last executing test programs: 6m17.816908261s ago: executing program 4 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0xf, 0x2}, {0xa, 0xd}}, [{0x8, 0xb, 0x70000000}]}, 0x2c}}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=0x0, 0x2b, 0x1, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@netfilter={0x1, 0x1, 0x3}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map=r5, r2, 0xd, 0x2008, 0x0, @value=r6, @void, @void, @void, r4}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000003c0)={0x0, @aes256, 0x0, @desc4}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000400)={@loopback, @multicast2, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000480)={'rose0\x00', 0x1}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f00000004c0)={0x2c, @broadcast, 0x4e20, 0x2, 'sed\x00', 0x14, 0x63bb, 0x38}, 0x2c) sendmmsg$alg(r2, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000500)="3b9a20a28c7c8462d21f4b7c584518af1f8540eea00ca5976d1c59f618ac2cad705d22263410f742607e8e173366d34bed898380e2dd6001d15beb6a334ab0bcee62b2c2166cb9edfe74e0e8e7008c0e327a8a9ab6ea93791ca3beedf3153ad9f9c5766507023292874f11abcc26de076f7b5f94", 0x74}, {&(0x7f0000000580)="04611bb0b917a84de261019b5f7ade056d5b8438c65d725734f9664bc12e1e72d28ceb95cee1451e0a554260e6af938bcb017d20ad79a39855dbfc8b22da8e98e95f446b083c439560e3de61df3ea66e21aa7674fb2f54759cf15150b84357393b44007c8f", 0x65}, {&(0x7f0000000600)="75fac385967cebb4dc7c06409ca60d0453febdb68d2cb5d2bcec45f7f3298cb7e337286f2301e079a7ad1abaad66650b24b1930d3442d6e8611bac80c810e3dd33b1a5b17681fa9cea397c0ab250fe0f22050a3656254463e6c3c7fba7ff066ec5b1e94cbfb047f9e6c9191639e50c156a1b04632e43", 0x76}, {&(0x7f0000000680)="6c1c74a6ad5b7a2e9ce7a93661c0bb4fb4a6b3f0fbac795e8ae7f54dc1bce9cd3460965cd538fa7bf169bd7f67a1377603d6f6f826af61c9ad38530919babda31ddce4035748594e516ed6bd9384ffc27bab9c0d7e12a5107da749fb2703127a3803f7fa928167eae0391a07bb6be651d6e478603a986fdaa2886066eb06922468a5eb7aec9ff786c94815835ad2994ac02104", 0x93}, {&(0x7f0000000740)="6861708b8c82fe", 0x7}, {&(0x7f0000000780)="eaf3de3df0bee100147d97cbf497e06ada31454ab0391bc041a689cd8ca2e18a5cfc30872c62ed80d216b8bf001815e24dfea0736fc497f77c13f4a88dba27e00b2b4f71f0a53894c5f602751b9373e0faa6c07db9a6a155bc44cdd48ffc27358563ba0b88a18051043ba6", 0x6b}, {&(0x7f0000000800)="d180b2b898cdecc50b99b3ddd64a420658286b0e9ccc9d2859e9bbad0d2a5eb8fe4a4bc277cac3a883e80475eaa05cc8a208d1ee412942d66b502b60fa6975d2a8bc18fdc5cb04e4578cc9dc088da726fe1b663a988f23b9ec9fd5f30c50fe59969aca49aec3207089d66640cea6762170486c869d8f09887bd1db3de8db44f073eea8a06c49ec43d3f0ec140a44a2cca5253655f0e66bdc12bda4d1713c168ab749e90ba058e08914bcfd9f9f725a8c8140ae4639828d459aff9fa385c773fbc48c01d0f860dba1", 0xc8}, {&(0x7f0000000900)="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", 0x1000}], 0x8, &(0x7f0000001980)=[@iv={0x78, 0x117, 0x2, 0x5f, "9718676dbc4143560e2df97322492c1ccd4227eb6daa50380e4ee08f437fe97dc876738945c48492efe86e044f1c9d64483903e589ebc6fc4b92b4f73681053e395de02b34ccd9fa808f4cb820d20882a2c80ae40dc3d3093b9acc4d560219"}], 0x78, 0x4008001}], 0x1, 0x804) r9 = accept4(r7, &(0x7f0000001a40)=@l2tp6, &(0x7f0000001ac0)=0x80, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000001b00)=0x9, 0x4) preadv(r7, &(0x7f0000004040)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/224, 0xe0}, {&(0x7f0000003c40)=""/160, 0xa0}, {&(0x7f0000003d00)=""/236, 0xec}, {&(0x7f0000003e00)=""/147, 0x93}, {&(0x7f0000003ec0)=""/240, 0xf0}, {&(0x7f0000003fc0)=""/112, 0x70}], 0x8, 0x8, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f00000040c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000050c0)={r10, 0xe}) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000006180)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000006140)={&(0x7f0000006100)={0x28, 0x0, 0x3, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x20000000) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000006280)={&(0x7f00000061c0)={0x10, 0x0, 0x0, 0x94546a7b15a1fa01}, 0xc, &(0x7f0000006240)={&(0x7f0000006200)={0x10, 0x3f8, 0x20, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc001}, 0x2000c800) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00000062c0)={@multicast2, @multicast1, @multicast1}, 0xc) write(r0, &(0x7f0000006300)="202853a846a03dbaee2cb3f1d0e0c2e6fcdcef7b4e7052ece8280ba0424b6fab904440f83d4834cdc9922088d37c007b71b97cb366018262c175e7f570b65cbfa9660a7a2ceaba4ac605758531faf1ed905086cbe1fd3b90394c75c452f197dbf55a080d80b0b2dc65876d5a61e74626604f80e65f24adaf61ba54cce05aceef7ad077131d0d0fb2afafc28801e0", 0x8e) syz_80211_inject_frame(&(0x7f00000063c0)=@broadcast, &(0x7f0000006400)=@ctrl_frame=@bar={{}, {0x3}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x2, {0x2, 0xf9a}, "db0afc6f296607d5"}, {0x0, 0x7, {0x3, 0x41}, "ecf5657a26c6f377"}]}}, 0x2a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006600)={r2, 0x20, &(0x7f00000065c0)={&(0x7f0000006440)=""/90, 0x5a, 0x0, &(0x7f00000064c0)=""/236, 0xec}}, 0x10) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000006740)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000006880)={0x1e, 0xc, &(0x7f0000006640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000066c0)='syzkaller\x00', 0xa0, 0x0, 0x0, 0x41100, 0x21, '\x00', r8, @fallback=0x6, r2, 0x8, &(0x7f0000006700)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, &(0x7f0000006840)=[r5, r2, 0xffffffffffffffff, r2, r12, r2, 0xffffffffffffffff, r5], 0x0, 0x10, 0x7}, 0x94) 6m17.14516019s ago: executing program 1 (id=1349): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) bind$xdp(r0, &(0x7f0000000000)={0x2d, 0x8, 0x0, 0x12, r0}, 0xfda4) socket$qrtr(0x2a, 0x2, 0x0) 6m16.879799216s ago: executing program 4 (id=1353): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x29}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c00}, 0x4040090) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x29}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c00}, 0x4040090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, r3, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x14}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3e}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x101}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4d}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xffffffff}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x4c}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x10}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xc}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x1b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8d}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x50}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x90}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x5e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x73}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x10c, r3, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x14}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3e}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x101}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4d}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xffffffff}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x4c}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x10}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xc}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x1b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8d}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x50}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x90}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x5e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x73}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private0, @in6=@remote, 0x4e21, 0x1, 0x4e20, 0x2, 0x2, 0x80, 0x80, 0x2f, 0x0, r7}, {0x5, 0x8, 0xff, 0x6, 0x1, 0x9, 0x2, 0x2}, {0x2, 0x1000, 0x4, 0x3ff}, 0x2933, 0x0, 0x0, 0x0, 0x4, 0x1}, {{@in=@broadcast, 0x4d5, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x3507, 0x1, 0x3, 0x7, 0x6, 0x6, 0xfffffffc}}, 0xe8) r8 = getpid() syz_open_procfs$namespace(r8, &(0x7f0000000680)='ns/cgroup\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000008c0)={0x0, 0xe8, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x9}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, @in6={0xa, 0x4e24, 0x8, @local, 0x9}, @in6={0xa, 0x4e24, 0x2, @private0, 0x5}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x5}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7c4}]}, &(0x7f0000000900)=0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000940)={0x0, 'virt_wifi0\x00', {}, 0x6}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e4) r10 = socket(0x22, 0x5, 0x1) ioctl$SIOCAX25DELUID(r10, 0x89e2, &(0x7f0000000980)={0x3, @default, r7}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r0) sendmsg$DEVLINK_CMD_GET(r11, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x120, r12, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL80211_CMD_GET_INTERFACE(r11, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x24}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r11) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000f00)={&(0x7f0000000d00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x108, r13, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_CQM={0x78, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x97}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xb9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xb2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0x6, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x2, 0x8000, 0xffffffdb, 0xc37]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xfffffffe, 0x1, 0x5, 0x4, 0x200, 0xa, 0x3]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x622}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8f5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008080}, 0x8815) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f40)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f40)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000000f80)={'wg2\x00', @multicast}) syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), 0xffffffffffffffff) 6m16.806646401s ago: executing program 1 (id=1355): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) r1 = accept$ax25(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) socket$inet6(0xa, 0x5, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="ad020777387198040e812c0cc686ee334010eeeb39f109e1a1112aced9c2e265b3859370b6dbe64759527c7d8da94a45aa8848df37d7b170bbad78f8be6a95dfc79f83fc85a3d54ccf9e35497630531d4763964e99d6b46687cc73eb192fde2edd7e08c0d725063839bac2b3bc08bf95604e219788aa3f3256873b6cac601beceb3140620d8f70a99e8ba3c0c5bb7677ee386204f9513199b0085db3cb663444d6ad51c897d3713183", 0xa9}, {&(0x7f0000000400)="27704f082c14c7b03d78cdaee0fc78783d7e2e2b28414163d160a556fbc6f6a31308caf1cb74701195802f36f5f8dba315d433ce8b092d838673f874ac4da197dedc09ac4046fdb148532a89029c336f86a33911ad4cf4a68727becc15d7862db0671d3f8e375c59c1dfad97a50078605124d1bba2f29f900c18cfc95deffbd030800c1f3637c54aad2b536bdb02baddb90d583f831e41e96edabe37a280e198a64b65987b063ba94324ee86835e8309f3820d560a360a3c743439d5549d4613753188e9ee7662b091c25170afe945a896376db4e0e5174dc79f7b2bdc186a032214", 0xe2}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="7c183c28c54e24791036d85511286eb8f307c07d2cc7ef31bfb1679136e686d746ccd00c20a9c21b746cb0200f54f76f8d033878905d9358d8b798a4d38d341b37e68b95114e88309dd069ef8d825c4498ea88cf8fc7fffb39ba5658553976c10708a9e9a89fff800c86085bc7418b3f0d51cdafe2ab1db3451544d737b38fcd677e3d43badd1d3d0b85a31bfcdeb84e75f9239441578b794f98c515dd739c4d4ef6565bf148f33c20e13275085bb2e0378ffa01fbfefd73745fdeacb1342aa4c34e304ec5e28de64c57d78426a7745bed8a6d509f490e61a26b1de89ded51c27e", 0xe1}, {&(0x7f0000000700)="dc3e53c774cffd8010bc6e609d5840058a2d5bfc4673cbe24e9ca1e277ce7333cb9444dfe3e5ad7c0921e0aa2000367d123328e2b0b2b7baedb873d3516f0efb266fecdeb7420fea9a2969932e5102da4894defbf0c909f73484867f587b7a9a292220e4c887a1de4d69c5a1cf17cca2e2d9ee035b7ae9d4f2b0979b65921aca1bec3ae1c495a6c6add962fb2e7ddab9d50eade463baaa4323589fb1f97d21531c334b9b91273415039454140adbf90320ac49971ebea67917248ab7a50426dd04cce6a744032d39d02803b6bfd59afc083fbbc93d1ff6a79b13242c0095a90e4b3d128fea8bb56aca2f937dcd3f57d1f3343f328cefdb78", 0xf8}], 0x5) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x844) 6m16.612146327s ago: executing program 4 (id=1357): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x1f0, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x60}, {@in6=@remote, 0x0, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa2c, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4, 0x10}, 0x2, 0x1a0b1}, [@etimer_thresh={0x8, 0xc, 0xc4}, @offload={0xc}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@mcast2, 0x4e21, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3c}, {@in=@private=0xa010100, 0x4d3, 0x6c}, @in=@broadcast, {0x7ff, 0x2, 0xfffffffffffffffb, 0x5ca42eb8, 0x8, 0xd, 0xf3, 0x2}, {0x2, 0xdf, 0x6, 0x2}, {0x40000401, 0x2, 0x3}, 0x70bd28, 0x3506, 0x2, 0x1, 0xd1, 0x55}}]}, 0x1f0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) close(r1) 6m16.400208998s ago: executing program 4 (id=1360): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r2, {0x10, 0xffe0}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xf7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0xce) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m16.165797481s ago: executing program 3 (id=1361): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r4, @ANYBLOB="28005080140001004abee33957edf8aaae14574df48e0000050002000b"], 0x44}}, 0x0) 6m16.165533793s ago: executing program 0 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010328bd700034000000"], 0x14}}, 0x0) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x2, 0x8, 0x0, 0x2}, {0x5, 0x7, 0x3, 0x1}, {0x2, 0xd, 0x8, 0x9}, {0x5, 0x2, 0xd8, 0x2}]}) 6m16.031855902s ago: executing program 3 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x4, 0x6, 0x404, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) (async) shutdown(r2, 0x1) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@empty, @remote, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xba80b6924a8f21c8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv4_newaddr={0x60, 0x14, 0x2, 0x70bd28, 0x25dfdbff, {0x2, 0xe, 0x0, 0x0, r8}, [@IFA_LABEL={0x14, 0x3, 'veth0_to_hsr\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x77}, @IFA_CACHEINFO={0x14, 0x6, {0x10, 0x7, 0x7, 0x5}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x8, 0x1, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x9a2dfd63a9e318bb) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0xfff, 0x7, 0x1, 0x20080, 0x1, 0x7, '\x00', r8, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) (async) unshare(0x800) readv(r7, &(0x7f0000000cc0)=[{&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000700)=""/173, 0xad}, {&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f0000000980)=""/18, 0x12}, {&(0x7f00000009c0)=""/97, 0x61}, {&(0x7f0000000a40)=""/105, 0x69}, {&(0x7f0000000bc0)=""/223, 0xdf}, {&(0x7f0000000ac0)=""/89, 0x59}], 0xa) (async) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x8ac2}, &(0x7f0000000b80)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x4000000}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 6m15.964514531s ago: executing program 0 (id=1364): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x7, 0x8, 0x0, 0x2}, 0xfffffffe, 0x1, 0xffffffff, 0x0, 0xe9, 0x14, 0xc, 0xc, 0x0, 0x7, {0x4, 0xfac0, 0x8, 0x3, 0x3, 0xffffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x420a, 0x5, 0xc008, 0x6, 0x400, 0x9, 0x1, 0x9, r3}, &(0x7f0000000240)=0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2, @ANYRES64=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES16=r8, @ANYBLOB="00032cbd9200e200800000000000000900050000000800010000050000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000b1afb000711215000000000095000000000000009c0202a28e88e1e5bdfb7a3050b15604a503ca8bebb687498dba77a8b024450fdfecb7a3b98fbc8329536650d67645be94b88570cbfaca4637a92aee88eceb9e2caf3363bc39ae4d0b7b23f4ee98f65b8c8114aaf8f1ff7798a70e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r10}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={r13, 0x9}, &(0x7f0000000080)=0x8) r14 = socket(0x40000000015, 0x5, 0x0) connect$inet(r14, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 6m15.821056213s ago: executing program 1 (id=1365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0xf34, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x67d, 0x5d}}}}, [@NL80211_ATTR_IE={0xbe, 0x2a, [@tim={0x5, 0xb8, {0x9, 0xef, 0x8f, "649ae94d02f1faf3046673b3edd405330c30708d45102bebe7ff1b993f6d291946924c8c388cf19f2ee8f6181e08f21cadbf221c547c6ea938fe5ddfdea3a43d6336c15bf6aa5ccc9a77fb2e2dc4736ac445aafd8510c4c6a0ef524655dcf3e84a1bdf01159f2a19962d2f940fc702d2a31beb68fae38b623f6fde982d48d3930b876ab3983ec6b7bfdf219516bb7b94b61836a3153973798dce96a46ace0e9e2fcad1261362c1949d66f8e9cf51f8a6592eb6efde"}}]}, @NL80211_ATTR_PROBE_RESP={0x5eb, 0x91, "a20535a12f02c70f852f832c3f6de314111972632e53b72bf2c42db9d7c9cde4c0b075f29b715728c243fc1a1772605e0d06f6e0e1a6322aa23c4a5f03cef6ab629d5110c002c389b4149042f2a12bb31373b8111616581c67c2584766029d4522112e96c51dce3fc198dc794317d41cc720409ff761027489b1a7e02a47c6df100874e454bfd9534085160321d077dd0d7f09503f8bb018b1fa41d2a9024ce0e119dec996adc659e1b7169f67e20ec9702783ab2043062b11a6257d1526d09b348c04fb4766c352bec1c77953c238c52640af78f2ce7c3a3ef8470fcd8fd1b75d3e283044fb6cffd3afb3a90ad280282623a36d758d0845507830db553fe134899f84bef0da88315d9b8d170d59444bf07af2254753855ebe37e7e359e42cdf4f0811b00cd9c7b26dd3f96e5bd0e5ffb376f7b5f3b43882e5c66d11842712433a003acfb98766c894923161d8fc858cf44634b22803b0bc4e56b0aa6865f2d2502240eda7e861bd76fdf669b674fcf802644ced53daa06d91a750a8b6fec5cc69594c83fd0056b0a8f710e9f9a3d54b0de1dd7f41b4b33a80c46eb23f8a80688ec2fd6deb29d8b309aced45381db53ab5e64debf9073b0c690ca2fd9f837c4d369940c93d6ccf3fb8024654650b3eeea326a8b2bb698218cf2c6aff77b1a21768ca7e12aeb32a73e59ac5e286c8bdfe7bd0a8ec76eff8f110987554985d19d604190ced88548f1de47a92c60884d3f1fc8c7127d9db438314e9fecd87ecf27194c40dfeacb2061d9c84eea7c27b7a429aca9dc7c8427cdcebe14c863cf2754fcdc214277fc5db4ce4a75b0a787d11e29433a694fe6f77442fab9e6d852bf027912ae763b5ef1236ebd183f0174b7a04ebc3866e415f145481a3b6cd328459bca87756e85eab0263b18ec1671a175cd2d360392e292f2af8ecf35713b7ef4e37e85ff19d81053e674f100660546a3e94db47d4138443463f7562f45347d662d84be37d1208c846fca44686e614739f436e7738382b40e159f05fe3719b2beb4ff6170afc7194bdc39ee6308cd0ef8eb097721bbe9d5fcbdb6d266c6ee4d3a99f185a993f993c48daa82637dd37a72689fd88c52c318e80a1c40af7a7edd920077d0188b98d9d2e0145dc62528fbfb118b2433cffcc29ec4416e493bb369433d781c2fbe1c334424f8c9f8a5759bd1a9b73712f89b5870a2bc41582b0495ab29a8118f1966f86a1d5e0bcc2abc6c977e1a2844f2eb63a4dd06dd3b5ddd5442ac90cfd739248081282277a11119e18840c32a02d499c972de8291ea0468f2d5a97d20d2ff2b690f7be8a1e5430103c7b437e1c121aa032c28dbe00bb6ec6473c8eb61c347cfce500bc3c6bcbaac844ce653c98d1d0eda935d8a3f4ee3de4d940099dbafb353881f18a510048dc147176f830d3974cb125cf3d880c996f1650581c7294df06e77512d4885b6ca58c9a0d5e8665459346d549b2e74b24d760b3f55d233e52039800cd38a40a5e5cb32bc7c42e25b3432210b5fe2dafdcda0332d71ae33055eab3f69dd2dedbc61a84f392afa829ae71d0bb2553e702f323b472931eb57f5fb7dd44a5efa656db8b351d4baf27f340cb72b209b5bede894a97b83b0ba5b082fce0bc58ea555b7a78584f87c594a9c43bd5c5e4fd6373014e04136852cf47c8ad0f77e31290842918c4a00fefca78a22e622ed5276a298bda5b00640d6d6580c709b368ae5f42f0d2ba404b28513d8a75db10398260f339fe2f220077dd93802f7bf00ce666655c095441ac1369d6e92565637ade7da81400cc63a95f5822711952f08c1e4e8e6cedd954e4336446a863492db588377caeb47cef72584203784e5b8dd1edf86d32384a00f663d55b777d437a5abd98877bfa889f7bbedc382225d8e0d453e45d3cacca91e26f8cfeeff24a7ed20af94b4aabee2e93aa0a426948ae1996ce791fdf2acbdbfc90a67aab90465ee569f99dfec8645525c9b0afacce68a0b34e922130190949d1ed4ee2b04f25cd006fcfe917b10c8c270887908b87701715719dedca5b0b1eaedcc3fed07d3419a3a82713357373763b9007bc0e12b40303b5e32dd552a4d2e20792bc9336015784d682141fc617e50a5726c4cfd37eee93"}, @NL80211_ATTR_BEACON_TAIL={0x4c, 0xf, [@cf={0x4, 0x6, {0xa, 0x6, 0x3, 0x3}}, @supported_rates={0x1, 0x6, [{0xae6de9b5a85bec3b, 0x1}, {0x60, 0x1}, {0x48}, {0x5}, {0x24}, {0x36, 0x1}]}, @gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x6, 0x0, {0x0, 0x8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x8, 0x6f}}, @challenge={0x10, 0x1, 0xea}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x21}}, @mesh_chsw={0x76, 0x6, {0x30, 0x81, 0x29, 0x10ca}}]}, @NL80211_ATTR_BEACON_TAIL={0x104, 0xf, [@perr={0x84, 0x22, {0x4, 0x2, [{{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x34}, {{}, @device_a, 0x7fffffff, @void, 0x8}]}}, @fast_bss_trans={0x37, 0xda, {0x0, 0x7, "ce8a838d2e88ac3425a255138cfc3146", "dd8d0fdcb874803f34d9da0e9eb583cc4ae52d015699f9c2314271434f550478", "f0ff58be9f736a08f5f61379128254d2e12ff3155ff0cd038cd8c4d7c76bebcd", [{0x1, 0xf, "041de58ad6141b6dc6b854d01c899e"}, {0x1, 0x15, "40d5250e7b4676c1bfebd12f10ef52835170eaf58c"}, {0x4, 0x2, "1bc7"}, {0x3, 0x1a, "992b9541f2ca384945119b7fb175da65e41c52bbdd59cb2ee3df"}, {0x1, 0x10, "c0b687d6123116f021790d4be3c58781"}, {0x1, 0x21, "f4c911c34aae98043ca6322f8d7271bdadd488e49e5acb279a5cc9fd4a5eec0638"}, {0x4, 0x9, "06d67c2fd24067ba03"}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x62f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0x2, 0xddd}}, 0x5, @random, 0x10, @void, @void, @val={0x3, 0x1, 0x2c}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0xd, 0x4}}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x2, 0x80, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x9, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x80, 0x40}}, @void, [{0xdd, 0x9d, "aa4719f51d296964feb8ebb4f920c60f8152e71b5a33510b2a5beee7879b3ae994d5d53271e52fe59061fc8894268de024bd427e25eb91471eda50fa4e46f0783fb8c97cf4f1990fc7a7bbf40c23b6b398f5adf2f5b56d4dd43484d5607736d7c2ac9701621cc1cdacc9d88c51dc8db11faff651a07421fdbf5781bafe079d6438f4078f53250d7a4daab6273f449b3a6f3e059a96bba76cbed34cd403"}, {0xdd, 0x7f, "46ec62f1a472d4e2d9e981f6eaaaab3b38fb9f6db335fa408720012e05e71c59c04a471b89333e42286ee23418898c8e0444cb5955d36fc3a06644531d0b2fe1d342a6ad6501311bcf9587c4d2b1a982459a47d5a7bf01b40d43f7674fafc26e7cfeaae8bbb18b80851d73e8e35f916c0cc79ad5d277f49848ddbf9eb106c8"}, {0xdd, 0xa7, "50b31f1ae9d9e13c8c05d8a8144834789a5cb328c2fc12faca6066d61a57f1e807f0172927387a4e67c36b0bf4c501235724471b8bf6d8c5f219e0135b099714e65084dc7c44f3333a5b518f49763f7db0715169246bb57be90bbfef2618f6105ccc453ef3f963b9002f488a50812ef4df0da95dee3a5489ca44333773d7b942c52fc145ede42dcb07f57f573e6d169b1959111c0b10bd34f497cfd7ecce21ade3a00e71c078e6"}, {0xdd, 0x7f, "499dd52b334e48d32f414fa6870c5dd1cbda2cf055afdb2e42221ed8067f733ac913cec771e3b6256ce9eb4d9838a76d98467eb85547a6d5ed913485096cfadb66c4e536a17c1a176ea909ddda1a04bf858ca1e9eb8fda2d6f7009df96253a0be2c1aaf9c16c4b00754ff4f34f1c428dfae76a6f54ee58942f164453e6e332"}, {0xdd, 0x4f, "b9ee6b98b0ee434e693310e380517a72339e0d1a18744db18089aec479ec39a722dd5c7e304083d6e7a79fe11ac1f68c78dd4c14af2257814fb4cdb1047e314dcf4ad6398f81b7d68512d4b4b34e76"}, {0xdd, 0xcf, "3af870d3fe426cb6e20f7ed768e9eb0bcc6634bbe52f93c119b1a1676cb62f011aad9c7c76d2e9b7da95c045735c880b7e17ff8415306e80cf68ee7d5ae6020d1f3ade9cf93dbb9c503e349c1667159b2f5b4972eaea8fdcac53537743b81b15b3d3d55b9740cbc537192e91174482b7b4f5b45a0ae8d1bca50b9bffc3831ea580e997a44badeb324bbd4e1d48111aa52eb6e93000df34aa45db78581612a27d3b671ab102a66ac489d7e0143ea36aaf099bc3ff5431ca5296de4b8246cc7635ec15806b9fcfcfef5184cb63b10bdf"}, {0xdd, 0xbb, "f0ebeb424ac8676e622af201b13446ac324f5b6dafc9e32ce7f36a0bd4ad55e671624a197d62af97116a554ca4c032de29a6abdf0eff603b771f596afe04b2911cb8ee8939447bd5295eeac3f38220b2b6b997627386f4530cf2f7b62d6e7fcb1feee69a3d9f33c3a17f3499757f1cdae444c2092ad23ad0973608ab683102fe4787f9e87710261a8267d48a3eceddf48b0bb8d7cfbca8b348d3ce822631b0cd2de677a25189f92bb0fd690312a4659795c3cccb60b8ef245fe49d"}, {0xdd, 0x43, "f4c8bcc6e59a53733ea98e1af8740170540ae52b521fb73b2ab815426be5da1361f28c869aedf303fc3045795bbd5cbff6b070b19188b6d4be91bab2462b0218b1072d"}, {0xdd, 0xc9, "aca909554350f052f5cacf40d5605cf522e0eda27a45eb9cfb73a192aca79f5061fee525b9e1dbd47a289cae7aa0798f6d6446e12f1b720e3a1059e3cc6df515121fe3e18df1918d090b1fcb056a6a6e13e708f5c162060ca04f0150f33a8f7f0913680f14037f709479832eed7670364f0a503742d3cd03e44cb8ab5c9b1b481bfe86ee1e0e6f0b3aa22973d246ca659e5a1fa4f1ea51bf950b3512af703b4b98e86e491bb48afe8441df4c4aa3b861592b1fb970245af10f90bc641cabf33a4c3021dea2b9caa0a7"}, {0xdd, 0x97, "64b603a037a3b17346a5810e1030cc9e7dcf16e2fb638e7e2f59fb86fa8de7364d24c766b22a1c2bc25cbddd7410b4ab0b7b9963445ce059917e3564d1830148ac789c01dcf76658738c610af82381b870d53f90a067bb66fa90588e1a36dbbc44ae4d0914ead6c63af885458383c360aeced144e20343916375e8e9442726da4e6c3dc50463a3ae453efd71cd6fb310b7f1acb4377b56"}]}}, @NL80211_ATTR_BEACON_TAIL={0xdf, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x8}, 0x25, 0xd, @device_a, 0x6, 0x3919f375, 0x7}}, @tim={0x5, 0x23, {0x7f, 0xde, 0x0, "42b5beebcb46d2aed28d3b7a3c136bb76c030dfe3b303ef6008deec039a5bdd0"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x40, 0xa6}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @prep={0x83, 0x1f, {{}, 0x7, 0x30, @device_b, 0x9, @void, 0x2, 0x287, @device_a, 0x7}}, @perr={0x84, 0x6f, {0x7, 0x7, [{{}, @broadcast, 0x2, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x6043180f, @value=@broadcast, 0x23}, {{}, @broadcast, 0x5, @void, 0x3}, {{}, @broadcast, 0x4, @void, 0xd}, {{0x0, 0x1}, @device_a, 0xfffffffe, @value=@broadcast, 0x30}, {{}, @device_a, 0x3, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x18}]}}, @ibss={0x6, 0x2, 0x6}]}]}, 0xf34}, 0x1, 0x0, 0x0, 0x48d0}, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400200000000000000100000008000b400000000028000480240001800b000100657874686472000014000280080001400000000c08000640000000040900010073797a30000000001400000011000100000000000701000a813fce0cee338bdcfc606398f7a5b8d52620430e65c7f1841c6f00000000000000"], 0xc4}}, 0x0) 6m15.820217761s ago: executing program 0 (id=1366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) getpeername(r1, 0x0, &(0x7f0000002700)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 6m15.783132965s ago: executing program 3 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 6m15.530635829s ago: executing program 1 (id=1369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071104100000000009500000000000000a33272ed07fecfa683c7db3a353f62d6cfc9f7a93de571a3e372c15e5efd1aafec45bfe8a03162160ecd007a26716cbf193c6f3e2d6921d1f60d156a5a9e83a4275bc6907fafa1f757d59b4d122826dfe325ee09338dc4cd824bdae8019d0f53af8c9ac607489002211905f67e6c4bec5de4116b3b00bd4ac77c682fc23e8dfb7e512729ec0e9e05dc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6m15.529320622s ago: executing program 0 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfa69, 0x8001}, 0x48) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'pimreg\x00', 0x1}, 