last executing test programs: 3m2.801509993s ago: executing program 4 (id=5187): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@mark={{0x0, 0x1, 0x24, 0x80000001}}], 0x6}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x70, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x700, 0x80, 0x0, 0x1}}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe, 0x4}, {0xa, 0x2}, {0xfff3, 0xf}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x2010804}, 0x40000) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d80000001c0081064e81f782db44b904021d08040000000000000aa118000c000600142603600e1208000f0000810401a8001600200001400300fffc07600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000004007000000e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8040) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 3m2.674426406s ago: executing program 4 (id=5189): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe0}}, 0x800c) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000780), 0x12) socket$kcm(0x29, 0x4, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa4408004500007c0000000000019078ac1e0001ac1414cc0c019078e00000e0480000000067000000110000ac1414aae0000001830b89ffffffffe0000001070300443c00030a01012f00000000ac1414aa00000000ac1414bb00000000ac1414bb000000007f00000100000000ac14142b00000800e0000002000000000000"], 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c) 3m2.507654056s ago: executing program 4 (id=5192): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r4, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) r6 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="140300001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r11 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r11, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) 3m1.532509298s ago: executing program 4 (id=5206): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x54, 0x0, &(0x7f00000002c0)="0e08000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000100)=0x1) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd70}, 0x48) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ppoll(&(0x7f0000000280), 0x1, &(0x7f0000002d00)={0x0, 0x989680}, 0x0, 0x4f) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000040)=""/96) sendmsg$netlink(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0xffffffff}, @generic='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000009ef220fc10621345b2e48676ec6ade7ca984348d3d59f5148a0d5351d02866db44240147f485c64b56fe4027460dc9943fd83569fd5ffc147e7318f1ee3c9f27a51f577ca622b392f6492afeb1250f100c3f09e2a195a63a6d7dd1f5d038c4a734634e59ac19f4d9770a70f2467e6fdebc17eacbb0784db405ff0f65d188534bebc7b7241f81580bf2cdc3e7162db64bc72a7799e1a682ac2daad1ca759c11a318aa1d1936537a8c3b7bb3d03fd9ccdf189aaa0c7972fbcd2d9ec7adf63d"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r9) 3m1.26583709s ago: executing program 4 (id=5211): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYBLOB="9d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) clock_gettime(0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x18, 0x80805, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 2m59.305459185s ago: executing program 4 (id=5225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtfilter={0x47c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44c, 0x2, [@TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xd387, 0xfffffe00, 0x100, 0x7fffffff, 0x8, 0xd, 0x1, 0x5, 0x8001, 0x8, 0x8, 0x3be, 0x7ff, 0xfffffffd, 0x1, 0x6, 0x0, 0x2, 0x4, 0xfffffff7, 0x1, 0x7, 0x0, 0x5, 0xfc, 0x2a39e01f, 0xb, 0x40, 0x1, 0xfff, 0x6, 0xd, 0x6, 0x10000, 0xffff3c73, 0xffffffce, 0x0, 0x7, 0x682c, 0x6, 0x3, 0x9, 0x58, 0x1, 0x3, 0x9, 0x40, 0x1, 0x5, 0x29ce, 0x400, 0xa, 0x10, 0x4d3, 0x7, 0xfff, 0x6, 0xffffc243, 0x7f, 0x6, 0x4, 0x0, 0x9, 0x10, 0x6, 0x400, 0x7, 0x0, 0x2, 0x7, 0x5, 0x6, 0xfffffff7, 0xb, 0x2, 0xb9, 0x4, 0x100, 0xc, 0x3, 0x3, 0xff, 0x0, 0x9, 0x9, 0xea7, 0x5, 0x1ff, 0x757, 0xe, 0x53c5, 0x6, 0xde, 0xc, 0x304, 0x0, 0x4b, 0x4, 0x0, 0x3, 0x4, 0x3e1, 0x9, 0x200, 0x2, 0x8, 0x9, 0x6, 0x90, 0x1000, 0x2, 0x7f, 0x54, 0x200, 0x3, 0xbf79, 0x7, 0xebf, 0x39, 0xfff, 0x7, 0x6, 0xfffffff8, 0xffff, 0x9, 0x0, 0x9, 0xaa, 0xffffff92, 0x8, 0x6, 0x7, 0x8, 0x7fffffff, 0x0, 0x9, 0x7, 0x40, 0x8, 0x1, 0x80, 0x3, 0x9, 0x800, 0x8, 0x3955, 0x7, 0xfffffff8, 0x6, 0x0, 0xe, 0x2, 0x6, 0x0, 0xa, 0x7c6, 0x3, 0x7, 0x8, 0x7ff, 0x2, 0x7, 0x4b4, 0x9, 0x7, 0x7ff, 0x2, 0x6, 0x6, 0x100, 0x981e, 0xd, 0x7f, 0x6, 0x990, 0x0, 0x7, 0x5e, 0x0, 0x1, 0x3ff, 0x8, 0x5, 0x6, 0x800, 0x10001, 0x3, 0x9b8, 0x3ff, 0x8, 0x6, 0x80000001, 0x800, 0x3, 0x8001, 0x8, 0x2, 0x5, 0x0, 0x2, 0xfffffffa, 0x1, 0x5, 0x10, 0x8, 0x8, 0x1f, 0x3, 0x4, 0x6, 0x7, 0xfffffff8, 0x8, 0x1, 0x14ecee4b, 0x8, 0x100, 0xf7b, 0x6, 0xd79, 0xcde, 0x77, 0xc, 0x3, 0x5, 0x92, 0x7, 0x8, 0x3, 0x2, 0x3, 0x3ff, 0x54, 0x2, 0x1ff, 0x2000000, 0x5, 0xa465, 0x6, 0x2, 0x7, 0x6, 0xa04f, 0x3, 0x3, 0x8, 0x2, 0x400, 0x626d, 0x6, 0x9b82, 0x3f1, 0x1, 0x54, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x594, 0x10000000, 0x9, 0x8, 0x9, {0x8, 0x0, 0x5, 0xfffe, 0x7fff, 0x3}, {0x8, 0x1, 0x9, 0x400, 0x1ff}, 0x7f, 0x5, 0xffff}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x80000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x105}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="a3", 0x1}], 0x1}}], 0x1, 0x8090) shutdown(r6, 0x1) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000000000000000000085400497e94000000", @ANYRES32=0x0, @ANYBLOB="ac14140b0a01010100000000640000000000000000000000070000004444f3116401010200000001ac1414bb00000000e000000100003423ffffffff00000f3f7f000001000000070000000000000003ac1414bb00007115ffffffff0000000901440cb033000000000000000100000000000000"], 0x88}, 0x20000810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000800}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0xffffffffffffffff, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000240)=""/130, 0x41100}, 0x94) 2m44.17763692s ago: executing program 32 (id=5225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtfilter={0x47c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44c, 0x2, [@TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xd387, 0xfffffe00, 0x100, 0x7fffffff, 0x8, 0xd, 0x1, 0x5, 0x8001, 0x8, 0x8, 0x3be, 0x7ff, 0xfffffffd, 0x1, 0x6, 0x0, 0x2, 0x4, 0xfffffff7, 0x1, 0x7, 0x0, 0x5, 0xfc, 0x2a39e01f, 0xb, 0x40, 0x1, 0xfff, 0x6, 0xd, 0x6, 0x10000, 0xffff3c73, 0xffffffce, 0x0, 0x7, 0x682c, 0x6, 0x3, 0x9, 0x58, 0x1, 0x3, 0x9, 0x40, 0x1, 0x5, 0x29ce, 0x400, 0xa, 0x10, 0x4d3, 0x7, 0xfff, 0x6, 0xffffc243, 0x7f, 0x6, 0x4, 0x0, 0x9, 0x10, 0x6, 0x400, 0x7, 0x0, 0x2, 0x7, 0x5, 0x6, 0xfffffff7, 0xb, 0x2, 0xb9, 0x4, 0x100, 0xc, 0x3, 0x3, 0xff, 0x0, 0x9, 0x9, 0xea7, 0x5, 0x1ff, 0x757, 0xe, 0x53c5, 0x6, 0xde, 0xc, 0x304, 0x0, 0x4b, 0x4, 0x0, 0x3, 0x4, 0x3e1, 0x9, 0x200, 0x2, 0x8, 0x9, 0x6, 0x90, 0x1000, 0x2, 0x7f, 0x54, 0x200, 0x3, 0xbf79, 0x7, 0xebf, 0x39, 0xfff, 0x7, 0x6, 0xfffffff8, 0xffff, 0x9, 0x0, 0x9, 0xaa, 0xffffff92, 0x8, 0x6, 0x7, 0x8, 0x7fffffff, 0x0, 0x9, 0x7, 0x40, 0x8, 0x1, 0x80, 0x3, 0x9, 0x800, 0x8, 0x3955, 0x7, 0xfffffff8, 0x6, 0x0, 0xe, 0x2, 0x6, 0x0, 0xa, 0x7c6, 0x3, 0x7, 0x8, 0x7ff, 0x2, 0x7, 0x4b4, 0x9, 0x7, 0x7ff, 0x2, 0x6, 0x6, 0x100, 0x981e, 0xd, 0x7f, 0x6, 0x990, 0x0, 0x7, 0x5e, 0x0, 0x1, 0x3ff, 0x8, 0x5, 0x6, 0x800, 0x10001, 0x3, 0x9b8, 0x3ff, 0x8, 0x6, 0x80000001, 0x800, 0x3, 0x8001, 0x8, 0x2, 0x5, 0x0, 0x2, 0xfffffffa, 0x1, 0x5, 0x10, 0x8, 0x8, 0x1f, 0x3, 0x4, 0x6, 0x7, 0xfffffff8, 0x8, 0x1, 0x14ecee4b, 0x8, 0x100, 0xf7b, 0x6, 0xd79, 0xcde, 0x77, 0xc, 0x3, 0x5, 0x92, 0x7, 0x8, 0x3, 0x2, 0x3, 0x3ff, 0x54, 0x2, 0x1ff, 0x2000000, 0x5, 0xa465, 0x6, 0x2, 0x7, 0x6, 0xa04f, 0x3, 0x3, 0x8, 0x2, 0x400, 0x626d, 0x6, 0x9b82, 0x3f1, 0x1, 0x54, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x594, 0x10000000, 0x9, 0x8, 0x9, {0x8, 0x0, 0x5, 0xfffe, 0x7fff, 0x3}, {0x8, 0x1, 0x9, 0x400, 0x1ff}, 0x7f, 0x5, 0xffff}}]}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x80000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x105}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="a3", 0x1}], 0x1}}], 0x1, 0x8090) shutdown(r6, 