last executing test programs: 17.444368807s ago: executing program 1 (id=1307): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000500)=""/109, 0x33, 0x6d, 0x1, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x4, 0xe6ea, 0x8, 0x1b483, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xe, @value=r4}, 0x50) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x60, 0x1409, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380980003801400010076657468305f746f5f68737200000000080007400000ae"], 0xd8}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 16.317557993s ago: executing program 3 (id=1322): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f4ffffffffffffff00000000850000e9a4c10200c400000095000000000000002ba18862006a7c03324e29641805c57335450c33691e56bd58f98d59"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x49, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x2000, {0x0, 0x0, 0x74, r11, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000007c0)={'nicvf0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xf0, r13, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:dhcpc_state_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:ssh_keysign_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20048005}, 0x1) 16.317230054s ago: executing program 2 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, 0x42, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0xa1, 0x1, 0x0, 0x1, [@generic="2c7c1454a9a72411127773771690d00facf9f93c8b02aa9c75f893ab868b53e9179102245545087857a12981bbb987b3fcfd46473efb0a2f4f5512ccdd9b90e9a7d2b68d64d844bcd2b6c24bc3f9bead7e56c1c12dcdb6cc4a9259bc004092020d66ee58fee5e4da167fa34516723287a4b74516fb8815b31ca9fcb9ccf489db54d2d8e9a73e4b1f172372f5a3ffd621b32c98e4efd88e3dcff11eb676"]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 16.293575532s ago: executing program 4 (id=1324): ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x10000800) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000800) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c4}, 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) r9 = accept(r0, 0x0, &(0x7f0000000740)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f00000007c0)={0x360, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x90000000}}}}, [@NL80211_ATTR_TID_CONFIG={0x340, 0x11d, 0x0, 0x1, [{0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x1, 0x7, 0xa7, 0x6, 0xa, 0x6]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0xa}, {0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x1a}, {0x7, 0xa}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x3}, {0x3}, {0x7, 0x7}, {0x6, 0x3}, {0x2}, {0x4, 0x2}, {0x6, 0x4}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x1, 0x6, 0x12, 0x6c, 0x48, 0x18, 0x5, 0x30, 0x6, 0x1b, 0x12, 0xdfa9a531149860f4, 0x24, 0x918e483a67ff3d40, 0x5, 0x1b, 0x24, 0x30, 0x2, 0x4, 0x30, 0x6, 0x6c, 0x4, 0x8, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe65, 0x8, 0x5, 0x3, 0x9, 0x5, 0x1, 0x1ff]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x5, 0x2}, {0x3, 0xa}, {0x4, 0x6}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x1, 0x1}, {0x7}, {0x3, 0x7}, {0x4, 0x1}, {0x2, 0x6}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0x2}, {0x4}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x7, 0xa}, {0x7, 0x5}, {}, {}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0x6}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x1}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x4}, {0x2, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x5}, {0x6}, {0x3, 0x5}, {0x4}, {0x5, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x4}, {0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0xa}, {0x3, 0x3}, {0x1, 0x4}, {0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0xa}, {0x2, 0x4}, {0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x4}, {0x5, 0x4}, {0x5, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x4}, {0x4, 0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x4, 0x8}, {0x4, 0x9}, {0x5, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5dd, 0x8, 0x2, 0xed, 0x3, 0x100, 0x8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x3, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x4}, {0x5}, {0x4, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x5, 0xa}, {0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x4}, {0x7}, {0x4, 0x3}, {0x7, 0xa}, {0x3, 0x3}, {0x7, 0x4}, {0x5, 0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x2}, {0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x5}, {}, {0x5, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb34d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x110, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x53, 0x48, 0x3, 0x1b, 0x30, 0x12, 0x30, 0x1, 0x6, 0xc, 0x30, 0x36, 0x1, 0x1]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0xa}, {0x3, 0x4}, {0x3, 0x3}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x36, 0x16, 0x48, 0x12, 0x48, 0x4, 0x48, 0x1, 0x2, 0x9, 0x2, 0x30, 0x3, 0x12, 0x1, 0x60, 0x6]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x7}, {0x3, 0x8}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x4}, {0x3, 0x3}, {0x5, 0xa}, {0x4, 0x3}, {0x6, 0x5}, {0x7, 0x3}, {0x4}, {0x4, 0x6}, {0x4}, {0x5, 0x2}, {0x1, 0xa}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x7, 0x6}, {0x7, 0x3}, {0x2, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x2, 0x2}, {}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x3, 0x7}, {0x4}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x2}, {0x6, 0x4}, {}, {0x5, 0x7}, {0x4, 0x3}, {0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x4}, {0x5, 0x5}, {0x1}, {0x1, 0x5}, {0x5, 0x2}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x7}, {0x3, 0x1}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x4, 0x36, 0x24, 0xb, 0x6c, 0x30, 0x6, 0x5, 0x2, 0x3, 0x0, 0x60, 0x60, 0xc, 0xb, 0x48, 0x16, 0x30, 0x48, 0x2, 0xb, 0x3, 0x36, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1a}]}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x20048494}, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000bc0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x3, 0x2}, &(0x7f0000000c80)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000cc0)={r10, @in6={{0xa, 0x4e21, 0xc, @private1, 0x6}}, 0x8, 0xffff97a5, 0xffffffff, 0x0, 0x99}, &(0x7f0000000d80)=0x98) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e00), r8) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r11, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff9}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x4004000) (async) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000f00), &(0x7f0000000f40)=0xe) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r8) sendmsg$TIPC_NL_NET_SET(r12, &(0x7f00000011c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x160, r13, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7028}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf57}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe75}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb218}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc0d8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x890}, 0x4004010) r14 = accept4(r8, &(0x7f0000001200)=@alg, &(0x7f0000001280)=0x80, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r14, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, r11, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'geneve0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x20000041) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001400), r5) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x70, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x20000851) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000001580), &(0x7f00000015c0)=0x4) 16.270903832s ago: executing program 0 (id=1325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a000100991df2dffe468c132c000280080003400000000408000440000000000c00024000000000000000020c000140000000004a9c4b670900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x4) 16.169518709s ago: executing program 1 (id=1326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb9}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) 16.091975034s ago: executing program 4 (id=1327): sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09ddb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 16.063819993s ago: executing program 2 (id=1328): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @multicast1}], 0x20) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000700)={0x0, 0x6, 0x20, 0x7, 0x8}, &(0x7f0000000740)=0x18) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x3, @empty, 0xfff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000080)="a36710e303aa898ea121a41afda8498dd13c523eff87ef024dcc8c3c839fe4ad587c855e59d87818a24a8c6ffd6ce57eb463d3c5e671e940b394f73c9b6ef64806259f71b0b433943786a60f95434a208f5f630e7d1fb28674eecba555410fc56a0d1404ed02583a73ca07c412985358ca41d2766517cc59437e72af6e6abdcd1787422318360448a8f8ee9fd334fa7e0d9ce78d7dedc4af7e689b13c0b61c1b907b", 0xa2}, {&(0x7f0000000140)="98f88003cba03c60456319e2e9b220fd3e7a272ca8404ce09d94a9b883bd00d64593d642d6e9968383807f14377ed31b13047a947ddeb458bbd8ecb97b46475a5fe0a91bd6d3ba534d2911baa6dc8a0ce26c03a04b544c285d4daefb921b7ed366cf62831cf7ffe0d3025e9ebaaa29803bbab4f7531c3124c74603677b9e37430e006c1da7cb705cb6cd57eb5593e5b34ba9d6343134f7a95543057ebbaf1ea49f35ee4ffc1206ddc48626f7ef463cf7f88893944cd6", 0xb6}, {&(0x7f0000000200)="f7335dcf36aa02578ae107024f234efa0e95d52d607be93eecd24bac63307e69ce5f9af6c2cda5de6a0a5b3aad3ebb2334d812c8b91865368321387be2c18ccce440edee4e0da42795c5a39550567c814e60e346ccc7edfeee33d2145906f1340359f006680a54713a715a6061daf92b0bfaf9d7f0ad292bf0301708abc0e1aae5fabe284f2e358ed31370daf62dba07da6031fac6f24b254741960b8e1680c64a81345675c960e6e40066a0216b5b1cf66a77098ba6dea973e591e0d75dda6fbdd2936f8e18de738e60397511f25251667a0c4a188f4d615a0eb990c6ae11c3a201726ccadbc87026af36064ff6a30153e8552e", 0xf4}, {&(0x7f0000000300)="b1323bbf3738c82164672a8e08d249e681862ab43967d3138282c870b00d3631f159d8ad943fd3c332a867115b8cb95462578e1cd71b609c64e882c26ebba93e8e1f1d9e527749adb26c3bfdb23a6acc98cabba7df8a7704d7ed749f51fccb2c56ad09b46e3aa5978c46b86df74bbac9453861fddad86c9e458cce9ac27dcd2121ca7df0cd0fcf45b7f922823bfa09e42d74982906a87ff5dc29f297a6b5cc1bfa3e517c0beeb7e3d7226bdb7c077d8b43a54b0d3647ef5ce3df2d6ae7777208db0e10a8a7ec0209efc6aeee340a61eb717fb5bc7b775ae05befd1091243a92ce3ee22dd17296aae2a3e1ff6529273ef2d", 0xf1}, {&(0x7f0000000400)="8d4b1afb3ad45da74ef7d6bd3574c7fa8a527854f0b04e7b71acf1fac113b558b637189c23c206e538325285a0367e7dd16a8b9b5985ea440ee75144315e777f78059c89918a93bca4403f05fd388bc050cfc4b6df69673e728c6049747d6e1ab159540e33d8642a44ee3163552c5e077e4ac36cfb0a4b43d6fbff22b737b50c049289a0a6221ce6cd7335f9b518840d600a57d66da427c55d8f22ac8b2b26b79d0bcbf37a8f0ceb3b54603f684fac130bc7344bd91c17e0e5b35af4b1bfe1e6cc626b38313706b1a843f57b7977775f663c3924603ccf33d2f1cbe3424d68710982e62e", 0xe4}, {&(0x7f0000000500)="86dee2338cdba297be673c5805c556adf959417838fff75ffdd345e472898b701abd45dd98366fa18072a4cbe046bb09b31d1757bda235da681cf6ae944a5b275806178a9a6ea6a5962f13128859f55676735111c613006ff38fc3bcdd01d492345d9e35b39f3f18074526175f2b93fc00878009b02bac6f920f4672c60ac8bf955c067d117bb03da652797ab9755e676dfc8ed5b3ea7fe0976e525d45eec37bfb510c2cf17c8fe54a4cd756bb480d33787286c7975044345c29c1a7bbbef0", 0xbf}, {&(0x7f00000005c0)="06ceb1cba8ca792ee6b87d60b58dbe25a621f90a23f78c9e83cb0b394ebb68ddb1e0b0a2bb73502172f9f77feaa4fefd620d3bb4da745237d2db7fb12ed792b1a012ecaec03d3581d9c79d27376cfb80e7c7600074cb9d66e631342eb8ed53af265d727651736bec8a28bb94f466ec213ad0213d817cd7c86200aec07326f02a", 0x80}, {&(0x7f0000000640)="cbb3dd82551fff9d5af9495c626803fc192463200d89f46e772bff69b91d7df4b536de871dfa72e71b21cbe5c7d08d63be1424", 0x33}], 0x8, &(0x7f0000000780)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x401, 0x8002, 0x1000, 0xf62, 0xae, 0x8, 0x4, r1}}], 0x30, 0x20008810}, 0x20000081) (async) sendto$inet(r0, &(0x7f0000000800)="d8f33422d34d9d18d478da414dcc412d3422a850e1272fafad88d7659b320b504598d3", 0x23, 0x10, &(0x7f0000000840)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x138, 0x0, 0x100, 0x2, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1660dd21}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff80000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x11c}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10000}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x18003, 0x0) write$tun(r5, &(0x7f0000000c00)={@void, @void, @llc={@snap={0xab, 0xaa, "a4", "64a65f", 0x1, "2ce792fcf79b98aaf38d0e06a96d9c66e13735a6a3dc42b4e4e499ea030b8680de9915d723079e4e78ff4faf9b96e8a9737b45605c26344a617fabb88f832d115e5be602"}}}, 0x4c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000000c80)={{r4}, "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"}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r6) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x34, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc041}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001dc0)={'hsr0\x00', 0x0}) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001f80)={r1, 0x3, 0x3, 0x4, 0x9, 0x10000}, &(0x7f0000001fc0)=0x14) sendmsg$inet_sctp(r2, &(0x7f0000002080)={&(0x7f0000001e00)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001e40)="82d9cdbe5dd8f12ec84ccaf453fae1b599ad13b607825043e843342343f40b34f7ec3729995ca22e8d8c190736429a41c81b555b127e577a64d0b474bac5c1319d56ea3d09089512d544f8fca9d3ada4a589b66e86e77e0ebe533f83008254849c243f3bab652d65b6824f87cfe890e7", 0x70}, {&(0x7f0000001ec0)="0a3c084fba286e98df9c47dd6a7fce4fafaccc782bf68345e94f0e4d87cc15021472829970fa1e82a0f8984cc093bbe2e9942375feb1a676860c05a7467b7161b64d749886f865af6a", 0x49}], 0x2, &(0x7f0000002000)=[@sndrcv={0x30, 0x84, 0x1, {0x1000, 0xe51, 0x208, 0x5, 0x8, 0x5, 0x2, 0x9, r1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xfffffff7}}, @sndrcv={0x30, 0x84, 0x1, {0x3000, 0x9, 0x10, 0xabd, 0x40, 0x1, 0x1, 0xa, r9}}], 0x78}, 0x800) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async, rerun: 64) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000020c0)={0xffffffffffffffff, r8, 0x25, 0x8, @void}, 0x10) (rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002100)={r10, 0x9c, 0x7}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x2c, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xb9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000002) r13 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_IOC_ASKUMOUNT(r13, 0x80049370, &(0x7f0000002280)) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000022c0)=[@in6={0xa, 0x4e22, 0x2def, @remote, 0x9}, @in6={0xa, 0x4e23, 0x1, @local, 0x7ff}, @in6={0xa, 0x4e20, 0xd, @local, 0x80000001}, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e20, 0x8, @loopback, 0x575}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb8) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000023c0)={&(0x7f0000002380)='btrfs_add_block_group\x00', r4, 0x0, 0x8c0}, 0x18) (rerun: 32) 15.897279575s ago: executing program 1 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x401) getsockopt$ax25_int(r1, 0x101, 0x19, &(0x7f0000000640), &(0x7f0000000680)=0x4) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r3, 0x3a, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x3ec0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=r2], 0x34}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x21, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x2, 0x6, 0x7, 0x7, 0x100, 0x1e}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6090efd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, @tail_call, @map_fd={0x18, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, @xdp=0x25, r8, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x7, 0x8, 0x4228}, 0x10, 0xffffffffffffffff, r7, 0x3, 0x0, &(0x7f0000000580)=[{0x2, 0x5, 0x3, 0x1}, {0x4, 0x4, 0x3, 0x1}, {0x1, 0x2, 0x5, 0x5}]}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x400c000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010070797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000100000008000b400000000024000480200001800e000100627974656f726465720000000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002deb91fce6dd0c8e0200000018000180140002006970766c616e3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) ppoll(&(0x7f0000000600)=[{r5, 0x101}], 0x1, &(0x7f0000000640)={0x0, 0x3938700}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) 15.871371134s ago: executing program 0 (id=1330): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0010000160001000000000000000000ff010000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff040000000000000000000000040000001000000000000000000000000000000002000000b1a0010008000c00c40000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000e4000683fe80"], 0x1f0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f0000000040)=0x2, 0x4) 15.841793043s ago: executing program 4 (id=1331): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000140)={0x7fffffff, 0x8000000000000000, 0x2, 0x8, 0x1, [0x5, 0x10001, 0x8, 0x2]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x6c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x6c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000800ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000030000000008000000000000000000007f00000100000000000000000000000000000000320000000000000000000000000000000000ffff7f0000010000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c00000000000000e00000010000000000000000000000000300000000000000000000000000000000000000fc000000000000000000000000000001000000003c0000000a000000fc010000000000accb6e156b4743068732ab9fa209"], 