0x18) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 6m15.4999416s ago: executing program 3 (id=1371): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 6m15.396972086s ago: executing program 4 (id=1372): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32, @ANYBLOB="0000d40000000000a5"], 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) 6m15.314481261s ago: executing program 0 (id=1373): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002e40)="790a8e027549ef9111d9462ac1e4a40724143aa002958e6ac3570dcd10be0b3ad94cecc3b22f0e21263f272d5c9d0d43eb62b518586c3112644e1e96e98e7f472c20ba55ed530d0b36e3f5f01b578603c3441cbb1ea0d568ec76f44cebe000e1b1946f05254a377e859d566906e0e5e936cc8e2ae5987468484054cfb372c589c7b5ada906dde72d940d66dd4bf52ac505c89879628b79b686aaeb7c14e3a6d5d75bdbe2cf730916ffab13152ca4cd8b464a21753f618f832a6618bbdea3909fa66f8cce55a9da222d3d276db720ecc562035edd68b09dc7a44b43d0999f5128c6cdb85959296232abbdf336b10856ba40b8f7190ec9cfd91ee349f7986a19", 0xff}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 6m15.312607806s ago: executing program 1 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, 0x0) getsockopt$MRT6(r1, 0x29, 0x1e, 0x0, &(0x7f00000000c0)=0xfffffffffffffe6f) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}, {0x2b, 'freezer'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}]}, 0x23) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x68, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 6m15.31223912s ago: executing program 3 (id=1375): r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x1, @default, @rose={'rose', 0x0}, 0x74b, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xe7, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6m15.087792434s ago: executing program 0 (id=1377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000000000000000000000011000300686173683a69702c6d61726bd30000000900020073790005000500020000dc430005000100060000000c00078008000b400000"], 0x58}}, 0x0) 6m14.555094536s ago: executing program 32 (id=1377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206050000000000000000000000000011000300686173683a69702c6d61726bd30000000900020073790005000500020000dc430005000100060000000c00078008000b400000"], 0x58}}, 0x0) 6m14.509807215s ago: executing program 1 (id=1379): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @timestamp_addr={0x44, 0x0, 0x6b, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@local, 0x4}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8000}, {@loopback, 0x22e}, {@loopback, 0x10001}, {@multicast2, 0xa}]}]}}}}}}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44001) 6m14.219291545s ago: executing program 33 (id=1379): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @timestamp_addr={0x44, 0x0, 0x6b, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@local, 0x4}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8000}, {@loopback, 0x22e}, {@loopback, 0x10001}, {@multicast2, 0xa}]}]}}}}}}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa, 0x13}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44001) 6m14.189998399s ago: executing program 3 (id=1381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x8001, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m14.175453054s ago: executing program 34 (id=1381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x8001, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m14.148739763s ago: executing program 4 (id=1382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="d789147f4a962aa542326f4d259313401e760cbe176bda1fa3450c71264ede838bc8090bd6efd336a100e4eae954086a1a879e2df6e2da4f5a73313e10ecf39fbfe946fba0cc51a01981746fbfbafca1bb1396705543fa5f3e3ab436096218aa0210e497743cfbff77ae39b53017e2169d05b70001ea671ef8", @ANYRESHEX=r0, @ANYBLOB="540c01f98a08d46b2bee002043a180593dbead52a8f655e5cc3a5ba5b7f1fc8851ad7beac903948825a56809d896e0f4c426ca5743a5c1a275f43f5e3451b64e63663c5f8a79732b9a18ed9aadd939a9994f842961913e36147b9ff3fbb8416b4c9480457a663e4dcac421a7b83d108838a9e05d249eef841d56100d788fc729bcec6f626fa2469b228351d4262191d30a77f34f70397bd2db963328d2c23a4c231a052b5d766211d316f9c2965e9c396ae86da1cbe5d874173f441a08b597ae1ae6c1f43846438fd606789721"], 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008042) 6m14.14755821s ago: executing program 35 (id=1382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="d789147f4a962aa542326f4d259313401e760cbe176bda1fa3450c71264ede838bc8090bd6efd336a100e4eae954086a1a879e2df6e2da4f5a73313e10ecf39fbfe946fba0cc51a01981746fbfbafca1bb1396705543fa5f3e3ab436096218aa0210e497743cfbff77ae39b53017e2169d05b70001ea671ef8", @ANYRESHEX=r0, @ANYBLOB="540c01f98a08d46b2bee002043a180593dbead52a8f655e5cc3a5ba5b7f1fc8851ad7beac903948825a56809d896e0f4c426ca5743a5c1a275f43f5e3451b64e63663c5f8a79732b9a18ed9aadd939a9994f842961913e36147b9ff3fbb8416b4c9480457a663e4dcac421a7b83d108838a9e05d249eef841d56100d788fc729bcec6f626fa2469b228351d4262191d30a77f34f70397bd2db963328d2c23a4c231a052b5d766211d316f9c2965e9c396ae86da1cbe5d874173f441a08b597ae1ae6c1f43846438fd606789721"], 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008042) 19.016073383s ago: executing program 7 (id=5318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 18.793620472s ago: executing program 7 (id=5321): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000898"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) r5 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r6 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) write$cgroup_int(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 18.610078917s ago: executing program 7 (id=5324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000240)={0x7}, 0x1) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r2, &(0x7f00000002c0)="04733784b13df9c71a9f0afe1f86251d7d1756d22347daca578deb06d0f55a8ebde35f4644f8c7186f7b6b94b374d795697f491b6ba75892d2916fa0c0a80af7d4d54bc3927165956f4d8fb0c9631bb482527b340c59a0769c01b4e9cfe5de6d894db1e8d90f13b073f0c98921ddf4a4987b34fd5fa94cfe1105ef808c8e1c62f64eb99b27b53f7e3e328b0f0cba", 0x8e, 0xc000080, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) (async) shutdown(r2, 0x1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000280)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'wlan0\x00', 0x400}) close(r0) 18.442028934s ago: executing program 7 (id=5328): r0 = socket(0x18, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 18.423980561s ago: executing program 7 (id=5329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x1, 0x1ff}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x5, 0x3, 0x8, 0xffffffffffffffe7, 0xfffffffffffffff4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x4f, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.293459763s ago: executing program 7 (id=5332): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$inet(0x2, 0x4000000000000001, 0x100) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0xe8, 0x4, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x111c7256}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x79, 0xc, "b4b0787566113ebc748ee0f68ce0d4ee0706597e4ea013ea623efdc77fa55fcab21936260554e12f5d0e7c274f9919005f97ed34fab2dbaefa81e4067e08666351cae809ac041d7f7f1f1137243c3acdb11e896dafbafa1fc12dde977f55e952651bf6cc47292787797a1671e8ce5b4400910e4a3a"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) close(0x3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x9}, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @f={0x7, 0x1, 0x2, 0xe5, {0x5, 0x12, "c71dcc80b3c4f576ebda506287a4ebf7e501"}, 0x2}}, 0x1c) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r10, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24040010) sendmsg(r7, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 17.366512388s ago: executing program 5 (id=5349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) (async) 17.245251517s ago: executing program 2 (id=5351): syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0xff}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0xfff3}, {0x6, 0xa708f20b25ba8e8b}, {0xe, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048811}, 0x4000807) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x2, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'rose0\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r6}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x400, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) 17.178213946s ago: executing program 5 (id=5352): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000150001000000000000cf890001000000"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x20050800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001780)={@cgroup=r3, r3, 0x2f, 0x2008, 0x4}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000016c0)=ANY=[@ANYBLOB="10000000cdd7056f0000000000000000"], 0x10}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e29, 0xeb, @empty, 0x5b56}, 0x1c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x168, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x68}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffc9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x827}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}]}, @NL80211_ATTR_REG_RULES={0xa4, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6f7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3076}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7946}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x11f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x25596747}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x24004840}, 0x4) sendto$inet6(r9, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r11, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x5, 0x7f}, &(0x7f0000000540)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000580)={r14, 0x3}, 0x8) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 17.046525307s ago: executing program 2 (id=5353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfa3b6b2883b6fee3) r1 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) 16.971362742s ago: executing program 8 (id=5354): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x2b, 0x0, 0xa}, 0x28) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r2, 0x20, &(0x7f0000000340)={&(0x7f00000003c0)=""/233, 0xe9, 0x0, &(0x7f00000002c0)=""/99, 0x63}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r0, 0x22, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)='\x00'}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r5, 0x25, 0x15, @val=@tcx={@void, @value=r1, @void, @void, r6}}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8, [0x7ff]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x6, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8], 0x30, 0x40400d1}}], 0x1, 0x10) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r15, 0x0, 0x400000, 0x0) 16.781963052s ago: executing program 6 (id=5355): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r3, @ANYBLOB="2800508014000a004abee33957edf8aaae14574df48e0000050002"], 0x44}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f00000001c0)=@ax25={{0x3, @netrom}, [@bcast, @default, @default, @default, @default, @rose, @default, @netrom]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/148, 0x94}, {&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000000c0)=""/5, 0x5}], 0x3, &(0x7f00000004c0)=""/79, 0x4f}, 0x3}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000780)=""/93, 0x5d}, 0x40}, {{&(0x7f0000000800)=@l2, 0x80, &(0x7f0000000880)=[{&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000002d80)=""/4096, 0x1000}], 0x2, &(0x7f00000008c0)=""/39, 0x27}, 0x7f}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/255, 0xff}, {&(0x7f0000000a00)=""/6, 0x6}], 0x2, &(0x7f0000000a80)=""/173, 0xad}, 0x3}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/228, 0xe4}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000ec0)=""/220, 0xdc}, {&(0x7f0000000dc0)=""/133, 0x85}, {&(0x7f0000000fc0)=""/236, 0xec}, {&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/36, 0x24}], 0x9, &(0x7f0000001200)=""/243, 0xf3}, 0xf}, {{&(0x7f0000001300)=@tipc, 0x80, &(0x7f0000001480)=[{&(0x7f0000001380)=""/5, 0x5}, {&(0x7f00000013c0)=""/14, 0xe}, {&(0x7f0000001400)=""/108, 0x6c}], 0x3, &(0x7f00000014c0)=""/139, 0x8b}, 0xa}, {{&(0x7f0000001580)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001600)=""/182, 0xb6}, {&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/40, 0x28}], 0x3, &(0x7f00000017c0)=""/63, 0x3f}, 0x6b17}], 0x7, 0x1, &(0x7f00000019c0)={0x0, 0x3938700}) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)}}], 0x4000004, 0x51, 0x0) 16.778991056s ago: executing program 2 (id=5356): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) listen(r1, 0x5) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040841}, 0x40) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r10) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r11, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r9, 0x80a, 0x2, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0xc0d5) 16.715971329s ago: executing program 8 (id=5357): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r0 = socket$inet(0x2, 0x1, 0xfffff31d) sendto$inet(r0, &(0x7f00000000c0)="40c85c1b38cbe000e97bf2e2f056d95da8f7fd6d8818547eb425", 0x1a, 0x20000000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 16.662120888s ago: executing program 6 (id=5358): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) 16.62424383s ago: executing program 8 (id=5359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="f300000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r5, 0x8919, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf255c00000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$unix(r7, &(0x7f0000000500)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000400)="7f590cabad472ddfcdf78695a136e1dcc23ef0b81e1b2a48f15103bf12d2d5ea041cc0c2606956aa6b5aec8d3ce77a738cbfd78c328cd2ab9492a1831c423d774097a7e870c74d0dbc9be354b46cb9d7db906c86399d39ac67ad9abd6fc3a8192fb6d44d", 0x64}, {&(0x7f0000000680)="6f2e167c56257dda1f8e9859790fb34d3aa5db75d18336f6d6a1db5cfae5bf69973c1eac408bf8505ab355ac8b4c1dae5c994afd38ca28c6622a03c8ca6be2009b0e29a036dc6533059055e42f23ae6b7183a1ab27d344ab9b8b85741cac68b6127102d3d2c6c048fbcc156cc95e59a43f052a0ad9aac4cb59dab6db36729702f537a3669cb072e9826ae7b0cd009035ce6a92e8fc6bdebd79b25067a37f5079eee78dced86aa9c34367c23775507e1d4cd5aa70e4eb9b8b3c2e99e65b97bd0aeaa28a44dc5cc9657a441abc63dc3932303955910ef9", 0xd6}, {&(0x7f0000000480)="34a3b7addea8f3c451bee51a20e49edbea9945073348a19655168c7672f16bea65116369f5267a33fc4141c5209f3803f4a95fa7f1032e4248350874090f19e5a1780c9f88e953543f73", 0x4a}], 0x3, &(0x7f0000000380), 0x0, 0x40}, 0x4810) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) connect$x25(r8, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) shutdown(r7, 0x0) 16.552945883s ago: executing program 6 (id=5360): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x2000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x20000001, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108000800000009500000000000000f5f6a529e7a2a17c2305fb4eb368bd2eee3e39326968ec1423c889c3973f6373eae80cf7c56967b5f61eedb007be451d0cc9e8c6d753123e6c44b8cba95d95fc803936f792c702499d3ba7d4e1b093bce79458547a3f19da684ca91abe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0x2000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x20000001, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0xe}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061108000800000009500000000000000f5f6a529e7a2a17c2305fb4eb368bd2eee3e39326968ec1423c889c3973f6373eae80cf7c56967b5f61eedb007be451d0cc9e8c6d753123e6c44b8cba95d95fc803936f792c702499d3ba7d4e1b093bce79458547a3f19da684ca91abe"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000280)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) 16.433955062s ago: executing program 5 (id=5361): ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000780140001008c7457ff8f99b8233ba7d81496e1da69140000001000010000000000000000000000000a"], 0xd0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 16.411107909s ago: executing program 6 (id=5362): sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, 0x140d, 0x201, 0x70bd2a, 0x25dfd9fb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16.348123348s ago: executing program 8 (id=5363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2080005, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0x21100e6, r3}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) 16.238065783s ago: executing program 2 (id=5364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0xf5658b177be0d838, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 16.196450173s ago: executing program 6 (id=5365): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) socket$inet6(0xa, 0x0, 0xbffffffe) (async) r1 = socket$inet6(0xa, 0x0, 0xbffffffe) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) (async) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010004b040000000002ebff007a000000", @ANYRES32=0x0, @ANYBLOB="00000100000000005000128008000100677265"], 0x70}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010004b040000000002ebff007a000000", @ANYRES32=0x0, @ANYBLOB="00000100000000005000128008000100677265"], 0x70}}, 0x0) 16.195927231s ago: executing program 8 (id=5366): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0xf6, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1}, 0x2) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000240)=0x4, 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$PPPIOCATTCHAN(r6, 0x40047438, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) 16.161910993s ago: executing program 2 (id=5367): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000010214000700fc0200000000000000000000000000000400120008000100", @ANYRES32=r7], 0x6c}}, 0x0) close(r1) 16.029764727s ago: executing program 5 (id=5368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, 0x0, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000103000000000001290001000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(r0, 0x0, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000103000000000001290001000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) 16.020085321s ago: executing program 2 (id=5369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{}, [@dev, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @private}, @local, @mcast2, @empty, @mcast2, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @local, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @empty, @mcast2, @mcast2, @private0, @private2, @mcast2, @dev, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @local, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @empty, @local, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev]}}}]}, 0x42c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd28, 0x25dfdc10, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r14, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r15, 0x300, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x24004801) 15.984010872s ago: executing program 6 (id=5370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402178006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r11, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc77}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="da358266647d"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000848) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, &(0x7f0000000080)=0x400, 0x4) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) (async) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) sendmsg$inet(r9, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf251000000008000600", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08005a0100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000700ac1414bb08000c000000000008000400ffffffff06000b001800000008000c000200000008000700640101021400050020010000000000000090c47bc5ae86b20d1f81c97bd00000000000000008000200050000000800020003000000"], 0x68}}, 0x20000040) 15.866739808s ago: executing program 5 (id=5371): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000240)) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 15.795046155s ago: executing program 5 (id=5372): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000b80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r4 = socket(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="fc") (async) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000180)) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000f9dbdf251900000008000300", @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x870, r11, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x6f}}}}, [@NL80211_ATTR_TX_RATES={0x3e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x40, 0x1, 0xfffb, 0x1, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x424, 0x0, 0x0, 0x5891, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0xff81, 0x3ff, 0xcc5e, 0xa86c, 0x40]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6237, 0x9, 0x1, 0x6, 0x57e, 0x7fff, 0x8, 0x5]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {}, {0x2, 0x1}, {0x5, 0x8}, {0x2, 0x9}, {}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x6}, {0x4}, {0x2, 0x3}, {0x5, 0x6}, {0x5, 0x2}, {0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0xc, 0x12, 0x30, 0x6c, 0x3, 0x9, 0x4b, 0x48, 0x2, 0x6c, 0x1b, 0x30, 0x30, 0x1, 0x30, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xb, 0x9, 0x9, 0x9, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3ff, 0x1, 0x400, 0xea6, 0xffff, 0x9, 0xc]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x2}, {0x2, 0x13}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x6}, {0x5, 0x2}, {0x7, 0x3}, {0x6}, {0x4, 0x5}, {0x7, 0x9}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x72}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x9, 0x24, 0x6, 0x5, 0x1b, 0xc, 0x5, 0x39, 0x2, 0x54, 0x60, 0x18, 0x30, 0x1b, 0x2, 0x16]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf7e, 0x6, 0x28, 0x7, 0x6, 0x0, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3, 0x3, 0x0, 0x3000, 0x5, 0x7fff, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x2, 0x5, 0x3, 0x9, 0x6, 0xfd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x2, 0x63e, 0x1, 0xfffa, 0x5, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4e02, 0xe, 0x4c5, 0x7fff, 0x1, 0x4, 0xcc]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x2}, {0x3}, {0x4, 0x4}, {0x3, 0xa}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x101, 0x1, 0x8cb0, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x8001, 0x483, 0x200, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x3}, {0x2, 0x2}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x6}, {0x7, 0xa}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x7}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x0, 0xa}, {0x2}, {0x7, 0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x7}, {0x6, 0x2}, {0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0x6}, {}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x24, 0x3, 0x12, 0x16, 0xc, 0x2, 0x6c, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x6, 0x6}, {0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x3}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x7}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x4, 0x7}, {0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x2}, {0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x7, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0xa}, {0x4, 0x6}, {0x6, 0x2}, {0x3, 0x5}, {0x3}, {0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x9}, {0x7}, {0x3, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x24, 0x60, 0x3, 0x16, 0x9, 0x12, 0xb, 0xb, 0x16, 0x1f, 0x1, 0xc, 0x6c, 0x5, 0x24, 0xc, 0x48, 0x6, 0x6c, 0x4, 0x60, 0x60, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x6, 0x8, 0x9, 0x1, 0x0, 0x2, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x6, 0x5d1f, 0xd, 0x3, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x1b, 0x4, 0x4, 0x2, 0x2, 0x16, 0x5, 0x24, 0x46, 0x6c, 0x60, 0x7b, 0x6c]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x70, 0x1b, 0x2, 0xb, 0x2, 0x6c, 0x3, 0x36, 0x48, 0xb, 0x2, 0x1b, 0x24, 0x6, 0x2, 0x73, 0x1, 0x6c, 0x5, 0xc, 0x60, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf800, 0x5, 0x2, 0x1, 0x2, 0x10, 0x800, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0xa}, {0x6, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x2, 0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd32b, 0x8000, 0x3, 0x7, 0x401, 0x6, 0xc, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1ff, 0x0, 0x510, 0x1, 0x9, 0x52a0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xfffc, 0x2, 0xa, 0xc64, 0x10, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe, 0x855f, 0x5, 0x93b9, 0xbaf2, 0x5, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x9, 0x1, 0xfffd, 0x8, 0xca, 0xb8b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9511, 0x9, 0x3ea, 0x81, 0x3, 0x3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x6, 0x4, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x2, 0x48, 0x6, 0x5, 0x1, 0xc, 0x12, 0x6, 0x18, 0x9, 0x36, 0x2, 0x2, 0x5, 0x3, 0x9, 0x36, 0x30, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x4, 0x5, 0xf, 0x7, 0x6, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x1}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x6}, {0x7}, {0x4, 0x3}, {0x1}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x4}, {}, {0x4, 0x2}, {0x1, 0x3}, {0x5}, {0x5}, {0x3, 0x9}, {0x1}, {0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x3}, {0x6, 0x3}, {0x4, 0x4}, {0x4, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x6}, {0x2, 0x2}, {0x1}, {0x1, 0x2}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe4, 0xff, 0x6, 0x40, 0x3, 0x200, 0x9, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x0, 0x2, 0x8c, 0x2, 0x0, 0xa]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x4, 0xffc0, 0xfff6, 0x2, 0xa5, 0x7]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbbd, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x36, 0x30, 0x6c, 0x12, 0x1b, 0x0, 0x30, 0x48, 0x60, 0x9, 0x12, 0x60, 0x12, 0x6, 0x48, 0x6, 0x36, 0x60, 0x18, 0x48, 0x5, 0x2, 0x9, 0x3, 0x24, 0x6c, 0x30, 0x30, 0x9, 0x60, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xfb24, 0x3, 0x7, 0x8001, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x24, 0x6c, 0xc, 0x36, 0x9, 0xb, 0xc, 0x30, 0x30, 0xb, 0x9, 0x4, 0x48, 0x4, 0xb, 0x4, 0xb, 0x6, 0x24, 0x12, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x48, 0x4, 0x16, 0x0, 0x60, 0x2, 0x18, 0x30, 0x2, 0x16, 0x9, 0x1b, 0x1, 0x1b, 0x30, 0x18, 0x2, 0x30, 0x0, 0x3, 0x60, 0x65, 0x36, 0x6c, 0x48, 0x60, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x7a, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbba, 0x3, 0x0, 0x8, 0x7615, 0x8f55, 0xe016, 0xb5]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x16, 0x72, 0x1, 0x6, 0xc, 0x1a, 0x3, 0x24, 0x1, 0x48, 