0x1) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000000000000000000085400497e94000000", @ANYRES32=0x0, @ANYBLOB="ac14140b0a01010100000000640000000000000000000000070000004444f3116401010200000001ac1414bb00000000e000000100003423ffffffff00000f3f7f000001000000070000000000000003ac1414bb00007115ffffffff0000000901440cb033000000000000000100000000000000"], 0x88}, 0x20000810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000800}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0xffffffffffffffff, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000240)=""/130, 0x41100}, 0x94) 2m33.716003614s ago: executing program 2 (id=5542): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002000180c2000003000004000e80"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) close(0x4) epoll_create1(0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="21000000020000004909005f0accb31c"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="04000b00080037"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004014) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1412efb776f6b7000302000404ed15d22300ffdb"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x88a5) 2m33.194562819s ago: executing program 2 (id=5548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.144062991s ago: executing program 2 (id=5551): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x11, 0x0, &(0x7f0000002340)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) recvmmsg(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/35, 0x23}, 0x5}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000af000000000000000000850000003700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m32.851588433s ago: executing program 2 (id=5553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'batadv_slave_1\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000400)="58c1b8", 0x3, 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000003c0)='n', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0xc}}], 0x1, 0x40088c5) 2m32.681518357s ago: executing program 2 (id=5558): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, [0x10, 0x2, 0x2, 0x1, 0x4, 0x4, 0x0, 0x7f, 0x5, 0x7fffffffffffffff, 0x8b, 0x8000, 0x1ff, 0xffffffffffffffff, 0x2]}, &(0x7f0000000080)=0x100) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r2, 0xe5}, &(0x7f0000000340)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) unshare(0x2a020400) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, &(0x7f0000000180)=0x3c) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008011) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) vmsplice(r7, &(0x7f0000000800)=[{&(0x7f0000000f80)="4191062c14", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a010400000000009806000200000014000480100001800b00010065787468647200000900010073797a30000000000900020073797a320000000005000740d3000000140000001100010000000000000000000000000a"], 0x70}}, 0x0) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r8, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) bind$alg(r8, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) listen(r5, 0x0) (async, rerun: 64) pipe(&(0x7f0000000140)) (async, rerun: 64) unshare(0x2c020400) (async, rerun: 32) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) (rerun: 32) 2m32.430247413s ago: executing program 2 (id=5562): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x100, 0x50, '\x00', r1, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) epoll_create1(0x80000) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x1f0, r10, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xb}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2429}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x68}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa0}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xfffffff7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xc}, {0x8, 0xb, 0xfffffffb}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8010}, 0x10804) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 2m22.978467989s ago: executing program 1 (id=5660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b700000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.848956125s ago: executing program 1 (id=5662): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @local, 0x4e22, 0x3, 'sh\x00', 0x15, 0xa80, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x84, @remote, 0x4f29, 0x3, 'nq\x00', 0x5, 0x20000028, 0x6c}, {@loopback, 0x4e22, 0x0, 0x9, 0x1}}, 0x44) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x30a, 0x7, 0xfc, 0x4, 0xa, @multicast}, 0x10) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xb00}, 0x0) 2m22.599267878s ago: executing program 1 (id=5665): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m22.28515755s ago: executing program 1 (id=5670): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x3c, 0x28, 0x4, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {0xffff, 0x9}, {0x7, 0xffff}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_netem={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0xe9, 0x363989d5, 0x41, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x80, 0x3, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x29, 0x4, 0x38, 0x7, 0x50, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x40, 0x5, 0x7}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x23c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044000) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0xfffffffffffffffe) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r9, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4dd1ab680a"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map, 0xb, 0x1, 0x800, &(0x7f0000000840)=[0x0], 0x1, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a00)={0x800, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r13, r2, 0x20, 0x202e, r11, @void, @void, @value=r14, @void, r12}, 0x20) getsockopt$sock_buf(r8, 0x1, 0x3d, &(0x7f0000000a40)=""/56, &(0x7f0000000a80)=0x38) r15 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000ac0)='syz0\x00', 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f0000000b00)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4800) ioctl$SIOCAX25CTLCON(r16, 0x89e8, &(0x7f0000000c40)={@default, @null, @null, 0x9, 0x6, 0x3, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) recvmsg$can_bcm(r16, &(0x7f00000011c0)={&(0x7f0000000cc0)=@hci, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)=""/248, 0xf8}, {&(0x7f0000000e40)=""/87, 0x57}, {&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000000f80)=""/119, 0x77}, {&(0x7f0000001000)=""/195, 0xc3}, {&(0x7f0000001100)=""/15, 0xf}], 0x6}, 0x2041) recvfrom$ax25(r16, &(0x7f0000001200)=""/4096, 0x1000, 0x2000, 0x0, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=@deltclass={0x2c, 0x29, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0x10}, {0x4, 0xfff3}, {0x13f2ff03ea6b1fe4, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x40) ioctl$AUTOFS_IOC_READY(r10, 0x9360, 0x4) write$tun(r16, &(0x7f0000002300)={@val={0x0, 0x1a}, @val={0x55abf6101b8edf77, 0x1, 0x3, 0x101, 0x8dd, 0xffff}, @mpls={[{0x2}, {0x8, 0x0, 0x1}], @llc={@snap={0xab, 0x0, "ee94", "358124", 0xa00, "3afa4ef29b6e4c3d0cc2f848001b8300e9c23be17a145a039de6063faf615b4d62400927826deebe079d7994456514ef12fab4fbf290624a661c2497205f2b44400a45a1a3a86f9677d2b425e2255fc9ed7d0002628d8e210d64915b557f8c33c09bd1bd7e961f4314dce82087e3d8e7069b293e4d31167e8385dde89b1ed61d4715d89093ed9f355db78f132389f864babca08cb33b6a80aa77c4758908a5534edd4435fcb518ba1b293704e548efcf20c03a1d7ebb16cd8c7d4f"}}}}, 0xda) 2m22.138726235s ago: executing program 1 (id=5671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000d2df004b09e9c8f6f97591008520000005000000950000000000000008a3e5fd6b99a51ad57b1f5baec9ff0acad35912db857033184273f6161e412bc60a6a2ca7b3f21efb712a"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x41000, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000040000000a000000800000004001c4731d2d53fe1f15ac7655b69e6e710000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x4}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c8000000000201d1b5baf4cea7af0dafd7c057ae0400000000000000000a0000003c0001800c00028005000100210000002c00018014000300200100000000000000000000000000011400040000000000000000000000ffffac1100013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000aa"], 0xc8}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES8=r1, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r4 = socket(0x10, 0x3, 0x6) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000e80)='\xf4e2h1\xb2A\x06\xe2\x98\x1a\xe5$.