0x23c}}, 0x0) 15.7656779s ago: executing program 2 (id=1332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="4199b4b3488b1b451848eb2c000000000000000000000000711231000000000064ba0efaf41025de3cc7f36fcd99f3dabb0393b5706a0a09d31fde05c5f4d9dd328ab1ddb2ef8a3af1649f8c57119f26c8509b2ccd1f20ca57"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100064e25761660104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300001842010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005000c0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 15.76489253s ago: executing program 3 (id=1333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c003500000000000000000008002e800400328008002f"], 0x30}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0x14) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0xd2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x1e, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xc, 0x9, 0x1c, 0xfffffffffffffffc, 0xb}, @alu={0x7, 0x1, 0x8, 0x0, 0x3, 0xffffffffffffffff}, @generic={0x43, 0x0, 0x5, 0x400}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1d, &(0x7f00000013c0)=""/29, 0x1f00, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x4, 0x9, 0xcb0, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001600)=[0xffffffffffffffff, r7, r8], &(0x7f0000001640)=[{0x5, 0x3, 0x2, 0xa}], 0x10, 0xa}, 0x94) 15.670712423s ago: executing program 4 (id=1334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) 15.646125241s ago: executing program 0 (id=1335): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x6a, "7fcbd914a2e1afc27e51f5f1fbc8e66172ea867c2bf6508b722b3eaa76ae8c0b87f0801716779a499225082606d14c5bd4956474e6321bc41f7e18070a88cb0ea422533f32abdd0ac30334034e54853d96d299a699e17d6893b1d18c4ec99955d72a4a8e0abd6eeab76b"}, &(0x7f0000000100)=0x8e) close(r0) socketpair(0x8, 0x5, 0xf9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8850) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}, [0x2, 0x9, 0x4, 0x67, 0x5, 0x1, 0xffffffffffffff7f, 0x9, 0x7, 0x1, 0xfffffffe0000000, 0xb, 0x1f, 0xffffffffffffffff, 0x7fffffffffffffff]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x77a9, 0xeb85, 0x2, 0x0, 0x2, 0x8, 0xf56, 0xcae, r5}, &(0x7f0000000480)=0x20) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000004c0)={0x2c, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @mcast2}]}, 0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r6, 0xbda05000) ioctl$int_in(r0, 0x5452, &(0x7f0000000500)=0x1) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000540)={r5, 0x91}, &(0x7f0000000580)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x3, 0x7, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x10, 0x6a0fd4c45a44ed41, [{0x1, 0xa, "ac100fea03a79938"}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x9, "0eb9b273a38e10"}, {0x1, 0x9, "9220c093d05c14"}]}, @generic={0x88, 0xc, "7336a36e2bd091f176bf"}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0xa2, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x8c, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x5, 0x400, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0xe5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x24, 0x43, 0x0, 0x6, [0x5, 0x4, 0x5, 0x0, 0x3, 0x7, 0xffffffff, 0x1]}, @end, @noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000d00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80080040}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1a8, r9, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x14c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4008800}, 0xc001) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r14, &(0x7f0000000f80)={&(0x7f0000000d40), 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xdc, r15, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0xdc}}, 0x400) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000fc0)) 15.601745537s ago: executing program 1 (id=1336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r1, 0x118, 0x3, 0x0, &(0x7f00000003c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000000008008000100", @ANYRES64=r2], 0x38}}, 0x10) 15.596819705s ago: executing program 2 (id=1337): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="08d35866", @ANYRES16=r2, @ANYBLOB="00020cbd70100400000005000000050014000900000008000c00a80a000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa368100000086dd60010100001611fffe8000000000000000000000000000bbfe0000000000000000000000aa00000e220016907802030000000000007e581ba68817000000"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000000c0)={r3, 0xe, 0x1, 0x3}) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(cast6-generic)\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(cast6-generic)\x00'}, 0x58) socket$inet6(0xa, 0x800000000000002, 0x0) (async) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r8, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x30}}}], 0x40}}], 0x1, 0x400c404) r9 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0xe4, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r9}, @generic="f00751b438d8dd6af9ece500ab947dc3f1a8dfd799bfafc8792fe389fc39ffbf9555067d9760d34536cea69399a5175c3104565df98b4b15979df46c432b9964b1dc6627aabac49bac238fa1fd5b63636d5646d26c4595f3e73927614b4896c182f1efeffdcd4ba7cb48ff479e253190ef36179d9fe68a2a1a86a53688b6331a8128a02522acef76926a999ca566c8523c869bcd0d2392c9c9370d65d0bdd5cf2067f1278f885dfde8c0437d4cdce54011fcfe9933ab15139054d36a4dc590fdb2118e0b925be174"]}, 0xe4}}, 0x20000080) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0xe4, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r9}, @generic="f00751b438d8dd6af9ece500ab947dc3f1a8dfd799bfafc8792fe389fc39ffbf9555067d9760d34536cea69399a5175c3104565df98b4b15979df46c432b9964b1dc6627aabac49bac238fa1fd5b63636d5646d26c4595f3e73927614b4896c182f1efeffdcd4ba7cb48ff479e253190ef36179d9fe68a2a1a86a53688b6331a8128a02522acef76926a999ca566c8523c869bcd0d2392c9c9370d65d0bdd5cf2067f1278f885dfde8c0437d4cdce54011fcfe9933ab15139054d36a4dc590fdb2118e0b925be174"]}, 0xe4}}, 0x20000080) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000300)={r3, r0, 0xfff, 0xb4, &(0x7f0000000240)="f7b34fbe582b2141eb70bf11deb8103226e9b68c5f9269e8c5a11c82a32941ed1e2b8be63e55cf3bcccdb660642ac490b8a6b12432991bc841ba265b506542f5de48fb1af0b6740311972ffaa2f9e85799f3c456c5ce4eabed91494c5aaf20ffe02347f6982f96386f8a137360d6de4987984f146bc8da04743e0f512e35632a8763136119830ff3faae6aa5fd40c575b7be397c440327ce2487d8e45489612ef8a747cf97d7556e98a241e1ba1561b929e4b29f", 0x5, 0x0, 0x0, 0x1, 0x800, 0x1, 0x95, 'syz1\x00'}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000004c0)={r11, 0x3, 0x6, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) 15.555232971s ago: executing program 3 (id=1338): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000030000000000000f020000000000000000000003000000000100000001000000000000000000005f00520a9f8c0647762e919835aba36e8f900b9865e1146eba27d9db43f335f9c2f32da75436b8fbcd9255be21a5d623e7ab75fc65d83cf735275b13fd19ea6660fed14db981fa791f04a98c2dc423ba530cf57125ba385ce9cb5d30b8bfd5d91bb9d51372ad2df96129d182c86e44eed8c3dd769a15bb10b26ae63a3da6b50cd4f92c23f7a638e0bcb2616b06e121f725afc7d0b447f965e3952172304977976524ce1e048b6076644701273d79071dfb9f6a17"], 0x0, 0x41}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="98020000", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf259b00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x6001}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x2b4, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x800, 0x44}}}}, [@NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x2}, {0x7, 0x4}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0x2}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x3, 0x5}, {0x1, 0x3}, {0x2, 0x1}, {0x6, 0x3}, {}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0x2}, {0x0, 0xa}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x9}, {0x2, 0x9}, {0x5, 0x7}, {0x2, 0x8}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x1}, {}, {0x7, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {}, {0x2, 0x7}, {0x6}, {0x3, 0x2}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x4}, {0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x6, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0x1}, {0x3, 0x6}, {0x4, 0x9}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x6, 0x36, 0x6c, 0x2, 0x1c, 0x3, 0x12, 0x30, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x2, 0x4, 0x3, 0x2, 0x6, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0xa}, {0x0, 0x9}, {0x5, 0x3}, {0x0, 0x7}, {0x7, 0x5}, {0x5, 0x9}, {0x5, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x1, 0x36, 0x6c, 0x5, 0x1, 0x16, 0x60, 0x0, 0xc, 0x18, 0x48, 0x24, 0x6c, 0x60, 0x16, 0x36]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x9, 0x4, 0x6c, 0xc, 0x4, 0x30, 0x9, 0x4, 0x30, 0x30, 0x60, 0x16, 0x60, 0x18, 0x12, 0x12, 0x48, 0x60, 0x12, 0x9, 0xb, 0x16, 0x1b, 0x16, 0x5, 0x60, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6a, 0x9, 0x0, 0x40, 0xff, 0x4, 0x3, 0x10]}}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xea, 0x3c, 0x7ff, 0x2, 0x1, 0x6, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x6000, 0x8, 0x4be6, 0x5, 0x7, 0x7]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x1}, {0x7, 0x1}, {0x3, 0x6}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x5, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x6}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x1}, {0x4, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x3b, 0x101, 0x9, 0x40, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x1, 0x7}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x7}, {0x0, 0xa}, {0x7, 0x5}, {0x3, 0x7}, {0x5}, {0x1}, {0x5, 0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x4}, {0x3, 0x7}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x2, 0x8}, {0x7, 0x6}, {0x2, 0x5}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x0, 0x9e1, 0x100, 0x1, 0x7, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0xe, 0x8, 0x52, 0x5, 0x2, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x80, 0x1, 0x9, 0x1f1, 0x2, 0x3]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x7}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x4}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0xa}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0xa}, {0x2, 0x9}, {0x4, 0x4}, {0x7, 0x1}, {0x4, 0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x6}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0xa}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40800}, 0xc0) 15.417643396s ago: executing program 0 (id=1339): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000030000000400000060047866726d30000000000000000000000076657468315f766c616e000000003d862b0e341300006970366772657461703000000000000076657468315f746f5f68737200000000aaaaaaaaaa4100000000ff00aaaaaaaaaa2200ffff00ffff6e00000016010000460100004e464c4f470000000000000000000000000000000000000000000000000000005000000000000000090000000700030000000000a5ecc33c8098bd0cfd5f4b6c99ce611e76187a16838331311491c4572a2e254445042fe6977692743457dab959c48f3fe65c0480f2bd5eb4d27f089cda6251c5000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000feffffff000000000500000005000000000076657468315f746f5f6261746164760076657468305f746f5f7465616d00000070696d367265670000000000000000006e723000000000000000000000000000ffffffffffffff00ff0000ffaaaaaaaaaabbffff000000ffe6000000160100004602000074696d650000000000000000000000000000000000000000000000000018000000000000000400000001ffffff2a3d0000f8310100feffffff03030000636c757374657200000000000000000000000000000000000000000000000000100000000000000072000000000000000900000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000006000000000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000100000073797374656d5f753a6f626a6563745f723a6770675f6167656e745f657865635f743a733000"/1052]}, 0x494) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b00)=@broute={'broute\x00', 0x20, 0x4, 0x538, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000005c0], 0x0, &(0x7f0000000040), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x72, 0x2, 'wg0\x00', 'ip6tnl0\x00', 'wlan1\x00', 'vcan0\x00', @random="d01e27983be3", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x9, 0x41, 0xf8, 'veth1_to_bridge\x00', 'wg2\x00', 'pimreg1\x00', 'team_slave_0\x00', @link_local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0xff], 0xa6, 0x166, 0x196, [@realm={{'realm\x00', 0x0, 0x10}, {{0xffffffff, 0x2}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x3ff, 0xff, 0x7f, 0x1, 0x0, "4d09bf716f23e611957594b64a6c911871558e267a5e0eeb43918eb498255c1bf43d59a6cfa3b621bfd1da0bd5fdb76a161d299197c5aa72ff32cc96f52f67ea"}}}, @common=@ERROR={'ERROR\x00', 0x20, {"4d7ed1925afed26cde4839e7ddfb9b264c0cd3f92d8ef0347efb8a109f64"}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x11, 0xa01, 'vlan0\x00', 'macvlan0\x00', 'ip6tnl0\x00', 'wg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0xde, 0x12e, [@state={{'state\x00', 0x0, 0x8}, {{0x8}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x7fffffffffffffff}, {0x39}], 0x0, 0x2}}}], [], @common=@log={'log\x00', 0x28, {{0x0, "150255cffb95a95a998e0f83d0c0e5d2d96e3319d15d4c864d7af5435125", 0x1}}}}, {0x3, 0x8, 0x8914, 'veth0_to_team\x00', 'dvmrp0\x00', 'vlan0\x00', 'veth0\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff], 0x9e, 0x106, 0x13e, [@state={{'state\x00', 0x0, 0x8}, {{0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}]}]}, 0x5b0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1}, 0x8) 15.417176953s ago: executing program 4 (id=1340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r2, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x30000001) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'ip6tnl0\x00', @multicast}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @multicast1, 0x4e21, 0x8, 'sed\x00', 0x0, 0x2, 0x400d}, 0x2c) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f00000007c0)={0x15, 0x101, 0x7, 0x5, 0x3, 0x81}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00005aaa04117b88f7ffff0000ff660000fc2f907800001fe1e00000018000810000089078000000000000000000000000000028dd4282e7fb772b4c2359c373181d267377ba297bd1668f998017ca5cc3beb5101172f8131c8780e0b11a6ebb80fa82a1731156d3d5e3671b308fe3fa5e3b8746e3da2a59c0321e8979834eb438949b9b420afffab8cf861ecaffc5df8f91138eeb4f25247050753fbbcce233c733bc260ba5de6662bb10a827fcb3e87bd9c2cba383c0d188023f47a9dc730f519fa33425ce2122733e612ec42bfa2713e06de5ecc48f89e045ba072c6ad54990c78c9a864a17154ffb1fcc3702153786c532"], 0x2e) 15.371064402s ago: executing program 3 (id=1341): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x1, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff7d, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x60000000, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0xa0, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0xfe, 0x10, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc10, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x4, 0x400, 0xa000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x20009, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r7, 0x1, 0xd8, 0x6, @remote}, 0x14) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r10) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r11, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x88, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x65, 0x6, "7dc52781c82558b825c1287941c0581432b56bbb86c57a37ba6f2e44fb927a56ebb8d25eb1e963bed874b194d93d67d1229a26787b5288e4a6b2438db3bd07632e4d304764405b264016945cbfe9fe84ca59e8b47ced52ff601b4b24926684857a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) 15.35783667s ago: executing program 1 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x9d, 0x3, 0x5, 0x7]}, &(0x7f0000000080)=0x54) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, &(0x7f00000002c0), &(0x7f00000002c0), 0xd9, r2}, 0x38) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0x2}, 0x44) write(r3, &(0x7f0000000000)='K\a\x00\x00', 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 15.309560678s ago: executing program 2 (id=1343): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000040)=""/206, 0xce}, {&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/102, 0x66}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/163, 0xa3}, {&(0x7f00000014c0)=""/110, 0x6e}], 0x8) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f00000015c0)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x38, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4021}, 0x4) (async) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000001740)=""/111, &(0x7f00000017c0)=0x6f) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001800)={0x6, 0xfffffffffffffff7, 0xfffffffffffff2c9}) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001840)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x8, 0x9cf, 0x7, 0x4, 0x5}, &(0x7f0000001900)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001940)={r4, 0x2}, &(0x7f0000001980)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r2) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x18404000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x68, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "92e5c66e85890ee6e9dff1f26b4c153c0cb13ba6a790364f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x50) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001b80)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001bc0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001c00)={r8, 