0x16, 0x6, 0x9, 0xb, 0xb, 0x16, 0x2, 0x1, 0x12, 0x2, 0x0, 0x1, 0x30, 0x1, 0x24, 0x24, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x0, 0xf, 0x1e, 0xf68, 0x6, 0x8e8]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x5}, {0x7}, {0x1}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0x4}, {0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x3, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x5, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x8}, {0x1}, {0x3}, {0x0, 0x7}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x4}, {0x2}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x8}, {0x2, 0x4}, {0x4, 0x2}, {0x5, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x6}, {0x6, 0x5}, {0x3, 0x7}, {}, {0x3, 0x4}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x4, 0x1, 0x400, 0x5, 0xb28, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9877, 0x8, 0xfff8, 0x3, 0x1, 0x1000, 0x6, 0x7]}}]}]}]}, 0x870}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4, 0x3f}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000380)=0x8, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r13, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 15.226905115s ago: executing program 8 (id=5373): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "86217d", 0x0, 0x16, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x4, 0x0, 0x1, 0x5, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @loopback]}], "adf547df61646d1fb5e483d007b6b3de48937b6650068ddf7f0e0e8dbb54b5f4c05bdf223949f1b53c8986298bc49f2af06f1618380574109b0aa9a245976e07330806a1c9594ee16ef7dda705eeee8616405f5117273306aca561cb4a4268d7dc7a8eb3ca41b4a8818be8311490f5737e66bb5571e0eadcfdafb78ce72fd6c2090fb5d48c985962eab70ab8db44c7609aaf784f33c8894365335bf8b6576c395cdf884665a9f0843a6aa0a4fb847c34cf17fe6fcc01edcd"}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) 3.179062086s ago: executing program 36 (id=5332): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$inet(0x2, 0x4000000000000001, 0x100) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0xe8, 0x4, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x111c7256}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x79, 0xc, "b4b0787566113ebc748ee0f68ce0d4ee0706597e4ea013ea623efdc77fa55fcab21936260554e12f5d0e7c274f9919005f97ed34fab2dbaefa81e4067e08666351cae809ac041d7f7f1f1137243c3acdb11e896dafbafa1fc12dde977f55e952651bf6cc47292787797a1671e8ce5b4400910e4a3a"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4001}, 0x4000001) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) close(0x3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x9}, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @f={0x7, 0x1, 0x2, 0xe5, {0x5, 0x12, "c71dcc80b3c4f576ebda506287a4ebf7e501"}, 0x2}}, 0x1c) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r10, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24040010) sendmsg(r7, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 172.317721ms ago: executing program 37 (id=5372): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000b80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r4 = socket(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="fc") (async) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000180)) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000f9dbdf251900000008000300", @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x870, r11, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x6f}}}}, [@NL80211_ATTR_TX_RATES={0x3e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x40, 0x1, 0xfffb, 0x1, 0x8, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x424, 0x0, 0x0, 0x5891, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0xff81, 0x3ff, 0xcc5e, 0xa86c, 0x40]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6237, 0x9, 0x1, 0x6, 0x57e, 0x7fff, 0x8, 0x5]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x5, 0x8}, {0x3, 0x4}, {}, {0x2, 0x1}, {0x5, 0x8}, {0x2, 0x9}, {}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x8}, {0x3, 0x6}, {0x4}, {0x2, 0x3}, {0x5, 0x6}, {0x5, 0x2}, {0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x7, 0x3}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0xc, 0x12, 0x30, 0x6c, 0x3, 0x9, 0x4b, 0x48, 0x2, 0x6c, 0x1b, 0x30, 0x30, 0x1, 0x30, 0x2, 0x6]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0xb, 0x9, 0x9, 0x9, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3ff, 0x1, 0x400, 0xea6, 0xffff, 0x9, 0xc]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x2}, {0x2}, {0x2, 0x13}, {0x0, 0x3}, {0x3, 0x3}, {0x1, 0x1}, {0x6}, {0x5, 0x2}, {0x7, 0x3}, {0x6}, {0x4, 0x5}, {0x7, 0x9}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x72}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x9, 0x24, 0x6, 0x5, 0x1b, 0xc, 0x5, 0x39, 0x2, 0x54, 0x60, 0x18, 0x30, 0x1b, 0x2, 0x16]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdf7e, 0x6, 0x28, 0x7, 0x6, 0x0, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3, 0x3, 0x0, 0x3000, 0x5, 0x7fff, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0x2, 0x5, 0x3, 0x9, 0x6, 0xfd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x2, 0x63e, 0x1, 0xfffa, 0x5, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf6, 0x4e02, 0xe, 0x4c5, 0x7fff, 0x1, 0x4, 0xcc]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x3}, {0x7, 0xa}, {0x1, 0x2}, {0x3}, {0x4, 0x4}, {0x3, 0xa}, {0x3, 0x6}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x101, 0x1, 0x8cb0, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x8001, 0x483, 0x200, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x3}, {0x2, 0x2}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x6}, {0x7, 0xa}]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x7}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x6}, {0x0, 0xa}, {0x2}, {0x7, 0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x1, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0x1}, {0x4, 0x3}, {0x3, 0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x6}, {0x2, 0x7}, {0x6, 0x2}, {0x1}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0x6}, {}, {0x4, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0x24, 0x3, 0x12, 0x16, 0xc, 0x2, 0x6c, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x6, 0x6}, {0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x3}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x7}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x7}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x7}, {0x5, 0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x4, 0x7}, {0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x7}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x2}, {0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x4}, {0x4}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x6}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x8}, {0x6, 0x4}, {0x7, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0xa}, {0x4, 0x6}, {0x6, 0x2}, {0x3, 0x5}, {0x3}, {0x2}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x9}, {0x7}, {0x3, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x24, 0x60, 0x3, 0x16, 0x9, 0x12, 0xb, 0xb, 0x16, 0x1f, 0x1, 0xc, 0x6c, 0x5, 0x24, 0xc, 0x48, 0x6, 0x6c, 0x4, 0x60, 0x60, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x6, 0x8, 0x9, 0x1, 0x0, 0x2, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x7, 0x6, 0x5d1f, 0xd, 0x3, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x1b, 0x4, 0x4, 0x2, 0x2, 0x16, 0x5, 0x24, 0x46, 0x6c, 0x60, 0x7b, 0x6c]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x70, 0x1b, 0x2, 0xb, 0x2, 0x6c, 0x3, 0x36, 0x48, 0xb, 0x2, 0x1b, 0x24, 0x6, 0x2, 0x73, 0x1, 0x6c, 0x5, 0xc, 0x60, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf800, 0x5, 0x2, 0x1, 0x2, 0x10, 0x800, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0xa}, {0x6, 0x8}, {0x2, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x2, 0x4}, {0x7, 0x7}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd32b, 0x8000, 0x3, 0x7, 0x401, 0x6, 0xc, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1ff, 0x0, 0x510, 0x1, 0x9, 0x52a0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xfffc, 0x2, 0xa, 0xc64, 0x10, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xe, 0x855f, 0x5, 0x93b9, 0xbaf2, 0x5, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x9, 0x1, 0xfffd, 0x8, 0xca, 0xb8b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9511, 0x9, 0x3ea, 0x81, 0x3, 0x3, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x6, 0x4, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x9, 0x2, 0x48, 0x6, 0x5, 0x1, 0xc, 0x12, 0x6, 0x18, 0x9, 0x36, 0x2, 0x2, 0x5, 0x3, 0x9, 0x36, 0x30, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x4, 0x5, 0xf, 0x7, 0x6, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x1}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x7, 0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x6}, {0x7}, {0x4, 0x3}, {0x1}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x4}, {}, {0x4, 0x2}, {0x1, 0x3}, {0x5}, {0x5}, {0x3, 0x9}, {0x1}, {0x2}, {0x0, 0x6}, {0x7, 0x2}, {0x3, 0x7}, {0x3}, {0x6, 0x3}, {0x4, 0x4}, {0x4, 0x9}, {0x3, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x6}, {0x2, 0x2}, {0x1}, {0x1, 0x2}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe4, 0xff, 0x6, 0x40, 0x3, 0x200, 0x9, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x0, 0x2, 0x8c, 0x2, 0x0, 0xa]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x4, 0xffc0, 0xfff6, 0x2, 0xa5, 0x7]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x2, 0x6}, {0x6, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbbd, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x36, 0x30, 0x6c, 0x12, 0x1b, 0x0, 0x30, 0x48, 0x60, 0x9, 0x12, 0x60, 0x12, 0x6, 0x48, 0x6, 0x36, 0x60, 0x18, 0x48, 0x5, 0x2, 0x9, 0x3, 0x24, 0x6c, 0x30, 0x30, 0x9, 0x60, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xfb24, 0x3, 0x7, 0x8001, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x24, 0x6c, 0xc, 0x36, 0x9, 0xb, 0xc, 0x30, 0x30, 0xb, 0x9, 0x4, 0x48, 0x4, 0xb, 0x4, 0xb, 0x6, 0x24, 0x12, 0x6c, 0xb]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x48, 0x4, 0x16, 0x0, 0x60, 0x2, 0x18, 0x30, 0x2, 0x16, 0x9, 0x1b, 0x1, 0x1b, 0x30, 0x18, 0x2, 0x30, 0x0, 0x3, 0x60, 0x65, 0x36, 0x6c, 0x48, 0x60, 0x5, 0x4, 0x36]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x7a, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbba, 0x3, 0x0, 0x8, 0x7615, 0x8f55, 0xe016, 0xb5]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x16, 0x72, 0x1, 0x6, 0xc, 0x1a, 0x3, 0x24, 0x1, 0x48, 0x16, 0x6, 0x9, 0xb, 0xb, 0x16, 0x2, 0x1, 0x12, 0x2, 0x0, 0x1, 0x30, 0x1, 0x24, 0x24, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x0, 0xf, 0x1e, 0xf68, 0x6, 0x8e8]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x4}, {0x1, 0x9}, {0x5}, {0x7}, {0x1}, {0x5, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0x4}, {0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x7, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x7}, {0x3, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x5, 0x7}, {0x5, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x8}, {0x1}, {0x3}, {0x0, 0x7}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x5, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x4, 0x4}, {0x2}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x8}, {0x2, 0x4}, {0x4, 0x2}, {0x5, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x6}, {0x6, 0x5}, {0x3, 0x7}, {}, {0x3, 0x4}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x4, 0x1, 0x400, 0x5, 0xb28, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9877, 0x8, 0xfff8, 0x3, 0x1, 0x1000, 0x6, 0x7]}}]}]}]}, 0x870}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4, 0x3f}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000380)=0x8, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r13, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 143.896817ms ago: executing program 38 (id=5370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402178006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r11, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc77}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="da358266647d"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000848) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, &(0x7f0000000080)=0x400, 0x4) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) (async) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) sendmsg$inet(r9, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf251000000008000600", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08005a0100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000700ac1414bb08000c000000000008000400ffffffff06000b001800000008000c000200000008000700640101021400050020010000000000000090c47bc5ae86b20d1f81c97bd00000000000000008000200050000000800020003000000"], 0x68}}, 0x20000040) 91.664262ms ago: executing program 39 (id=5369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{}, [@dev, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @private}, @local, @mcast2, @empty, @mcast2, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @local, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @empty, @mcast2, @mcast2, @private0, @private2, @mcast2, @dev, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @local, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @empty, @local, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev]}}}]}, 0x42c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd28, 0x25dfdc10, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r14, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r15, 0x300, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x24004801) 0s ago: executing program 40 (id=5373): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "86217d", 0x0, 0x16, 0x1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x4, 0x0, 0x1, 0x5, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x41}, @loopback]}], "adf547df61646d1fb5e483d007b6b3de48937b6650068ddf7f0e0e8dbb54b5f4c05bdf223949f1b53c8986298bc49f2af06f1618380574109b0aa9a245976e07330806a1c9594ee16ef7dda705eeee8616405f5117273306aca561cb4a4268d7dc7a8eb3ca41b4a8818be8311490f5737e66bb5571e0eadcfdafb78ce72fd6c2090fb5d48c985962eab70ab8db44c7609aaf784f33c8894365335bf8b6576c395cdf884665a9f0843a6aa0a4fb847c34cf17fe6fcc01edcd"}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) kernel console output (not intermixed with test programs): 7.3523': attribute type 4 has an invalid length. [ 434.749807][T18987] x_tables: unsorted underflow at hook 4 [ 435.354158][T19029] syzkaller0: entered promiscuous mode [ 435.361753][T19029] syzkaller0: entered allmulticast mode [ 435.392515][T19029] __nla_validate_parse: 3 callbacks suppressed [ 435.392537][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3539'. [ 435.501816][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3542'. [ 435.513385][T19037] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3542'. [ 435.576593][T18985] delete_channel: no stack [ 435.771150][T19052] netlink: 'syz.7.3549': attribute type 3 has an invalid length. [ 435.805689][T19052] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3549'. [ 436.177438][T19073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.522933][T19089] netlink: 'syz.7.3560': attribute type 1 has an invalid length. [ 436.583068][T19089] bond7: entered promiscuous mode [ 436.607658][T19089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.639853][T19095] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 436.671333][T19089] bond7: (slave bridge7): making interface the new active one [ 436.679419][T19089] bridge7: entered promiscuous mode [ 436.685574][T19089] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 436.699324][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3562'. [ 436.890394][T19102] tipc: Enabled bearer , priority 0 [ 437.039750][T19102] syzkaller0: entered promiscuous mode [ 437.046136][T19102] syzkaller0: entered allmulticast mode [ 437.057041][T19113] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3567'. [ 437.057265][T19102] tipc: Resetting bearer [ 437.072749][T19114] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3567'. [ 437.095076][T19101] tipc: Resetting bearer [ 437.160341][T19119] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3568'. [ 437.557252][T19134] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 437.964812][T19136] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.3573'. [ 437.974286][T19136] openvswitch: netlink: Missing key (keys=40, expected=100) [ 438.050182][T19139] netlink: 'syz.7.3574': attribute type 8 has an invalid length. [ 439.199039][T19101] tipc: Disabling bearer [ 439.215118][ T5884] tipc: Node number set to 2442446025 [ 439.439566][T19159] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3581'. [ 439.890441][T19191] nbd: must specify at least one socket [ 439.900736][T19191] nbd: couldn't find a device at index 0 [ 440.253837][T19211] unsupported nlmsg_type 40 [ 440.369306][T19206] netlink: 'syz.2.3592': attribute type 3 has an invalid length. [ 440.472021][T19222] __nla_validate_parse: 7 callbacks suppressed [ 440.472043][T19222] netlink: 192 bytes leftover after parsing attributes in process `syz.7.3596'. [ 440.605261][T19228] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3599'. [ 440.767115][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3601'. [ 440.786395][T19234] xfrm1: entered promiscuous mode [ 440.793555][T19234] xfrm1: entered allmulticast mode [ 441.177350][T19254] syzkaller0: entered promiscuous mode [ 441.191434][T19254] syzkaller0: entered allmulticast mode [ 441.241655][T19252] netlink: 'syz.5.3602': attribute type 4 has an invalid length. [ 441.277293][T19264] team_slave_0: entered promiscuous mode [ 441.283134][T19264] team_slave_1: entered promiscuous mode [ 441.298038][T19264] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 441.310571][T19257] netlink: 'syz.5.3602': attribute type 4 has an invalid length. [ 441.330594][T19273] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 441.346207][T19264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3608'. [ 441.563635][ T44] IPVS: starting estimator thread 0... [ 441.569714][T19289] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 441.677978][T19291] IPVS: using max 24 ests per chain, 57600 per kthread [ 441.694747][T19296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3611'. [ 441.839226][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3614'. [ 442.126616][T19296] vcan0: entered allmulticast mode [ 443.312393][T19318] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.3619'. [ 443.358705][T19323] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3621'. [ 443.408497][T19331] 8021q: VLANs not supported on gre0 [ 443.625339][T19342] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 443.626958][T19340] netlink: 284 bytes leftover after parsing attributes in process `syz.7.3628'. [ 444.106745][T19376] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3638'. [ 444.358696][T19389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.372198][T19389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.530665][T19389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.558612][T19389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.713522][T19389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.748095][T19389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.967662][T19389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.987216][T19389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.323888][T17440] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.347144][T17440] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.369402][T17440] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.377946][T17440] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.415168][T17440] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.443894][T17440] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.480831][T17440] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.503325][T17440] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.524689][T19429] __nla_validate_parse: 1 callbacks suppressed [ 445.524712][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3651'. [ 445.588173][T19429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.671262][T19429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.737600][T19432] lo speed is unknown, defaulting to 1000 [ 445.901836][T19440] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 446.240917][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3660'. [ 446.495455][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3662'. [ 446.691552][T19477] netlink: 212360 bytes leftover after parsing attributes in process `syz.7.3667'. [ 446.764802][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3665'. [ 447.141401][T19502] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 447.166764][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3676'. [ 447.181640][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3675'. [ 447.201247][T19502] netlink: zone id is out of range [ 447.202118][T19504] syzkaller0: entered promiscuous mode [ 447.209871][T19502] netlink: del zone limit has 4 unknown bytes [ 447.212332][T19504] syzkaller0: entered allmulticast mode [ 447.261348][T19502] IPVS: length: 239 != 24 [ 447.360651][T19504] netlink: 'syz.7.3677': attribute type 2 has an invalid length. [ 447.367242][T19507] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3675'. [ 447.369333][T19504] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3677'. [ 447.418217][T19504] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3677'. [ 447.811290][T19528] netlink: 'syz.8.3681': attribute type 1 has an invalid length. [ 447.840049][T19528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.868553][T19528] netlink: 'syz.8.3681': attribute type 10 has an invalid length. [ 447.902277][T19528] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 448.145698][T19559] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 448.321173][T19563] syzkaller0: entered promiscuous mode [ 448.327071][T19563] syzkaller0: entered allmulticast mode [ 448.472203][T19573] netlink: 'syz.5.3693': attribute type 4 has an invalid length. [ 448.525962][T19573] netlink: 'syz.5.3693': attribute type 4 has an invalid length. [ 448.968579][T19600] netlink: 'syz.7.3704': attribute type 10 has an invalid length. [ 449.017455][T19600] team0: Device veth1_macvtap failed to register rx_handler [ 449.684086][T19648] sctp: [Deprecated]: syz.7.3714 (pid 19648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.684086][T19648] Use struct sctp_sack_info instead [ 449.822512][T19654] ksmbd: Unknown IPC event: 3, ignore. [ 449.984467][T19668] netlink: 'syz.7.3723': attribute type 22 has an invalid length. [ 450.003722][T19660] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20002 [ 450.004642][T19668] netlink: 'syz.7.3723': attribute type 1 has an invalid length. [ 450.032255][T19663] syzkaller0: entered promiscuous mode [ 450.147636][T19677] netlink: 'syz.2.3725': attribute type 1 has an invalid length. [ 451.933214][T19678] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 451.934143][T19677] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 452.338203][T19730] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 452.348998][T19734] __nla_validate_parse: 13 callbacks suppressed [ 452.349016][T19734] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3743'. [ 452.475955][T19734] bond8 (unregistering): Released all slaves [ 452.567562][T19730] bond3: entered promiscuous mode [ 452.573689][T19730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.600646][T19731] bond3: (slave bridge4): making interface the new active one [ 452.608433][T19731] bridge4: entered promiscuous mode [ 452.609138][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3747'. [ 452.642255][T19731] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 452.716006][T19759] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3749'. [ 452.820464][T19763] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3750'. [ 452.823312][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3751'. [ 453.509626][T19815] openvswitch: netlink: Message has 8 unknown bytes. [ 453.528513][T19815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.689195][T19826] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 453.994101][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3773'. [ 454.012933][T19846] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3774'. [ 454.058376][T19846] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3774'. [ 454.084145][T19846] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3774'. [ 454.217634][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3777'. [ 454.299868][T19861] netlink: 'syz.2.3779': attribute type 1 has an invalid length. [ 454.408844][T19864] syzkaller1: entered promiscuous mode [ 454.414476][T19864] syzkaller1: entered allmulticast mode [ 454.925456][T19905] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 454.952287][T19905] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 455.714854][T19952] macvlan0: left promiscuous mode [ 456.009448][T19957] nbd2: detected capacity change from 0 to 127 [ 456.022628][ T5837] block nbd2: Receive control failed (result -32) [ 456.161665][T19970] nbd: illegal input index -8454144 [ 456.306244][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.356174][T19980] syzkaller0: entered promiscuous mode [ 456.375878][T19980] syzkaller0: entered allmulticast mode [ 456.426710][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.520465][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.548653][ T12] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.633081][T19994] netlink: 'syz.7.3814': attribute type 6 has an invalid length. [ 456.654213][T19998] netlink: 'syz.8.3815': attribute type 2 has an invalid length. [ 456.703853][ T12] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.713481][ T12] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.722025][ T12] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.768203][ T12] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.797594][ T12] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.807074][ T12] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.824862][ T12] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.833390][ T12] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.842036][ T12] netdevsim netdevsim4 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.874525][ T12] netdevsim netdevsim4 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.888013][ T12] netdevsim netdevsim4 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.897003][ T12] netdevsim netdevsim4 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.108640][T20018] netlink: 'syz.6.3821': attribute type 1 has an invalid length. [ 457.239790][T20027] ip6_vti0: entered promiscuous mode [ 457.545427][T20041] __nla_validate_parse: 24 callbacks suppressed [ 457.545447][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3829'. [ 457.594757][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3829'. [ 457.616173][T20042] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 457.790136][T20057] ipt_REJECT: TCP_RESET invalid for non-tcp [ 457.808455][T20056] ipt_REJECT: TCP_RESET invalid for non-tcp [ 457.859759][T20064] sctp: [Deprecated]: syz.8.3833 (pid 20064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.859759][T20064] Use struct sctp_sack_info instead [ 458.122417][T20073] netlink: 'syz.8.3835': attribute type 10 has an invalid length. [ 458.175915][T20077] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3838'. [ 458.286234][T20087] netlink: 'syz.8.3841': attribute type 8 has an invalid length. [ 458.381527][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.509525][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3842'. [ 458.527736][T20094] hsr_slave_0: left promiscuous mode [ 458.537444][T20094] hsr_slave_1: left promiscuous mode [ 458.634125][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3847'. [ 458.643325][T20105] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.418527][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.473210][T20139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 459.510728][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3860'. [ 459.537300][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3857'. [ 459.821442][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3863'. [ 459.843025][T20150] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3863'. [ 459.872416][T20150] nbd: couldn't find a device at index 0 [ 459.909744][T20150] xt_SECMARK: invalid mode: 9 [ 460.058380][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.257127][T20168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.334313][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3868'. [ 460.351666][T20171] bond0: entered promiscuous mode [ 460.356856][T20171] bond_slave_0: entered promiscuous mode [ 460.364566][T20171] bond_slave_1: entered promiscuous mode [ 460.387904][T20171] bridge_slave_1: entered promiscuous mode [ 460.395531][T20171] bond0: left promiscuous mode [ 460.417905][T20171] bond_slave_0: left promiscuous mode [ 460.423776][T20171] bond_slave_1: left promiscuous mode [ 460.438517][T20171] bridge_slave_1: left promiscuous mode [ 460.464948][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.498336][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.647529][T20216] tipc: Started in network mode [ 461.656083][T20216] tipc: Node identity ac14140f, cluster identity 4711 [ 461.679404][T20216] tipc: New replicast peer: 255.255.255.255 [ 461.686688][T20216] tipc: Enabled bearer , priority 10 [ 461.997353][T20229] Unsupported ieee802154 address type: 0 [ 462.538516][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.815031][ T5884] tipc: Node number set to 2886997007 [ 462.971284][T20263] __nla_validate_parse: 2 callbacks suppressed [ 462.971303][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3898'. [ 463.021324][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3898'. [ 463.157389][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.578510][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.721088][T20295] netlink: 'syz.8.3907': attribute type 21 has an invalid length. [ 463.729547][T20295] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3907'. [ 463.871415][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.880407][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.889497][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.933677][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.978229][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.981327][T20308] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3908'. [ 464.001151][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.018239][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.026603][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.046534][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3911'. [ 464.048941][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.067573][T20303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.109084][T20315] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3912'. [ 464.238593][T20321] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3914'. [ 464.502318][T20331] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 464.602386][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3920'. [ 464.881051][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3927'. [ 464.907422][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3928'. [ 464.913724][T20361] vxcan0: entered allmulticast mode [ 465.367374][T20386] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 465.420491][T20380] macvlan2: entered promiscuous mode [ 465.425921][T20380] macvlan2: entered allmulticast mode [ 465.437132][T20380] bond7: entered promiscuous mode [ 465.451388][T20380] bridge9: entered promiscuous mode [ 465.478935][T20380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 465.501280][T20380] bond7: left promiscuous mode [ 465.506207][T20380] bridge9: left promiscuous mode [ 466.552460][T20457] syzkaller0: entered promiscuous mode [ 466.560714][T20457] syzkaller0: entered allmulticast mode [ 466.793468][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.804587][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.822123][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.830843][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.838832][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.996676][T20471] lo speed is unknown, defaulting to 1000 [ 467.094441][ T13] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.109497][ T13] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.139693][T20483] netlink: 'syz.2.3963': attribute type 4 has an invalid length. [ 467.186878][T20483] netlink: 'syz.2.3963': attribute type 4 has an invalid length. [ 467.210016][ T13] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.238250][ T13] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.327232][ T13] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.339262][ T13] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.358670][T20471] wlan0 speed is unknown, defaulting to 1000 [ 467.433807][ T13] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.451729][ T13] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.683111][ T8527] netdevsim netdevsim6 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.773976][T17440] netdevsim netdevsim6 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.814339][ T12] netdevsim netdevsim6 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.879794][ T12] netdevsim netdevsim6 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.906761][T20471] chnl_net:caif_netlink_parms(): no params data found [ 468.054413][T20519] __nla_validate_parse: 5 callbacks suppressed [ 468.054435][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3975'. [ 468.079796][ T13] bridge_slave_1: left allmulticast mode [ 468.086031][ T13] bridge_slave_1: left promiscuous mode [ 468.095626][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.109710][ T13] bridge_slave_0: left allmulticast mode [ 468.116668][ T13] bridge_slave_0: left promiscuous mode [ 468.123252][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.694644][ T13] dvmrp0 (unregistering): left allmulticast mode [ 468.938470][ T5842] Bluetooth: hci1: command tx timeout [ 468.962405][ T13] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 468.970651][ T13] bridge3 (unregistering): left promiscuous mode [ 469.222713][ T13] bond7 (unregistering): (slave bridge9): Releasing backup interface [ 469.258443][ T24] net_ratelimit: 67 callbacks suppressed [ 469.258460][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.376575][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.388244][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.400760][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 469.411455][ T13] bond0 (unregistering): Released all slaves [ 469.427461][ T13] bond1 (unregistering): Released all slaves [ 469.442444][ T13] bond2 (unregistering): Released all slaves [ 469.563432][ T13] bond3 (unregistering): Released all slaves [ 469.578876][ T13] bond4 (unregistering): (slave lo): Releasing backup interface [ 469.587039][ T13] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 469.599892][ T13] bond4 (unregistering): Released all slaves [ 469.716102][ T13] bond5 (unregistering): (slave veth7): Releasing active interface [ 469.726216][ T13] bond5 (unregistering): Released all slaves [ 469.740888][ T13] bond6 (unregistering): Released all slaves [ 469.754321][ T13] bond7 (unregistering): Released all slaves [ 469.830860][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.845428][T20548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.054308][ T13] tipc: Disabling bearer [ 470.127535][ T13] tipc: Left network mode [ 470.225665][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3988'. [ 470.243369][T20471] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.251018][T20471] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.258858][T20471] bridge_slave_0: entered allmulticast mode [ 470.267159][T20471] bridge_slave_0: entered promiscuous mode [ 470.291489][T20575] bond4: option mode: unable to set because the bond device is up [ 470.328743][T20471] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.335976][T20471] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.346343][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3988'. [ 470.355960][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3988'. [ 470.365415][T20471] bridge_slave_1: entered allmulticast mode [ 470.376347][T20471] bridge_slave_1: entered promiscuous mode [ 470.402980][T20576] netlink: 'syz.2.3988': attribute type 10 has an invalid length. [ 470.498622][T20576] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.522438][T20576] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.529878][T20576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.542657][T20576] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 470.559600][T20575] bridge0: port 2(syz_tun) entered blocking state [ 470.567898][T20575] bridge0: port 2(syz_tun) entered disabled state [ 470.582165][T20575] syz_tun: entered allmulticast mode [ 470.595487][T20575] syz_tun: entered promiscuous mode [ 470.603387][T20575] bridge0: port 2(syz_tun) entered blocking state [ 470.610062][T20575] bridge0: port 2(syz_tun) entered forwarding state [ 470.671494][T20471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.766000][T20471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.873563][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.993994][ T5884] wlan0 speed is unknown, defaulting to 1000 [ 471.001170][ T5884] infiniband syz0: ib_query_port failed (-19) [ 471.025973][ T5842] Bluetooth: hci1: command tx timeout [ 471.042069][T20471] team0: Port device team_slave_0 added [ 471.051731][T20471] team0: Port device team_slave_1 added [ 471.146153][T20471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.156533][T20471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.195625][T20471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.221655][T20471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.240934][T20471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.314394][T20471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.599740][T20471] hsr_slave_0: entered promiscuous mode [ 471.606693][T20471] hsr_slave_1: entered promiscuous mode [ 471.690533][ T13] hsr_slave_0: left promiscuous mode [ 471.697002][ T13] hsr_slave_1: left promiscuous mode [ 471.704291][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.713093][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.735626][ T13] veth1_macvtap: left promiscuous mode [ 471.742322][ T13] veth1_vlan: left promiscuous mode [ 471.748169][ T13] veth0_vlan: left promiscuous mode [ 471.898777][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.040823][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4009'. [ 472.148744][ T13] vlan1 (unregistering): left allmulticast mode [ 472.155264][ T13] veth0_vlan (unregistering): left allmulticast mode [ 472.301521][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.344116][T20652] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4011'. [ 472.459366][ T13] team0 (unregistering): Port device team_slave_1 removed [ 472.505690][ T13] team0 (unregistering): Port device team_slave_0 removed [ 472.919864][T20631] 8021q: VLANs not supported on gre0 [ 472.938893][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.103845][ T5837] Bluetooth: hci1: command tx timeout [ 473.112144][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 473.147021][T20658] bond4: option mode: unable to set because the bond device is up [ 473.195249][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 473.229625][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4014'. [ 473.246283][T20659] netlink: 'syz.2.4014': attribute type 10 has an invalid length. [ 473.299538][T20666] syzkaller0: entered promiscuous mode [ 473.307756][T20666] syzkaller0: entered allmulticast mode [ 473.325051][T20659] bridge0: port 2(syz_tun) entered disabled state [ 473.332018][T20659] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.415703][T20663] netlink: 11562 bytes leftover after parsing attributes in process `syz.7.4016'. [ 473.552327][T20471] netdevsim netdevsim6 eth20 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.583697][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.607121][ T13] IPVS: stop unused estimator thread 0... [ 473.708300][T20471] netdevsim netdevsim6 eth19 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.955200][T20471] netdevsim netdevsim6 eth18 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.979329][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.017549][T20696] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4024'. [ 474.072731][T20471] netdevsim netdevsim6 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.073729][T20709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'. [ 474.096801][T20707] syzkaller0: entered promiscuous mode [ 474.098128][T20709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4028'. [ 474.103927][T20707] syzkaller0: entered allmulticast mode [ 474.180836][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4024'. [ 475.018210][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.178012][ T5837] Bluetooth: hci1: command tx timeout [ 475.339226][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.855357][T20713] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4024'. [ 476.060883][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.072731][T20721] netlink: 'syz.5.4032': attribute type 10 has an invalid length. [ 476.124625][T20721] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 476.301364][T20471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.344663][T20735] netlink: 'syz.8.4039': attribute type 5 has an invalid length. [ 476.357317][T20471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.367661][T20735] netlink: 140 bytes leftover after parsing attributes in process `syz.8.4039'. [ 476.406865][T20471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 476.422876][T20471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 476.640345][T20756] netlink: zone id is out of range [ 476.666336][T20756] netlink: zone id is out of range [ 476.684059][T20756] netlink: zone id is out of range [ 476.699756][T20471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.718121][T20756] netlink: get zone limit has 4 unknown bytes [ 476.727167][T20471] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.765887][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.773474][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.801046][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.808464][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.100356][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.213612][T20471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.625471][T20471] veth0_vlan: entered promiscuous mode [ 477.681489][T20471] veth1_vlan: entered promiscuous mode [ 477.808746][T20471] veth0_macvtap: entered promiscuous mode [ 477.829038][T20471] veth1_macvtap: entered promiscuous mode [ 477.889190][T20471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.915373][T20471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.952938][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.986602][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.009901][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.043346][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.139955][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.228235][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.252823][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.317343][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.329525][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.375098][T20824] __nla_validate_parse: 1 callbacks suppressed [ 478.375119][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4057'. [ 478.389218][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.825446][T20854] bond5 (unregistering): Released all slaves [ 478.991515][T20864] syzkaller0: refused to change device tx_queue_len [ 479.236440][T20881] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.435422][T20893] netlink: 'syz.6.4075': attribute type 1 has an invalid length. [ 479.435494][T20892] netlink: 'syz.2.4076': attribute type 9 has an invalid length. [ 479.445397][T20893] netlink: 'syz.6.4075': attribute type 3 has an invalid length. [ 479.460881][T20893] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4075'. [ 479.544986][T20896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4077'. [ 479.605757][T20852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.618181][T20852] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 479.649342][T20899] bridge5: entered promiscuous mode [ 479.654796][T20899] bridge5: entered allmulticast mode [ 479.658766][T20852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 479.665045][T20899] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 479.672971][T20852] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 479.715324][T20899] bond5 (unregistering): Released all slaves [ 479.875434][T20852] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 479.882595][T20852] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 480.013651][T20914] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4084'. [ 480.106641][T20852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.134066][T20852] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 480.155977][T20917] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 480.170302][T20917] bond5 (unregistering): Released all slaves [ 480.220813][T11117] net_ratelimit: 1 callbacks suppressed [ 480.220828][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.553820][T20934] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4091'. [ 480.841027][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4095'. [ 481.078590][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.090705][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.100814][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.110484][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.118827][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.136404][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 481.144588][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 481.153465][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.163364][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.179705][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.226212][T20951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 481.268464][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.315342][T20950] lo speed is unknown, defaulting to 1000 [ 481.418288][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.430051][T20970] No such timeout policy "syz0" [ 481.449540][T20970] sctp: [Deprecated]: syz.6.4101 (pid 20970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.449540][T20970] Use struct sctp_sack_info instead [ 481.496975][T20970] sctp: [Deprecated]: syz.6.4101 (pid 20970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.496975][T20970] Use struct sctp_sack_info instead [ 481.609083][T20964] siw: device registration error -23 [ 481.699609][T20978] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4104'. [ 481.881189][T20988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4108'. [ 481.911842][T20990] netlink: 'syz.6.4109': attribute type 11 has an invalid length. [ 481.920062][T20990] netlink: 'syz.6.4109': attribute type 11 has an invalid length. [ 481.928487][T20990] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4109'. [ 481.975356][T20984] tipc: Enabled bearer , priority 0 [ 481.992749][T20984] syzkaller0: entered allmulticast mode [ 482.019318][T20950] chnl_net:caif_netlink_parms(): no params data found [ 482.188679][T21001] netlink: 'syz.8.4106': attribute type 4 has an invalid length. [ 482.229287][T20996] tipc: Resetting bearer [ 482.261241][T20984] netlink: 'syz.8.4106': attribute type 4 has an invalid length. [ 482.298376][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.317095][T20983] tipc: Resetting bearer [ 482.337487][T20983] tipc: Disabling bearer [ 482.481344][T21012] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4114'. [ 482.498830][T20950] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.506190][T20950] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.517061][T20950] bridge_slave_0: entered allmulticast mode [ 482.526069][T20950] bridge_slave_0: entered promiscuous mode [ 482.561460][T20950] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.575460][T20950] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.592774][T20950] bridge_slave_1: entered allmulticast mode [ 482.622299][T20950] bridge_slave_1: entered promiscuous mode [ 482.641074][T21014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 482.791395][T20950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.823671][T20950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.000298][T20950] team0: Port device team_slave_0 added [ 483.016249][T20950] team0: Port device team_slave_1 added [ 483.031964][T21032] netlink: 'syz.8.4120': attribute type 1 has an invalid length. [ 483.151739][T21032] bond5: entered promiscuous mode [ 483.159641][T21032] 8021q: adding VLAN 0 to HW filter on device bond5 [ 483.178420][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.243767][T21037] bond5: (slave bridge0): making interface the new active one [ 483.252645][T21037] bridge0: entered promiscuous mode [ 483.264205][T21037] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 483.267995][ T5842] Bluetooth: hci3: command tx timeout [ 483.285343][T21042] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 483.311421][T20950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.319286][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.346192][T20950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.346200][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.359473][T20950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.372775][T20950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.404640][T20950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.488564][T21053] xt_l2tp: missing protocol rule (udp|l2tpip) [ 483.552946][T20950] hsr_slave_0: entered promiscuous mode [ 483.566754][T20950] hsr_slave_1: entered promiscuous mode [ 483.589338][T20950] debugfs: 'hsr0' already exists in 'hsr' [ 483.595270][T20950] Cannot create hsr debugfs directory [ 483.596391][T21060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4129'. [ 483.637171][T21051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.771959][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'. [ 483.830765][T21073] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 483.863030][T21080] netlink: 'syz.6.4130': attribute type 2 has an invalid length. [ 484.064105][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4134'. [ 484.263361][T20950] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.277601][T20950] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.289223][T21095] syz.2.4136: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 484.314931][T21097] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4135'. [ 484.339277][T21095] CPU: 0 UID: 0 PID: 21095 Comm: syz.2.4136 Not tainted syzkaller #0 PREEMPT(full) [ 484.339317][T21095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.339330][T21095] Call Trace: [ 484.339338][T21095] [ 484.339348][T21095] dump_stack_lvl+0x189/0x250 [ 484.339382][T21095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.339405][T21095] ? __pfx__printk+0x10/0x10 [ 484.339432][T21095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.339478][T21095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.339509][T21095] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 484.339542][T21095] warn_alloc+0x214/0x310 [ 484.339568][T21095] ? stack_depot_save_flags+0x40/0x850 [ 484.339597][T21095] ? __pfx_warn_alloc+0x10/0x10 [ 484.339626][T21095] ? kasan_save_track+0x3e/0x80 [ 484.339648][T21095] ? __kasan_kmalloc+0x93/0xb0 [ 484.339674][T21095] ? xsk_setsockopt+0x4dc/0x8d0 [ 484.339692][T21095] ? do_sock_setsockopt+0x17c/0x1b0 [ 484.339716][T21095] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 484.339741][T21095] ? do_syscall_64+0xfa/0xf80 [ 484.339764][T21095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.339795][T21095] __vmalloc_node_range_noprof+0x125/0x12d0 [ 484.339856][T21095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 484.339887][T21095] ? __kasan_kmalloc+0x93/0xb0 [ 484.339920][T21095] vmalloc_user_noprof+0xad/0xf0 [ 484.339945][T21095] ? xskq_create+0xbf/0x170 [ 484.339968][T21095] xskq_create+0xbf/0x170 [ 484.339994][T21095] xsk_init_queue+0xb0/0x110 [ 484.340019][T21095] xsk_setsockopt+0x4dc/0x8d0 [ 484.340043][T21095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.340068][T21095] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.340100][T21095] ? aa_sock_opt_perm+0xff/0x1a0 [ 484.340124][T21095] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 484.340149][T21095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 484.340172][T21095] do_sock_setsockopt+0x17c/0x1b0 [ 484.340206][T21095] __x64_sys_setsockopt+0x13f/0x1b0 [ 484.340240][T21095] do_syscall_64+0xfa/0xf80 [ 484.340267][T21095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.340286][T21095] ? clear_bhb_loop+0x60/0xb0 [ 484.340310][T21095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.340328][T21095] RIP: 0033:0x7efcad58f749 [ 484.340347][T21095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.340364][T21095] RSP: 002b:00007efcae4ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 484.340386][T21095] RAX: ffffffffffffffda RBX: 00007efcad7e5fa0 RCX: 00007efcad58f749 [ 484.340400][T21095] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 484.340412][T21095] RBP: 00007efcad613f91 R08: 0000000000000004 R09: 0000000000000000 [ 484.340424][T21095] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.340436][T21095] R13: 00007efcad7e6038 R14: 00007efcad7e5fa0 R15: 00007fff56fe0b78 [ 484.340485][T21095] [ 484.340493][T21095] Mem-Info: [ 484.468276][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.660457][T21095] active_anon:3888 inactive_anon:0 isolated_anon:0 [ 484.660457][T21095] active_file:2826 inactive_file:40059 isolated_file:0 [ 484.660457][T21095] unevictable:768 dirty:101 writeback:0 [ 484.660457][T21095] slab_reclaimable:12137 slab_unreclaimable:143668 [ 484.660457][T21095] mapped:28898 shmem:1375 pagetables:1050 [ 484.660457][T21095] sec_pagetables:0 bounce:0 [ 484.660457][T21095] kernel_misc_reclaimable:0 [ 484.660457][T21095] free:1276907 free_pcp:18825 free_cma:0 [ 484.706772][T21095] Node 0 active_anon:15552kB inactive_anon:0kB active_file:11304kB inactive_file:160036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115592kB dirty:404kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14052kB pagetables:4048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.749950][T21095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.799494][T21095] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.830512][T21095] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 484.838324][T21095] Node 0 DMA32 free:1198796kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16452kB inactive_anon:0kB active_file:11304kB inactive_file:160036kB unevictable:1536kB writepending:404kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:56692kB local_pcp:32312kB free_cma:0kB [ 484.874929][T21095] lowmem_reserve[]: 0 0 0 0 0 [ 484.879875][T21095] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.944650][T21095] lowmem_reserve[]: 0 0 0 0 0 [ 484.966061][T21095] Node 1 Normal free:3892440kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18320kB local_pcp:7664kB free_cma:0kB [ 485.037966][T21095] lowmem_reserve[]: 0 0 0 0 0 [ 485.044148][T21095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 485.057894][T21095] Node 0 DMA32: 44*4kB (UE) 42*8kB (UE) 179*16kB (UE) 120*32kB (UME) 123*64kB (UME) 493*128kB (UME) 153*256kB (UM) 41*512kB (UM) 10*1024kB (UME) 7*2048kB (UME) 250*4096kB (UM) = 1186928kB [ 485.078823][T21095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.092049][T21095] Node 1 Normal: 170*4kB (U) 50*8kB (UME) 40*16kB (UME) 111*32kB (UME) 31*64kB (UME) 3*128kB (UME) 3*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3892440kB [ 485.119132][T21095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.139934][T21095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.179556][T21095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.199253][T20950] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.207859][T21095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.224916][T20950] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.227206][T21095] 47127 total pagecache pages [ 485.245701][T21095] 0 pages in swap cache [ 485.254039][T21095] Free swap = 124996kB [ 485.262335][T21095] Total swap = 124996kB [ 485.266706][T21095] 2097051 pages RAM [ 485.271492][T21095] 0 pages HighMem/MovableOnly [ 485.282034][T21095] 424280 pages reserved [ 485.286235][T21095] 0 pages cma reserved [ 485.341257][ T5842] Bluetooth: hci3: command tx timeout [ 485.449679][T20950] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.473347][T20950] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.499641][T11117] net_ratelimit: 1 callbacks suppressed [ 485.499660][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.514992][T21123] netlink: 'syz.5.4144': attribute type 12 has an invalid length. [ 485.606020][T20950] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.616619][T20950] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.650318][T21139] netlink: 'syz.2.4148': attribute type 8 has an invalid length. [ 485.722883][T21139] bond0: Device is already in use. [ 485.762247][T21147] netlink: 'syz.8.4150': attribute type 1 has an invalid length. [ 485.791380][T21147] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 486.339689][T21175] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4158'. [ 486.360131][T21175] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4158'. [ 486.542458][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.432541][ T5842] Bluetooth: hci3: command tx timeout [ 487.504940][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.583087][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.481689][T20950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 488.502404][T20950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 488.525490][T20950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 488.551974][T20950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 488.618320][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.710795][T20950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.752549][T20950] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.774969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.782242][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.817511][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.824753][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.983045][T21209] lo speed is unknown, defaulting to 1000 [ 489.498626][ T5842] Bluetooth: hci3: command tx timeout [ 489.529134][T20950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.658923][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.960962][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.997161][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.011136][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.021035][T21257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.442845][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4185'. [ 490.540793][ T5915] net_ratelimit: 3 callbacks suppressed [ 490.540816][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.562476][T20950] veth0_vlan: entered promiscuous mode [ 490.603920][T20950] veth1_vlan: entered promiscuous mode [ 490.637232][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4187'. [ 490.664776][T21284] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4188'. [ 490.687743][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4187'. [ 490.700639][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.713619][T20950] veth0_macvtap: entered promiscuous mode [ 490.751639][T20950] veth1_macvtap: entered promiscuous mode [ 490.814683][T20950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.854410][T20950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.878404][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4192'. [ 490.898994][ T3487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.928763][ T3487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.984820][T21301] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 491.014552][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4191'. [ 491.029855][ T3487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.133512][ T3487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.186209][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4195'. [ 491.212157][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'. [ 491.429119][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.442057][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.581755][T17439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.603187][T17439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.604824][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.674608][T21332] ÿÿÿÿÿÿ: renamed from lo (while UP) [ 491.738377][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.898663][T12224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.039804][T21355] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4210'. [ 492.132133][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4211'. [ 492.295599][T21367] erspan0: mtu less than device minimum [ 492.506909][T21381] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 492.568282][T21383] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 492.785425][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.809675][T12224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.866544][T21404] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 493.586242][T12224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.818504][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.913258][T21471] bond1 (unregistering): Released all slaves [ 494.208234][T21495] netlink: 'syz.8.4248': attribute type 1 has an invalid length. [ 494.270151][T21501] netlink: 'syz.5.4246': attribute type 30 has an invalid length. [ 494.331826][T21503] syzkaller0: entered allmulticast mode [ 494.445794][T21507] x_tables: duplicate underflow at hook 2 [ 495.334833][T21540] netlink: 'syz.6.4260': attribute type 2 has an invalid length. [ 495.898682][T12222] net_ratelimit: 2 callbacks suppressed [ 495.898703][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.945837][T21571] bridge5: entered promiscuous mode [ 495.952931][T21571] bridge5: entered allmulticast mode [ 496.126197][T21578] syzkaller0: entered promiscuous mode [ 496.139587][T21578] syzkaller0: entered allmulticast mode [ 496.475828][T21568] netlink: 'syz.6.4270': attribute type 1 has an invalid length. [ 496.492934][T21568] nbd: error processing sock list [ 496.522242][T21568] block nbd4: shutting down sockets [ 496.556892][T21584] nbd: socks must be embedded in a SOCK_ITEM attr [ 496.620908][T21589] tipc: New replicast peer: 255.255.255.255 [ 496.633721][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.644948][T21589] tipc: Enabled bearer , priority 10 [ 496.755171][T21595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.764491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.804849][T21595] __nla_validate_parse: 13 callbacks suppressed [ 496.804875][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'. [ 496.826728][T21598] netlink: 'syz.7.4276': attribute type 1 has an invalid length. [ 496.904030][T21600] IPv6: sit1: Disabled Multicast RS [ 496.945545][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.955635][T21600] sit1: entered allmulticast mode [ 497.014218][T21598] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4276'. [ 497.145415][T21601] bond1 (unregistering): Released all slaves [ 497.159803][T21617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.168632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.216918][T21620] Bluetooth: MGMT ver 1.23 [ 497.225258][T21620] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 497.533253][T21631] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4285'. [ 497.676073][T21640] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4286'. [ 497.978665][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.030458][T21647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'. [ 498.536647][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 498.550018][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 498.558578][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 498.566834][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 498.574790][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 498.633406][T21669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4294'. [ 498.762492][T21674] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4296'. [ 498.810517][T17439] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.833643][T17439] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.853713][T17439] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 498.889651][T21682] netlink: 'syz.2.4299': attribute type 13 has an invalid length. [ 498.899553][T21683] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4298'. [ 498.912484][T21682] gretap0: refused to change device tx_queue_len [ 498.921279][T21682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 498.944399][T21667] lo speed is unknown, defaulting to 1000 [ 498.961348][T17439] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.989119][T17439] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.003675][T17439] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 499.021883][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.090943][T17439] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.107886][T17439] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.128718][T17439] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 499.155427][T21691] netlink: 'syz.6.4302': attribute type 21 has an invalid length. [ 499.267061][T21691] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4302'. [ 499.312660][T17439] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.348040][T17439] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.378035][T17439] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 499.555483][ T182] IPVS: starting estimator thread 0... [ 499.659104][T21710] IPVS: using max 28 ests per chain, 67200 per kthread [ 499.744128][ T12] netdevsim netdevsim8 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.753999][T21714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4307'. [ 499.773444][ T12] netdevsim netdevsim8 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.796871][T21667] chnl_net:caif_netlink_parms(): no params data found [ 499.901578][ T8530] netdevsim netdevsim8 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.049968][T21727] syzkaller1: entered promiscuous mode [ 500.062164][T21730] SET target dimension over the limit! [ 500.065880][T21727] syzkaller1: entered allmulticast mode [ 500.109204][ T8528] netdevsim netdevsim8 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.428865][T17439] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 500.708683][ T5837] Bluetooth: hci4: command tx timeout [ 500.890533][T17439] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 500.898795][T17439] bridge0 (unregistering): left promiscuous mode [ 501.066534][T17439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.079748][T17439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.091109][T17439] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 501.098723][ T5884] net_ratelimit: 3 callbacks suppressed [ 501.098741][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.116779][T17439] bond0 (unregistering): Released all slaves [ 501.239402][T17439] bond1 (unregistering): Released all slaves [ 501.252793][T17439] bond2 (unregistering): Released all slaves [ 501.272936][T17439] bond3 (unregistering): Released all slaves [ 501.288822][T17439] bond4 (unregistering): Released all slaves [ 501.416489][T17439] bond5 (unregistering): Released all slaves [ 501.430257][T17439] bond6 (unregistering): Released all slaves [ 501.512182][T21747] tipc: Enabling of bearer rejected, failed to enable media [ 501.622678][T21761] tipc: Failed to obtain node identity [ 501.639458][T21761] tipc: Enabling of bearer rejected, failed to enable media [ 501.708485][T17439] 9: left promiscuous mode [ 501.736660][T21667] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.784033][T21667] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.809284][T21667] bridge_slave_0: entered allmulticast mode [ 501.841223][T21667] bridge_slave_0: entered promiscuous mode [ 501.873065][T17439] tipc: Disabling bearer [ 501.878748][T17439] tipc: Left network mode [ 501.883392][T21667] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.898310][T21667] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.915870][T21667] bridge_slave_1: entered allmulticast mode [ 501.928921][T21667] bridge_slave_1: entered promiscuous mode [ 502.032015][T21777] __nla_validate_parse: 5 callbacks suppressed [ 502.032038][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4323'. [ 502.099891][T21667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.107934][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4324'. [ 502.141664][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.188881][T21667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.347217][T21667] team0: Port device team_slave_0 added [ 502.377034][T21667] team0: Port device team_slave_1 added [ 502.390441][T12224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.573226][T21799] tc_dump_action: action bad kind [ 502.593215][T21667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.604281][T21667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.633257][T21667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.702606][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.733774][T21667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.742100][T21667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.772923][T21667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.788172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.798392][ T5837] Bluetooth: hci4: command tx timeout [ 502.858523][T21814] netlink: 'syz.6.4333': attribute type 10 has an invalid length. [ 502.910619][T21814] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 502.985027][T21816] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 503.011857][T21667] hsr_slave_0: entered promiscuous mode [ 503.039454][T21667] hsr_slave_1: entered promiscuous mode [ 503.046154][T21667] debugfs: 'hsr0' already exists in 'hsr' [ 503.053171][T21667] Cannot create hsr debugfs directory [ 503.179992][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.610363][T17439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.626029][T17439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.634788][T17439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.645549][T17439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.683046][T17439] team_slave_0: left promiscuous mode [ 503.688926][T17439] team_slave_1: left promiscuous mode [ 503.796218][T21839] nbd: socks must be embedded in a SOCK_ITEM attr [ 504.225365][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.351322][T17439] team0 (unregistering): Port device team_slave_1 removed [ 504.405337][T17439] team0 (unregistering): Port device team_slave_0 removed [ 504.858353][ T5837] Bluetooth: hci4: command tx timeout [ 505.043173][T21667] netdevsim netdevsim8 eth20 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.252469][T21667] netdevsim netdevsim8 eth19 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.275651][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.361523][T21667] netdevsim netdevsim8 eth18 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.373221][T17439] IPVS: stop unused estimator thread 0... [ 505.462529][T21667] netdevsim netdevsim8 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.488077][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4355'. [ 505.546852][T21895] netlink: 'syz.6.4356': attribute type 21 has an invalid length. [ 505.572849][T21895] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4356'. [ 505.681888][T21895] netlink: 'syz.6.4356': attribute type 4 has an invalid length. [ 505.698195][T21895] netlink: 'syz.6.4356': attribute type 5 has an invalid length. [ 505.707825][T21895] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4356'. [ 505.754018][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.870073][T21667] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 505.911059][T21667] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 505.918223][T21908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 505.950929][T21667] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 505.988432][T21667] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 506.075287][T21921] netlink: 'syz.7.4362': attribute type 1 has an invalid length. [ 506.116440][T21921] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4362'. [ 506.300401][ T182] net_ratelimit: 9 callbacks suppressed [ 506.300421][ T182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.335685][T21667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.406842][T21667] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.446102][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.453468][ T8532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.495323][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.502754][ T8532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.514435][T21938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'. [ 506.534051][T21939] IPVS: set_ctl: invalid protocol: 10 10.1.1.2:20002 [ 506.585377][T21667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.865299][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.938033][ T5837] Bluetooth: hci4: command tx timeout [ 507.066319][T21667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.341742][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.363284][T21966] x_tables: duplicate entry at hook 3 [ 507.372347][T21966] syzkaller0: entered promiscuous mode [ 507.382006][T21966] syzkaller0: entered allmulticast mode [ 507.821070][T21667] veth0_vlan: entered promiscuous mode [ 507.860693][T21667] veth1_vlan: entered promiscuous mode [ 507.923683][T21984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.947385][T21986] lo speed is unknown, defaulting to 1000 [ 507.978820][T21667] veth0_macvtap: entered promiscuous mode [ 507.985165][T21984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.097814][T21998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.107070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.203655][T21667] veth1_macvtap: entered promiscuous mode [ 508.236881][T21667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.262269][T21667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.293319][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.313223][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.407458][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4384'. [ 508.430671][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.777036][T22013] sctp: [Deprecated]: syz.6.4385 (pid 22013) Use of int in max_burst socket option. [ 508.777036][T22013] Use struct sctp_assoc_value instead [ 508.846244][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.847159][T12222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.358751][T22036] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4391'. [ 509.359866][T12221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.376024][T22036] openvswitch: netlink: Missing key (keys=40, expected=100) [ 509.638602][T22041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4393'. [ 509.807105][T22047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4395'. [ 509.846966][T22053] netlink: 'syz.6.4396': attribute type 16 has an invalid length. [ 509.859272][T22053] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4396'. [ 509.907002][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.918112][T22051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.932632][ T8532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.951613][ T8532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.091940][ T8532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.102996][ T8532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.160642][T22062] syzkaller1: entered promiscuous mode [ 510.173737][T22062] syzkaller1: entered allmulticast mode [ 510.453071][T22082] vlan2: entered promiscuous mode [ 510.472118][T22082] bridge0: entered promiscuous mode [ 510.481118][T22080] netlink: 'syz.6.4404': attribute type 8 has an invalid length. [ 510.650587][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4409'. [ 510.707009][T22096] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4410'. [ 510.727515][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4410'. [ 510.965055][T22114] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4413'. [ 511.059800][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4414'. [ 511.070895][T22126] Cannot find add_set index 2 as target [ 511.076735][T22126] Cannot find add_set index 2 as target [ 511.091465][T22126] Cannot find add_set index 2 as target [ 511.104105][T22126] Cannot find add_set index 2 as target [ 511.125392][T22126] Cannot find add_set index 2 as target [ 511.163020][T22126] Cannot find add_set index 2 as target [ 511.187298][T22126] Cannot find add_set index 2 as target [ 511.205062][T22126] Cannot find add_set index 2 as target [ 511.228411][T22126] Cannot find add_set index 2 as target [ 511.234585][T22131] bond0: entered promiscuous mode [ 511.239975][T22126] Cannot find add_set index 2 as target [ 511.246531][T22131] bond_slave_0: entered promiscuous mode [ 511.258055][T22131] bond_slave_1: entered promiscuous mode [ 511.275336][T22131] bridge_slave_1: entered promiscuous mode [ 511.292098][T22131] bond0: left promiscuous mode [ 511.296928][T22131] bond_slave_0: left promiscuous mode [ 511.335081][T22131] bond_slave_1: left promiscuous mode [ 511.348487][T22131] bridge_slave_1: left promiscuous mode [ 511.410196][T22138] bridge0: entered allmulticast mode [ 511.568511][T22148] netlink: 'syz.7.4421': attribute type 1 has an invalid length. [ 511.721157][T22148] bond1: (slave bridge1): making interface the new active one [ 511.772971][T22148] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 511.973364][T22167] tipc: Started in network mode [ 512.007170][T22167] tipc: Node identity ac14140f, cluster identity 4711 [ 512.018485][T22167] tipc: New replicast peer: 255.255.255.255 [ 512.025506][T22167] tipc: Enabled bearer , priority 10 [ 512.061125][T22167] netlink: 'syz.2.4427': attribute type 1 has an invalid length. [ 512.194472][T22167] bond6: entered promiscuous mode [ 512.214742][T22167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 512.313034][T22172] bond6: (slave bridge11): making interface the new active one [ 512.331846][T22172] bridge11: entered promiscuous mode [ 512.350983][T22172] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 512.415853][T22136] netlink: 'syz.5.4418': attribute type 10 has an invalid length. [ 513.162025][T12224] tipc: Node number set to 2886997007 [ 513.258156][T22239] netlink: 'syz.7.4447': attribute type 5 has an invalid length. [ 513.294375][T22234] syzkaller1: entered allmulticast mode [ 513.327194][T22241] netlink: 'syz.7.4447': attribute type 5 has an invalid length. [ 513.344542][T22238] bond0: entered promiscuous mode [ 513.352069][T22238] bond_slave_0: entered promiscuous mode [ 513.365948][T22238] bond_slave_1: entered promiscuous mode [ 513.374309][T22238] bridge_slave_1: entered