\x9alXGJ\xef\x85\xfa\xf9\'\x03<{\xa6j\x18d\xa5\xbf\x98hM\xe1h\xad\xaf-\xa0N\x17j\x96\xe9\x1d\xcb\xf5\xe3\xc1\xaa\tN^\xe7i\x8a/\xd7\xfb\"\xe0U\xc8\x94\x02,\xae\xb3\x1c\x99\xc0\x93\xc2\x93\xc7J\x01\x8aL\xa0\xf2\x85t\xa0\xb1\xe8\xd3wBo\xf5\xe9PT\xb8\x13{\xda\x8cj\xb5\xa1Au_\xe2\xab\x0fw\xb6\x8b\x0e\xe2.::M9`\x9eSX\x02Q\xd6\x03\x0f)\xe6C\x9a\x93k\x12t\xfd\x96%\x92\xd0\xb3\xbcrK\x12\xab\xa5\x98a\x83\xf7@\x90\x17\x17Z\xd6\x1a\xee/Y`l\xa3L9\xceHWY\xe0Z\xc5\x16\xee\x94?Rb\x0e\x9b\x05\xdd\xc3\xe1\x1b\xca\xffp\xa34\x7f\x8c\bJ4\xc7\"\x05\xfai,Pv\'\xa0\xf1\x85\xaf\xf81\v\xd6\x05\x9a\xf3}X\x17/\xd6\xfb\xef\xf8\xe7\xa9\xd6\x81\x9d\xf0\xdbt\xc8\xa1\f\\(\xee\xb9U_\xd6\xdf\x85\xe3\x90X\n02\x12\xb7\xa6C\xd4>\x1a\x18r\xa8\xd8\x8c\xdc\xa3V\n[A\xa0]\xd6|\xdcP\xb6\xbe\x8cT\x1a\xabe,\xd1\x9c\xfbM\x10(\xd8\x80X\xa7\xfb\xa5.\xaa\xfe\x8e\xa7\xcd\x87k\x9b\xbd\xa7\xe0\xc1BB\x03\x9cL\xdf\xd8%\x00\x00\x00\x00\x97!y\xb5X\x00\x04U\xdc\x8f}\x94\t8.\xc5R\x13\xc1\xdb~Y\x0e\xac\x95\xf6\x10\x01\xcd7v\x9f\xf1\'\xd5bF\xec\xdek\xf4\x87=\xcb\xf0\x9d\x15\x94\tE', 0x174) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x7d7b000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000220000031a92bd7f4e00850000000500000006000000000000a62702", @ANYRES64=r5], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f00000002c0)={0x8c, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x400a0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000408000901030000000000000000070000000800054000000340000000020800034000000007080006401d00000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x24048041) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) unshare(0x6a040000) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 2m20.81346647s ago: executing program 1 (id=5681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1a0, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x534e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c7d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8943}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6d7}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x41}, 0x4040801) 2m17.304718627s ago: executing program 33 (id=5562): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a3201}, 0x9c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x100, 0x50, '\x00', r1, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) epoll_create1(0x80000) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x1f0, r10, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xb}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2429}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x68}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa0}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xfffffff7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xc}, {0x8, 0xb, 0xfffffffb}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8010}, 0x10804) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 2m9.500055561s ago: executing program 3 (id=5784): poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4000}], 0x1, 0x13c) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfffc, 0xb, @dev={0xfe, 0x80, '\x00', 0x1f}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 2m8.346561993s ago: executing program 3 (id=5795): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x53, 0xffffffffffffffff, 0x4}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x837, 0x4, 0x2610, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x22, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x6, 0x2, 0x1, 0x7, 0x10001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x41}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xa3, &(0x7f0000000240)=""/163, 0x41000, 0x50, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x9, 0xa, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000700)=[r4, r5, 0xffffffffffffffff, r6, r7, r8, r9], &(0x7f0000000740)=[{0x3, 0x1, 0x7, 0x8}, {0x5, 0x4, 0x2, 0x3}, {0x0, 0x1, 0x10, 0xb}, {0x2, 0x5, 0xa, 0x7}, {0x5, 0x3, 0xe, 0x5}, {0x0, 0x3, 0x1, 0x7}, {0x1, 0x2, 0x7, 0x4}, {0x5, 0x5, 0x0, 0xc}, {0x5, 0x5, 0x7}, {0x2, 0x5, 0x0, 0xb}], 0x10, 0xffffff6a}, 0x94) socketpair(0x2a, 0x2, 0x6, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r10) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r11, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000000a80)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$XFS_IOC_START_COMMIT(r14, 0x80585882, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r13, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xe}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc040810) r16 = accept$alg(r1, 0x0, 0x0) writev(r16, &(0x7f0000001e80)=[{&(0x7f0000000c80)="75c82cd7188e591bb0096729879171802094776f80eb80062748d55a", 0x1c}, {&(0x7f0000000cc0)="3b12bc2ec4ea28b26efcee6bd2a1f2ce9c70c3f81edcd81e93fdb528d608fcf1cfa9327d7034d7c6ac6e54a32a9e552798e35b7d836788bbf72fcc7760bc3ebeeb92ff425c830212b13bd9c95d68a3ed7709b02672880a5acb550446983e54f4f8fc4601b6fe5dd9e79078f4a2584a30440bc79309083d675e0c278b1fa8f39271d6b94fba9b2737facbbf9368522ba99657a1b7efda3f4438507bd6d3bf34939b5ff986faabda43bc0c4c7aa9dadefb5bf8b32edd93bbb5912df36eaa5af09ad26d721db192a11a3f827abfc14c45d4f04e426ba714d68fe85733cae70e0a3cc88e14a4be55556f7cfe858352d2fd3ae1f77fc494a9800af2cc763eb55c3abe11a1feb403d355805cc39cc118a139deb66c0d5d1fcf4f95494328c78c1a46eeb1ef4966057e1cfa6d8eca8b273c54c7ed359e5cb3fbf0f632aa615ddc89d296559e10a5c6031397c7c8abcfd960f89fe8d293c614a169f6175f333116781298d1bbe16cca169ac9ebd416c88d8787e87aba2f9652588a69f69bee8635126b7627b2e81120bec2fd1fd240a1ff81868ec170e62155d117bc91076b1a1326a9c43bbbe2e6456806e6a6ec47e17a01cbe2313d72efcb3ac737ddb25508c8e339eff642d033439ad6d944105bb00ace42014f724ef6889213f9d7af9fe869a3fb7a9f2d4452dd82730e37c306e2ab9d71a91e455ee48ee4214acc31fff3d65084ef85cee213f07f43197b7f2490276d938e6292492aca46765ac3e07623ecc1eff58c27d3662c4641d07d9acbeecb51e50b7b1491432c2e78b44c50aef25a6690703db562767541550ba73c128be56efa53b7ea168025b2831abe0f9d06fcacdb34b2a50057b13d54d8f206ca05d20846af0895b30048a2342ec7a1fcedd08a795691ac379fcb291e37d84a3e19248b3a045983306b79a979b92ceb49a15e3e3f7120c1b243a558e4c9f76ad0c982b71321ceece1556e50c3d13baa32e020cff6c3de783e29ed2914afc855a6f86112137dfbbed5da3c810235e66b9c7a59fd61b4d709c20991afca0ec59742083b944c91d140e4342d1dc6ab5fb29adaa1df300d0818cc58906828de5618aca9cdb44cdfe738fdbfa7ab34d5476eedcfeb180866fcd4b0fabc6b61b6dc3da037703295df43cf937a7a03d62928b164b3fcd58dad9a90b95098829ef5b2d1d401c558a07268bc7af71ff54b47d81e7bc7e81f2c0cf4b59e19547b32e0dd5bd0b6a8358a91a0bf021f2700d29d1b1bce572018f7f89e51fbb97e649da2bd922c24292552668c3009ea9bbb2051e23aa81aa2f7218fa26a29f66e8c404181d7bb230156de2843b487c7e40e4efc282a9ce741954fe5dcb058ac6b0919afa65273c067a8b7707d0d0f908178920a4ab7dcdc0bcd893a30e3d0f698fe7f2108270d9cfcdf8c2324be2b17dba96b5b1531b2562fe459874cb4272a9d34036d97a69414db6dc2624a7b07989357a00590ac21758c06a44322b86c415a7e8579e5a21ff89e2e1958d94bca388cd06539667c260adb6cad350c882270fdee120dec2f940f506e7eacf3f8754734bacd6a26b2c4aa52494725404ad06a76630fc7c6fcaea2357bae8f9e3ee0685fcbd5f6c1537fbd78972a17b874262f6668d15037e70a99a80524730d309428e7f619e9f36b84878bba958f1ceea77e2bf0c7c78ef4c58d889d4bd87ab9ea4ea9f2a6ff501fdeb7d0dc8a90cd440b390439e74102f32f6ef08844577a90b1a14ea037e150a340444ae1ff491db5addabaa0b06a5589d1006745d1e2be604e49a012b8ab0d52c86bda3c51ace4d601d06fbf7263c5e6fa350d430628732e0a967a60063f17ca87b5e4d130a0db88a5f5c1a807695b37a48287a0849f01f892a8c35cb36be4821d78f5ffe2f1619c555ce856de2ad0a885619f28fe7e76f1bc4f8ec49a71c0870936ef817b87c5bf5105b05d982483d35c915f9e292f5e3e097715ab395636b4cc99bb3ee2ab634e389dd4c181b234