file_open+0x23e/0x4a0 [ 834.244574][ T6526] do_sys_openat2+0x113/0x200 [ 834.249772][ T6526] __x64_sys_openat+0x138/0x170 [ 834.255149][ T6526] do_syscall_64+0x174/0x580 [ 834.260258][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.266681][ T6526] [ 834.266681][ T6526] -> #1 (set->srcu){.+.+}-{0:0}: [ 834.273819][ T6526] __synchronize_srcu+0xca/0x300 [ 834.279277][ T6526] elevator_switch+0x1e8/0x7a0 [ 834.284596][ T6526] elevator_change+0x2cc/0x450 [ 834.289903][ T6526] elevator_set_default+0x36c/0x430 [ 834.295620][ T6526] blk_register_queue+0x3e9/0x4e0 [ 834.301164][ T6526] __add_disk+0x677/0xd50 [ 834.306020][ T6526] add_disk_fwnode+0xfb/0x480 [ 834.311221][ T6526] nbd_dev_add+0x72c/0xb50 [ 834.316158][ T6526] nbd_init+0x168/0x1f0 [ 834.320840][ T6526] do_one_initcall+0x250/0x870 [ 834.326129][ T6526] do_initcall_level+0x104/0x190 [ 834.331602][ T6526] do_initcalls+0x59/0xa0 [ 834.336448][ T6526] kernel_init_freeable+0x2a6/0x3e0 [ 834.342166][ T6526] kernel_init+0x1d/0x1d0 [ 834.347021][ T6526] ret_from_fork+0x514/0xb70 [ 834.352130][ T6526] ret_from_fork_asm+0x1a/0x30 [ 834.357417][ T6526] [ 834.357417][ T6526] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 834.365243][ T6526] __lock_acquire+0x15a5/0x2cf0 [ 834.370610][ T6526] lock_acquire+0x106/0x350 [ 834.375637][ T6526] __mutex_lock+0x1a3/0x1550 [ 834.380759][ T6526] elevator_change+0x1b3/0x450 [ 834.386050][ T6526] elevator_set_none+0xb5/0x140 [ 834.391422][ T6526] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 834.397752][ T6526] nbd_start_device+0x17f/0xb10 [ 834.403138][ T6526] nbd_genl_connect+0x165b/0x1cf0 [ 834.408697][ T6526] genl_family_rcv_msg_doit+0x22a/0x330 [ 834.414768][ T6526] genl_rcv_msg+0x61c/0x7a0 [ 834.419797][ T6526] netlink_rcv_skb+0x232/0x4b0 [ 834.425089][ T6526] genl_rcv+0x28/0x40 [ 834.429590][ T6526] netlink_unicast+0x75c/0x8e0 [ 834.434875][ T6526] netlink_sendmsg+0x813/0xb40 [ 834.440163][ T6526] ____sys_sendmsg+0x972/0x9f0 [ 834.445445][ T6526] ___sys_sendmsg+0x2a5/0x360 [ 834.450645][ T6526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 834.456104][ T6526] do_syscall_64+0x174/0x580 [ 834.461213][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.467629][ T6526] [ 834.467629][ T6526] other info that might help us debug this: [ 834.467629][ T6526] [ 834.477857][ T6526] Chain exists of: [ 834.477857][ T6526] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#56 [ 834.477857][ T6526] [ 834.491676][ T6526] Possible unsafe locking scenario: [ 834.491676][ T6526] [ 834.499165][ T6526] CPU0 CPU1 [ 834.504548][ T6526] ---- ---- [ 834.509907][ T6526] lock(&q->q_usage_counter(io)#56); [ 834.515282][ T6526] lock(fs_reclaim); [ 834.521793][ T6526] lock(&q->q_usage_counter(io)#56); [ 834.529716][ T6526] lock(&q->elevator_lock); [ 834.534305][ T6526] [ 834.534305][ T6526] *** DEADLOCK *** [ 834.534305][ T6526] [ 834.542444][ T6526] 6 locks held by syz.3.8655/6526: [ 834.547549][ T6526] #0: ffffffff8fe37dc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 834.555749][ T6526] #1: ffffffff8fe37c00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 834.564713][ T6526] #2: ffff8880279099c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 834.576118][ T6526] #3: ffff8880279098d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 834.587092][ T6526] #4: ffff888027869300 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 834.597709][ T6526] #5: ffff888027869338 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 834.608589][ T6526] [ 834.608589][ T6526] stack