promiscuous mode [ 513.436919][T22238] __nla_validate_parse: 5 callbacks suppressed [ 513.436938][T22238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4448'. [ 513.551909][T22254] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4451'. [ 514.001584][T22278] net_ratelimit: 2 callbacks suppressed [ 514.001607][T22278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.214806][T22288] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4463'. [ 514.236816][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4455'. [ 514.622314][T22307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4469'. [ 514.633028][T22308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4469'. [ 514.945989][T22314] veth3: entered allmulticast mode [ 514.998142][T22316] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4474'. [ 515.083608][T22316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4474'. [ 515.182474][T22331] xt_hashlimit: invalid interval [ 515.267658][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4473'. [ 515.312794][T22335] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 515.885726][T22363] netlink: 'syz.2.4487': attribute type 1 has an invalid length. [ 516.062420][T22370] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 516.075597][T22370] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 516.090191][T22370] bond7: (slave xfrm1): making interface the new active one [ 516.098547][T22370] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 516.123027][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4487'. [ 516.603568][T22370] bond7 (unregistering): (slave xfrm1): Releasing backup interface [ 516.755068][T22370] bond7 (unregistering): Released all slaves [ 516.768763][T22378] netlink: 'syz.7.4489': attribute type 21 has an invalid length. [ 516.789354][T22378] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.800453][T22377] ip_vti0: entered promiscuous mode [ 517.893199][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 517.945834][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 517.964235][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 517.990748][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 518.002974][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 518.018171][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 518.036579][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 518.044885][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 518.061603][T22416] netlink: 'syz.7.4500': attribute type 3 has an invalid length. [ 518.253671][T22430] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 518.395264][T22438] bond7: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 519.192779][T22492] netlink: 'syz.8.4525': attribute type 11 has an invalid length. [ 519.345779][T22498] tipc: Started in network mode [ 519.360272][T22498] tipc: Node identity cabdc696c0e3, cluster identity 4711 [ 519.388123][T22498] tipc: Enabled bearer , priority 0 [ 519.413384][T22506] __nla_validate_parse: 5 callbacks suppressed [ 519.413403][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4531'. [ 519.455056][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4528'. [ 519.487141][T22504] syzkaller0: entered promiscuous mode [ 519.493200][T22504] syzkaller0: entered allmulticast mode [ 519.500519][T22504] tipc: Resetting bearer [ 519.519395][T22506] : entered promiscuous mode [ 519.643583][T22497] tipc: Resetting bearer [ 521.608568][T22497] tipc: Disabling bearer [ 521.628643][ T24] tipc: Node number set to 173983382 [ 521.781843][T22540] validate_nla: 46 callbacks suppressed [ 521.781866][T22540] netlink: 'syz.2.4538': attribute type 10 has an invalid length. [ 521.879351][T22548] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4541'. [ 521.902474][T22548] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4541'. [ 521.924226][T22550] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4542'. [ 521.994261][T22549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4543'. [ 522.006902][T22557] sctp: [Deprecated]: syz.8.4541 (pid 22557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.006902][T22557] Use struct sctp_sack_info instead [ 522.398169][T22577] x_tables: duplicate underflow at hook 2 [ 522.416558][T22579] dvmrp0: entered allmulticast mode [ 522.616231][T22588] netlink: 'syz.7.4555': attribute type 83 has an invalid length. [ 522.773554][T22598] netlink: 'syz.7.4559': attribute type 4 has an invalid length. [ 522.785236][T22598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4559'. [ 522.875523][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4561'. [ 522.991589][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4560'. [ 523.060470][T22612] netlink: 'syz.6.4562': attribute type 1 has an invalid length. [ 523.071502][T22612] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4562'. [ 523.119550][T22612] bond2: option xmit_hash_policy: invalid value (64) [ 523.129974][T22612] bond2 (unregistering): Released all slaves [ 523.155213][T22614] netem: change failed [ 523.398775][T22626] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.673395][T22645] netlink: 'syz.2.4573': attribute type 1 has an invalid length. [ 523.743975][T22645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 523.953983][T22649] veth9: entered promiscuous mode [ 524.162440][T22674] macvlan0: entered promiscuous mode [ 524.419974][T22685] vlan2: entered allmulticast mode [ 524.425435][T22685] erspan0: entered allmulticast mode [ 524.890258][T22697] __nla_validate_parse: 11 callbacks suppressed [ 524.890279][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4588'. [ 524.918032][T22693] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4588'. [ 524.924014][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4588'. [ 524.927234][T22700] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4591'. [ 524.981261][T22700] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4591'. [ 525.141689][T22714] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4593'. [ 525.221776][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4594'. [ 525.376868][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4597'. [ 525.388959][T22722] netlink: 'syz.6.4595': attribute type 10 has an invalid length. [ 525.424818][T22729] netlink: 'syz.5.4596': attribute type 58 has an invalid length. [ 525.433619][T22729] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4596'. [ 525.448922][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4597'. [ 525.759345][T22739] netlink: 'syz.8.4601': attribute type 1 has an invalid length. [ 525.826419][T22739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.860123][T22746] mac80211_hwsim hwsim24 ÿ: renamed from wlan1 [ 525.890758][T22741] tap0: tun_chr_ioctl cmd 1074025678 [ 525.896151][T22741] tap0: group set to 0 [ 526.874736][T22794] netlink: 'syz.2.4618': attribute type 12 has an invalid length. [ 526.902493][T22794] netlink: 'syz.2.4618': attribute type 29 has an invalid length. [ 526.978628][T22805] netlink: 'syz.8.4616': attribute type 10 has an invalid length. [ 527.126056][T22802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.139692][T22802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.150604][T22802] bond0 (unregistering): Released all slaves [ 527.170189][T22805] dummy0: entered promiscuous mode [ 527.176509][T22805] bridge0: port 3(dummy0) entered blocking state [ 527.188811][T22805] bridge0: port 3(dummy0) entered disabled state [ 527.197039][T22805] dummy0: entered allmulticast mode [ 527.204663][T22805] bridge0: port 3(dummy0) entered blocking state [ 527.211581][T22805] bridge0: port 3(dummy0) entered forwarding state [ 528.142416][T22865] vlan2: entered promiscuous mode [ 528.147966][T22865] hsr_slave_1: entered promiscuous mode [ 528.154597][T22865] vlan2: entered allmulticast mode [ 528.161006][T22865] hsr_slave_1: entered allmulticast mode [ 528.240934][T22870] netlink: 'syz.7.4641': attribute type 1 has an invalid length. [ 528.411839][T22877] macvlan2: entered promiscuous mode [ 528.417546][T22877] macvlan2: entered allmulticast mode [ 528.424451][T22877] bond3: entered promiscuous mode [ 528.431394][T22877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 528.454139][T22877] bond3: left promiscuous mode [ 528.565494][T22889] sctp: [Deprecated]: syz.2.4646 (pid 22889) Use of int in max_burst socket option. [ 528.565494][T22889] Use struct sctp_assoc_value instead [ 528.793763][T22899] openvswitch: netlink: Flow key attr not present in new flow. [ 529.525900][T22930] veth0: entered promiscuous mode [ 529.532074][T22929] veth0: left promiscuous mode [ 529.777719][T22933] bond4: option all_slaves_active: invalid value (222) [ 529.805534][T22933] bond4 (unregistering): Released all slaves [ 530.052902][T22943] __nla_validate_parse: 18 callbacks suppressed [ 530.052922][T22943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4662'. [ 530.097098][T22944] vlan3: entered promiscuous mode [ 530.141422][T22944] bridge0: entered promiscuous mode [ 530.213979][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4667'. [ 530.457208][T22971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4669'. [ 530.696178][T22982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4672'. [ 530.739390][T22971] netlink: 'syz.2.4669': attribute type 9 has an invalid length. [ 530.878625][T22982] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 530.904773][T22979] macvlan2: entered promiscuous mode [ 530.935174][T22979] macvlan2: entered allmulticast mode [ 530.945788][T22979] bond4: entered promiscuous mode [ 530.957980][T22979] bridge3: entered promiscuous mode [ 530.969560][T22979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 530.993842][T22979] bond4: left promiscuous mode [ 530.999266][T22979] bridge3: left promiscuous mode [ 531.063091][T22999] netlink: 'syz.8.4679': attribute type 1 has an invalid length. [ 531.261034][T23005] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4682'. [ 531.326010][T23005] bond5: (slave caif0): Device is not bonding slave [ 531.356445][T23005] bond5: option active_slave: invalid value (caif0) [ 531.368562][T23005] bond5 (unregistering): Released all slaves [ 531.795003][T23032] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4691'. [ 531.816355][T23032] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 531.898517][T23036] bond3: option min_links: invalid value (18446744073709551614) [ 531.906409][T23036] bond3: option min_links: allowed values 0 - 2147483647 [ 531.922030][T23036] bond3 (unregistering): Released all slaves [ 531.980578][T23040] netlink: 'syz.8.4695': attribute type 4 has an invalid length. [ 531.990421][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4694'. [ 532.018071][T23040] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4695'. [ 532.019707][T23045] IPVS: length: 147 != 24 [ 532.308296][T23066] netlink: 'syz.2.4703': attribute type 17 has an invalid length. [ 532.328425][T23067] netlink: 'syz.2.4703': attribute type 17 has an invalid length. [ 532.336625][T23067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4703'. [ 532.368328][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4703'. [ 532.390104][T23069] IPv6: sit1: Disabled Multicast RS [ 532.398887][T23071] netlink: 'syz.2.4703': attribute type 58 has an invalid length. [ 533.084631][T23114] openvswitch: netlink: Missing valid actions attribute. [ 533.109315][T23114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.478479][T23119] caif0: mtu less than device minimum [ 534.145634][T23177] veth0: entered promiscuous mode [ 534.263732][T23195] sctp: [Deprecated]: syz.7.4737 (pid 23195) Use of int in max_burst socket option. [ 534.263732][T23195] Use struct sctp_assoc_value instead [ 534.346422][T23177] veth0: left promiscuous mode [ 534.668726][T23217] netlink: 'syz.7.4742': attribute type 1 has an invalid length. [ 534.747332][T23222] netlink: 'syz.8.4743': attribute type 1 has an invalid length. [ 534.756825][T23222] netlink: 'syz.8.4743': attribute type 2 has an invalid length. [ 534.960474][T23230] netlink: 'syz.6.4745': attribute type 30 has an invalid length. [ 535.223683][T23245] __nla_validate_parse: 14 callbacks suppressed [ 535.223704][T23245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4753'. [ 535.242972][T23245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4753'. [ 535.255903][T23245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4753'. [ 535.480882][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4756'. [ 535.496317][T23259] bridge0: port 1(bridge_slave_0) entered learning state [ 535.621961][T23266] netlink: 'syz.2.4757': attribute type 4 has an invalid length. [ 535.778591][T23279] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 535.980599][T23290] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4763'. [ 536.456309][T23311] netlink: 'syz.2.4766': attribute type 21 has an invalid length. [ 536.625185][T23315] tunl0: entered promiscuous mode [ 536.634489][T23315] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4769'. [ 536.691464][T23317] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4770'. [ 536.700999][T23317] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4770'. [ 536.785443][T23322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4772'. [ 537.025211][T23326] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4773'. [ 537.040961][T23338] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 537.053215][T23338] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 537.101050][T23344] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 537.108833][T23335] validate_nla: 1 callbacks suppressed [ 537.108853][T23335] netlink: 'syz.6.4773': attribute type 2 has an invalid length. [ 537.121673][T23344] bond0: (slave lo): Enslaving as a backup interface with an up link [ 537.136179][T23344] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 537.152429][T23341] netlink: 'syz.7.4775': attribute type 1 has an invalid length. [ 537.301168][T23346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.328584][T23346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.493821][T23346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.504820][T23346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.732315][T23346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.762516][T23346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.795262][T23380] xt_hashlimit: invalid rate [ 537.942376][T23389] netlink: 'syz.8.4788': attribute type 1 has an invalid length. [ 537.960674][T23346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.988601][T23346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.003435][T23395] block nbd4: Unsupported socket: should be TCP or UNIX. [ 538.098464][T23394] bond2: (slave veth5): Enslaving as an active interface with a down link [ 538.112570][T23389] netlink: 'syz.8.4788': attribute type 28 has an invalid length. [ 538.121081][T23389] netlink: 'syz.8.4788': attribute type 3 has an invalid length. [ 538.136962][T23399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.214623][T23402] netlink: 'syz.6.4790': attribute type 1 has an invalid length. [ 538.326760][ T3992] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.340899][ T3992] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.383346][ T3992] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.395263][ T3992] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.429322][ T3992] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.437665][ T3992] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.462648][ T3992] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.478078][ T3992] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.851178][T23433] netlink: 'syz.5.4792': attribute type 1 has an invalid length. [ 538.972748][T23441] 8021q: VLANs not supported on vcan0 [ 539.123777][T23452] netlink: 'syz.5.4808': attribute type 18 has an invalid length. [ 539.140770][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.153222][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.162594][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.173821][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.512327][T23471] xfrm1: entered allmulticast mode [ 539.595879][T23476] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 539.605759][T23476] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 539.767123][T23485] tipc: Enabling of bearer rejected, failed to enable media [ 540.458727][T23528] __nla_validate_parse: 9 callbacks suppressed [ 540.458747][T23528] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4832'. [ 540.721493][T23555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.943779][T23563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4840'. [ 541.145562][T23571] netlink: 'syz.7.4845': attribute type 1 has an invalid length. [ 541.267382][T23575] vlan3: entered allmulticast mode [ 541.281374][T23575] veth1: entered allmulticast mode [ 541.319588][T23584] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4849'. [ 541.346116][T23590] netlink: 'syz.8.4850': attribute type 11 has an invalid length. [ 541.358832][T23590] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4850'. [ 541.573041][T23603] netlink: 'syz.8.4854': attribute type 24 has an invalid length. [ 541.592016][T23605] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4855'. [ 541.632046][ T3992] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.651423][ T3992] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.706809][ T3992] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.741213][ T3992] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.869844][T23623] ipt_rpfilter: unknown options [ 541.896956][T23627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4860'. [ 542.085182][T23638] 9: entered promiscuous mode [ 542.297270][T23650] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 542.772758][T23680] smc: removing ib device syz1 [ 542.821424][T23685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 543.050649][T23690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.530815][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4885'. [ 543.540561][T23711] nbd: illegal input index 2958377 [ 543.541300][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4885'. [ 543.754480][T23719] C: renamed from lo (while UP) [ 543.810963][T23719] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.131490][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4892'. [ 545.638113][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4903'. [ 546.189070][T23802] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4912'. [ 546.493515][T23809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4916'. [ 546.518050][T23809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4916'. [ 546.544925][T23809] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4916'. [ 546.573889][T23812] validate_nla: 5 callbacks suppressed [ 546.573911][T23812] netlink: 'syz.6.4918': attribute type 1 has an invalid length. [ 546.609485][T23812] netlink: 'syz.6.4918': attribute type 1 has an invalid length. [ 546.639889][T23812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4918'. [ 546.664868][T23818] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 546.677056][T23826] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4920'. [ 546.731134][T23826] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 546.787659][T23830] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4921'. [ 546.850083][T23834] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4921'. [ 547.034414][T23843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4925'. [ 547.524837][T23856] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.732889][T23856] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 547.891402][T23874] netlink: 'syz.7.4933': attribute type 11 has an invalid length. [ 548.461878][T23916] syzkaller0: entered promiscuous mode [ 548.469741][T23916] syzkaller0: entered allmulticast mode [ 548.862083][T23934] hsr_slave_0 (unregistering): left promiscuous mode [ 549.151059][T23960] netlink: 'syz.8.4956': attribute type 1 has an invalid length. [ 549.301987][T23964] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 549.319369][T23964] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 549.333688][T23964] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 549.515169][T23967] syzkaller1: entered promiscuous mode [ 549.521012][T23967] syzkaller1: entered allmulticast mode [ 549.605594][T23980] netlink: 'syz.2.4962': attribute type 4 has an invalid length. [ 549.811180][T23993] netlink: 'syz.2.4963': attribute type 8 has an invalid length. [ 549.837490][T23993] netlink: 'syz.2.4963': attribute type 2 has an invalid length. [ 550.047414][T24004] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.062639][T24004] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.181518][T24014] netlink: zone id is out of range [ 550.196422][T24004] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.211912][T24014] netlink: zone id is out of range [ 550.217259][T24004] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.231090][T24014] netlink: zone id is out of range [ 550.236280][T24014] netlink: zone id is out of range [ 550.246511][T24014] netlink: zone id is out of range [ 550.272338][T24014] netlink: zone id is out of range [ 550.294763][T24014] netlink: zone id is out of range [ 550.308020][T24014] netlink: set zone limit has 4 unknown bytes [ 550.418033][T24004] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.450818][T24004] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.568443][T24037] netlink: 'syz.6.4976': attribute type 83 has an invalid length. [ 550.591750][T24037] netlink: 'syz.6.4976': attribute type 83 has an invalid length. [ 550.598285][T24004] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.613095][T24004] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.715979][T24043] __nla_validate_parse: 19 callbacks suppressed [ 550.716001][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4978'. [ 550.737359][ T8533] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.758372][ T8533] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.788343][ T8533] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.797285][ T8533] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.826674][ T8533] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.849847][ T8533] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.888412][ T8533] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.896972][ T8533] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.031870][T24056] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4983'. [ 551.031870][T24055] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4983'. [ 551.038741][T24056] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4983'. [ 551.075640][T24052] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4982'. [ 551.096214][T24062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4980'. [ 551.101428][T24056] bridge0: port 2(syz_tun) entered blocking state [ 551.112203][T24056] bridge0: port 2(syz_tun) entered forwarding state [ 551.119225][T24056] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.126608][T24056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.320698][T24073] erspan0: entered promiscuous mode [ 551.326524][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4986'. [ 551.336453][T24077] IPv6: Can't replace route, no match found [ 551.338719][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4989'. [ 551.355703][T24069] openvswitch: netlink: Key type 105 is out of range max 32 [ 551.465924][T24083] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4992'. [ 551.632442][T24093] pim6reg527: entered allmulticast mode [ 552.038477][T24111] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4999'. [ 552.575701][T24142] x_tables: duplicate entry at hook 1 [ 552.794202][T24158] netlink: 'syz.7.5017': attribute type 27 has an invalid length. [ 552.854045][T24156] netlink: 'syz.2.5014': attribute type 7 has an invalid length. [ 552.879624][T24162] tc_dump_action: action bad kind [ 552.909539][T24156] netlink: 'syz.2.5014': attribute type 7 has an invalid length. [ 552.918352][T24156] netlink: 'syz.2.5014': attribute type 7 has an invalid length. [ 552.926931][T24156] netlink: 'syz.2.5014': attribute type 7 has an invalid length. [ 552.935299][T24156] netlink: 'syz.2.5014': attribute type 7 has an invalid length. [ 552.946816][T24156] netlink: 'syz.2.5014': attribute type 7 has an invalid length. [ 552.956235][T24152] syzkaller1: entered promiscuous mode [ 552.974864][T24152] syzkaller1: entered allmulticast mode [ 553.003616][T24166] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 553.043140][T24166] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 553.768991][T24208] net_ratelimit: 2 callbacks suppressed [ 553.769021][T24208] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 553.942898][T24214] tipc: Started in network mode [ 553.952332][T24214] tipc: Node identity 7a5e9332661f, cluster identity 4711 [ 553.962672][T24214] tipc: Enabled bearer , priority 0 [ 554.039819][T24214] syzkaller0: entered promiscuous mode [ 554.047725][T24214] syzkaller0: entered allmulticast mode [ 554.054251][T24214] tipc: Resetting bearer [ 554.063981][T24226] xt_ecn: cannot match TCP bits for non-tcp packets [ 554.325429][T24223] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.333344][T24223] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.647662][T24223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.686371][T24223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.129201][T24223] vlan2: left allmulticast mode [ 555.134267][T24223] erspan0: left allmulticast mode [ 555.366217][ T8533] tipc: Resetting bearer [ 555.377416][T24213] tipc: Resetting bearer [ 557.201969][T24213] tipc: Disabling bearer [ 557.213629][ T3527] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.222796][ T3527] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.232586][ T917] tipc: Node number set to 474059570 [ 557.239436][ T3527] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.257992][ T3527] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.566164][T24272] xt_policy: too many policy elements [ 557.576268][T24272] tipc: Enabling of bearer rejected, failed to enable media [ 557.710528][T24281] __nla_validate_parse: 10 callbacks suppressed [ 557.710550][T24281] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5055'. [ 557.773216][T24283] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 557.964407][T24293] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5060'. [ 557.975927][T24293] syzkaller0: entered promiscuous mode [ 557.983495][T24293] syzkaller0: entered allmulticast mode [ 557.994576][T24293] tipc: Enabled bearer , priority 0 [ 558.049677][T24300] netlink: 'syz.5.5057': attribute type 16 has an