618beff00d766de64cefa0333c91f9019c9a076e36b3be03c6802dab85ebccbac76d49e02b2cfd4b96e6c77477389fe509bcadadb5a9408e18d23fcadcd2845a21d686ed5a6e2a4fd0643339d7d6035dd04a4f87e781e2a876493006ec43f4737dc86a699c478b7a269f4895daf292a4fda473f889d5744de757bdd6e0533a83c975cac1b96494606c9ee6debebb9b8d61ce3cca5c28e3d9ccda769f940fad928b8aef5d9b42aeaeea19266e53b351213713af5010dbb482d1ef2ba7427ebb93f21e1957812206af8cb4300554b1f45c83ffb446f8b04b339d1b598491313218559ce4a3b1e3c502cd57e55d506228d0a448e89803e14be8cb7f63f59b241ef855ac6ac8d496bbf62e87c56d3afae72f5a6b675c9d4383f509bcec8f464a7e2895abea75ede2a6b7790eb5e779f0127e7f72bf9328516d481b015c2a833fff9c94acf2295b44487e6f81320a9fd293d8dadf4e1d1871279e7500ca9c0a270eea6769f354ac5a8e123d9f31271fd53760f8045324fe2b647a21a4cb395da18087698a2d114362502d383600af7ce0a459618145a74b4932d96ca5a220c600be8ebdd0bec50fb4a3738b6d2916d7755f51d2cfd4d05ce55f635bc4d3c71fbe08daf2387af521f39915d11a8f3d5fee8c0d5b5df955a92e07ddb15c23f078b777db56b80df74c2124793d3396ba8ad149fc9f0a80b6d351be4ea8c3188d64babd607527d0891ca3e3437b7442c0a90709a115cda26aaac6f8584b8a701b4c65cb90b4bc0a8f5a1cb975b2584bb029b70a0631cb9a6bf074a866087ebe12809d74e6db10d15ebc58b0ab5192160863d975b3682e67300b06a896b60c56f38b5206f563c9cf5b948558738d1634072e0429aa846ed82a086a5e55936a4ab713ec90fecd42e57f51fc76fb60e8184372fc8789431737e2bb83f069ff7700dc82003ac62fe76ea0167698023da0df7af7c95d8ed80c58a646f15c19bdbb73155acce9dd193c387118e85f8503a45aadb9b263057f663003cb9541806c8ef06f9199725583261fb2ba3e8f737b983be2ac1345d9a9938269202ffbf054b3d32ac93763d4878e671cf88200a867ce316c41b5dbf5732477e164d126b432a61b853e649afbbf2f25238db176840c7c90c4cd41c14f9069020340a54f57910cdcdce15bcf5fa2166e4c4fb67775bdeedb0f75a96d192fc3a9d53f07407b2ab588b22d82d2ca5fd3f63cc7c7fdd61e7b7a90ee73816061cb256d9f177b61307aa67a51ad2dbf566fe4c60cae22d7644951c3a8266b10718dd50dd0bf4492fcbd129c8271991c363540932703015fea3181a0ae16d814a67e0586113d140e03083ceaa205b4c4f8cc610501d50499b8efe393eb912ce2e16d61379c7c62802acfddb74f3a39cd90ac7774651bc379b66c3e6d4f36f3d3d7c9cd6bfbec17fc191eb802e26aa202aa6758911dc3a3865d7ecaaaa0298835a35c5ec40158e55b6c3a96512b4990ce2dee1a99d5fde6f7cfc1e47b73ca72f659b885ce52948e27e1306d097c451c17079d604e25641f8d8a27c667ae2b586f6a23cd429d0d041f38d67c40ca3209e240ff4cc578224bbbef6d7531b93723e898013ea002bf1f49618e97c7f5ba04351d6b5b7f89588d2eba7b2acf325bb35e8af1dad53ab5142b56225cd2611c0c462143eb9165806a962513c57676f724014a9d664c99d09ab86c41250df2b50b3cde76da990c6ab1a225370f6beecbb03833d1f6696f5f2b980303a6f67f7c90fa24c7ecb2331378c26943134fb4d7c47de4c88f33f75684c2f1b749c06e8afd23bb4669e3e194ef549cf899afcb40f97a0e030d9f837adc6042d19424768a06a272dbcd76ac60dee900c7e850038e4f10355ef2e62f167d5286c0317515e520f51c786b3f0ce1080ac01c12191dc11fc5aa8a07807e205473405e51909e11ffdffdd23fc6c59eb66cee6a42bdf6a5277c07b8e0b0979fd77e610bf2b4965432e218bd25cb5178442cc5f1536508b609949f1f6f9b25d9af1e3a96580c2b01bb5675f93d298bb22ad2193132d17bce353b09ca182b99a6fb954cadc5f3f848c284d541d92e1496a6b834e6d1148073166c0704e379b188cbe21ccbb260181b8a07a81797031892378fe155c74f1cea8c0188f9d4bd7278a574807cdf95c14df3fab3255bb636f9b66ff47257f8d6479fa3a1c1cd7b21f6a3f25dd9e23bb58004f24770080f748813955025647fb5a36ce810d31369f30fe108b9de7f378a3c5bdfbcadd25801f29034bfc42d81ac09b9f7bfe9e3662b24de2229781ef584bfc3c92d031c254321a7b2f10b08f2b92747a23b5c96411eaafa23a785bb6e078674556b2252b6ae7d97a63f4586667f084a8c9b9d8c7860e0a0255c32facfab24ce1031ff6e95ff44663a4500fe063783712579423cdb3790d262a89571fc0484b1763b5690914ee461eb03c2df7f2a1c315a8613e2dbed34df0747cbadc7cf85a933d863846dd13eb6855e479be4bccb7a15f882ecd2b82cbd8db23e27286b2930ad44738b3a3ddc0eca8846f2558de54f3e971971f487d0b122b11a7f49ade2837e197b5ad9e5d298c92a6c44d10766b938c33dd9786e9f211798f71be4fc459d90affc86467d6bd24a4ccc2d330f4fb940a74be0caaf86b481eb09859c0ba92d753d29cdc5fb1a797a1bc228ea357d3ad2cc3ba29f9f2082e984862f7e7cc0cab97e09d343a2fd94faea8fd5befc5696a9b35d0881cc2cd01d6771bb9c4c9ffe660507dc995968ea60426e4c1891caea799b3880edb654b7a79897909d1837636ff7b9090179edfdc0cdeb5268a22c01b92f1c0727302562c3f6f67675d45dff4918abde34543260a5f99a31b57ed819485248fea946815cf11cb654c6e67822f00f35ac7885e3fed6bfe40fa2f6a1653a785c9f24e139725b784e39eb9e4f69247f7147858b2d89e509832e00bdc34e8b82fdf50b62b0b5b594dccd5cec916d614f5b40f10aa62f036d604638cf8947268a84b9f8be22e052c72b62ef8102496d65020216c365f6a9f343015ce3ab4dce360aa4eebb9f0dd654fdfdde6a3a708143d54a1628b3b6d20fe905e521e8a9da8c9173c65284064dd869c760fa5835535686b60a745c6090e295f268a50596be50e96e08be388b13d96164d0d75593177cb75dc40e5d07a9b2a0894ac45fd99fcb8efb27ac7310a445885959ee16816cdb81d2b6a5c7cca2097c5cf57e1ee99be6a5233e14f457bcd8f46adcda4ce94b48c1ddfeedacbba2f21abd8c49579e9c324b10e3095746a76b31e01427a817a09108eeed094224761d57cd6308cfa9f037624d35b96b35d0b1b64afe8566f627ee076ac64a193613fc2fc18a2867a766e43c2df91ec733e1419588b26100378b9a15bff7d5cded6898b981f0d4d041e187d7f789e77588a7c3738caf3e6629664a91e489c15468374398cf0445247233be1c4db8b649cb4fc92bcd022bbf7959d612d8f03225cf521a069cd6afb498dd9e3650659029dd4c996831fe11d27bd3e71eae692337b2a6d6024b9a4e112860521e57fde590478b30e11f060b8f1958a89fd19d25416dfa341b4656b085c035cae4039fe275e53313c519a8957d85eea2c33e7da7ff549a2b240cfba6c5c58484c8ae9453a554543a82b7d6c3acc695553c4c8ad006171393be998340286147bd99301f136b061a6c94cca2c00719c29c1696a16819102f6be26cc8d69fae4970edb1b048a70a52ca51f5a7034b57b69c90b5b3dc1d9df2c551387f53c63bafe83939a0314828", 0x1000}, {&(0x7f0000001cc0)="a51f3f3ef4c052ce5c83b7705b912af2744a738df2ac633f9d463a7609fc1411f5bb96b385c28fff0e575fe54d38af0f639d8b72e503dd900b97131277967e7cf51dd9f921fee0a14d14ca86d2d1909bc414a95ea1b2de8b0c6908300d07a4d3e0b6d4be926b369c357fb09b63577435c741efb569a5ea1b6624212b8e4664fb7b41aee6d916bb80ee77fb4305c8c8062dbeae2b3bd6d710ccfdb533132efb8ff4e3513add413be28dbcf15b4f06f5c4cd7c359d4b92245163f9fde1ab5d9bec18889ac2953dc88f4fd5e7e00e0f97c98a", 0xd1}, {&(0x7f0000001dc0)="a20067c055ab96c0d6e823d6bf4715c0ebf60a4dec9f5d0349fc6d87dd3ffea1e78a01ad73be0a22c40924a6655f276b67cdb8d72742e355be46bc8435adefe92e2c22a00416eeec410d4875f0fab06ab4e1b4cd06e7607189062cd59b1e233d1969ffbdf82d1f92c68ece37c2c59dc2fe7f189d88e065007a1050ff6cc9ee1adba8d5d82a348a532e96451d4a027bd3c5ec43c215cebd706851a073d825da46f251888355ebc97cea2c", 0xaa}], 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r15, &(0x7f0000003300)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000032c0)={&(0x7f0000001f00)={0x138c, r11, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_TID_CONFIG={0x698, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x410, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x40c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x0, 0x5, 0x3, 0xc, 0x5, 0x6, 0x60, 0x60, 0x9, 0x0, 0x6c, 0x12, 0x1b, 0x3, 0xc, 0x48, 0x16, 0x30, 0x2d, 0x48, 0x18, 0x3, 0x2, 0x1, 0x9, 0xc, 0x60, 0x6c, 0x18, 0x9, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x6, 0x6, 0xa9c0, 0x7ff, 0xaf8, 0x0, 0x6e0]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xbc42, 0x6, 0x2, 0x7, 0xca1, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x80, 0x6, 0x48, 0x5, 0x1, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0xf, 0x40, 0x1, 0x7, 0x7bd4, 0x101]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x4}, {0x4, 0x6}, {0x6}, {0x5, 0x6}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x5}, {0x5}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x4}, {0x0, 0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x2}, {0x7, 0x5}, {0x7, 0x4}, {0x2, 0x2}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x9}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x6}, {0x5, 0xa}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6}, {0x5, 0x6}, {0x4, 0x8}, {0x2}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x4}, {0x2, 0x4}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x3}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x2}, {0x2, 0x5}, {0x4, 0x9}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x2, 0x8000, 0x7, 0x3e, 0x7, 0x81]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1ff, 0x3, 0xb750, 0x400, 0x1e2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x293, 0xff, 0x7, 0x6, 0x3, 0xfe, 