0x10}, &(0x7f0000001c40)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001e80)={'ip6gre0\x00', &(0x7f0000001e00)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x8, 0x2, 0x22, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20, 0x7, 0x9, 0x2}}) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001f40)={0x7, 0x0}, 0x8) (async, rerun: 64) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f80)={0x0, 0x3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x9, 0x12, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x2, 0xa, 0x7, 0x2, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001d40)='syzkaller\x00', 0x0, 0x78, &(0x7f0000001d80)=""/120, 0x40f00, 0x12, '\x00', r9, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001f00)={0x3, 0xc, 0x9, 0x412}, 0x10, r10, r2, 0x6, &(0x7f0000001fc0)=[r11], &(0x7f0000002000)=[{0x4, 0x5, 0x8, 0xb}, {0x3, 0x2, 0x3, 0x1}, {0x2, 0x1, 0x2, 0xc}, {0x1, 0x5, 0x7, 0x7}, {0x5, 0x5, 0x1, 0xe}, {0x5, 0x1, 0x6, 0x2}], 0x10, 0x7}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r11, 0x80286722, &(0x7f0000002200)={&(0x7f0000002140)=""/170, 0xaa, 0x6, 0x6}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x51a}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002340)={'wlan1\x00'}) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r12, &(0x7f0000002380)=@ll={0x11, 0x9, 0x0, 0x1, 0x7d, 0x6, @local}, 0x80) (async, rerun: 32) r13 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r13, 0x89fb, &(0x7f0000002440)={'sit0\x00', &(0x7f0000002400)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xc, 0x1e}}) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f00000024c0), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000002640)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002600)={&(0x7f0000002500)={0xf4, r14, 0x424206496fd59230, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc267}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6c}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15.251850333s ago: executing program 0 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40000) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000106ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x9) (async) r11 = accept(r2, 0x0, 0x0) (async, rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r14], 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r13, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40051}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x4e22, 0x4, 0x4e21, 0x2878, 0xa, 0x20, 0x20, 0x6c, r1, r15}, {0x5, 0x3, 0x38000000, 0x845, 0x7, 0x3, 0x6, 0x8}, {0x9c3, 0x9, 0x8, 0x9}, 0x8001, 0x6e6bb8, 0x2, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d5, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x4, 0x2, 0x5, 0x40, 0xfffffffb, 0x6}}, 0xe8) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="d0ba00000000000002004e21ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000400"/272], 0x110) (rerun: 32) 15.149348144s ago: executing program 2 (id=1345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8624}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8624}}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) (async) 15.062922524s ago: executing program 1 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffffffffffe31, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000b5d99bbf0000d20000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r5, &(0x7f0000000000)=0x8, 0x12) (async, rerun: 32) close(r5) (rerun: 32) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={r5, r3, 0x0, r3}, 0x10) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0xc) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xeb, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x9}, 0x8) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@ifindex=r9, r8, 0x5}, 0x20) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) (rerun: 64) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) 14.036161427s ago: executing program 0 (id=1347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000001d80)) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom$inet(r2, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x140e, 0x200, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x8c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x8c}}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) (async, rerun: 64) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc4930dc182c43eaf76888a9702b2708618386d9b2458b5a03934e13cc76a7761b2378caeb3f900263aa7a1cb43bc528664f489674b43464570a6b0eed2b6a93d507cab69458eee5df069a89bcd9770fa81af3a342b7ac2f41ce6f333450f6aeb9d065c3350a9995fea5c61c3213a3c3ff116419a04d", @ANYRES16=r7, @ANYBLOB="00022abd7000fcdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000881}, 0x24040800) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), r6) sendmsg$SMC_PNETID_DEL(r6, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x38, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040015}, 0x2000850) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (rerun: 64) 14.035756385s ago: executing program 3 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000400)='GPL\x00'}, 0x94) (async) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4001) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 14.034887139s ago: executing program 4 (id=1349): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080600b88b491ef1f101080006040001aaaaaaaaaa16ac1414bbaaaaaaaaaa14ac1414bb00000000000039c055fb0d84bc1685136e2c6aeac033941a90c60a2a7cc1eb28719845735461fd8e1c3106502aa1f8ad5140d3ac4c95258a56ebbae8a0d22e6f8ab288770ad194108757e92b81752904b6c0ed7a1a90658547bd41d5e3fd8e5a89908dd3d255069c49ccc183aa365f1a3a02a50fcd8fd12a9b8bf4cd519d25bb3b80709d4d12cbf7ae2ec0596c4d4b11ae7e11371cd6ca240ab7608bec3b503478b66393ebe8883acf0758db8bc9d49ce8ff8a"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x16, 0x0, 0x290) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) shutdown(r0, 0x1) listen(r1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 14.030837628s ago: executing program 3 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="00000000150000000e000000892f", 0xe}], 0x1}, 0x240440c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffc0}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x34}}, 0x0) 0s ago: executing program 32 (id=1347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000001d80)) (async) r2 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom$inet(r2, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x140e, 0x200, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x8c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4, 0xa8, @random}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x8c}}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x36}, {0x5, 0x8e, 0x1}}]}, 0x4c}}, 0x8000) (async, rerun: 64) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc4930dc182c43eaf76888a9702b2708618386d9b2458b5a03934e13cc76a7761b2378caeb3f900263aa7a1cb43bc528664f489674b43464570a6b0eed2b6a93d507cab69458eee5df069a89bcd9770fa81af3a342b7ac2f41ce6f333450f6aeb9d065c3350a9995fea5c61c3213a3c3ff116419a04d", @ANYRES16=r7, @ANYBLOB="00022abd7000fcdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000881}, 0x24040800) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), r6) sendmsg$SMC_PNETID_DEL(r6, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x38, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040015}, 0x2000850) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 68.247566][ T5812] cgroup: Unknown subsys name 'net' [ 68.354616][ T5812] cgroup: Unknown subsys name 'cpuset' [ 68.363469][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.723038][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.464904][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.471448][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.202174][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.210429][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.219264][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.227522][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.236060][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.243054][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.243580][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.250775][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.259432][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.265688][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.272212][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.288697][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.289014][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.304744][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.304817][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.320421][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.329364][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.336942][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.338755][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.344315][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.358176][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.358263][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.377911][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.402487][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.414745][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.943040][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 73.077698][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 73.218979][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 73.305552][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.313508][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.320993][ T5824] bridge_slave_0: entered allmulticast mode [ 73.328456][ T5824] bridge_slave_0: entered promiscuous mode [ 73.338255][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 73.375456][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.382872][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.390066][ T5824] bridge_slave_1: entered allmulticast mode [ 73.397435][ T5824] bridge_slave_1: entered promiscuous mode [ 73.456951][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.464222][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.471445][ T5823] bridge_slave_0: entered allmulticast mode [ 73.478436][ T5823] bridge_slave_0: entered promiscuous mode [ 73.486036][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.493260][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.500410][ T5823] bridge_slave_1: entered allmulticast mode [ 73.507897][ T5823] bridge_slave_1: entered promiscuous mode [ 73.514772][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 73.589122][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.600841][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.667670][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.688172][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.695436][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.703304][ T5822] bridge_slave_0: entered allmulticast mode [ 73.710210][ T5822] bridge_slave_0: entered promiscuous mode [ 73.746651][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.772408][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.779570][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.786807][ T5822] bridge_slave_1: entered allmulticast mode [ 73.794080][ T5822] bridge_slave_1: entered promiscuous mode [ 73.803012][ T5824] team0: Port device team_slave_0 added [ 73.851791][ T5824] team0: Port device team_slave_1 added [ 73.874744][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.882001][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.889148][ T5827] bridge_slave_0: entered allmulticast mode [ 73.896341][ T5827] bridge_slave_0: entered promiscuous mode [ 73.905398][ T5823] team0: Port device team_slave_0 added [ 73.939172][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.951643][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.960920][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.968226][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.975503][ T5827] bridge_slave_1: entered allmulticast mode [ 73.982762][ T5827] bridge_slave_1: entered promiscuous mode [ 73.990731][ T5823] team0: Port device team_slave_1 added [ 74.055313][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.062438][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.089158][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.100759][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.108565][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.115791][ T5826] bridge_slave_0: entered allmulticast mode [ 74.123068][ T5826] bridge_slave_0: entered promiscuous mode [ 74.166640][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.173827][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.201536][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.213118][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.220276][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.227562][ T5826] bridge_slave_1: entered allmulticast mode [ 74.234877][ T5826] bridge_slave_1: entered promiscuous mode [ 74.243330][ T5822] team0: Port device team_slave_0 added [ 74.262239][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.272102][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.279056][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.305719][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.325535][ T5822] team0: Port device team_slave_1 added [ 74.344968][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.354799][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.362266][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.388210][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.420420][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.421921][ T5840] Bluetooth: hci0: command tx timeout [ 74.429932][ T5844] Bluetooth: hci3: command tx timeout [ 74.438607][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.477025][ T5827] team0: Port device team_slave_0 added [ 74.485278][ T5827] team0: Port device team_slave_1 added [ 74.501621][ T5830] Bluetooth: hci1: command tx timeout [ 74.503241][ T5844] Bluetooth: hci2: command tx timeout [ 74.507686][ T5840] Bluetooth: hci4: command tx timeout [ 74.549668][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.557021][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.583702][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.639368][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.646963][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.673030][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.686193][ T5826] team0: Port device team_slave_0 added [ 74.697655][ T5824] hsr_slave_0: entered promiscuous mode [ 74.704377][ T5824] hsr_slave_1: entered promiscuous mode [ 74.722354][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.729326][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.755490][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.774692][ T5826] team0: Port device team_slave_1 added [ 74.799138][ T5823] hsr_slave_0: entered promiscuous mode [ 74.805767][ T5823] hsr_slave_1: entered promiscuous mode [ 74.812721][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 74.818510][ T5823] Cannot create hsr debugfs directory [ 74.824786][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.831847][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.857775][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.950925][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.958308][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.984290][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.012403][ T5822] hsr_slave_0: entered promiscuous mode [ 75.018623][ T5822] hsr_slave_1: entered promiscuous mode [ 75.025172][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 75.030905][ T5822] Cannot create hsr debugfs directory [ 75.066879][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.074080][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.100147][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.149667][ T5827] hsr_slave_0: entered promiscuous mode [ 75.156259][ T5827] hsr_slave_1: entered promiscuous mode [ 75.162834][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 75.168565][ T5827] Cannot create hsr debugfs directory [ 75.249873][ T5826] hsr_slave_0: entered promiscuous mode [ 75.256549][ T5826] hsr_slave_1: entered promiscuous mode [ 75.262924][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 75.268707][ T5826] Cannot create hsr debugfs directory [ 75.706864][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.720832][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.735151][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.755028][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.813995][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.846466][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.857951][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.869169][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.949510][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.965214][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.975900][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.996732][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.097333][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.110674][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.122770][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.133466][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.245480][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.290404][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.299474][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.310831][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.327743][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.342916][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.365736][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.372973][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.386348][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.419016][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.426238][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.455196][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.490378][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.502054][ T5840] Bluetooth: hci3: command tx timeout [ 76.502074][ T5844] Bluetooth: hci0: command tx timeout [ 76.516419][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.523896][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.581472][ T5844] Bluetooth: hci2: command tx timeout [ 76.583057][ T5840] Bluetooth: hci4: command tx timeout [ 76.586910][ T5844] Bluetooth: hci1: command tx timeout [ 76.611077][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.618325][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.634522][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.676618][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.683841][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.740649][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.747869][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.778077][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.877721][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.890072][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.926272][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.933556][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.957288][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.964547][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.007510][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.111223][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.162768][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.169945][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.199698][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.219203][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.226446][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.256244][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.272464][ T5823] veth0_vlan: entered promiscuous mode [ 77.300514][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.327550][ T5823] veth1_vlan: entered promiscuous mode [ 77.482158][ T5823] veth0_macvtap: entered promiscuous mode [ 77.504100][ T5824] veth0_vlan: entered promiscuous mode [ 77.517167][ T5823] veth1_macvtap: entered promiscuous mode [ 77.565824][ T5827] veth0_vlan: entered promiscuous mode [ 77.603502][ T5827] veth1_vlan: entered promiscuous mode [ 77.616132][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.629173][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.638011][ T5824] veth1_vlan: entered promiscuous mode [ 77.675994][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.718884][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.730522][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754654][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.794483][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.810854][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.835854][ T5827] veth0_macvtap: entered promiscuous mode [ 77.906601][ T5827] veth1_macvtap: entered promiscuous mode [ 77.968771][ T5824] veth0_macvtap: entered promiscuous mode [ 77.995954][ T5824] veth1_macvtap: entered promiscuous mode [ 78.020124][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.070025][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.094111][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.113092][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.143400][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.153540][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.165555][ T5826] veth0_vlan: entered promiscuous mode [ 78.188579][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.199280][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.245633][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.246428][ T5826] veth1_vlan: entered promiscuous mode [ 78.274033][ T1325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.283016][ T1325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.305781][ T1325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.314856][ T1325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.359506][ T1325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.380148][ T1325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.405173][ T5822] veth0_vlan: entered promiscuous mode [ 78.452477][ T1325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.472088][ T1325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.537356][ T5947] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.578414][ T5822] veth1_vlan: entered promiscuous mode [ 78.586920][ T5844] Bluetooth: hci0: command tx timeout [ 78.591613][ T5840] Bluetooth: hci3: command tx timeout [ 78.655915][ T5826] veth0_macvtap: entered promiscuous mode [ 78.661995][ T5840] Bluetooth: hci1: command tx timeout [ 78.671630][ T5840] Bluetooth: hci4: command tx timeout [ 78.672382][ T5844] Bluetooth: hci2: command tx timeout [ 78.686286][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.701381][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.713028][ T5826] veth1_macvtap: entered promiscuous mode [ 78.743941][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.760173][ T5822] veth0_macvtap: entered promiscuous mode [ 78.777461][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.803753][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.806562][ T5822] veth1_macvtap: entered promiscuous mode [ 78.824161][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.857601][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 78.891981][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.910914][ T4571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.914412][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.926398][ T4571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.960154][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.984489][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.027691][ T5954] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 79.044852][ T5954] bond1 (unregistering): Released all slaves [ 79.125431][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.147274][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.189935][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.200041][ T5960] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.234023][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.247606][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.321326][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.348806][ T5963] netlink: 'syz.3.11': attribute type 11 has an invalid length. [ 79.371799][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.389790][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.418369][ T5966] tipc: Started in network mode [ 79.423769][ T5966] tipc: Node identity 82deada9eb38, cluster identity 4711 [ 79.425428][ T5962] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 79.431909][ T5966] tipc: Enabled bearer , priority 0 [ 79.446268][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.447192][ T5962] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 79.469786][ T5962] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 79.470611][ T5967] netlink: 'syz.1.2': attribute type 25 has an invalid length. [ 79.619584][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 79.620196][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.638310][ T5975] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 79.651554][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.659045][ T5975] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 79.667234][ T5975] gretap1: entered promiscuous mode [ 79.673150][ T5975] gretap1: entered allmulticast mode [ 79.719977][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.733893][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.748928][ T5965] tipc: Disabling bearer [ 79.795815][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.817516][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.856699][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.866253][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.324434][ T5996] x_tables: duplicate underflow at hook 1 [ 80.446487][ T5992] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 80.596878][ T6009] netlink: 176 bytes leftover after parsing attributes in process `syz.3.22'. [ 80.619591][ T6006] netlink: 348 bytes leftover after parsing attributes in process `syz.0.21'. [ 80.622280][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22'. [ 80.654803][ T6015] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 80.681640][ T5844] Bluetooth: hci3: command tx timeout [ 80.745885][ T5844] Bluetooth: hci4: command tx timeout [ 80.746433][ T5840] Bluetooth: hci1: command tx timeout [ 80.751499][ T5844] Bluetooth: hci2: command tx timeout [ 80.845559][ T6023] tunl0: entered promiscuous mode [ 80.897147][ T6023] netlink: 'syz.3.26': attribute type 3 has an invalid length. [ 80.907060][ T6029] Zero length message leads to an empty skb [ 80.921335][ T6023] netlink: 9 bytes leftover after parsing attributes in process `syz.3.26'. [ 81.135286][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.227033][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 81.751916][ T6062] syzkaller0: entered promiscuous mode [ 81.777745][ T6062] syzkaller0: entered allmulticast mode [ 81.856436][ T6062] tipc: Started in network mode [ 81.884640][ T6062] tipc: Node identity 3a1bf57b475a, cluster identity 4711 [ 81.922746][ T6062] tipc: Enabled bearer , priority 0 [ 81.980688][ T6063] Bluetooth: MGMT ver 1.23 [ 82.019632][ T6057] tipc: Resetting bearer [ 82.092665][ T6057] tipc: Disabling bearer [ 82.245779][ T6082] netlink: 'syz.4.37': attribute type 23 has an invalid length. [ 82.265295][ T6079] syzkaller0: entered promiscuous mode [ 82.270817][ T6079] syzkaller0: entered allmulticast mode [ 82.372326][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.414103][ T6083] x_tables: duplicate underflow at hook 1 [ 82.544966][ T6096] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 82.681232][ T6103] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 82.691444][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'. [ 82.728956][ T6104] bridge_slave_1: left allmulticast mode [ 82.736017][ T6104] bridge_slave_1: left promiscuous mode [ 82.752591][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.794959][ T6104] bridge_slave_0: left allmulticast mode [ 82.801190][ T6104] bridge_slave_0: left promiscuous mode [ 82.820202][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.888759][ T6111] Cannot find add_set index 0 as target [ 82.896705][ T6111] netlink: 'syz.2.45': attribute type 17 has an invalid length. [ 83.166287][ T6124] netlink: 'syz.1.48': attribute type 2 has an invalid length. [ 83.360869][ T6129] bond1 (unregistering): Released all slaves [ 83.398350][ T6138] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.419227][ T6138] xt_SECMARK: invalid mode: 9 [ 83.453372][ T6138] xt_SECMARK: invalid mode: 9 [ 83.583449][ T6134] hsr_slave_1 (unregistering): left promiscuous mode [ 84.015211][ T6174] __nla_validate_parse: 9 callbacks suppressed [ 84.015225][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 84.441332][ T6196] xt_bpf: check failed: parse error [ 84.558068][ T6197] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 84.870080][ T6214] netlink: 'syz.1.71': attribute type 8 has an invalid length. [ 85.029344][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.076048][ T6217] veth0_macvtap: left promiscuous mode [ 85.119830][ T6226] xt_l2tp: invalid flags combination: 8 [ 85.128435][ T6229] xt_l2tp: invalid flags combination: 8 [ 85.584950][ T6256] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.605728][ T6257] sctp: [Deprecated]: syz.3.82 (pid 6257) Use of int in maxseg socket option. [ 85.605728][ T6257] Use struct sctp_assoc_value instead [ 85.934961][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 86.085299][ T6279] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 86.117828][ T6282] netlink: 348 bytes leftover after parsing attributes in process `syz.3.93'. [ 86.841499][ T9] cfg80211: failed to load regulatory.db [ 87.762047][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 87.770875][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 87.858085][ T6292] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 87.912283][ T6292] bond1 (unregistering): Released all slaves [ 87.953440][ T6290] netlink: 76 bytes leftover after parsing attributes in process `syz.1.95'. [ 88.772347][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 88.795335][ T6355] netlink: 256 bytes leftover after parsing attributes in process `syz.3.114'. [ 88.822365][ T6357] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 88.852324][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 88.906461][ T6357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.934235][ T6362] netlink: 'syz.0.116': attribute type 3 has an invalid length. [ 89.224681][ T6374] netlink: 'syz.2.119': attribute type 58 has an invalid length. [ 89.241558][ T6374] __nla_validate_parse: 1 callbacks suppressed [ 89.241752][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.119'. [ 89.264204][ T6383] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 89.404385][ T6383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.442049][ T6381] netlink: 'syz.2.119': attribute type 25 has an invalid length. [ 89.486004][ T6403] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 89.514122][ T6407] netlink: 'syz.1.127': attribute type 13 has an invalid length. [ 89.563152][ T6403] netlink: 'syz.3.126': attribute type 3 has an invalid length. [ 89.591131][ T6403] netlink: 172 bytes leftover after parsing attributes in process `syz.3.126'. [ 89.621586][ T6403] NCSI netlink: No device for ifindex 813332851 [ 89.816137][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 89.872659][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.130'. [ 89.894843][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.903338][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.084865][ T6430] sctp: [Deprecated]: syz.3.132 (pid 6430) Use of int in max_burst socket option deprecated. [ 91.084865][ T6430] Use struct sctp_assoc_value instead [ 91.148334][ T6438] syzkaller0: entered promiscuous mode [ 91.155836][ T6438] syzkaller0: entered allmulticast mode [ 91.240093][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 91.242253][ T6444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.603624][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 91.759333][ T6489] netlink: 'syz.0.147': attribute type 8 has an invalid length. [ 91.902608][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 91.924800][ T6499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.250923][ T6524] IPv6: NLM_F_REPLACE set, but no existing node found! [ 92.373130][ T6538] netlink: 'syz.2.159': attribute type 1 has an invalid length. [ 92.401221][ T6539] netlink: 'syz.1.158': attribute type 21 has an invalid length. [ 92.431198][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.159'. [ 92.444042][ T6539] netlink: 152 bytes leftover after parsing attributes in process `syz.1.158'. [ 93.075844][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 93.116345][ T5890] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 93.124925][ T5890] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 93.134456][ T5890] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 93.143943][ T5890] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 93.152475][ T5890] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 93.165713][ T5890] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 93.175905][ T5890] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 93.352527][ T6607] xt_SECMARK: invalid mode: 9 [ 94.146356][ T6660] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 94.156720][ T6654] syz.0.185 uses obsolete (PF_INET,SOCK_PACKET) [ 94.188245][ T6654] Bluetooth: MGMT ver 1.23 [ 94.275877][ T6675] netlink: 'syz.1.194': attribute type 17 has an invalid length. [ 94.286916][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 94.511854][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 94.665887][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 94.666466][ T6705] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 94.684680][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 94.822864][ T10] IPVS: starting estimator thread 0... [ 94.849250][ T6715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.206'. [ 94.914074][ T6714] IPVS: using max 30 ests per chain, 72000 per kthread [ 95.392299][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 95.466781][ T6749] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.587322][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 95.622885][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 95.639478][ T6760] syzkaller0: entered promiscuous mode [ 95.663197][ T6760] syzkaller0: entered allmulticast mode [ 95.708650][ T6760] tipc: Enabled bearer , priority 0 [ 95.728004][ T6759] tipc: Resetting bearer [ 95.768675][ T6759] tipc: Disabling bearer [ 95.780142][ T6766] tipc: Started in network mode [ 95.788451][ T6766] tipc: Node identity 12ab3ff694f8, cluster identity 4711 [ 95.800008][ T6766] tipc: Enabled bearer , priority 0 [ 95.905062][ T6767] tipc: Disabling bearer [ 95.918582][ T6783] netlink: 'syz.3.227': attribute type 2 has an invalid length. [ 95.998647][ T6779] syzkaller1: entered promiscuous mode [ 96.006807][ T6779] syzkaller1: entered allmulticast mode [ 96.590558][ T6827] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 96.610279][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 96.622452][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 96.654394][ T6829] bridge0: port 3(vlan1) entered blocking state [ 96.662850][ T6829] bridge0: port 3(vlan1) entered disabled state [ 96.669570][ T6829] vlan1: entered allmulticast mode [ 96.677299][ T6829] bridge0: entered allmulticast mode [ 96.694389][ T6829] vlan1: left allmulticast mode [ 96.707115][ T6829] bridge0: left allmulticast mode [ 96.956245][ T6850] delete_channel: no stack [ 96.963687][ T6840] delete_channel: no stack [ 97.086635][ T6860] netlink: 'syz.0.248': attribute type 7 has an invalid length. [ 97.118681][ T6860] netlink: 'syz.0.248': attribute type 8 has an invalid length. [ 97.497746][ T6873] netlink: 'syz.2.249': attribute type 11 has an invalid length. [ 97.539175][ T6875] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20003 [ 97.766559][ T6896] netlink: 'syz.0.260': attribute type 6 has an invalid length. [ 98.267778][ T6931] IPVS: Error connecting to the multicast addr [ 98.429611][ T6943] IPv6: sit1: Disabled Multicast RS [ 98.498341][ T6943] sit1: entered allmulticast mode [ 98.759265][ T6964] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 99.074827][ T6979] netlink: 'syz.0.285': attribute type 15 has an invalid length. [ 99.317271][ T6995] tipc: Failed to obtain node identity [ 99.323595][ T6995] tipc: Enabling of bearer rejected, failed to enable media [ 99.511968][ T7011] netlink: 'syz.4.296': attribute type 28 has an invalid length. [ 99.519757][ T7011] netlink: 'syz.4.296': attribute type 3 has an invalid length. [ 99.543946][ T7011] __nla_validate_parse: 16 callbacks suppressed [ 99.543965][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.296'. [ 99.686525][ T7019] team_slave_0: entered promiscuous mode [ 99.692403][ T7019] team_slave_1: entered promiscuous mode [ 99.700779][ T7019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.723714][ T7025] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 99.726258][ T7019] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 100.040637][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 100.060377][ T7052] bridge_slave_1: left allmulticast mode [ 100.072861][ T7052] bridge_slave_1: left promiscuous mode [ 100.090423][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.119149][ T7052] bridge_slave_0: left allmulticast mode [ 100.127890][ T7052] bridge_slave_0: left promiscuous mode [ 100.146009][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.239797][ T7063] netlink: 'syz.4.309': attribute type 4 has an invalid length. [ 100.266025][ T7063] netlink: 152 bytes leftover after parsing attributes in process `syz.4.309'. [ 100.363654][ T7063] `: renamed from bond0 (while UP) [ 100.432579][ T7071] netlink: 'syz.3.312': attribute type 1 has an invalid length. [ 100.494925][ T7076] wg1: entered promiscuous mode [ 100.500614][ T7076] wg1: entered allmulticast mode [ 100.510620][ T7080] netlink: ct family unspecified [ 100.534263][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.694910][ T7093] x_tables: duplicate underflow at hook 1 [ 101.210611][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 101.574540][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 101.595660][ T7166] netlink: 'syz.0.336': attribute type 11 has an invalid length. [ 101.640575][ T7166] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.336'. [ 101.685719][ T7175] xt_bpf: check failed: parse error [ 101.921282][ T7190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.343'. [ 102.031843][ T7200] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.348'. [ 102.089344][ T7204] netlink: 128 bytes leftover after parsing attributes in process `syz.4.349'. [ 102.097039][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 102.188783][ T7196] "syz.0.346" (7196) uses obsolete ecb(arc4) skcipher [ 102.369967][ T7221] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 102.527651][ T7231] pim6reg: entered allmulticast mode [ 103.158540][ T7283] gtp0: entered promiscuous mode [ 103.168962][ T7283] gtp0: entered allmulticast mode [ 103.179646][ T7291] 8021q: VLANs not supported on sit0 [ 103.678503][ T7326] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 103.966847][ T7353] nbd: must specify at least one socket [ 104.265837][ T856] IPVS: starting estimator thread 0... [ 104.362757][ T7372] IPVS: using max 33 ests per chain, 79200 per kthread [ 104.406251][ T7379] syzkaller1: entered promiscuous mode [ 104.412760][ T7379] syzkaller1: entered allmulticast mode [ 104.674846][ T7387] tipc: Started in network mode [ 104.679923][ T7387] tipc: Node identity f50000000000000005, cluster identity 4711 [ 105.042884][ T7416] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 105.068129][ T7416] __nla_validate_parse: 7 callbacks suppressed [ 105.068147][ T7416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.411'. [ 105.270848][ T7430] netlink: 'syz.2.415': attribute type 2 has an invalid length. [ 105.371645][ T856] IPVS: starting estimator thread 0... [ 105.462555][ T7437] IPVS: using max 34 ests per chain, 81600 per kthread [ 105.574006][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 105.828812][ T7454] pim6reg527: entered allmulticast mode [ 105.971946][ T7462] vlan0: entered promiscuous mode [ 105.977452][ T7462] vlan0: entered allmulticast mode [ 105.989337][ T7462] veth0_vlan: entered allmulticast mode [ 106.114455][ T7473] netlink: 'syz.4.429': attribute type 32 has an invalid length. [ 106.203509][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 106.425094][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 106.450745][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.464753][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.475605][ T7478] bond0 (unregistering): Released all slaves [ 106.497201][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 106.555595][ T7495] sit1: entered promiscuous mode [ 106.570861][ T7495] sit1: entered allmulticast mode [ 106.884124][ T7518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.118771][ T7533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.178459][ T7539] pim6reg1: entered promiscuous mode [ 107.187964][ T7539] pim6reg1: entered allmulticast mode [ 107.215744][ T856] IPVS: starting estimator thread 0... [ 107.421198][ T7544] IPVS: using max 31 ests per chain, 74400 per kthread [ 107.445714][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 107.471363][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 107.482059][ T7554] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 107.506796][ T7555] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 107.547129][ T7551] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 107.624945][ T7562] bond1: (slave gretap2): making interface the new active one [ 107.652706][ T7562] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 107.680562][ T7555] tipc: Enabling of bearer rejected, failed to enable media [ 107.978143][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 108.211233][ T7605] syz_tun: entered allmulticast mode [ 108.278546][ T7603] syz_tun: left allmulticast mode [ 108.395884][ T7621] sctp: [Deprecated]: syz.2.476 (pid 7621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.395884][ T7621] Use struct sctp_sack_info instead [ 108.656938][ T7638] bond1: entered promiscuous mode [ 108.670349][ T7638] bond1: entered allmulticast mode [ 108.684525][ T7638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.778123][ T7654] netlink: 'syz.2.486': attribute type 23 has an invalid length. [ 108.906093][ T7659] netlink: 1208 bytes leftover after parsing attributes in process `syz.1.485'. [ 108.906335][ T7663] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 108.921918][ T7659] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 108.930268][ T7663] team_slave_0: left promiscuous mode [ 108.958127][ T7661] openvswitch: netlink: IPv4 tun info is not correct [ 108.961260][ T7663] team_slave_1: left promiscuous mode [ 108.985948][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 109.176995][ T153] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 109.183815][ T7680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.044874][ T7720] tipc: Enabled bearer , priority 0 [ 110.056700][ T7720] syzkaller0: entered promiscuous mode [ 110.062750][ T7720] syzkaller0: entered allmulticast mode [ 110.108709][ T7720] syzkaller0: left promiscuous mode [ 110.114130][ T7720] syzkaller0: left allmulticast mode [ 110.125753][ T7719] tipc: Resetting bearer [ 110.178962][ T7719] tipc: Disabling bearer [ 110.399211][ T7757] __nla_validate_parse: 1 callbacks suppressed [ 110.399230][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 110.655472][ T7771] netlink: 294 bytes leftover after parsing attributes in process `syz.4.517'. [ 110.677699][ T7771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.732525][ T7776] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.519'. [ 110.759701][ T7776] trusted_key: syz.0.519 sent an empty control message without MSG_MORE. [ 110.807841][ T7787] ipt_REJECT: TCP_RESET invalid for non-tcp [ 110.885223][ T7778] netlink: 'syz.2.520': attribute type 33 has an invalid length. [ 111.038975][ T7799] lo: Caught tx_queue_len zero misconfig [ 111.187477][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 111.348050][ T7817] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 111.353480][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 111.686002][ T7836] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 111.717894][ T7843] Bluetooth: MGMT ver 1.23 [ 111.737434][ T7843] team0: Caught tx_queue_len zero misconfig [ 112.000986][ T7863] netlink: 'syz.4.545': attribute type 10 has an invalid length. [ 112.011351][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 132.904157][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910643][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.841358][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 134.898701][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.083722][ T7896] netlink: 'syz.3.554': attribute type 15 has an invalid length. [ 135.107829][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.554'. [ 135.493052][ T7930] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 135.602799][ T7937] netlink: 224 bytes leftover after parsing attributes in process `syz.3.568'. [ 135.654178][ T7947] netlink: 128 bytes leftover after parsing attributes in process `syz.2.572'. [ 135.666581][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 135.675911][ T7947] netlink: 128 bytes leftover after parsing attributes in process `syz.2.572'. [ 135.743778][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 135.800460][ T7956] netlink: 100 bytes leftover after parsing attributes in process `syz.4.569'. [ 135.876135][ T7960] bridge_slave_0: left allmulticast mode [ 135.883459][ T7960] bridge_slave_0: left promiscuous mode [ 135.889504][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.908393][ T7960] bridge_slave_1: left allmulticast mode [ 135.917187][ T7960] bridge_slave_1: left promiscuous mode [ 135.937126][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.978359][ T7960] bond0: (slave bond_slave_0): Releasing backup interface [ 136.007704][ T7960] bond0: (slave bond_slave_1): Releasing backup interface [ 136.049195][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'. [ 136.050136][ T7960] team0: Port device team_slave_0 removed [ 136.072194][ T7960] team0: Port device team_slave_1 removed [ 136.078904][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.087620][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.098092][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.107938][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.118420][ T7960] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.146611][ T7976] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 136.167600][ T7976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.359037][ T7988] : renamed from bridge_slave_0 (while UP) [ 136.440490][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.628782][ T7998] netlink: 'syz.3.584': attribute type 27 has an invalid length. [ 136.694144][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 136.860986][ T8025] Bluetooth: MGMT ver 1.23 [ 137.113516][ T8038] block nbd0: Unsupported socket: should be TCP or UNIX. [ 137.239643][ T8043] sctp: [Deprecated]: syz.4.596 (pid 8043) Use of int in maxseg socket option. [ 137.239643][ T8043] Use struct sctp_assoc_value instead [ 137.496607][ T8062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.534246][ T8060] vlan2: entered allmulticast mode [ 137.589624][ T8071] tipc: Can't bind to reserved service type 1 [ 137.605564][ T8071] ip6tnl1: entered promiscuous mode [ 137.914237][ T8092] SET target dimension over the limit! [ 137.928198][ T8094] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 137.986431][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.056775][ T8098] bond0: (slave veth5): Enslaving as an active interface with a down link [ 138.123709][ T8094] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 138.156854][ T8110] nbd: device at index 64 is going down [ 138.158687][ T8098] bond0: (slave veth7): Enslaving as an active interface with a down link [ 138.178966][ T8102] dvmrp0: entered allmulticast mode [ 138.306595][ T8116] netlink: 'syz.1.618': attribute type 12 has an invalid length. [ 138.385583][ T8118] netlink: 'syz.4.621': attribute type 4 has an invalid length. [ 138.484375][ T8125] vlan2: entered allmulticast mode [ 138.557497][ T8134] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 138.586796][ T8134] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 138.794869][ T8145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.864032][ T8151] ip6erspan0: entered promiscuous mode [ 138.870525][ T8151] ip6erspan0: entered allmulticast mode [ 139.014459][ T8163] tipc: Enabled bearer , priority 0 [ 139.022389][ T8163] syzkaller0: entered promiscuous mode [ 139.027885][ T8163] syzkaller0: entered allmulticast mode [ 139.054669][ T8163] tipc: Resetting bearer [ 139.062222][ T8162] tipc: Resetting bearer [ 139.075404][ T8162] tipc: Disabling bearer [ 139.264151][ T8172] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 139.555769][ T8191] netlink: 'syz.3.644': attribute type 16 has an invalid length. [ 139.722931][ T8202] tipc: Enabled bearer , priority 0 [ 139.730538][ T8202] syzkaller0: entered promiscuous mode [ 139.737959][ T8202] syzkaller0: entered allmulticast mode [ 139.770267][ T8202] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.869178][ T8202] tipc: Resetting bearer [ 139.884662][ T8201] tipc: Resetting bearer [ 139.913317][ T8201] tipc: Disabling bearer [ 139.976161][ T8210] __nla_validate_parse: 15 callbacks suppressed [ 139.976183][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 140.040172][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 140.049870][ T8218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.651'. [ 140.067046][ T8217] netlink: 124 bytes leftover after parsing attributes in process `syz.2.650'. [ 140.105738][ T8218] netlink: 44 bytes leftover after parsing attributes in process `syz.4.651'. [ 140.258935][ T8227] set match dimension is over the limit! [ 140.539792][ T8243] syzkaller0: entered promiscuous mode [ 140.564813][ T8243] syzkaller0: entered allmulticast mode [ 140.602948][ T8248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.660'. [ 140.615361][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 140.624854][ T8251] netlink: 52 bytes leftover after parsing attributes in process `syz.2.659'. [ 140.634529][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 140.653250][ T8248] netlink: 48 bytes leftover after parsing attributes in process `syz.0.660'. [ 140.715347][ T8256] sctp: Trying to GSO but underlying device doesn't support it. [ 140.767096][ T8246] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 140.775912][ T8264] netlink: 'syz.2.662': attribute type 21 has an invalid length. [ 140.791488][ T8264] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.944809][ T8274] netlink: 'syz.2.664': attribute type 8 has an invalid length. [ 141.241936][ T8288] : entered promiscuous mode [ 141.444021][ T8303] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 141.619341][ T8308] bond2: (slave veth3): Enslaving as an active interface with a down link [ 141.822682][ T8330] netlink: 'syz.0.676': attribute type 5 has an invalid length. [ 142.367059][ T8374] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 142.664737][ T8387] sctp: [Deprecated]: syz.4.693 (pid 8387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.664737][ T8387] Use struct sctp_sack_info instead [ 143.663561][ T8446] syzkaller0: entered promiscuous mode [ 143.697307][ T8446] syzkaller0: entered allmulticast mode [ 143.726453][ T8455] netlink: 