invalid length. [ 558.065022][T24300] netlink: 'syz.5.5057': attribute type 17 has an invalid length. [ 558.156202][T24300] sit0: left promiscuous mode [ 558.210983][T24300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.243910][T24300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.264543][T24293] tipc: Resetting bearer [ 558.335052][T24293] tipc: Disabling bearer [ 558.729775][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5073'. [ 558.737187][T24336] sctp: [Deprecated]: syz.6.5075 (pid 24336) Use of int in maxseg socket option. [ 558.737187][T24336] Use struct sctp_assoc_value instead [ 558.770112][T24333] vlan3: entered allmulticast mode [ 558.795128][T24333] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 558.831302][T24340] delete_channel: no stack [ 558.854378][T24342] netlink: 'syz.7.5077': attribute type 1 has an invalid length. [ 559.002275][T24338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5068'. [ 559.004776][T24342] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5077'. [ 559.062869][T24342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.158224][T24358] netlink: 'syz.2.5080': attribute type 11 has an invalid length. [ 559.180880][T24362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.202252][T24362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5083'. [ 559.215234][T24358] netlink: 'syz.2.5080': attribute type 11 has an invalid length. [ 559.235501][T24362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5083'. [ 559.257482][T24358] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5080'. [ 559.314120][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5087'. [ 559.350442][T24368] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5087'. [ 559.456592][T24368] bond7 (unregistering): Released all slaves [ 559.570895][T24373] bond9 (unregistering): Released all slaves [ 559.627123][T24384] xt_hashlimit: overflow, try lower: 3/0 [ 559.775147][T24389] bond7 (unregistering): Released all slaves [ 559.821083][T24391] netlink: 'syz.5.5086': attribute type 1 has an invalid length. [ 559.906619][T24378] bond11: (slave geneve3): making interface the new active one [ 559.916062][T24378] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 559.927997][ T3527] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.937612][ T3527] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 560.032862][T24409] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 560.105347][ T3527] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 560.132983][ T8527] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 561.128354][T24478] syzkaller1: entered promiscuous mode [ 561.148816][T24478] syzkaller1: entered allmulticast mode [ 561.231191][T24478] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 561.256786][T24478] bond3: entered promiscuous mode [ 561.265862][T24478] bond3: entered allmulticast mode [ 561.275558][T24478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.284524][T24481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.429947][T24481] netlink: 'syz.5.5116': attribute type 10 has an invalid length. [ 561.458887][T24497] openvswitch: netlink: Flow actions attr not present in new flow. [ 561.911465][T24521] syzkaller0: entered allmulticast mode [ 561.955998][T24524] xt_addrtype: ipv6 does not support BROADCAST matching [ 562.564425][T24556] netlink: 'syz.7.5144': attribute type 1 has an invalid length. [ 562.603654][T24556] netlink: 'syz.7.5144': attribute type 31 has an invalid length. [ 562.614890][T24556] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 562.644420][T24558] netlink: 'syz.6.5143': attribute type 1 has an invalid length. [ 562.786464][T24566] __nla_validate_parse: 16 callbacks suppressed [ 562.786487][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5146'. [ 562.867385][T24568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5148'. [ 562.898267][T24568] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 562.921912][T24568] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5148'. [ 563.183149][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.669058][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5158'. [ 563.859626][T24623] netlink: 'syz.7.5163': attribute type 10 has an invalid length. [ 563.901257][T24623] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 563.987970][T24632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5167'. [ 564.088878][T24639] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5169'. [ 564.156138][T24637] tipc: Started in network mode [ 564.164816][T24637] tipc: Node identity 080211, cluster identity 4711 [ 564.172093][T24637] tipc: Enabled bearer , priority 0 [ 564.301624][T24650] tipc: Enabling of bearer rejected, already enabled [ 564.314776][T24650] syzkaller0: mtu less than device minimum [ 564.339026][T24652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5173'. [ 564.388788][T24654] tls_set_device_offload_rx: netdev not found [ 564.400636][T24652] vxcan2: entered allmulticast mode [ 564.423099][T24659] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5173'. [ 564.454658][T24660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5173'. [ 564.524258][T24660] vxcan2: entered allmulticast mode [ 564.565195][T24669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5179'. [ 564.648826][T24672] macsec0: entered promiscuous mode [ 564.654448][T24672] macsec0: entered allmulticast mode [ 564.661816][T24672] bond4: (slave macsec0): Error -34 calling dev_set_mtu [ 564.701371][T24667] netlink: 'syz.8.5178': attribute type 8 has an invalid length. [ 565.134450][T24695] netlink: 'syz.7.5187': attribute type 15 has an invalid length. [ 565.219399][T24700] openvswitch: netlink: Message has 4 unknown bytes. [ 565.290439][ T917] tipc: Node number set to 134353152 [ 565.348767][T24702] geneve2: entered promiscuous mode [ 565.624394][T24720] syzkaller0: entered promiscuous mode [ 565.639050][T24720] syzkaller0: entered allmulticast mode [ 565.719370][T24727] netlink: 'syz.2.5197': attribute type 2 has an invalid length. [ 565.802774][T24726] bond4 (unregistering): Released all slaves [ 566.194911][ T5837] Bluetooth: hci4: link tx timeout [ 566.201502][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.262107][T24759] netlink: 'syz.5.5202': attribute type 1 has an invalid length. [ 566.273610][T24759] netlink: 'syz.5.5202': attribute type 2 has an invalid length. [ 566.287204][T24759] netlink: 'syz.5.5202': attribute type 1 has an invalid length. [ 566.297546][T24759] netlink: 'syz.5.5202': attribute type 2 has an invalid length. [ 566.411673][T24767] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 566.529288][T24772] xt_l2tp: v2 doesn't support IP mode [ 566.584552][T24777] netlink: 'syz.5.5209': attribute type 1 has an invalid length. [ 566.816314][T24782] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 566.833811][T24782] bond4 (unregistering): Released all slaves [ 566.851337][T24779] netlink: 'syz.5.5209': attribute type 3 has an invalid length. [ 566.893349][T24779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 567.030377][T24777] bond12 (unregistering): Released all slaves [ 567.200339][T24808] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.269436][T24805] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.281618][T24805] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 567.296777][T24805] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 567.400232][T24818] veth6: entered promiscuous mode [ 567.717968][T24844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.806370][T24831] bond12: entered promiscuous mode [ 567.814341][T24831] 8021q: adding VLAN 0 to HW filter on device bond12 [ 568.219352][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 568.373020][T24870] veth6: entered allmulticast mode [ 568.640227][T24902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.188165][T24934] __nla_validate_parse: 19 callbacks suppressed [ 569.188190][T24934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5257'. [ 569.206129][T24933] x_tables: duplicate underflow at hook 2 [ 569.257457][T24934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5257'. [ 569.354280][T24943] netlink: 576 bytes leftover after parsing attributes in process `syz.2.5258'. [ 569.442154][T24937] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 569.463294][T24946] validate_nla: 6 callbacks suppressed [ 569.463315][T24946] netlink: 'syz.7.5260': attribute type 17 has an invalid length. [ 569.476859][T24945] netlink: 'syz.7.5260': attribute type 17 has an invalid length. [ 569.488084][T24946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5260'. [ 569.490516][T24945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5260'. [ 569.525794][T24946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5260'. [ 569.535178][T24945] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5260'. [ 569.644057][T24951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.654919][T24955] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5262'. [ 569.675950][T24955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5262'. [ 569.677867][T24951] netlink: 'syz.5.5253': attribute type 3 has an invalid length. [ 569.694291][T24951] netlink: 'syz.5.5253': attribute type 1 has an invalid length. [ 569.694329][T24954] xt_ipcomp: unknown flags 1D [ 569.702688][T24951] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5253'. [ 569.735138][T24951] NCSI netlink: No device for ifindex 813332851 [ 571.233108][T25058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.245498][T25058] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 571.333771][T25063] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 571.347135][T25066] vlan5: entered promiscuous mode [ 571.387108][T25063] syzkaller0: entered promiscuous mode [ 571.393547][T25063] syzkaller0: entered allmulticast mode [ 571.508594][T25070] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 571.523032][T25070] bond7 (unregistering): Released all slaves [ 571.608291][T25084] netlink: 'syz.8.5303': attribute type 1 has an invalid length. [ 571.834157][T25095] bridge4: entered promiscuous mode [ 571.839723][T25095] bridge4: entered allmulticast mode [ 571.988929][T25113] sctp: [Deprecated]: syz.5.5310 (pid 25113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.988929][T25113] Use struct sctp_sack_info instead [ 572.180193][T25121] netlink: 'syz.7.5318': attribute type 15 has an invalid length. [ 572.201638][ T3992] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 572.201741][T25121] netlink: 'syz.7.5318': attribute type 15 has an invalid length. [ 572.212892][ T3992] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 572.232482][ T3992] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 572.241787][ T3992] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 572.251067][T25125] netlink: 'syz.7.5318': attribute type 15 has an invalid length. [ 572.263617][T25125] netlink: 'syz.7.5318': attribute type 15 has an invalid length. [ 572.263932][T25123] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 572.284682][T25123] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 572.395584][T25135] netlink: 'syz.7.5321': attribute type 10 has an invalid length. [ 572.404740][T25135] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 572.414876][T25135] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 573.360272][T25197] block nbd8: not configured, cannot reconfigure [ 573.564197][T25209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.005525][T25234] bond6: entered promiscuous mode [ 574.013333][T25234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 574.101649][T25234] bond6: (slave bridge7): making interface the new active one [ 574.109322][T25234] bridge7: entered promiscuous mode [ 574.155849][T25234] bridge7: left promiscuous mode [ 574.474677][T25253] validate_nla: 64 callbacks suppressed [ 574.474700][T25253] netlink: 'syz.2.5356': attribute type 10 has an invalid length. [ 574.507243][T25253] __nla_validate_parse: 67 callbacks suppressed [ 574.507262][T25253] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5356'. [ 574.525797][T25253] team0: entered promiscuous mode [ 574.531801][T25253] bridge0: port 3(team0) entered blocking state [ 574.548145][T25253] bridge0: port 3(team0) entered disabled state [ 574.555117][T25253] team0: entered allmulticast mode [ 574.564324][T25258] netlink: 'syz.2.5356': attribute type 1 has an invalid length. [ 574.573581][T25253] team_slave_0: entered allmulticast mode [ 574.580255][T25253] team_slave_1: entered allmulticast mode [ 574.590060][T25253] team0: left allmulticast mode [ 574.595001][T25253] team_slave_0: left allmulticast mode [ 574.616147][T25253] team_slave_1: left allmulticast mode [ 574.628798][T25260] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5359'. [ 574.649412][T25258] 8021q: adding VLAN 0 to HW filter on device bond9 [ 574.697475][T25261] veth9: entered promiscuous mode [ 574.740963][T25261] bond9: (slave veth9): Enslaving as an active interface with an up link [ 575.043569][T25281] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5365'. [ 575.054362][T25279] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5365'. [ 575.214242][T25294] openvswitch: netlink: Duplicate or invalid key (type 0). [ 575.221959][T25294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.281499][T25298] netlink: 'syz.5.5371': attribute type 1 has an invalid length. [ 575.385401][T25303] openvswitch: netlink: IP tunnel dst address not specified [ 575.465369][T25304] bond13: entered allmulticast mode [ 575.471570][T25304] 8021q: adding VLAN 0 to HW filter on device bond13 [ 616.458056][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 624.622015][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 670.720921][T17440] bridge_slave_1: left allmulticast mode [ 670.726611][T17440] bridge_slave_1: left promiscuous mode [ 670.732792][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.742615][T17440] bridge_slave_0: left allmulticast mode [ 670.749112][T17440] bridge_slave_0: left promiscuous mode [ 670.754836][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.949085][T17440] bond3 (unregistering): (slave gretap1): Releasing active interface [ 671.034847][T17440] dvmrp0 (unregistering): left allmulticast mode [ 671.094908][T17440] team0: Port device geneve0 removed [ 671.522063][T17440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.532529][T17440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.542355][T17440] bond0 (unregistering): Released all slaves [ 671.683257][T17440] bond1 (unregistering): Released all slaves [ 671.820655][T17440] bond2 (unregistering): Released all slaves [ 671.835531][T17440] bond3 (unregistering): Released all slaves [ 671.985569][T17440] bond4 (unregistering): Released all slaves [ 673.499549][T17440] tipc: Disabling bearer [ 673.513816][T17440] tipc: Disabling bearer [ 673.522419][T17440] tipc: Left network mode [ 686.061843][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 693.257956][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 734.058010][ T31] INFO: task kworker/1:2:917 blocked for more than 143 seconds. [ 734.066137][ T31] Not tainted syzkaller #0 [ 734.071452][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.080250][ T31] task:kworker/1:2 state:D stack:23000 pid:917 tgid:917 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 734.092891][ T31] Workqueue: events rfkill_sync_work [ 734.098415][ T31] Call Trace: [ 734.101814][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 734.104861][ T31] __schedule+0x14bc/0x5000 [ 734.109675][ T31] ? __pfx___schedule+0x10/0x10 [ 734.117811][ T31] ? schedule+0x91/0x360 [ 734.122250][ T31] schedule+0x165/0x360 [ 734.126563][ T31] schedule_preempt_disabled+0x13/0x30 [ 734.132521][ T31] __mutex_lock+0x7e6/0x1350 [ 734.137177][ T31] ? __mutex_lock+0x5bb/0x1350 [ 734.147845][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 734.153291][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 734.198151][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 734.203521][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 734.220015][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 734.226427][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 734.232484][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 734.237816][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 734.243800][ T31] rfkill_set_block+0x1d2/0x440 [ 734.248914][ T31] rfkill_sync_work+0x114/0x200 [ 734.253966][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 734.259764][ T31] process_scheduled_works+0xad1/0x1770 [ 734.265333][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 734.271430][ T31] worker_thread+0x8a0/0xda0 [ 734.276030][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 734.282546][ T31] ? __kthread_parkme+0x7b/0x200 [ 734.288123][ T31] kthread+0x711/0x8a0 [ 734.292236][ T31] ? __pfx_worker_thread+0x10/0x10 [ 734.297533][ T31] ? __pfx_kthread+0x10/0x10 [ 734.302399][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.307870][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 734.313279][ T31] ? __pfx_kthread+0x10/0x10 [ 734.317965][ T31] ret_from_fork+0x599/0xb30 [ 734.322589][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 734.327970][ T31] ? __switch_to_asm+0x39/0x70 [ 734.332940][ T31] ? __switch_to_asm+0x33/0x70 [ 734.337882][ T31] ? __pfx_kthread+0x10/0x10 [ 734.342490][ T31] ret_from_fork_asm+0x1a/0x30 [ 734.347273][ T31] [ 734.350516][ T31] INFO: task kworker/1:8:5947 blocked for more than 143 seconds. [ 734.358781][ T31] Not tainted syzkaller #0 [ 734.363916][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.373035][ T31] task:kworker/1:8 state:D stack:24344 pid:5947 tgid:5947 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 734.385427][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 734.392211][ T31] Call Trace: [ 734.395492][ T31] [ 734.398639][ T31] __schedule+0x14bc/0x5000 [ 734.403167][ T31] ? __pfx___schedule+0x10/0x10 [ 734.408296][ T31] ? schedule+0x91/0x360 [ 734.412551][ T31] schedule+0x165/0x360 [ 734.416791][ T31] schedule_preempt_disabled+0x13/0x30 [ 734.422304][ T31] __mutex_lock+0x7e6/0x1350 [ 734.426986][ T31] ? __mutex_lock+0x5bb/0x1350 [ 734.432015][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 734.438407][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 734.443458][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 734.449342][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 734.455188][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 734.461369][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 734.467124][ T31] process_scheduled_works+0xad1/0x1770 [ 734.472780][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 734.478947][ T31] worker_thread+0x8a0/0xda0 [ 734.483559][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 734.489977][ T31] ? __kthread_parkme+0x7b/0x200 [ 734.495003][ T31] kthread+0x711/0x8a0 [ 734.499169][ T31] ? __pfx_worker_thread+0x10/0x10 [ 734.504357][ T31] ? __pfx_kthread+0x10/0x10 [ 734.509354][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.514749][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 734.520481][ T31] ? __pfx_kthread+0x10/0x10 [ 734.525079][ T31] ret_from_fork+0x599/0xb30 [ 734.530052][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 734.535497][ T31] ? __switch_to_asm+0x39/0x70 [ 734.540439][ T31] ? __switch_to_asm+0x33/0x70 [ 734.545208][ T31] ? __pfx_kthread+0x10/0x10 [ 734.550012][ T31] ret_from_fork_asm+0x1a/0x30 [ 734.554894][ T31] [ 734.558114][ T31] INFO: task syz.7.5332:25167 blocked for more than 143 seconds. [ 734.566043][ T31] Not tainted syzkaller #0 [ 734.571365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.580322][ T31] task:syz.7.5332 state:D stack:25432 pid:25167 tgid:25167 ppid:20950 task_flags:0x400040 flags:0x00080002 [ 734.592620][ T31] Call Trace: [ 734.596022][ T31] [ 734.599231][ T31] __schedule+0x14bc/0x5000 [ 734.603898][ T31] ? lockdep_unlock+0x89/0x120 [ 734.608867][ T31] ? stack_trace_save+0x9c/0xe0 [ 734.613859][ T31] ? __pfx___schedule+0x10/0x10 [ 734.619327][ T31] ? schedule+0x91/0x360 [ 734.623963][ T31] schedule+0x165/0x360 [ 734.628232][ T31] schedule_timeout+0x9a/0x270 [ 734.633090][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 734.638888][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 734.644171][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 734.649593][ T31] ? wait_for_completion+0x267/0x5d0 [ 734.654994][ T31] wait_for_completion+0x2bf/0x5d0 [ 734.660608][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 734.666433][ T31] ? __flush_work+0xd2/0xbc0 [ 734.671501][ T31] ? __flush_work+0xd2/0xbc0 [ 734.676297][ T31] __flush_work+0x9b9/0xbc0 [ 734.680920][ T31] ? __flush_work+0xd2/0xbc0 [ 734.685628][ T31] ? __pfx___flush_work+0x10/0x10 [ 734.690901][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 734.696248][ T31] ? __pfx___cancel_work+0x10/0x10 [ 734.704819][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 734.710917][ T31] ? __cancel_work_sync+0x5c/0x110 [ 734.716184][ T31] __cancel_work_sync+0xbe/0x110 [ 734.721244][ T31] rfkill_unregister+0x92/0x220 [ 734.726214][ T31] nfc_unregister_device+0x96/0x2a0 [ 734.731916][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 734.737754][ T31] virtual_ncidev_close+0x56/0x90 [ 734.742974][ T31] __fput+0x44c/0xa70 [ 734.746963][ T31] task_work_run+0x1d4/0x260 [ 734.751984][ T31] ? __pfx_task_work_run+0x10/0x10 [ 734.757214][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 734.762668][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 734.768578][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 734.774138][ T31] ? rcu_is_watching+0x15/0xb0 [ 734.778973][ T31] do_syscall_64+0x2e3/0xf80 [ 734.783663][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.789832][ T31] ? clear_bhb_loop+0x60/0xb0 [ 734.794543][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.800650][ T31] RIP: 0033:0x7fb15878f749 [ 734.805074][ T31] RSP: 002b:00007ffef08b9138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 734.813882][ T31] RAX: 0000000000000000 RBX: 000000000008bde5 RCX: 00007fb15878f749 [ 734.822032][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 734.830427][ T31] RBP: 00007fb1589e7da0 R08: 0000000000000001 R09: 0000001af08b942f [ 734.838928][ T31] R10: 0000001b2fe20000 R11: 0000000000000246 R12: 00007fb1589e5fac [ 734.847004][ T31] R13: 00007fb1589e5fa0 R14: ffffffffffffffff R15: 00007ffef08b9250 [ 734.855653][ T31] [ 734.860297][ T31] INFO: task syz.2.5369:25292 blocked for more than 144 seconds. [ 734.870834][ T31] Not tainted syzkaller #0 [ 734.876192][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.885221][ T31] task:syz.2.5369 state:D stack:23320 pid:25292 tgid:25291 ppid:16555 task_flags:0x400140 flags:0x00080002 [ 734.897511][ T31] Call Trace: [ 734.900852][ T31] [ 734.903964][ T31] __schedule+0x14bc/0x5000 [ 734.909106][ T31] ? __pfx___schedule+0x10/0x10 [ 734.914054][ T31] ? schedule+0x91/0x360 [ 734.918482][ T31] schedule+0x165/0x360 [ 734.922661][ T31] schedule_preempt_disabled+0x13/0x30 [ 734.928223][ T31] __mutex_lock+0x7e6/0x1350 [ 734.932903][ T31] ? rcu_is_watching+0x15/0xb0 [ 734.937773][ T31] ? __mutex_lock+0x5bb/0x1350 [ 734.942567][ T31] ? rfkill_register+0x37/0x8e0 [ 734.947417][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 734.952730][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 734.957740][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 734.962960][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 734.968338][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 734.973977][ T31] rfkill_register+0x37/0x8e0 [ 734.978824][ T31] wiphy_register+0x246a/0x2d20 [ 734.983728][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 734.989081][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 734.994909][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 735.000326][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 735.006591][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 735.012568][ T31] ? ieee80211_register_hw+0x13f1/0x40d0 [ 735.018549][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 735.024465][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 735.030593][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 735.036683][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 735.043209][ T31] ? __hrtimer_setup+0x181/0x200 [ 735.048253][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 735.054305][ T31] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 735.060424][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 735.066867][ T31] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 735.073722][ T31] ? kstrndup+0xbf/0x160 [ 735.078105][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 735.083356][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 735.089437][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 735.095145][ T31] ? rcu_is_watching+0x15/0xb0 [ 735.100480][ T31] ? __nla_parse+0x40/0x60 [ 735.105009][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 735.111782][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 735.117802][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 735.123921][ T31] ? bpf_lsm_capable+0x9/0x20 [ 735.128792][ T31] ? security_capable+0x7e/0x2e0 [ 735.133742][ T31] genl_rcv_msg+0x60e/0x790 [ 735.138433][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.143552][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 735.149363][ T31] netlink_rcv_skb+0x208/0x470 [ 735.154149][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.159222][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.164516][ T31] ? down_read+0x274/0x2e0 [ 735.169476][ T31] ? genl_rcv+0xd/0x40 [ 735.173572][ T31] genl_rcv+0x28/0x40 [ 735.177641][ T31] netlink_unicast+0x82f/0x9e0 [ 735.182601][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 735.188071][ T31] ? netlink_sendmsg+0x642/0xb30 [ 735.193098][ T31] ? skb_put+0x11b/0x210 [ 735.197433][ T31] netlink_sendmsg+0x805/0xb30 [ 735.202260][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.207812][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 735.212778][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.218244][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.223622][ T31] __sock_sendmsg+0x21c/0x270 [ 735.228471][ T31] ____sys_sendmsg+0x505/0x820 [ 735.233526][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.239121][ T31] ? import_iovec+0x74/0xa0 [ 735.243904][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 735.249017][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.254310][ T31] ? futex_wait+0x285/0x360 [ 735.259882][ T31] ? __fget_files+0x2a/0x420 [ 735.264687][ T31] ? __fget_files+0x3a0/0x420 [ 735.270126][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 735.275121][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.280870][ T31] ? do_syscall_64+0xbe/0xf80 [ 735.285587][ T31] do_syscall_64+0xfa/0xf80 [ 735.290139][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.296351][ T31] ? clear_bhb_loop+0x60/0xb0 [ 735.301285][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.307215][ T31] RIP: 0033:0x7efcad58f749 [ 735.311732][ T31] RSP: 002b:00007efcae4ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.320376][ T31] RAX: ffffffffffffffda RBX: 00007efcad7e5fa0 RCX: 00007efcad58f749 [ 735.328688][ T31] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 735.336929][ T31] RBP: 00007efcad613f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.345239][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.353382][ T31] R13: 00007efcad7e6038 R14: 00007efcad7e5fa0 R15: 00007fff56fe0b78 [ 735.361425][ T31] [ 735.364455][ T31] INFO: task syz.2.5369:25296 blocked for more than 144 seconds. [ 735.372719][ T31] Not tainted syzkaller #0 [ 735.378026][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.386732][ T31] task:syz.2.5369 state:D stack:24512 pid:25296 tgid:25291 ppid:16555 task_flags:0x400140 flags:0x00080002 [ 735.398725][ T31] Call Trace: [ 735.402000][ T31] [ 735.404946][ T31] __schedule+0x14bc/0x5000 [ 735.409523][ T31] ? __pfx___schedule+0x10/0x10 [ 735.414405][ T31] ? schedule+0x91/0x360 [ 735.419048][ T31] schedule+0x165/0x360 [ 735.423497][ T31] schedule_preempt_disabled+0x13/0x30 [ 735.429011][ T31] __mutex_lock+0x7e6/0x1350 [ 735.433693][ T31] ? __mutex_lock+0x5bb/0x1350 [ 735.438743][ T31] ? genl_rcv_msg+0x10d/0x790 [ 735.443506][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 735.448660][ T31] ? radix_tree_lookup+0x240/0x290 [ 735.454205][ T31] genl_rcv_msg+0x10d/0x790 [ 735.458759][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.463974][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 735.468942][ T31] netlink_rcv_skb+0x208/0x470 [ 735.473725][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.478835][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.484221][ T31] ? down_read+0x274/0x2e0 [ 735.489229][ T31] ? genl_rcv+0xd/0x40 [ 735.493518][ T31] genl_rcv+0x28/0x40 [ 735.497619][ T31] netlink_unicast+0x82f/0x9e0 [ 735.502633][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 735.508262][ T31] ? netlink_sendmsg+0x642/0xb30 [ 735.513291][ T31] ? skb_put+0x11b/0x210 [ 735.517562][ T31] netlink_sendmsg+0x805/0xb30 [ 735.522413][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.528016][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 735.532965][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.538567][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.543945][ T31] __sock_sendmsg+0x21c/0x270 [ 735.548854][ T31] __sys_sendto+0x3bd/0x520 [ 735.553802][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 735.559050][ T31] ? count_memcg_event_mm+0x21/0x260 [ 735.564431][ T31] ? exc_page_fault+0x82/0x100 [ 735.569239][ T31] __x64_sys_sendto+0xde/0x100 [ 735.574096][ T31] do_syscall_64+0xfa/0xf80 [ 735.579260][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.585353][ T31] ? clear_bhb_loop+0x60/0xb0 [ 735.590070][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.595958][ T31] RIP: 0033:0x7efcad5915dc [ 735.600445][ T31] RSP: 002b:00007efcae48aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 735.608951][ T31] RAX: ffffffffffffffda RBX: 00007efcae48afc0 RCX: 00007efcad5915dc [ 735.616972][ T31] RDX: 0000000000000020 RSI: 00007efcae48b010 RDI: 000000000000000f [ 735.625065][ T31] RBP: 0000000000000000 R08: 00007efcae48af14 R09: 000000000000000c [ 735.633208][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f [ 735.644271][ T31] R13: 00007efcae48af68 R14: 00007efcae48b010 R15: 0000000000000000 [ 735.652312][ T31] [ 735.655357][ T31] INFO: task syz.6.5370:25294 blocked for more than 144 seconds. [ 735.663289][ T31] Not tainted syzkaller #0 [ 735.668473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.677789][ T31] task:syz.6.5370 state:D stack:24456 pid:25294 tgid:25293 ppid:20471 task_flags:0x400140 flags:0x00080002 [ 735.690061][ T31] Call Trace: [ 735.693524][ T31] [ 735.696459][ T31] __schedule+0x14bc/0x5000 [ 735.701137][ T31] ? __pfx___schedule+0x10/0x10 [ 735.706200][ T31] ? schedule+0x91/0x360 [ 735.710569][ T31] schedule+0x165/0x360 [ 735.714767][ T31] schedule_preempt_disabled+0x13/0x30 [ 735.720630][ T31] __mutex_lock+0x7e6/0x1350 [ 735.725225][ T31] ? __mutex_lock+0x5bb/0x1350 [ 735.730332][ T31] ? genl_rcv_msg+0x10d/0x790 [ 735.735130][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 735.743052][ T31] ? stack_trace_save+0x9c/0xe0 [ 735.748045][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 735.753124][ T31] ? radix_tree_lookup+0x240/0x290 [ 735.758557][ T31] genl_rcv_msg+0x10d/0x790 [ 735.763097][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.768344][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 735.773469][ T31] netlink_rcv_skb+0x208/0x470 [ 735.778408][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.784087][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.790097][ T31] ? down_read+0x274/0x2e0 [ 735.794635][ T31] ? genl_rcv+0xd/0x40 [ 735.798975][ T31] genl_rcv+0x28/0x40 [ 735.803362][ T31] netlink_unicast+0x82f/0x9e0 [ 735.808599][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 735.813939][ T31] ? netlink_sendmsg+0x642/0xb30 [ 735.820852][ T31] ? skb_put+0x11b/0x210 [ 735.825232][ T31] netlink_sendmsg+0x805/0xb30 [ 735.830145][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.835451][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 735.840698][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.846353][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.851873][ T31] __sock_sendmsg+0x21c/0x270 [ 735.856647][ T31] __sys_sendto+0x3bd/0x520 [ 735.861209][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 735.866254][ T31] ? count_memcg_event_mm+0x21/0x260 [ 735.872158][ T31] ? exc_page_fault+0x82/0x100 [ 735.877038][ T31] __x64_sys_sendto+0xde/0x100 [ 735.881914][ T31] do_syscall_64+0xfa/0xf80 [ 735.886510][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.892815][ T31] ? clear_bhb_loop+0x60/0xb0 [ 735.897620][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.903643][ T31] RIP: 0033:0x7f575d1915dc [ 735.908450][ T31] RSP: 002b:00007f575e0bdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 735.917279][ T31] RAX: ffffffffffffffda RBX: 00007f575e0bdfc0 RCX: 00007f575d1915dc [ 735.925647][ T31] RDX: 0000000000000024 RSI: 00007f575e0be010 RDI: 0000000000000007 [ 735.933974][ T31] RBP: 0000000000000000 R08: 00007f575e0bdf14 R09: 000000000000000c [ 735.942281][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 735.950401][ T31] R13: 00007f575e0bdf68 R14: 00007f575e0be010 R15: 0000000000000000 [ 735.958520][ T31] [ 735.961656][ T31] INFO: task syz.6.5370:25295 blocked for more than 145 seconds. [ 735.969790][ T31] Not tainted syzkaller #0 [ 735.974718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 735.983515][ T31] task:syz.6.5370 state:D stack:28712 pid:25295 tgid:25293 ppid:20471 task_flags:0x400040 flags:0x00080002 [ 735.995510][ T31] Call Trace: [ 735.998880][ T31] [ 736.001936][ T31] __schedule+0x14bc/0x5000 [ 736.006720][ T31] ? __pfx___schedule+0x10/0x10 [ 736.011742][ T31] ? schedule+0x91/0x360 [ 736.016000][ T31] schedule+0x165/0x360 [ 736.020288][ T31] schedule_preempt_disabled+0x13/0x30 [ 736.026027][ T31] __mutex_lock+0x7e6/0x1350 [ 736.030663][ T31] ? __mutex_lock+0x5bb/0x1350 [ 736.035615][ T31] ? genl_rcv_msg+0x10d/0x790 [ 736.040675][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 736.046207][ T31] ? stack_trace_save+0x9c/0xe0 [ 736.051294][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 736.056314][ T31] ? radix_tree_lookup+0x240/0x290 [ 736.061930][ T31] genl_rcv_msg+0x10d/0x790 [ 736.066654][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.071745][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 736.077143][ T31] netlink_rcv_skb+0x208/0x470 [ 736.081980][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.087098][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.092881][ T31] ? down_read+0x274/0x2e0 [ 736.097411][ T31] ? genl_rcv+0xd/0x40 [ 736.101612][ T31] genl_rcv+0x28/0x40 [ 736.105622][ T31] netlink_unicast+0x82f/0x9e0 [ 736.110659][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 736.115994][ T31] ? netlink_sendmsg+0x642/0xb30 [ 736.121026][ T31] ? skb_put+0x11b/0x210 [ 736.125740][ T31] netlink_sendmsg+0x805/0xb30 [ 736.130743][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.136027][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.143319][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.149003][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.154312][ T31] __sock_sendmsg+0x21c/0x270 [ 736.159163][ T31] __sys_sendto+0x3bd/0x520 [ 736.163840][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 736.169063][ T31] ? count_memcg_event_mm+0x21/0x260 [ 736.174469][ T31] ? exc_page_fault+0x82/0x100 [ 736.179359][ T31] __x64_sys_sendto+0xde/0x100 [ 736.184302][ T31] do_syscall_64+0xfa/0xf80 [ 736.189139][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.195211][ T31] ? clear_bhb_loop+0x60/0xb0 [ 736.200107][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.206191][ T31] RIP: 0033:0x7f575d1915dc [ 736.210847][ T31] RSP: 002b:00007f575e09cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 736.219783][ T31] RAX: ffffffffffffffda RBX: 00007f575e09cfc0 RCX: 00007f575d1915dc [ 736.228095][ T31] RDX: 0000000000000028 RSI: 00007f575e09d010 RDI: 0000000000000007 [ 736.236193][ T31] RBP: 0000000000000000 R08: 00007f575e09cf14 R09: 000000000000000c [ 736.244331][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 736.252490][ T31] R13: 00007f575e09cf68 R14: 00007f575e09d010 R15: 0000000000000000 [ 736.260714][ T31] [ 736.263823][ T31] INFO: task syz.5.5372:25303 blocked for more than 145 seconds. [ 736.271827][ T31] Not tainted syzkaller #0 [ 736.276870][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.285705][ T31] task:syz.5.5372 state:D stack:24456 pid:25303 tgid:25302 ppid:10889 task_flags:0x400140 flags:0x00080002 [ 736.298062][ T31] Call Trace: [ 736.301436][ T31] [ 736.304482][ T31] __schedule+0x14bc/0x5000 [ 736.310300][ T31] ? __pfx___schedule+0x10/0x10 [ 736.315188][ T31] ? schedule+0x91/0x360 [ 736.319568][ T31] schedule+0x165/0x360 [ 736.324012][ T31] schedule_preempt_disabled+0x13/0x30 [ 736.329830][ T31] __mutex_lock+0x7e6/0x1350 [ 736.334460][ T31] ? __mutex_lock+0x5bb/0x1350 [ 736.339695][ T31] ? genl_rcv_msg+0x10d/0x790 [ 736.344409][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 736.349777][ T31] ? radix_tree_lookup+0x240/0x290 [ 736.355005][ T31] genl_rcv_msg+0x10d/0x790 [ 736.359839][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.365152][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 736.370827][ T31] netlink_rcv_skb+0x208/0x470 [ 736.375814][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.380975][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.386394][ T31] ? down_read+0x274/0x2e0 [ 736.390865][ T31] ? genl_rcv+0xd/0x40 [ 736.395023][ T31] genl_rcv+0x28/0x40 [ 736.399372][ T31] netlink_unicast+0x82f/0x9e0 [ 736.404168][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 736.409882][ T31] ? netlink_sendmsg+0x642/0xb30 [ 736.414927][ T31] ? skb_put+0x11b/0x210 [ 736.419392][ T31] netlink_sendmsg+0x805/0xb30 [ 736.424833][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.430389][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.435954][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.441797][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.447197][ T31] __sock_sendmsg+0x21c/0x270 [ 736.452168][ T31] __sys_sendto+0x3bd/0x520 [ 736.456987][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 736.462222][ T31] ? count_memcg_event_mm+0x21/0x260 [ 736.467650][ T31] ? exc_page_fault+0x82/0x100 [ 736.472579][ T31] __x64_sys_sendto+0xde/0x100 [ 736.477468][ T31] do_syscall_64+0xfa/0xf80 [ 736.482034][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.488415][ T31] ? clear_bhb_loop+0x60/0xb0 [ 736.493103][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.499011][ T31] RIP: 0033:0x7f2f9c3915dc [ 736.503634][ T31] RSP: 002b:00007f2f9d20eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 736.512427][ T31] RAX: ffffffffffffffda RBX: 00007f2f9d20efc0 RCX: 00007f2f9c3915dc [ 736.520751][ T31] RDX: 0000000000000020 RSI: 00007f2f9d20f010 RDI: 000000000000000e [ 736.528886][ T31] RBP: 0000000000000000 R08: 00007f2f9d20ef14 R09: 000000000000000c [ 736.537421][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 736.546063][ T31] R13: 00007f2f9d20ef68 R14: 00007f2f9d20f010 R15: 0000000000000000 [ 736.554565][ T31] [ 736.557840][ T31] INFO: task syz.8.5373:25308 blocked for more than 145 seconds. [ 736.566043][ T31] Not tainted syzkaller #0 [ 736.571361][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.580260][ T31] task:syz.8.5373 state:D stack:28280 pid:25308 tgid:25307 ppid:21667 task_flags:0x400140 flags:0x00080002 [ 736.593223][ T31] Call Trace: [ 736.596803][ T31] [ 736.599780][ T31] __schedule+0x14bc/0x5000 [ 736.605893][ T31] ? __pfx___schedule+0x10/0x10 [ 736.611128][ T31] ? schedule+0x91/0x360 [ 736.616118][ T31] schedule+0x165/0x360 [ 736.621528][ T31] schedule_preempt_disabled+0x13/0x30 [ 736.627051][ T31] __mutex_lock+0x7e6/0x1350 [ 736.632127][ T31] ? __mutex_lock+0x5bb/0x1350 [ 736.637203][ T31] ? genl_rcv_msg+0x10d/0x790 [ 736.642172][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 736.647612][ T31] ? radix_tree_lookup+0x240/0x290 [ 736.652843][ T31] genl_rcv_msg+0x10d/0x790 [ 736.657542][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.662631][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 736.667798][ T31] netlink_rcv_skb+0x208/0x470 [ 736.672578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 736.677869][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.683373][ T31] ? down_read+0x274/0x2e0 [ 736.688083][ T31] ? genl_rcv+0xd/0x40 [ 736.692266][ T31] genl_rcv+0x28/0x40 [ 736.696263][ T31] netlink_unicast+0x82f/0x9e0 [ 736.701161][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 736.706463][ T31] ? netlink_sendmsg+0x642/0xb30 [ 736.711435][ T31] ? skb_put+0x11b/0x210 [ 736.715678][ T31] netlink_sendmsg+0x805/0xb30 [ 736.720567][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.725848][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.730920][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.736392][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.741728][ T31] __sock_sendmsg+0x21c/0x270 [ 736.746427][ T31] __sys_sendto+0x3bd/0x520 [ 736.750975][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 736.756273][ T31] ? count_memcg_event_mm+0x21/0x260 [ 736.761667][ T31] ? exc_page_fault+0x82/0x100 [ 736.766549][ T31] __x64_sys_sendto+0xde/0x100 [ 736.771508][ T31] do_syscall_64+0xfa/0xf80 [ 736.776271][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.785036][ T31] ? clear_bhb_loop+0x60/0xb0 [ 736.789826][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.795735][ T31] RIP: 0033:0x7f25c49915dc [ 736.802027][ T31] RSP: 002b:00007f25c5906ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 736.811012][ T31] RAX: ffffffffffffffda RBX: 00007f25c5906fc0 RCX: 00007f25c49915dc [ 736.819139][ T31] RDX: 0000000000000024 RSI: 00007f25c5907010 RDI: 0000000000000005 [ 736.827227][ T31] RBP: 0000000000000000 R08: 00007f25c5906f14 R09: 000000000000000c [ 736.836892][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 736.845421][ T31] R13: 00007f25c5906f68 R14: 00007f25c5907010 R15: 0000000000000000 [ 736.853857][ T31] [ 736.856932][ T31] INFO: task syz-executor:25311 blocked for more than 146 seconds. [ 736.865274][ T31] Not tainted syzkaller #0 [ 736.870617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.879872][ T31] task:syz-executor state:D stack:27800 pid:25311 tgid:25311 ppid:1 task_flags:0x400040 flags:0x00080000 [ 736.892046][ T31] Call Trace: [ 736.895371][ T31] [ 736.898572][ T31] __schedule+0x14bc/0x5000 [ 736.903149][ T31] ? __pfx___schedule+0x10/0x10 [ 736.908136][ T31] ? schedule+0x91/0x360 [ 736.912495][ T31] schedule+0x165/0x360 [ 736.916739][ T31] schedule_preempt_disabled+0x13/0x30 [ 736.922434][ T31] __mutex_lock+0x7e6/0x1350 [ 736.927339][ T31] ? __mutex_lock+0x5bb/0x1350 [ 736.932301][ T31] ? rfkill_register+0x37/0x8e0 [ 736.937435][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 736.942633][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 736.948044][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 736.953641][ T31] ? device_initialize+0x24b/0x440 [ 736.958991][ T31] rfkill_register+0x37/0x8e0 [ 736.963815][ T31] hci_register_dev+0x3f5/0x890 [ 736.968762][ T31] vhci_create_device+0x39c/0x650 [ 736.973816][ T31] vhci_write+0x3ce/0x4a0 [ 736.978175][ T31] vfs_write+0x5c9/0xb30 [ 736.982679][ T31] ? __pfx_vhci_write+0x10/0x10 [ 736.987867][ T31] ? __pfx_vfs_write+0x10/0x10 [ 736.992721][ T31] ? count_memcg_event_mm+0x21/0x260 [ 736.998462][ T31] ksys_write+0x145/0x250 [ 737.002946][ T31] ? __pfx_ksys_write+0x10/0x10 [ 737.008221][ T31] ? do_syscall_64+0xbe/0xf80 [ 737.013142][ T31] do_syscall_64+0xfa/0xf80 [ 737.017718][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.023818][ T31] ? clear_bhb_loop+0x60/0xb0 [ 737.028705][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.034722][ T31] RIP: 0033:0x7f1d7b58e1c0 [ 737.039190][ T31] RSP: 002b:00007ffda2696cb8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 737.047840][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1d7b58e1c0 [ 737.055833][ T31] RDX: 0000000000000002 RSI: 00007ffda2696cca RDI: 00000000000000ca [ 737.063891][ T31] RBP: 00007f1d7b7e67b8 R08: 0000000000000000 R09: 00007f1d7c31d6c0 [ 737.071916][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 737.080159][ T31] R13: 0000000000000003 R14: 00007ffda2697018 R15: 0000000000000000 [ 737.088387][ T31] [ 737.091407][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 737.100898][ T31] [ 737.100898][ T31] Showing all locks held in the system: [ 737.108803][ T31] 1 lock held by khungtaskd/31: [ 737.113647][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 737.123629][ T31] 4 locks held by kworker/1:2/917: [ 737.128771][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 737.139821][ T31] #1: ffffc900039c7b80 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 737.152658][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 737.162906][ T31] #3: ffff88807e8e7100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 737.172706][ T31] 2 locks held by getty/5592: [ 737.177403][ T31] #0: ffff88814d8350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 737.189242][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 737.199477][ T31] 3 locks held by kworker/1:8/5947: [ 737.204665][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 737.216225][ T31] #1: ffffc90004bd7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 737.230137][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 737.241691][ T31] 4 locks held by kworker/u8:31/17440: [ 737.247232][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 737.260088][ T31] #1: ffffc9000e487b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 737.271237][ T31] #2: ffffffff8f2e8550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 737.280902][ T31] #3: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 737.291255][ T31] 1 lock held by syz.7.5332/25167: [ 737.296496][ T31] #0: ffff88807e8e7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 737.306525][ T31] 3 locks held by syz.2.5369/25292: [ 737.312399][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 737.320786][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 737.329897][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.340272][ T31] 2 locks held by syz.2.5369/25296: [ 737.345754][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 737.354141][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 737.363395][ T31] 2 locks held by syz.6.5370/25294: [ 737.368834][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 737.377349][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 737.386530][ T31] 2 locks held by syz.6.5370/25295: [ 737.392006][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 737.400312][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 737.409758][ T31] 2 locks held by syz.5.5372/25303: [ 737.415221][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 737.423937][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 737.433450][ T31] 2 locks held by syz.8.5373/25308: [ 737.438965][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 737.447390][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 737.456727][ T31] 2 locks held by syz-executor/25311: [ 737.462385][ T31] #0: ffff88814db1c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.472628][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.482906][ T31] 2 locks held by syz-executor/25316: [ 737.488414][ T31] #0: ffff88802fbc4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.498753][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.508775][ T31] 2 locks held by syz-executor/25317: [ 737.514227][ T31] #0: ffff888023c34118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.524403][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.534941][ T31] 2 locks held by syz-executor/25318: [ 737.540442][ T31] #0: ffff8880314f1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.550931][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.561401][ T31] 2 locks held by syz-executor/25319: [ 737.566781][ T31] #0: ffff88807ee54918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.577046][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.587260][ T31] 2 locks held by syz-executor/25321: [ 737.592884][ T31] #0: ffff8880297fb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.602975][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.613691][ T31] 2 locks held by syz-executor/25326: [ 737.619222][ T31] #0: ffff88807c76f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.629974][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.640184][ T31] 2 locks held by syz-executor/25327: [ 737.645639][ T31] #0: ffff88802c4ea118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.656113][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.666652][ T31] 2 locks held by syz-executor/25328: [ 737.672371][ T31] #0: ffff88802c4eb918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.682822][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.693016][ T31] 2 locks held by syz-executor/25329: [ 737.698616][ T31] #0: ffff88807764f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.711358][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.721715][ T31] 2 locks held by syz-executor/25332: [ 737.727102][ T31] #0: ffff88807b97b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.737322][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.747766][ T31] 2 locks held by syz-executor/25337: [ 737.753545][ T31] #0: ffff8880547cc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.763716][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.773873][ T31] 2 locks held by syz-executor/25338: [ 737.779279][ T31] #0: ffff8880547cd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.789519][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.799783][ T31] 2 locks held by syz-executor/25339: [ 737.805342][ T31] #0: ffff88807b97e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.815537][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.826090][ T31] 2 locks held by syz-executor/25340: [ 737.831923][ T31] #0: ffff888033dee918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 737.842627][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 737.852862][ T31] [ 737.855205][ T31] ============================================= [ 737.855205][ T31] [ 737.863800][ T31] NMI backtrace for cpu 1 [ 737.863816][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 737.863830][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 737.863837][ T31] Call Trace: [ 737.863841][ T31] [ 737.863847][ T31] dump_stack_lvl+0x189/0x250 [ 737.863867][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.863880][ T31] ? __pfx__printk+0x10/0x10 [ 737.863901][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 737.863915][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 737.863928][ T31] ? __pfx__printk+0x10/0x10 [ 737.863944][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 737.863962][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 737.863974][ T31] watchdog+0xf3c/0xf80 [ 737.863991][ T31] ? watchdog+0x1e2/0xf80 [ 737.864058][ T31] kthread+0x711/0x8a0 [ 737.864074][ T31] ? __pfx_watchdog+0x10/0x10 [ 737.864087][ T31] ? __pfx_kthread+0x10/0x10 [ 737.864101][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.864114][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 737.864126][ T31] ? __pfx_kthread+0x10/0x10 [ 737.864140][ T31] ret_from_fork+0x599/0xb30 [ 737.864157][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 737.864178][ T31] ? __switch_to_asm+0x39/0x70 [ 737.864191][ T31] ? __switch_to_asm+0x33/0x70 [ 737.864203][ T31] ? __pfx_kthread+0x10/0x10 [ 737.864216][ T31] ret_from_fork_asm+0x1a/0x30 [ 737.864237][ T31] [ 737.864242][ T31] Sending NMI from CPU 1 to CPUs 0: [ 738.026810][ C0] NMI backtrace for cpu 0 [ 738.026831][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 738.026849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.026858][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 738.026882][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 738.026896][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 738.026910][ C0] RAX: a18331fb262b6b00 RBX: ffffffff8197438a RCX: a18331fb262b6b00 [ 738.026921][ C0] RDX: 0000000000000001 RSI: ffffffff8d76be8f RDI: ffffffff8bbfc660 [ 738.026931][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 738.026942][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 738.026952][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 738.026962][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 738.026975][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.026985][ C0] CR2: 00007f8239917d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 738.027000][ C0] Call Trace: [ 738.027008][ C0] [ 738.027015][ C0] default_idle+0x13/0x20 [ 738.027035][ C0] default_idle_call+0x73/0xb0 [ 738.027056][ C0] do_idle+0x1ea/0x520 [ 738.027072][ C0] ? irqentry_exit+0x5ba/0x660 [ 738.027092][ C0] ? __pfx_do_idle+0x10/0x10 [ 738.027114][ C0] cpu_startup_entry+0x44/0x60 [ 738.027129][ C0] rest_init+0x2de/0x300 [ 738.027144][ C0] start_kernel+0x3ae/0x410 [ 738.027161][ C0] x86_64_start_reservations+0x24/0x30 [ 738.027180][ C0] x86_64_start_kernel+0x143/0x1c0 [ 738.027198][ C0] common_startup_64+0x13e/0x147 [ 738.027224][ C0]