0x1]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x16, 0x24, 0xc, 0xb, 0x3d, 0x18, 0x60, 0x5, 0x9, 0x1, 0x36, 0x60, 0x6, 0x0, 0x3, 0x1b, 0x5]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x9, 0x4, 0x24, 0x30, 0xb, 0x6c, 0x36, 0x64, 0x5, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x6, 0x6, 0xfff5, 0x8001, 0x24c, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x0, 0x4c, 0xe7, 0xc, 0x8001, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x2a, 0x4, 0x100, 0x3, 0x3]}}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x30, 0x30, 0x2c, 0x6, 0x5, 0x4, 0x16, 0x1b, 0x3, 0x4, 0x36, 0x0, 0x30, 0x36, 0x4, 0x24, 0x4, 0xc, 0xb, 0x48, 0x30, 0x1, 0xc, 0x48, 0x1, 0x9, 0x6c, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x4, 0x1}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x6}, {0x2, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x6, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0x2}, {0x6}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x1}, {0x3, 0xa}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x79dc, 0x2, 0x7, 0xb06, 0x7, 0x5, 0x8001]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x4}, {0x5, 0x7}, {0x5, 0x3}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x7, 0x3}, {0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x6, 0x4}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x3}, {0x3, 0x6}, {}, {0x4, 0x2}, {0x3, 0x6}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0xb, 0x30, 0x6c, 0x3, 0x1, 0x12, 0x2, 0x5, 0x6dc64216dbf6de0c, 0x4, 0x6c, 0x6c, 0xc, 0x30, 0x30, 0x30, 0x36, 0x5, 0x4, 0x1, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x5, 0xfffb, 0x2, 0x9, 0x8eb6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa0, 0x7, 0x40, 0x5, 0x2, 0x9, 0xc94, 0x5]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x5, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x3, 0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x5}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x7b, 0x5, 0xc, 0x9, 0x2, 0x18, 0x6, 0x10, 0x30, 0xb, 0x2, 0x1, 0x6, 0x1, 0x60, 0x16, 0x3, 0x9, 0x60, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x1, 0x7, 0x6, 0x7d, 0x60, 0xf]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x217b, 0xff, 0x1, 0x0, 0x8001, 0x3, 0x9]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x4}, {0x3, 0x8}, {0x6, 0x7}, {0x3, 0x7}, {0x0, 0x9}, {0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x2, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x5}, {0x1, 0x6}, {0x6, 0x9}, {0x7, 0x3}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x4}, {0x4, 0x8}, {0x7, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0x8}, {0x3, 0x3}, {0x5}, {0x5, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x8}, {0x4}, {0x5, 0x1}, {0x0, 0x8}, {0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4, 0x2}, {0x3, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x2, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x7, 0x9}, {0x5, 0x6}, {0x4}, {0x6, 0x2}, {0x1, 0x8}, {0x6, 0x8}, {}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x5}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x3}, {0x1, 0x7}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xae3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3ff, 0x1, 0x2, 0x5b3d, 0xfffa, 0x9, 0x5883]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x6}, {0x5}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x4}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x5}, {0x3, 0x7}, {0x1, 0x5}, {0x6, 0x3}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x2}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0xa}, {0x2, 0x4}, {0x5}, {0x5}, {0x7, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x4, 0x18}, {0x2, 0x9}, {0x0, 0x10}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x6, 0x3}, {0x1}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x80, 0x401, 0x1, 0x8000, 0x83a7, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x1, 0x7, 0x0, 0x401, 0x7fff, 0x7]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x52d, 0x1000, 0x0, 0xf, 0x9, 0xfe00, 0x56e, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x0, 0xa, 0x5, 0x48, 0x36, 0x0, 0xc, 0x16, 0x6, 0x9, 0x2, 0x7e, 0xb, 0x18, 0x48, 0x3, 0x6c, 0x5, 0x4, 0x16, 0x6, 0x48, 0x3, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x7, 0xc6, 0x8, 0x4, 0x2d42, 0x2, 0xac]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x40, 0x7f, 0x7, 0x3, 0x8001, 0x6]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffb5, 0x5, 0x5e8, 0x100, 0x401, 0xb, 0x8000, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x9}, {0x7, 0x9}, {0x2}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x6, 0xa}, {0x3, 0x1}, {0x7, 0x4}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0x6}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x10, 0x21, 0xffff, 0x1, 0x6, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9a, 0x9, 0x0, 0x5, 0xda, 0xf4fe, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x10, 0x10, 0x4, 0xf800, 0x0, 0x14]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x0, 0x1b, 0x24, 0x3, 0x12, 0x36, 0x60, 0x2, 0x60, 0xc, 0x48, 0x60, 0x1b, 0x48, 0x1, 0xb, 0xd, 0x2, 0x48, 0x6, 0x16, 0x12, 0x6c, 0x36, 0x9, 0x60, 0x3, 0x1b, 0x4, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}]}]}, @NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc7}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x6f8, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xedb5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x790a6812}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x56, 0x16, 0x5, 0x5, 0x0, 0x60, 0x2, 0x12, 0x2, 0x48, 0x2, 0x18, 0x1, 0x11, 0x36, 0x36, 0x6, 0x1, 0x5, 0x2, 0x2, 0x3, 0x16, 0xb, 0x9, 0x5, 0xb, 0x48, 0x44, 0x48]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0x8}, {0x3}, {0x4, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x4}, {0x7}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x5}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x401, 0x2, 0xd2b, 0x4, 0x5, 0x38d, 0x80]}}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x9}, {0x5, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x3, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x7}, {0x5, 0x2}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0x5}, {0x7}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x2}, {0x4, 0x9}, {0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x3, 0x7}, {0x6, 0x4}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x1}, {0x7}, {0x4, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x6}, {0x0, 0xa}, {0x2, 0x2}, {0x2, 0x3}, {}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x5}, {0x6, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x6}, {0x1, 0x4}, {0x5, 0x7}, {0x1}, {0x7, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0xa}, {0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x6, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xd, 0x8000, 0xf, 0x4, 0x2, 0x8, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7f, 0xc9f, 0x3, 0x3, 0x0, 0x4, 0xadc]}}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ed9, 0x3, 0x7, 0x7fff, 0xfff9, 0x0, 0x9, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x9, 0x8000, 0x8, 0xffff, 0xfff8, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x24, 0x18, 0x3, 0xb, 0x30, 0x48, 0x5ca3824cbce5d889, 0x18, 0x16, 0x6c, 0x24, 0x1b, 0x76, 0x60, 0x16, 0x16, 0x9, 0x5, 0x36, 0x16, 0xc, 0x2, 0x16, 0x24, 0x12, 0x48, 0x1b, 0xc, 0xc, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x4}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x2}, {0x6, 0x3}, {0x6}, {0x6}, {0x4, 0x9}, {0x4, 0x5}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x5}, {0x5}, {0x5, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x1}, {0x6, 0x2}, {0x5, 0x9}, {0x3}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x3}, {0x6, 0x5}, {0x7, 0x3}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf41, 0xc, 0x8000, 0x0, 0x101, 0x4, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x45}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x378, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x35c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1428, 