'syz.3.705': attribute type 21 has an invalid length. [ 144.056748][ T8476] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 144.068183][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.078544][ T8473] team_slave_0: entered promiscuous mode [ 144.084303][ T8473] team_slave_1: entered promiscuous mode [ 144.118940][ T8473] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.594424][ T8515] tipc: Enabled bearer , priority 0 [ 144.602835][ T8515] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 144.610683][ T8515] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 144.626580][ T8515] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.676416][ T8515] tipc: Resetting bearer [ 144.686030][ T8515] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 144.791181][ T8524] sctp: [Deprecated]: syz.3.720 (pid 8524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.791181][ T8524] Use struct sctp_sack_info instead [ 144.804589][ T8518] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 144.850788][ T8518] bond4 (unregistering): Released all slaves [ 144.915555][ T8534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.924472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.029835][ T8519] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 145.062928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.141299][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.155694][ T8541] __nla_validate_parse: 9 callbacks suppressed [ 145.155712][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'. [ 145.180990][ T8552] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 145.181889][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'. [ 145.317300][ T8560] xt_hashlimit: size too large, truncated to 1048576 [ 145.345924][ T8561] bridge0: port 1(ipvlan2) entered blocking state [ 145.352799][ T8561] bridge0: port 1(ipvlan2) entered disabled state [ 145.361990][ T8561] ipvlan2: entered allmulticast mode [ 145.367450][ T8561] bridge0: entered allmulticast mode [ 145.389345][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 145.417451][ T8561] ipvlan2: left allmulticast mode [ 145.429594][ T8561] bridge0: left allmulticast mode [ 145.480008][ T8556] : entered promiscuous mode [ 145.530613][ T8568] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 145.564129][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.578973][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.642556][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 145.683374][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.713968][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.755963][ T9] tipc: Node number set to 2253602806 [ 145.786460][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 145.800888][ T8590] netlink: 'syz.0.740': attribute type 19 has an invalid length. [ 145.810065][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 145.811442][ T8570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.736'. [ 145.860681][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.867087][ T8590] netlink: 'syz.0.740': attribute type 19 has an invalid length. [ 145.892184][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 146.048992][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.060140][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.072661][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.167624][ T8603] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 146.181849][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.244098][ T8611] sctp: [Deprecated]: syz.3.747 (pid 8611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.244098][ T8611] Use struct sctp_sack_info instead [ 146.254381][ T8603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.339075][ T8609] bond4: (slave geneve2): making interface the new active one [ 146.358295][ T8609] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 146.420064][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 146.501277][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.624579][ T8633] veth1_to_bridge: mtu less than device minimum [ 146.805565][ T8643] bond0: Caught tx_queue_len zero misconfig [ 146.824407][ T8643] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 147.072333][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 147.132299][ T153] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.159922][ T153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.205101][ T8671] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 147.286554][ T153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.301900][ T153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.595218][ T8695] net_ratelimit: 1 callbacks suppressed [ 147.595315][ T8695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.623915][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.793082][ T8709] sit0: Caught tx_queue_len zero misconfig [ 148.000824][ T8714] bond5: option lp_interval: invalid value (0) [ 148.009693][ T8714] bond5: option lp_interval: allowed values 1 - 2147483647 [ 148.020247][ T8714] bond5 (unregistering): Released all slaves [ 148.073992][ T8724] netlink: 'syz.1.783': attribute type 28 has an invalid length. [ 148.084104][ T8724] netlink: 'syz.1.783': attribute type 3 has an invalid length. [ 148.263585][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.271915][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.415823][ T8743] IPVS: ovf: UDP 0.0.0.0:20002 - no destination available [ 148.433105][ T8743] lo: entered promiscuous mode [ 148.446841][ T8743] gre0: entered promiscuous mode [ 148.462963][ T8743] gretap0: entered promiscuous mode [ 148.474121][ T8743] erspan0: entered promiscuous mode [ 148.482111][ T8744] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 148.493361][ T8745] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 148.498710][ T8743] ip_vti0: entered promiscuous mode [ 148.529120][ T8745] `: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.301813][ T856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.310919][ T8787] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 149.333047][ T8787] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 149.357721][ T8787] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 149.474156][ T8795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.678743][ T8812] openvswitch: netlink: IP tunnel dst address not specified [ 149.792403][ T8819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.406843][ T8869] __nla_validate_parse: 13 callbacks suppressed [ 150.406861][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 150.782601][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 150.796023][ T8893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.823'. [ 150.810652][ T8893] block nbd0: not configured, cannot reconfigure [ 150.823758][ T8895] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.822'. [ 150.957780][ T8907] xt_hashlimit: size too large, truncated to 1048576 [ 151.485119][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 151.677308][ T8966] netlink: 184 bytes leftover after parsing attributes in process `syz.3.845'. [ 152.308504][ T9014] validate_nla: 1 callbacks suppressed [ 152.308520][ T9014] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 152.357070][ T9014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.406422][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.862'. [ 152.436811][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.862'. [ 152.443785][ T9024] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 152.486531][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 152.733805][ T9045] netlink: 212 bytes leftover after parsing attributes in process `syz.4.871'. [ 152.848956][ T9052] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 153.129714][ T9070] netlink: 'syz.1.880': attribute type 4 has an invalid length. [ 153.219886][ T9078] nbd: must specify at least one socket [ 153.245124][ T9083] IPVS: set_ctl: invalid protocol: 0 172.20.20.67:20003 [ 153.466728][ T5890] net_ratelimit: 18 callbacks suppressed [ 153.466745][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.645436][ T9108] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 153.716345][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.503080][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.552129][ T9084] erspan0: entered promiscuous mode [ 154.557752][ T9084] vlan1: entered promiscuous mode [ 154.602145][ T9107] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 154.623976][ T9107] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 154.641171][ T9107] gretap1: entered promiscuous mode [ 154.646413][ T9107] gretap1: entered allmulticast mode [ 154.763952][ T9115] block nbd0: not configured, cannot reconfigure [ 154.779177][ T9118] netlink: 'syz.4.893': attribute type 1 has an invalid length. [ 154.788699][ T9115] netlink: 'syz.1.894': attribute type 5 has an invalid length. [ 154.812244][ T9115] geneve2: entered promiscuous mode [ 154.817545][ T9115] geneve2: entered allmulticast mode [ 154.836029][ T8857] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 154.862609][ T3528] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 154.872065][ T3528] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 154.885394][ T3528] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 154.997424][ T9128] macsec1: entered promiscuous mode [ 155.009406][ T9133] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 155.329197][ T9156] raw_sendmsg: syz.1.906 forgot to set AF_INET. Fix it! [ 155.541527][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.629792][ T9175] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 155.644908][ T9175] bond4 (unregistering): Released all slaves [ 155.754411][ T9186] openvswitch: netlink: Flow key attribute not present in set flow. [ 155.860049][ T9193] __nla_validate_parse: 14 callbacks suppressed [ 155.860067][ T9193] netlink: 5 bytes leftover after parsing attributes in process `syz.3.917'. [ 155.880909][ T9193] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 155.891702][ T9193] netlink: 56 bytes leftover after parsing attributes in process `syz.3.917'. [ 155.947646][ T9193] bond5 (unregistering): Released all slaves [ 156.043451][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 156.067291][ T9208] netlink: 72 bytes leftover after parsing attributes in process `syz.4.921'. [ 156.514593][ T9244] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 156.532779][ T9244] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 156.545172][ T9244] netlink: 44 bytes leftover after parsing attributes in process `syz.2.931'. [ 156.702459][ T9257] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 156.756913][ T9264] netlink: 176 bytes leftover after parsing attributes in process `syz.1.938'. [ 156.964536][ T9277] netlink: 'syz.1.941': attribute type 11 has an invalid length. [ 157.244629][ T9294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.947'. [ 157.313602][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.950'. [ 157.505812][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 157.527096][ T9315] netlink: 2 bytes leftover after parsing attributes in process `syz.3.955'. [ 157.569346][ T9320] xt_TCPMSS: Only works on TCP SYN packets [ 158.225286][ T9365] sctp: [Deprecated]: syz.2.966 (pid 9365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.225286][ T9365] Use struct sctp_sack_info instead [ 158.339196][ T9370] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 158.364632][ T9370] gretap2: entered promiscuous mode [ 158.573858][ T9384] netlink: 'syz.0.973': attribute type 4 has an invalid length. [ 158.726142][ T9393] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 158.792239][ T9398] macsec1: entered promiscuous mode [ 159.108275][ T9409] lo: entered allmulticast mode [ 159.150553][ T9409] lo: left allmulticast mode [ 159.644004][ T9458] netlink: 'syz.0.993': attribute type 4 has an invalid length. [ 160.732275][ T9523] netlink: 'syz.1.1011': attribute type 75 has an invalid length. [ 160.747402][ T9525] smc: net device vcan0 applied user defined pnetid SYZ1 [ 160.758813][ T9525] netlink: 'syz.2.1012': attribute type 4 has an invalid length. [ 160.832901][ T9532] bridge_slave_0: default FDB implementation only supports local addresses [ 160.908407][ T9535] __nla_validate_parse: 7 callbacks suppressed [ 160.908426][ T9535] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1017'. [ 160.926244][ T9535] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1017'. [ 160.935636][ T9539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1015'. [ 160.946472][ T9539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1015'. [ 160.963070][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 160.994306][ T9539] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1015'. [ 161.187464][ T9558] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 161.189342][ T9551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.798646][ T9600] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 161.808656][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 161.820128][ T9606] tunl0: entered promiscuous mode [ 161.851221][ T9600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.925165][ T9607] bond5: Invalid ad_actor_system MAC address. [ 161.931553][ T9607] bond5: option ad_actor_system: invalid value (1) [ 161.946556][ T9607] bond5 (unregistering): Released all slaves [ 162.038432][ T9629] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 162.279333][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.299557][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.348956][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.364673][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.367392][ T9649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.394285][ T9649] bridge_slave_1: entered promiscuous mode [ 162.401913][ T9649] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.413789][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.417509][ T9649] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 162.420209][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.435660][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.442450][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.448834][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.455511][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.459629][ T9653] netlink: zone id is out of range [ 162.461969][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.462064][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.462156][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.462233][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.484276][ T9653] netlink: zone id is out of range [ 162.494649][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.506499][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.524068][ T9653] netlink: zone id is out of range [ 162.536195][ T9653] netlink: zone id is out of range [ 162.549030][ T9653] netlink: zone id is out of range [ 162.554609][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.561072][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.565324][ T9653] netlink: zone id is out of range [ 162.579636][ T9653] netlink: zone id is out of range [ 162.593384][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.599924][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.601133][ T9653] netlink: set zone limit has 4 unknown bytes [ 162.606766][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.606905][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.606990][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.607064][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.633465][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 162.638766][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.653668][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.660092][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.667360][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.673962][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.680381][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.691252][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.697768][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.705482][ T9643] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.825968][ T9666] netlink: 'syz.1.1054': attribute type 1 has an invalid length. [ 163.002266][ T9685] IPv6: sit1: Disabled Multicast RS [ 163.013801][ T9685] sit1: entered allmulticast mode [ 163.074208][ T9684] vlan1: entered promiscuous mode [ 163.105932][ T9689] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1060'. [ 163.179497][ T9684] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1060'. [ 163.216371][ T9693] netlink: 'syz.0.1063': attribute type 10 has an invalid length. [ 164.264733][ T9743] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 164.776406][ T9779] netlink: 'syz.3.1085': attribute type 11 has an invalid length. [ 165.086545][ T9801] tipc: Enabling of bearer rejected, failed to enable media [ 165.506852][ T9829] validate_nla: 5 callbacks suppressed [ 165.506870][ T9829] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 165.520829][ T9829] netlink: 'syz.4.1103': attribute type 3 has an invalid length. [ 165.610891][ T9835] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 165.624149][ T9835] bond4 (unregistering): Released all slaves [ 165.768302][ T9843] vlan2: entered promiscuous mode [ 165.784325][ T9843] bridge0: entered promiscuous mode [ 165.795699][ T9846] netlink: 'syz.1.1108': attribute type 2 has