backtrace: [ 834.614473][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.3.8655 Not tainted syzkaller #0 PREEMPT(full) [ 834.614495][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 834.614507][ T6526] Call Trace: [ 834.614513][ T6526] [ 834.614519][ T6526] dump_stack_lvl+0xe8/0x150 [ 834.614537][ T6526] print_circular_bug+0x2e1/0x300 [ 834.614557][ T6526] check_noncircular+0x12e/0x150 [ 834.614577][ T6526] __lock_acquire+0x15a5/0x2cf0 [ 834.614601][ T6526] ? elevator_change+0x1b3/0x450 [ 834.614616][ T6526] lock_acquire+0x106/0x350 [ 834.614630][ T6526] ? elevator_change+0x1b3/0x450 [ 834.614651][ T6526] __mutex_lock+0x1a3/0x1550 [ 834.614666][ T6526] ? elevator_change+0x1b3/0x450 [ 834.614683][ T6526] ? rcu_is_watching+0x15/0xb0 [ 834.614701][ T6526] ? work_grab_pending+0x3d1/0x990 [ 834.614717][ T6526] ? elevator_change+0x1b3/0x450 [ 834.614734][ T6526] ? __pfx___mutex_lock+0x10/0x10 [ 834.614747][ T6526] ? enable_work+0x17f/0x230 [ 834.614768][ T6526] ? lockdep_hardirqs_on+0x7a/0x110 [ 834.614784][ T6526] ? __cancel_work_sync+0xf7/0x110 [ 834.614800][ T6526] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 834.614820][ T6526] elevator_change+0x1b3/0x450 [ 834.614839][ T6526] elevator_set_none+0xb5/0x140 [ 834.614856][ T6526] ? __pfx_elevator_set_none+0x10/0x10 [ 834.614874][ T6526] ? xa_load+0x1db/0x210 [ 834.614891][ T6526] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 834.614916][ T6526] ? kernfs_add_one+0x477/0x5c0 [ 834.614962][ T6526] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 834.614986][ T6526] ? sysfs_add_file_mode_ns+0x259/0x300 [ 834.615005][ T6526] nbd_start_device+0x17f/0xb10 [ 834.615029][ T6526] ? device_create_file+0xf4/0x1b0 [ 834.615119][ T6526] nbd_genl_connect+0x165b/0x1cf0 [ 834.615140][ T6526] ? __pfx___nla_validate_parse+0x10/0x10 [ 834.615184][ T6526] ? __pfx_nbd_genl_connect+0x10/0x10 [ 834.615206][ T6526] ? rcu_is_watching+0x15/0xb0 [ 834.615222][ T6526] ? trace_kmalloc+0x2a/0xf0 [ 834.615244][ T6526] ? __nla_parse+0x40/0x60 [ 834.615261][ T6526] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 834.615280][ T6526] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 834.615300][ T6526] genl_family_rcv_msg_doit+0x22a/0x330 [ 834.615319][ T6526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 834.615339][ T6526] ? __lock_acquire+0x6b5/0x2cf0 [ 834.615356][ T6526] genl_rcv_msg+0x61c/0x7a0 [ 834.615374][ T6526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.615389][ T6526] ? __pfx_nbd_genl_connect+0x10/0x10 [ 834.615414][ T6526] netlink_rcv_skb+0x232/0x4b0 [ 834.615435][ T6526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.615451][ T6526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.615476][ T6526] ? down_read+0x270/0x2e0 [ 834.615490][ T6526] ? genl_rcv+0xd/0x40 [ 834.615505][ T6526] genl_rcv+0x28/0x40 [ 834.615520][ T6526] netlink_unicast+0x75c/0x8e0 [ 834.615542][ T6526] netlink_sendmsg+0x813/0xb40 [ 834.615567][ T6526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.615589][ T6526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 834.615611][ T6526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 834.615631][ T6526] ____sys_sendmsg+0x972/0x9f0 [ 834.615644][ T6526] ? __might_fault+0xaf/0x130 [ 834.615664][ T6526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.615681][ T6526] ? import_iovec+0x73/0xa0 [ 834.615699][ T6526] ___sys_sendmsg+0x2a5/0x360 [ 834.615711][ T6526] ? __lock_acquire+0x6b5/0x2cf0 [ 834.615726][ T6526] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.615742][ T6526] ? futex_wait+0x2a2/0x390 [ 834.615781][ T6526] ? __fget_files+0x2a/0x420 [ 834.615798][ T6526] ? __fget_files+0x3a0/0x420 [ 834.615818][ T6526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 834.615832][ T6526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.615849][ T6526] ? rcu_is_watching+0x15/0xb0 [ 834.615868][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.615882][ T6526] do_syscall_64+0x174/0x580 [ 834.615895][ T6526] ? trace_irq_disable+0x3b/0x140 [ 834.615916][ T6526] ? clear_bhb_loop+0x40/0x90 [ 834.615932][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.615946][ T6526] RIP: 0033:0x7fb46b79ce59 [ 834.615959][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.615971][ T6526] RSP: 002b:00007fb46c571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.615986][ T6526] RAX: ffffffffffffffda RBX: 00007fb46ba15fa0 RCX: 00007fb46b79ce59 [ 834.615996][ T6526] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 834.616006][ T6526] RBP: 00007fb46b832d6f R08: 0000000000000000 R09: 0000000000000000 [ 834.616015][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.616023][ T6526] R13: 00007fb46ba16038 R14: 00007fb46ba15fa0 R15: 00007ffda143f7b8 [ 834.616040][ T6526] [ 835.212784][T25670] block nbd7: Receive control failed (result -32) [ 835.219317][T25670] block nbd7: Receive control failed (result -32) [ 835.228726][ T6414] tipc: Disabling bearer [ 835.232536][ T6526] nbd7: detected capacity change from 0 to 63 [ 835.246854][ T2153] block nbd7: Dead connection, failed to find a fallback [ 835.254986][ T2153] block nbd7: shutting down sockets [ 835.260204][ T2153] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.269765][ T2153] Buffer I/O error on dev nbd7, logical block 0, async page read [ 835.278644][ T2153] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.289913][ T2153] Buffer I/O error on dev nbd7, logical block 1, async page read [ 835.298321][ T2153] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.307992][ T2153] Buffer I/O error on dev nbd7, logical block 2, async page read [ 835.316296][ T2153] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.327146][ T2153] Buffer I/O error on dev nbd7, logical block 3, async page read [ 835.335445][ T2153] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.345080][ T2153] Buffer I/O error on dev nbd7, logical block 0, async page read [ 835.354417][ T2153] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.364029][ T2153] Buffer I/O error on dev nbd7, logical block 1, async page read [ 835.372814][ T2153] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.382435][ T2153] Buffer I/O error on dev nbd7, logical block 2, async page read [ 835.390243][ T2153] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.399745][ T2153] Buffer I/O error on dev nbd7, logical block 3, async page read [ 835.407675][ T2153] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.416769][ T2153] Buffer I/O error on dev nbd7, logical block 0, async page read [ 835.424639][ T2153] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 835.434141][ T2153] Buffer I/O error on dev nbd7, logical block 1, async page read [ 835.443941][ T2153] ldm_validate_partition_table(): Disk read failed. [ 835.452295][ T2153] Dev nbd7: unable to read RDB block 0 [ 835.459038][ T2153] nbd7: unable to read partition table [ 835.474202][ T2153] ldm_validate_partition_table(): Disk read failed. [ 835.562275][ T2153] Dev nbd7: unable to read RDB block 0 [ 835.582907][ T2153] nbd7: unable to read partition table