0xd, 0x6f00, 0x0, 0xf001, 0x0, 0x4, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x7, 0x2, 0x19e6, 0x0, 0x1, 0x4, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x7f, 0x10, 0x2, 0x6, 0x9, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x3]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x7}, {0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0xa}, {0x1}, {0x5, 0x9}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x3, 0x5}, {0x7, 0x8}, {0x1}, {0x4, 0x1}, {0x4, 0x7}, {0x6, 0x7}, {0x7}, {0x1, 0x8}, {0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x9}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x4}, {0x7, 0xa}, {0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x2, 0x4}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x1}, {0x0, 0x8}, {0x4}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x5, 0x4}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x8}, {0x3, 0x4}, {0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x7, 0x8}, {0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x6}]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x67, 0x12, 0x30, 0x30, 0x9, 0x30, 0x56, 0x18, 0x6, 0x1, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xaed7, 0x2, 0x7ff, 0x9, 0x9a, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x2, 0x60, 0x36, 0x48, 0x18, 0x18, 0x24, 0x73, 0x17, 0x2, 0x48, 0x1, 0x16, 0x4, 0x24, 0x1b, 0xad, 0xb, 0x12, 0x4b, 0xc, 0x3, 0x9, 0x2, 0xb, 0x4, 0x30, 0x9, 0x12, 0x48, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x400, 0x3, 0x8, 0x0, 0x5cfd, 0x5]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x3}, {0x2, 0x6}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x9}, {0x2, 0x5}, {0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x2, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0xa}, {}, {0x0, 0xa}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x7}, {0x7}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x6}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x9}, {0x1, 0x5}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x5, 0x1}, {0x1}, {0x1, 0x8}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x7}, {0x7, 0x7}, {0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x2, 0xa}, {0x3, 0x5}, {0x7, 0x3}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x5}, {0x7, 0x2}, {}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0xa}, {}, {0x5}, {0x1, 0x1}, {0x1, 0x6}, {0x2}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x2, 0x25, 0xff, 0x3ff, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xecd8, 0x100, 0xbc, 0x0, 0x0, 0xde, 0x4, 0xb130]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xcc19, 0x2, 0x5, 0x3, 0x4aa7, 0x200, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3}, {0x3, 0x3}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0x3}, {0x6, 0x1}, {0x7, 0x5}, {0x4, 0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {}, {0x2}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x7}, {}, {0x7, 0x6}, {0x3}, {0x5, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x4, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x2}, {0x4}, {0x1}, {0x1, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x3, 0xa}, {0x1, 0x3}, {}, {0x2}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x4}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x7}, {0x6, 0x5}, {0x5, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x9}, {0x4, 0x2}, {0x2, 0x1}, {0x3, 0xa}, {0x1}, {0x7, 0x1}, {0x7, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x4}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x5, 0x1, 0x1, 0x318, 0x101, 0x4]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x5}, {0x4, 0x4}, {0x4, 0x1}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0xa}, {0x2}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x8}, {0x4, 0x9}, {0x5, 0x2}, {0x4, 0x6}, {}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x9}, {0x5, 0x1b}, {0x1, 0x5}, {0x7, 0x8}, {0x5, 0x5}, {0x1, 0x6}, {0x3}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x2, 0x5}, {0x6, 0x5}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x6, 0x4}, {0x3, 0x7}, {0x7, 0x5}, {0x2}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x7}, {0x1}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x3}, {0x1, 0xa}, {0x4}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x50, 0x48, 0x2, 0x2, 0x4, 0x6c, 0x16, 0x1b, 0xb, 0x1b, 0x3, 0x1b, 0xb, 0x18, 0x9, 0x48, 0x9, 0x6c, 0x24, 0x36, 0x5, 0xc, 0x30, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x38}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x380, 0x11d, 0x0, 0x1, [{0x1cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xacc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xfd7c, 0x7, 0x6, 0x0, 0x6, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x16, 0x1, 0x24, 0x4, 0x6c, 0x6, 0x12, 0x9, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x2, 0x5, 0xfffa, 0x7, 0x4a1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0xb4, 0x80, 0x6, 0x2, 0x0, 0xfffe]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x2}, {0x1, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x8}, {0x2, 0x6}, {0x5, 0x3}, {0x6, 0xa}, {0x5, 0x7}, {0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x5, 0xa}, {0x1}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x7}, {0x0, 0xc}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x9}, {0x7, 0x8}, {0x7, 0x8}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0xa}, {0x6, 0xa}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x7}, {0x5}, {0x4, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x32d0, 0x6, 0x6, 0x5, 0x8000, 0xbe0]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0xfff7, 0x7, 0x872, 0x7ff, 0xc0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x842d, 0x1f, 0x5, 0x8, 0x8001, 0xfbe, 0xb0c1]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x24, 0xc, 0x24, 0x3, 0x2, 0x69, 0x1, 0x3, 0x1, 0x6c, 0x6, 0xb, 0x12, 0x12, 0x36, 0x0, 0x5, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0xd, 0xc, 0x8, 0x1ff, 0xf7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x36, 0x60, 0x1b, 0x48, 0x2, 0x24, 0x9, 0x48, 0xc, 0x48, 0x48, 0x2, 0x4, 0x12, 0x4, 0x30, 0x12, 0x18, 0x48, 0xc, 0x5, 0xc, 0x1, 0x13, 0x4, 0x18, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5e41, 0xaa9e, 0x5, 0xfff8, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffa, 0x5, 0xbfe, 0x90f3, 0x5a08, 0x1, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x997}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0xfcf5, 0x0, 0xfc09, 0x7, 0x40, 0x7]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff9, 0x4, 0xa5, 0x8f, 0xd3, 0x1d40, 0x6]}}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x615f, 0x4, 0xbf0b, 0xf, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x6, 0x7f, 0x0, 0x1, 0x7, 0x1, 0xaae]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3, 0x7, 0x1, 0x4000, 0x9, 0xcff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x6, 0x9}, {0x4}, {0x4, 0x9}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x2}, {0x2, 0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x5}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x1}, {0x6, 0x1d}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x5, 0x1}, {0x3}, {0x7, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x3}, {0x6, 0x4}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x8}, {0x2, 0x5}, {0x4, 0x7}, {0x0, 0x1e}, {0x1, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x5, 0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x5}, {0x0, 0x7}, {0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x2, 0x5}, {}, {0x4, 0x7}, {0x3, 0x3}, {0x3, 0x9}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff1, 0x7ff, 0x200, 0xc, 0x6, 0x7, 0xff, 0x8]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x400, 0x7, 0x6, 0x1, 0x7, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xff, 0x8, 0x1, 0x3, 0x57c, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x54}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b4, 0x11d, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x3}, {}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x4, 0x6}, {0x4, 0x2}, {0x6, 