an invalid length. [ 165.963632][ T9859] netlink: 'syz.2.1114': attribute type 21 has an invalid length. [ 165.995197][ T9859] __nla_validate_parse: 9 callbacks suppressed [ 165.995214][ T9859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1114'. [ 166.096210][ T9869] bridge0: port 3(ipvlan2) entered blocking state [ 166.119458][ T9869] bridge0: port 3(ipvlan2) entered disabled state [ 166.127529][ T9869] ipvlan2: entered allmulticast mode [ 166.134804][ T9869] bridge0: entered allmulticast mode [ 166.156400][ T9869] ipvlan2: left allmulticast mode [ 166.162271][ T9869] bridge0: left allmulticast mode [ 166.362744][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 166.460950][ T9904] netlink: 'syz.1.1125': attribute type 11 has an invalid length. [ 185.068504][ T9947] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 185.301619][ T9936] net_ratelimit: 4 callbacks suppressed [ 185.301641][ T9936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.343934][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 185.384581][ T9953] xt_socket: unknown flags 0x50 [ 185.541401][ T9960] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1141'. [ 185.724599][ T9976] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1149'. [ 186.017508][ T9995] netlink: 'syz.0.1155': attribute type 10 has an invalid length. [ 186.061138][ T9995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1155'. [ 186.125671][ T9995] team0: Port device geneve0 added [ 186.596999][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 186.632333][T10033] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1164'. [ 186.672182][T10029] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 187.011676][T10054] syzkaller0: entered promiscuous mode [ 187.031135][T10054] syzkaller0: entered allmulticast mode [ 187.060495][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 187.233944][T10062] netlink: 'syz.3.1173': attribute type 17 has an invalid length. [ 187.254086][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 187.263552][T10062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1173'. [ 187.793343][T10089] tipc: Enabled bearer , priority 0 [ 187.806751][T10091] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 187.815127][T10091] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 187.856849][T10096] netlink: 'syz.0.1182': attribute type 7 has an invalid length. [ 188.122512][ T5971] IPVS: starting estimator thread 0... [ 188.123853][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1187'. [ 188.145163][T10110] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 188.152942][T10110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.205033][T10114] netlink: 'syz.0.1189': attribute type 3 has an invalid length. [ 188.221142][T10112] IPVS: using max 33 ests per chain, 79200 per kthread [ 188.330637][T10118] bond4: option miimon: invalid value (18446744073709551585) [ 188.338375][T10118] bond4: option miimon: allowed values 0 - 2147483647 [ 188.350204][T10118] bond4 (unregistering): Released all slaves [ 188.394374][T10123] sctp: [Deprecated]: syz.4.1191 (pid 10123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.394374][T10123] Use struct sctp_sack_info instead [ 188.626275][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.706069][T10144] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 188.753510][T10144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.783076][T10145] bond5: (slave veth0_to_bond): making interface the new active one [ 188.797304][T10145] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.925172][ T9] tipc: Node number set to 2101474683 [ 188.945934][T10161] openvswitch: netlink: Flow key attr not present in new flow. [ 189.003610][T10164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.334449][T10172] netlink: 'syz.3.1208': attribute type 4 has an invalid length. [ 189.369900][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.379923][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.389722][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.402644][T10186] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.432288][T10186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 189.472604][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.504985][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.514327][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.523299][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.537540][T10186] wg1 speed is unknown, defaulting to 1000 [ 189.935022][T10222] netlink: 'syz.4.1225': attribute type 10 has an invalid length. [ 190.069709][T10234] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 190.088230][T10235] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 190.099126][T10241] netlink: 'syz.1.1230': attribute type 21 has an invalid length. [ 190.138639][T10241] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.165932][T10241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.173306][T10241] IPv6: NLM_F_CREATE should be set when creating new route [ 190.175358][T10235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.180615][T10241] IPv6: NLM_F_CREATE should be set when creating new route [ 190.194467][T10241] IPv6: NLM_F_CREATE should be set when creating new route [ 190.205757][T10246] netlink: 'syz.0.1231': attribute type 16 has an invalid length. [ 190.234214][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.241431][T10246] bridge0: port 2(bridge_slave_1) entered listening state [ 190.248882][T10246] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.256170][T10246] bridge0: port 1(bridge_slave_0) entered listening state [ 190.281814][T10246] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.347368][T10246] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 190.360391][T10246] veth0_macvtap: entered promiscuous mode [ 190.370831][T10246] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 190.388410][T10245] C: renamed from lo [ 190.399149][ T10] wg1 speed is unknown, defaulting to 1000 [ 190.443488][ T153] bond0: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 190.480130][ T153] bond0: (slave veth0_to_bond): making interface the new active one [ 190.511747][ T153] veth0_to_bond: entered promiscuous mode [ 190.518689][ T153] bond0: active interface up! [ 190.553396][T10261] __nla_validate_parse: 14 callbacks suppressed [ 190.553415][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 190.762530][T10272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1240'. [ 190.787529][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1238'. [ 190.958480][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 190.980364][T10288] bridge_slave_1: left allmulticast mode [ 191.000473][T10288] bridge_slave_1: left promiscuous mode [ 191.008163][T10297] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1247'. [ 191.027574][T10288] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.042980][T10297] block nbd0: not configured, cannot reconfigure [ 191.073335][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 191.087754][T10288] bridge_slave_0: left promiscuous mode [ 191.101433][T10288] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.152734][T10311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.178400][T10301] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1245'. [ 191.663156][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1264'. [ 191.776092][T10349] bond4 (unregistering): Released all slaves [ 191.855825][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 192.068958][T10369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1272'. [ 192.089859][T10375] tipc: Started in network mode [ 192.105810][T10375] tipc: Node identity ac14140f, cluster identity 4711 [ 192.136474][T10375] tipc: New replicast peer: 255.255.255.255 [ 192.155928][T10375] tipc: Enabled bearer , priority 10 [ 192.281774][T10388] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 192.338576][T10392] openvswitch: netlink: Key type 31 is not supported [ 193.010970][T10424] netlink: 'syz.1.1291': attribute type 11 has an invalid length. [ 193.112104][T10426] IPv6: NLM_F_REPLACE set, but no existing node found! [ 193.243627][T10434] validate_nla: 2 callbacks suppressed [ 193.243646][T10434] netlink: 'syz.1.1295': attribute type 10 has an invalid length. [ 193.295038][T10441] netlink: 'syz.1.1295': attribute type 10 has an invalid length. [ 193.321328][T10434] team0: Port device dummy0 added [ 193.342399][ T43] tipc: Node number set to 2886997007 [ 193.353635][T10441] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.477953][T10441] team0: Failed to send options change via netlink (err -105) [ 193.486232][T10441] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 193.499915][T10441] team0: Port device dummy0 removed [ 193.515310][T10441] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 193.530398][T10443] bond0: entered promiscuous mode [ 193.538931][T10443] bond0: left promiscuous mode [ 193.683048][T10456] netlink: 'syz.0.1303': attribute type 9 has an invalid length. [ 193.844594][T10465] syzkaller1: entered promiscuous mode [ 193.850147][T10465] syzkaller1: entered allmulticast mode [ 193.858540][T10465] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 193.967113][T10472] netlink: 'syz.0.1309': attribute type 21 has an invalid length. [ 194.171237][T10482] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 194.184396][T10482] bond4 (unregistering): Released all slaves [ 194.255540][T10485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.268650][T10485] bond0: (slave rose0): Enslaving as an active interface with an up link [ 194.351884][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.363620][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.584721][T10508] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 195.016981][T10535] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 195.023191][T10531] bond5: entered promiscuous mode [ 195.029979][T10531] bond5: entered allmulticast mode [ 195.036709][T10531] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.046142][T10535] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 195.070895][T10535] team0: Port device dummy0 added [ 195.089524][T10531] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 195.115885][T10531] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 195.233404][T10549] netlink: 'syz.4.1327': attribute type 10 has an invalid length. [ 195.266187][T10539] bond6 (unregistering): Released all slaves [ 195.454722][T10566] unsupported nla_type 33542 [ 195.680601][T10579] __nla_validate_parse: 11 callbacks suppressed [ 195.680619][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1336'. [ 195.756226][T10583] veth0: entered promiscuous mode [ 195.766510][T10581] veth0: left promiscuous mode [ 195.875811][T10590] ip6tnl0: entered promiscuous mode [ 195.896102][T10590] ip6tnl0: entered allmulticast mode [ 195.923386][T10590] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 195.923827][T10594] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 195.981155][T10594] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 196.421652][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.424106][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 196.428964][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 201.481297][ T36] veth0_to_bond: left promiscuous mode [ 255.784077][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.790847][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.225922][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233406][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.981488][ T31] INFO: task syz-executor:5826 blocked for more than 143 seconds. [ 354.989431][ T31] Not tainted syzkaller #0 [ 354.994505][ T31] Blocked by coredump. [ 354.999106][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.008017][ T31] task:syz-executor state:D stack:21672 pid:5826 tgid:5826 ppid:1 task_flags:0x40054c flags:0x00080002 [ 355.020502][ T31] Call Trace: [ 355.023900][ T31] [ 355.026853][ T31] __schedule+0x1798/0x4cc0 [ 355.031494][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.036581][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.041609][ T31] ? __pfx___schedule+0x10/0x10 [ 355.046520][ T31] ? schedule+0x91/0x360 [ 355.050788][ T31] schedule+0x165/0x360 [ 355.055096][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.060572][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 355.066275][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 355.072143][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 355.078311][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.083452][ T31] ? exit_mmap+0x286/0xb40 [ 355.087976][ T31] down_write+0x1ab/0x1f0 [ 355.092592][ T31] ? __pfx_down_write+0x10/0x10 [ 355.097472][ T31] exit_mmap+0x286/0xb40 [ 355.101828][ T31] ? uprobe_clear_state+0x20f/0x290 [ 355.107054][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 355.111872][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 355.118017][ T31] ? __pfx_exit_aio+0x10/0x10 [ 355.122781][ T31] ? uprobe_clear_state+0x27c/0x290 [ 355.128004][ T31] __mmput+0x118/0x430 [ 355.132137][ T31] exit_mm+0x1da/0x2c0 [ 355.136227][ T31] ? __pfx_exit_mm+0x10/0x10 [ 355.140857][ T31] ? rcu_is_watching+0x15/0xb0 [ 355.145707][ T31] do_exit+0x648/0x2300 [ 355.149890][ T31] ? do_raw_spin_lock+0x121/0x290 [ 355.155089][ T31] ? __pfx_do_exit+0x10/0x10 [ 355.159717][ T31] do_group_exit+0x21c/0x2d0 [ 355.164383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.169733][ T31] get_signal+0x1285/0x1340 [ 355.174342][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 355.179919][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 355.185287][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 355.191514][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 355.196987][ T31] exit_to_user_mode_loop+0x72/0x130 [ 355.202506][ T31] do_syscall_64+0x2bd/0xfa0 [ 355.207124][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.212405][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.219487][ T31] ? clear_bhb_loop+0x60/0xb0 [ 355.226562][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.232547][ T31] RIP: 0033:0x7f8c67585897 [ 355.237009][ T31] RSP: 002b:00007ffc6414f9a0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 355.245531][ T31] RAX: fffffffffffffe00 RBX: 00000000000002c1 RCX: 00007f8c67585897 [ 355.253651][ T31] RDX: 0000000040000000 RSI: 00007ffc6414fa0c RDI: 00000000ffffffff [ 355.261703][ T31] RBP: 00007ffc6414fa0c R08: 0000000000000000 R09: 0000000000000000 [ 355.269692][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000f3 [ 355.278580][ T31] R13: 000055557c97d590 R14: 000000000002fe54 R15: 00007ffc6414fa60 [ 355.286657][ T31] [ 355.289751][ T31] INFO: task syz.1.1346:10617 blocked for more than 143 seconds. [ 355.297512][ T31] Not tainted syzkaller #0 [ 355.302496][ T31] Blocked by coredump. [ 355.307085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.316833][ T31] task:syz.1.1346 state:D stack:26840 pid:10617 tgid:10613 ppid:5827 task_flags:0x40044c flags:0x00080000 [ 355.329243][ T31] Call Trace: [ 355.332998][ T31] [ 355.335962][ T31] __schedule+0x1798/0x4cc0 [ 355.340511][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.345444][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.350334][ T31] ? __pfx___schedule+0x10/0x10 [ 355.355277][ T31] ? schedule+0x91/0x360 [ 355.359546][ T31] schedule+0x165/0x360 [ 355.363829][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.369347][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 355.375051][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 355.380884][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 355.389428][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.394403][ T31] ? exit_mmap+0x286/0xb40 [ 355.398860][ T31] down_write+0x1ab/0x1f0 [ 355.403450][ T31] ? __pfx_down_write+0x10/0x10 [ 355.408329][ T31] exit_mmap+0x286/0xb40 [ 355.412622][ T31] ? uprobe_clear_state+0x20f/0x290 [ 355.417834][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 355.424935][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 355.430621][ T31] ? __pfx_exit_aio+0x10/0x10 [ 355.435633][ T31] ? uprobe_clear_state+0x27c/0x290 [ 355.440857][ T31] __mmput+0x118/0x430 [ 355.446860][ T31] exit_mm+0x1da/0x2c0 [ 355.450963][ T31] ? __pfx_exit_mm+0x10/0x10 [ 355.455936][ T31] ? rcu_is_watching+0x15/0xb0 [ 355.462898][ T31] do_exit+0x648/0x2300 [ 355.467112][ T31] ? do_raw_spin_lock+0x121/0x290 [ 355.473060][ T31] ? __pfx_do_exit+0x10/0x10 [ 355.477696][ T31] ? bpf_raw_tp_link_attach+0x582/0x6c0 [ 355.483343][ T31] do_group_exit+0x21c/0x2d0 [ 355.487958][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.494241][ T31] get_signal+0x1285/0x1340 [ 355.498802][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 355.504419][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 355.510609][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 355.516173][ T31] exit_to_user_mode_loop+0x72/0x130 [ 355.521495][ T31] do_syscall_64+0x2bd/0xfa0 [ 355.526862][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.533234][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.539326][ T31] ? clear_bhb_loop+0x60/0xb0 [ 355.544311][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.550222][ T31] RIP: 0033:0x7f513298f749 [ 355.556802][ T31] RSP: 002b:00007f5133767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.565298][ T31] RAX: 0000000000000008 RBX: 00007f5132be6180 RCX: 00007f513298f749 [ 355.573349][ T31] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000011 [ 355.581556][ T31] RBP: 