0x4}, {0x1, 0x6}, {}, {0x5, 0x3}, {0x7}, {0x7, 0x3}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0xa}, {0x3, 0x12}, {0x2}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x6}, {0x2, 0x3}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x7}, {0x1, 0x5}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x9}, {0x1, 0x4}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0xe, 0x0, 0x31, 0x4, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0x4}, {0x6, 0x7}, {0x5, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x3, 0x8}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x4}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0x9}, {0x1, 0x9}, {}, {0x6, 0x5}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0x6}, {0x7, 0x3}, {0x4, 0x6}, {0x2, 0x8}, {0x5, 0x2}, {0x2, 0x8}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x1}, {0x7, 0x5}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x5, 0x9}, {0x4, 0x5}, {0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0xfff, 0x8, 0xf, 0x8001, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xafb, 0x9, 0x10, 0x2, 0x4, 0xb26, 0x81]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x7}, {0x3, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {}, {0x3, 0x4}, {0x5, 0x2}, {0x4, 0x3}, {}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x6}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x7, 0x4}, {0x4, 0x3}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0xa}, {0x6, 0x8}, {0x4, 0x3}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x2}, {0x7, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x3}, {0x7}, {0x5}, {0x6, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0x9, 0x8, 0xd, 0x3, 0x3229, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x9, 0x1, 0x4, 0x2, 0x6, 0x1b, 0x0, 0x60, 0xc, 0xb, 0x1, 0x48, 0x1b, 0x24, 0x1b, 0x6c, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x0, 0x60, 0x5, 0x12, 0x2, 0x6, 0x48, 0x18, 0x18, 0x12, 0x30, 0x48, 0x4, 0xc, 0x6, 0x3, 0x36, 0x2, 0x5, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x138c}, 0x1, 0x0, 0x0, 0x4c044}, 0x4004) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) socket$netlink(0x10, 0x3, 0x15) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r17, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x70, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0xc) recvfrom$rxrpc(r10, &(0x7f0000003480)=""/180, 0xb4, 0x40, &(0x7f0000003540)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000a, 0x30, r8, 0x58a50000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003840)={r1, 0xe0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000003580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003600)=[0x0], 0x0, 0x6c, &(0x7f0000003640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000003680), &(0x7f00000036c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000003700)}}, 0x10) 2m8.159104139s ago: executing program 3 (id=5797): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x4008000) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x2}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x3921aa88}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @ptr={0xc}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000005c0)=""/226, 0x54, 0xe2, 0x1, 0x5}, 0x28) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'pimreg0\x00', 0x7c2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000280)=""/37, 0x25}], 0x1) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m6.774543846s ago: executing program 3 (id=5805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x4, 0x4, 0x560, 0xffffffff, 0x128, 0x128, 0x220, 0xfeffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xffffffff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xffffffff], 'veth0\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@mcast2, [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv6=@mcast2, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x8, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ipv6header={{0x28}, {0x77, 0x4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x20, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xb42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, [0xdd02, 0x8, 0x0, 0x2, 0xf6c, 0xb5e, 0xffffffffffffffff, 0x6, 0x4, 0x8, 0x1ff, 0xbc1, 0x40, 0x5, 0x4]}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000012000501"], 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x12, &(0x7f0000000040)=0xfffffffd, 0x62) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x8, 0x100, {{0x7, 0x4, 0x0, 0x35, 0x1c, 0x67, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @private=0xa010102, {[@rr={0x7, 0x7, 0xa5, [@rand_addr=0x64010100]}]}}}}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) connect$phonet_pipe(r4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x28, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x8, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0xfff7}, @exp_fastopen={0xfe, 0x8, 0xf989, '\x00\x00\x00\x00'}]}}}}}}}}, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4003, @remote}, 0x10) 2m5.743304393s ago: executing program 34 (id=5681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1a0, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x534e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c7d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8943}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6d7}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x41}, 0x4040801) 2m5.733237751s ago: executing program 3 (id=5817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x33, 0x2008}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m5.49749268s ago: executing program 3 (id=5821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008800c000140fffffffffffffffc0c000240000000000000000a0c0002400000000000007fff4c0008800c00024000000000000079530c00024000000000000000010c00014080000000000000000c00024000000000000000060c0001400000000000003e2b0c00014000699fb0fa4024d3fd0008800c00024000000000000000010c00024000000000000009a70c00014000000000000000060c000240ffffffffffffffff0c0001400000000000000eb90c00014000000000000000040900010073797a300000000014000000110001"], 0x160}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r8 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) 1m50.39073751s ago: executing program 35 (id=5821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x160}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r8 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) 4.999634265s ago: executing program 7 (id=7014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid}]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="8a7c444062d6"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000050) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)={'macvtap0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x8c, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x84, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c1300e2d1ddefa9fba8387c94e23efe4"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e905d5a46abf695164ca4f06930dfe1254193ac3c26a11e106b9843446559afa"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xc}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) 4.487246461s ago: executing program 7 (id=7019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) write$cgroup_subtree(r2, 0x0, 0x3261e) (async) write$cgroup_subtree(r2, 0x0, 0x3261e) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0xc005}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0xc005}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) unshare(0x2c020400) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100fcffffff1000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020000100000000000000090000000000000083000000000000000400000000000000000000000000000000010003000000004401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350004020002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000000000000000000000000000000000000000000000000200000800000000000000000000ac141428000000000000000000000000000004d43200000000000000fe8000000000000000000000000000aa0100000000000000000000000000000000000000ac1414bb000000000000000000000000000004d43200000000000000ff0100000000000000000000000000010535000000000000000000000000000000000000fc000000000000000000000000020001000000103c00000002000000ac1414bb000000000000000000000000100000000400fc000100"/436], 