00007f5132a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.589535][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.597646][ T31] R13: 00007f5132be6218 R14: 00007f5132be6180 R15: 00007ffc7875e7d8 [ 355.606658][ T31] [ 355.609718][ T31] INFO: task dhcpcd-run-hook:10619 blocked for more than 143 seconds. [ 355.620035][ T31] Not tainted syzkaller #0 [ 355.627186][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.636586][ T31] task:dhcpcd-run-hook state:D stack:25496 pid:10619 tgid:10619 ppid:10545 task_flags:0x400040 flags:0x00080001 [ 355.648820][ T31] Call Trace: [ 355.652220][ T31] [ 355.655175][ T31] __schedule+0x1798/0x4cc0 [ 355.659708][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.665927][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.670812][ T31] ? __pfx___schedule+0x10/0x10 [ 355.675842][ T31] ? schedule+0x91/0x360 [ 355.680110][ T31] schedule+0x165/0x360 [ 355.685545][ T31] schedule_preempt_disabled+0x13/0x30 [ 355.691364][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 355.697026][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 355.704034][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 355.710227][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.716030][ T31] ? exit_mmap+0x286/0xb40 [ 355.720501][ T31] down_write+0x1ab/0x1f0 [ 355.724889][ T31] ? __pfx_down_write+0x10/0x10 [ 355.729784][ T31] exit_mmap+0x286/0xb40 [ 355.735793][ T31] ? uprobe_clear_state+0x20f/0x290 [ 355.741075][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 355.745863][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 355.752635][ T31] ? __pfx_exit_aio+0x10/0x10 [ 355.757354][ T31] ? uprobe_clear_state+0x27c/0x290 [ 355.762742][ T31] __mmput+0x118/0x430 [ 355.766831][ T31] exec_mmap+0x6ac/0x7d0 [ 355.773079][ T31] ? generic_permission+0x2e5/0x690 [ 355.778316][ T31] ? __pfx_exec_mmap+0x10/0x10 [ 355.786169][ T31] begin_new_exec+0x12d6/0x2160 [ 355.791900][ T31] ? security_inode_permission+0xb7/0x310 [ 355.797650][ T31] load_elf_binary+0x998/0x2740 [ 355.802748][ T31] ? load_misc_binary+0x110/0xc40 [ 355.807791][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.812876][ T31] ? __pfx_load_elf_binary+0x10/0x10 [ 355.818195][ T31] bprm_execve+0x99c/0x1450 [ 355.823634][ T31] ? __pfx_bprm_execve+0x10/0x10 [ 355.828605][ T31] do_execveat_common+0x510/0x6a0 [ 355.834674][ T31] __x64_sys_execve+0x94/0xb0 [ 355.839381][ T31] do_syscall_64+0xfa/0xfa0 [ 355.844378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.849607][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.855774][ T31] ? clear_bhb_loop+0x60/0xb0 [ 355.860463][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.866623][ T31] RIP: 0033:0x7f82e23c5107 [ 355.871194][ T31] RSP: 002b:00007ffd8c01d2f8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 355.879622][ T31] RAX: ffffffffffffffda RBX: 000055573c2350c8 RCX: 00007f82e23c5107 [ 355.887950][ T31] RDX: 000055573c2350e8 RSI: 000055573c2350c8 RDI: 000055573c235170 [ 355.896037][ T31] RBP: 000055573c235170 R08: 00007ffd8c020ebd R09: 0000000000000000 [ 355.904210][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 000055573c2350e8 [ 355.912388][ T31] R13: 00007f82e258ae8b R14: 000055573c2350e8 R15: 0000000000000000 [ 355.920379][ T31] [ 355.923548][ T31] INFO: task syz.0.1347:10620 blocked for more than 144 seconds. [ 355.931358][ T31] Not tainted syzkaller #0 [ 355.936693][ T31] Blocked by coredump. [ 355.941799][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.950561][ T31] task:syz.0.1347 state:D stack:26840 pid:10620 tgid:10620 ppid:5826 task_flags:0x40044c flags:0x00080002 [ 355.962573][ T31] Call Trace: [ 355.965868][ T31] [ 355.968847][ T31] __schedule+0x1798/0x4cc0 [ 355.973790][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.978767][ T31] ? __lock_acquire+0xab9/0xd20 [ 355.983722][ T31] ? __pfx___schedule+0x10/0x10 [ 355.988596][ T31] ? schedule+0x91/0x360 [ 355.992903][ T31] schedule+0x165/0x360 [ 355.997072][ T31] schedule_preempt_disabled+0x13/0x30 [ 356.002566][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 356.008208][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 356.014093][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 356.020269][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.025210][ T31] ? exit_mmap+0x286/0xb40 [ 356.029643][ T31] down_write+0x1ab/0x1f0 [ 356.033999][ T31] ? __pfx_down_write+0x10/0x10 [ 356.039214][ T31] exit_mmap+0x286/0xb40 [ 356.043541][ T31] ? uprobe_clear_state+0x20f/0x290 [ 356.048746][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 356.053654][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 356.059304][ T31] ? __pfx_exit_aio+0x10/0x10 [ 356.064061][ T31] ? uprobe_clear_state+0x27c/0x290 [ 356.069275][ T31] __mmput+0x118/0x430 [ 356.073406][ T31] exit_mm+0x1da/0x2c0 [ 356.077505][ T31] ? __pfx_exit_mm+0x10/0x10 [ 356.082309][ T31] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 356.087785][ T31] ? rcu_is_watching+0x15/0xb0 [ 356.092598][ T31] do_exit+0x648/0x2300 [ 356.096775][ T31] ? do_raw_spin_lock+0x121/0x290 [ 356.101919][ T31] ? __pfx_do_exit+0x10/0x10 [ 356.106533][ T31] do_group_exit+0x21c/0x2d0 [ 356.111224][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.116438][ T31] get_signal+0x1285/0x1340 [ 356.120944][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 356.126531][ T31] ? __mmap_lock_do_trace_acquire_returned+0x85/0x1e0 [ 356.133345][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 356.139493][ T31] ? vm_mmap_pgoff+0x271/0x4d0 [ 356.144758][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 356.150241][ T31] exit_to_user_mode_loop+0x72/0x130 [ 356.155559][ T31] do_syscall_64+0x2bd/0xfa0 [ 356.160164][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.165854][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.171963][ T31] ? clear_bhb_loop+0x60/0xb0 [ 356.176635][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.182833][ T31] RIP: 0033:0x7f8c6758f783 [ 356.187260][ T31] RSP: 002b:00007ffc6414f5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 356.195947][ T31] RAX: fffffffffffffffc RBX: 00007f8c65ff76c0 RCX: 00007f8c6758f783 [ 356.203985][ T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 356.212017][ T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 356.219998][ T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc6414f740 [ 356.228042][ T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 356.236101][ T31] [ 356.239137][ T31] INFO: task syz.2.1345:10621 blocked for more than 144 seconds. [ 356.247374][ T31] Not tainted syzkaller #0 [ 356.252358][ T31] Blocked by coredump. [ 356.256929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.265924][ T31] task:syz.2.1345 state:D stack:26840 pid:10621 tgid:10621 ppid:5824 task_flags:0x40044c flags:0x00080002 [ 356.278221][ T31] Call Trace: [ 356.281550][ T31] [ 356.284489][ T31] __schedule+0x1798/0x4cc0 [ 356.288991][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.293885][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.298741][ T31] ? __pfx___schedule+0x10/0x10 [ 356.303843][ T31] ? schedule+0x91/0x360 [ 356.308097][ T31] schedule+0x165/0x360 [ 356.312304][ T31] schedule_preempt_disabled+0x13/0x30 [ 356.317769][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 356.323477][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 356.329295][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 356.335480][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.340346][ T31] ? exit_mmap+0x286/0xb40 [ 356.345507][ T31] down_write+0x1ab/0x1f0 [ 356.349867][ T31] ? __pfx_down_write+0x10/0x10 [ 356.354835][ T31] exit_mmap+0x286/0xb40 [ 356.359096][ T31] ? uprobe_clear_state+0x20f/0x290 [ 356.364555][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 356.369352][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 356.375063][ T31] ? __pfx_exit_aio+0x10/0x10 [ 356.379790][ T31] ? uprobe_clear_state+0x27c/0x290 [ 356.385057][ T31] __mmput+0x118/0x430 [ 356.389223][ T31] exit_mm+0x1da/0x2c0 [ 356.393351][ T31] ? __pfx_exit_mm+0x10/0x10 [ 356.397943][ T31] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 356.403487][ T31] ? rcu_is_watching+0x15/0xb0 [ 356.408507][ T31] do_exit+0x648/0x2300 [ 356.412990][ T31] ? do_raw_spin_lock+0x121/0x290 [ 356.418033][ T31] ? __pfx_do_exit+0x10/0x10 [ 356.423349][ T31] do_group_exit+0x21c/0x2d0 [ 356.427957][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.433334][ T31] get_signal+0x1285/0x1340 [ 356.437971][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 356.443640][ T31] ? __mmap_lock_do_trace_acquire_returned+0x85/0x1e0 [ 356.450823][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 356.457098][ T31] ? vm_mmap_pgoff+0x271/0x4d0 [ 356.461902][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 356.467379][ T31] exit_to_user_mode_loop+0x72/0x130 [ 356.472832][ T31] do_syscall_64+0x2bd/0xfa0 [ 356.477441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.482778][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.488879][ T31] ? clear_bhb_loop+0x60/0xb0 [ 356.493675][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.499578][ T31] RIP: 0033:0x7f5dd5b8f783 [ 356.504381][ T31] RSP: 002b:00007ffdd1c010b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 356.512851][ T31] RAX: fffffffffffffffc RBX: 00007f5dd45f76c0 RCX: 00007f5dd5b8f783 [ 356.520814][ T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 356.529042][ T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 356.537054][ T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffdd1c01210 [ 356.545240][ T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 356.553652][ T31] [ 356.556690][ T31] INFO: task syz.4.1349:10622 blocked for more than 144 seconds. [ 356.564527][ T31] Not tainted syzkaller #0 [ 356.569465][ T31] Blocked by coredump. [ 356.574454][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.583264][ T31] task:syz.4.1349 state:D stack:25944 pid:10622 tgid:10622 ppid:5822 task_flags:0x40044c flags:0x00080002 [ 356.595483][ T31] Call Trace: [ 356.598829][ T31] [ 356.601928][ T31] __schedule+0x1798/0x4cc0 [ 356.606643][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.611591][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.616444][ T31] ? __pfx___schedule+0x10/0x10 [ 356.621370][ T31] ? schedule+0x91/0x360 [ 356.625620][ T31] schedule+0x165/0x360 [ 356.629765][ T31] schedule_preempt_disabled+0x13/0x30 [ 356.635404][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 356.641158][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 356.646984][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 356.655501][ T31] ? __lock_acquire+0xab9/0xd20 [ 356.660405][ T31] ? exit_mmap+0x286/0xb40 [ 356.664928][ T31] down_write+0x1ab/0x1f0 [ 356.669304][ T31] ? __pfx_down_write+0x10/0x10 [ 356.674307][ T31] exit_mmap+0x286/0xb40 [ 356.678560][ T31] ? uprobe_clear_state+0x20f/0x290 [ 356.683828][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 356.688615][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 356.694334][ T31] ? __pfx_exit_aio+0x10/0x10 [ 356.699025][ T31] ? uprobe_clear_state+0x27c/0x290 [ 356.704428][ T31] __mmput+0x118/0x430 [ 356.708508][ T31] exit_mm+0x1da/0x2c0 [ 356.712648][ T31] ? __pfx_exit_mm+0x10/0x10 [ 356.717248][ T31] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 356.722763][ T31] ? rcu_is_watching+0x15/0xb0 [ 356.727537][ T31] do_exit+0x648/0x2300 [ 356.731797][ T31] ? do_raw_spin_lock+0x121/0x290 [ 356.736841][ T31] ? __pfx_do_exit+0x10/0x10 [ 356.741630][ T31] do_group_exit+0x21c/0x2d0 [ 356.746235][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.751658][ T31] get_signal+0x1285/0x1340 [ 356.756472][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 356.762437][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 356.768611][ T31] ? __fget_files+0x2a/0x420 [ 356.773240][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 356.778701][ T31] exit_to_user_mode_loop+0x72/0x130 [ 356.784038][ T31] do_syscall_64+0x2bd/0xfa0 [ 356.788640][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.793885][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.799962][ T31] ? clear_bhb_loop+0x60/0xb0 [ 356.804717][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.810685][ T31] RIP: 0033:0x7fdc6258f783 [ 356.815232][ T31] RSP: 002b:00007ffd82bf81f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 356.823752][ T31] RAX: fffffffffffffffc RBX: 0000001b30964000 RCX: 00007fdc6258f783 [ 356.831849][ T31] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b30964000 [ 356.839824][ T31] RBP: 0000000000400000 R08: 0000000000000004 R09: 0000000000040000 [ 356.847881][ T31] R10: 0000000000100001 R11: 0000000000000246 R12: 0000000000000121 [ 356.855971][ T31] R13: 00000000000927c0 R14: 000000000002fd58 R15: 00007ffd82bf84e0 [ 356.864503][ T31] [ 356.867567][ T31] [ 356.867567][ T31] Showing all locks held in the system: [ 356.877353][ T31] 1 lock held by khungtaskd/31: [ 356.882282][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 356.892447][ T31] 2 locks held by getty/5583: [ 356.897129][ T31] #0: ffff88814d1ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 356.907076][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 356.917423][ T31] 1 lock held by syz-executor/5812: [ 356.922709][ T31] #0: ffff88802ebc81e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 356.932242][ T31] 2 locks held by syz-executor/5823: [ 356.937527][ T31] #0: ffffffff8dff6910 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x131/0x4b0 [ 356.946335][ T31] #1: ffff88807c1762a0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x126/0x1b10 [ 356.955461][ T31] 1 lock held by syz-executor/5826: [ 356.961680][ T31] #0: ffff88802ebcace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 356.970786][ T31] 1 lock held by syz.1.1346/10617: [ 356.975988][ T31] #0: ffff888079e24d20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 356.986404][ T31] 3 locks held by dhcpcd-run-hook/10619: [ 356.993120][ T31] #0: ffff88802e145ce0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb9/0x1450 [ 357.003362][ T31] #1: ffff88802e145d78 (&sig->exec_update_lock){+.+.}-{4:4}, at: exec_mmap+0xe5/0x7d0 [ 357.013247][ T31] #2: ffff8880513c37a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 357.022432][ T31] 1 lock held by syz.0.1347/10620: [ 357.027548][ T31] #0: ffff8880113bace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 357.036669][ T31] 1 lock held by syz.2.1345/10621: [ 357.041828][ T31] #0: ffff888079e262a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 357.050922][ T31] 1 lock held by syz.4.1349/10622: [ 357.056100][ T31] #0: ffff8880113b9760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x286/0xb40 [ 357.068861][ T31] [ 357.071273][ T31] ============================================= [ 357.071273][ T31] [ 357.079724][ T31] NMI backtrace for cpu 0 [ 357.079745][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 357.079757][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.079762][ T31] Call Trace: [ 357.079768][ T31] [ 357.079774][ T31] dump_stack_lvl+0x189/0x250 [ 357.079793][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.079806][ T31] ? __pfx__printk+0x10/0x10 [ 357.079822][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 357.079835][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 357.079847][ T31] ? __pfx__printk+0x10/0x10 [ 357.079859][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 357.079875][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 357.079887][ T31] watchdog+0xf60/0xfa0 [ 357.079900][ T31] ? watchdog+0x1e2/0xfa0 [ 357.079912][ T31] kthread+0x711/0x8a0 [ 357.079937][ T31] ? __pfx_watchdog+0x10/0x10 [ 357.079946][ T31] ? __pfx_kthread+0x10/0x10 [ 357.079959][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.079971][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.079983][ T31] ? __pfx_kthread+0x10/0x10 [ 357.079995][ T31] ret_from_fork+0x4bc/0x870 [ 357.080007][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 357.080020][ T31] ? __switch_to_asm+0x39/0x70 [ 357.080027][ T31] ? __switch_to_asm+0x33/0x70 [ 357.080034][ T31] ? __pfx_kthread+0x10/0x10 [ 357.080046][ T31] ret_from_fork_asm+0x1a/0x30 [ 357.080062][ T31] [ 357.080066][ T31] Sending NMI from CPU 0 to CPUs 1: [ 357.227043][ C1] NMI backtrace for cpu 1 [ 357.227073][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 357.227090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.227098][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 357.227123][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 357.227136][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 357.227151][ C1] RAX: 198fbf538b05a900 RBX: ffffffff81967b47 RCX: 198fbf538b05a900 [ 357.227162][ C1] RDX: 0000000000000001 RSI: ffffffff8d70ed5a RDI: ffffffff8bbf08e0 [ 357.227172][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 357.227182][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cf470 [ 357.227193][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 357.227208][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 357.227220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.227230][ C1] CR2: 00005555594eb5c8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 357.227244][ C1] Call Trace: [ 357.227250][ C1] [ 357.227256][ C1] default_idle+0x13/0x20 [ 357.227270][ C1] default_idle_call+0x73/0xb0 [ 357.227286][ C1] do_idle+0x1e7/0x510 [ 357.227305][ C1] ? __pfx_do_idle+0x10/0x10 [ 357.227327][ C1] cpu_startup_entry+0x44/0x60 [ 357.227342][ C1] start_secondary+0x101/0x110 [ 357.227362][ C1] common_startup_64+0x13e/0x147 [ 357.227387][ C1]