0x1fc}}, 0x4080) readv(r7, 0x0, 0x0) read$nci(r7, 0x0, 0x0) (async) read$nci(r7, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) 4.131829402s ago: executing program 7 (id=7021): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c880}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x9b00204}, 0xc, &(0x7f0000002940)={&(0x7f00000002c0)={0x2608, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x81}, @NL80211_ATTR_CSA_IES={0x25ec, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x222, 0x2a, [@measure_req={0x26, 0x8c, {0x57, 0x3, 0x2, "6fb554d5dd7e66a2c0020c3a2aac457bdcfc4bfcac25ce19161e2439aa54428931eda9874cdd79c400559279da1b4f98341ca4a7ec424445c5fdea2c14a748612a7bcf05f0adc949308168bcc9d6c5512a4e5320b8a2e01e48f8c5dc26b62905f9a4b6c1671ee65d72b3a63874180a4d31dfec15b5b9f22219ca81add41e9b0212800bff0aa65d6764"}}, @measure_req={0x26, 0xde, {0x5e, 0x5, 0x9, "e1a98f4c23ae87969187e15a5c4c43bb17f7406c8c13af29723c17ac2ee74eb0e2306e14af819d2234ea2c324c3c6f82056406f3f9c06a1f7961da7395b98830629c3bb9c9e927541a23f92115b9522ffecddec40be159bc3966858b752b27996f61e55d5af1595fca33671fc59517f9fcee9bf74172a02ac455455b62b6100764da2e3c7b32c7abd2d6418e2cd686040770b3ef686b32cb235666298009de94545b44b88a3f23d48285d96b9b1f4a8f5b47b2af24b87afb4ac12fa6857363da44dff04d1ddc3ab52df0aaf1e7b0d406e6e5e86a77fe41feea254d"}}, @mesh_chsw={0x76, 0x6, {0x9, 0xd, 0x28, 0x2}}, @fast_bss_trans={0x37, 0x9e, {0x7f, 0x3, "d12d765062ac6de78d5ca36c642b533e", "1874b0a7fffaf7148a6e8c73d838fe196cce1db74e1f344ad05d421898956945", "32142d7a7231cd6ab176ee85cd7a3f9401fa0bd11bc724c129b48c9cb9b0597d", [{0x2, 0x16, "b180e57bde552d6de08f835a5e1c7fc1f78994612f42"}, {0x2, 0xe, "9042a2cbbf19c023b59b5b7815d5"}, {0x2, 0x22, "910796adc6f1f7cd6af2cc83c7240db283ad5038600c774fd24ee40cfee27d666e87"}]}}, @cf={0x4, 0x6, {0x14, 0x4, 0x2, 0x5}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xd0, 0x80, [@erp={0x2a, 0x1, {0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x0, 0x9}}, @cf={0x4, 0x6, {0x6, 0x2, 0x0, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x8, 0xac}}, @dsss={0x3, 0x1, 0x84}, @ibss={0x6, 0x2, 0x4}, @mesh_chsw={0x76, 0x6, {0x0, 0x8, 0x36, 0x6}}, @random_vendor={0xdd, 0xa5, "6cb3044798833b311fd4d7d9951c6fd2e9199a5d80bbebd9b54cce96e483bb8e3c677d633fa6a081a16cffcb2fafd8ee446d97dcbb4ae2411d0a01c0720b4a6710a76bc5cf44f16f49e1e22b5ba5dccba1c495a7a9bfb8da2b432efd36ecaa8e15e1ce8bdde3652b2de521baa7e807b11f9af19a628c30ef0c40e6b7beec81a2776bbe46f25c3d6fc0ce52e380f175ae281a3954b4c23d79252cfb37e36626f2f2b7848484"}]}, @NL80211_ATTR_BEACON_HEAD={0x2ea, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @random="6cbd82e35a79", {0x5, 0x5}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x9, @default, 0x3000, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x1, 0x1}, {0x60, 0x1}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x2e, 0x9}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x9, 0x70, 0x5}}, @void, @void, @void, @val={0x76, 0x6, {0x1b, 0x2, 0xff, 0x8}}, [{0xdd, 0xaa, "ee88df09fc1d01fdc5730f23b73e6bbd0414ce82612fc087734cb8f4d75ee158af1fc763e875a8219bd2079fa5997d19d3ab51b9bfaa75c8601e9f64cd37ad1680fe83ee9dea9249fd7bdc138dfae8fc2576a134a6d0fcbe048159a1f14d0e880daef31296ddd223a13c3cd1d5a61cfb63b33d6f53406527ee7d9f573270de37ba3308757a1916913fcabe2ebb1ce2da8a8939d4deea60b1d6cee3dc02e8f327e5ad0b7b43a9721a6d8e"}, {0xdd, 0xb9, "ce5abf920a794f0cb35728f4908c4ed562f4c57814033f9bdb9bd6c586c74f1093d59cc7f1303379f3c194a8cb05e006e5ebccbe9127846e1079dceed67aeedc9ea932d0cda831a0a8983d64260e372e26cae1d01ad2d1181b804f0c511ea5bd2196d09c327a4e52ddff2c596b50dbc47cd31366c4cca8ada55dbdbd5ff7470ab82c6c369385f291cd9762c983d9b9bf3f8a187b60dc41c5ff912c874ca042db39f6f308dd3cf2ae6b3d76caeff08b3ca7343db1e8b41b59d2"}, {0xdd, 0x5e, "6ba84b94a9d1920d6b0560230bb1b2337477e2826bb2a33f6aef3a93e24077500379881f3cf2fa3d42626b58aa44e35541377cb19f775c743a2ed2ef00e31dcf9610104134d4c6dead7ae7449807a08713d2546c921a3b6c0f9adefa71b7"}, {0xdd, 0x13, "4dd06b4b4d84aa2e32730f438495f7bbede3ff"}, {0xdd, 0x64, "f5fbaa6c963db0d3be837646e0664fe8d7ac34a0bac7c9ab9e2698e34ed81e9b45b77343aa569f069507af1f238c0030db43b3d44680f6df5296f4fe76134f05c59e8c99370eefafc366881c2c33baa94e117e9154f4afb17c1d002e73d9495474e691c1"}, {0xdd, 0x58, "0e99126c92ebc5555a080b5bedbf5599d6ffc5f91a6de705e47ce7e63810af6902e9da12a8c9a86439517f6a164a1a5a3f805a5f7faa750281b2d5cfedd5cb2c4c843b131d7cff85864f9024afe409aaa096f06747c0cc52"}]}}, @NL80211_ATTR_PROBE_RESP={0x6f3, 0x91, "f4425e3155c476999b9dd2166fd4a3ecbee89f2838025d50bde274d1bf11c516bca8dcc4e4a7fa888e7defaa7eed1e6099a6d987b98041498208b8b2a3ac8d26d5c460b5eaa9ffe2dda8682ecf8857f6ef87a2a25f782ed48d3495e22877492de2363a508ec0b2a997b1a6be0780f7027f94972155848118517845de834fafe157bb6519e605914caf17f6f6d1058df9a3977bc9468e0118ff793a7695eda1ced19e87f60cddcc1d0b1a221d18326924406635a8499ab8b5a62574dadc730840a4a6271d6bb73b04b7a217f63638150fdcc26e3ab6d6249dbbcbfd1e2818bba8d8189f78a26938d6e1381438c760bb6d2ef6d05df4d35d061700e62bd2eaae753631ec36324380b6c05a4f35b3df6a9261bf314fbc926cabd64d858732c9a76f2061534874ccab2fe3cb4e7932e31c77c9f01c53a66613ac2ccde8dee412cf5fd8e9a95210d8bc3344bf4a1a1dfc57d2092a0697319b48773e52e39601bf883b14be1db2b2a1ad039a6ce10fc96d0f50ce6a490ca4fb52cce404c0409c02f2ae5d67f6e5f1c1cfcf9cfba67752939334764e7753fde608af2ba512a06268423dcc621af10f27f45000d6266e1650b46b796fc520da5ab5ebb851d19561c289092bd56ee4c86d27b9e5826928af23f4fe1ff73c1c1ce1cb8b097d41a4906e4605be9f29f756e309df460adc7baf7d0d6b5955369fa61543812b561ea6f95363bd7bc7083cf0e098b260200c4218923f484c36f7e6509f2a859b3d42356ec38fd4954b9a43f7863ad0e427cdf09d7de301aea1bbb2c81e41adb096a01d6608ae49c34d2b3071236698327b5d0c8ec91b7aff6fd91199d1a50fa53d807b1973e84c14685c5c5ba834e4141169526aa4ab4723b4e755b40ff26ae50e3ea1218f84ccf9aa2e2eb49f83e049d3ae3e2dbb628b5436efaf65330b52d755ae4a24e0ba69f8d70361fcfdc8e55893d3e229ba5f31c56f047a693dfb828495b94fe55f7e97a1b4c054e08c034d9c5f0fd91658c5099ec2f6c469498678312a61ec785f044bba85102221ad2e7aa2007313a91d67ea9c3968708557fb095880807169514bde0ae14b427c73324e9b4d7436d86377a324b06f52d7a9953fd8d5fae9b621d2e4ee7454629e8ca4e228b333786e83d36b970485501a1b24f59be245f5095825bb1a4d195d1c00f523e6c4ce687d2175dd3f94ab2004ce297e9919a630f63c3f51abeca50c5419886669f473345b8405490b46b719eec7540b3199989b1b1213cba877fd5c22603fd536338771843e064dbc16fed595c74cb0ad32b29350fc1a3b74fe89008822664f11226fcb467bb2c394ff6e35fc447407383b29d5a1b2f574f0e321b61c164195ef66a583bcf5b04c01ebc1654f3358e8515c9facdb0806237094a7e88539192274d7a2b47f0b947b9931d80e09295d5920b5a0d67bec5b344cb72b78987aa7fbdf7fef96c21dbcc54ecf01269d325eeb9f6de3d5f9626ca278929538bffe627bc141feaa0cab1ff2db2b9070446918ad606957c4e6b588920bc1fbdc3423fa6b00785ef57316c37f1050edbf735f82217a046ac7bbe0dff1a448d09b009c808a9ea55cbfc236858b87a2d3f6ab7f9f23a3ab2ae1f8ea589b95a68aaf9f29983933fe893618ff14c26c642ac57a640eef6cd751ed793287ca9ae7466ff8fb607e2b0b3e405c6c771aaa4e0f22d12e320b8d929e893e2fc7c72cf05bcadd31288818a18d94794dfa1929d739d6c60e8126a32d07c61241c1aaf6301a7504d314a2bc009acc683e935b5960430d1b918bf1772322c69439748d529d93d40bd10fb5edf397ca91db1e20a3503195b593fc2c9099ced5f641b55e790e23e2b2a17ffa4aaf46f92ebf6b0a656f57fe81457793a5232d760911f7da77ec4eb21d72e4baadd37d00e14d9f25cb743181332f2c53eb80eac746bef5cd605c936a33a5ae1e6eee3b432a328303a1149aa84495dc585f998f12e0941a7300db0572835061c8d6d7249965cb56efa01bf7a4cac41f341b79f4928e3ebb2e0f86c246c57087f4b43a3fce0fef0fc75e46084b3d217af998d23c357d9bbd2207505a633c59949b0001c6fa0d4479d30de40a4992313c5a22b13ca9a68c18a39126335b3705e4b85a2b9e8b05188e7dc0f505af3d5083c2d46f93ebc9837a085ae260cb3082e09d14e7ee694246fd098cc1d28f197fd847f017c8387d874f0e03c5074eabf628ec92361c8bcba78db7493a7473150b89d157ea5c220235e2dc9f0d58dc379b68ec6b48d7ad829e8d900c4ffa57db7bcc04704eaaf8ed3c81ebdcf7eccafbdb2a0cd3db17ace50283439d6282319c91914d8b52c435a697d5fc96364c5aa7a7119e995e449bbd0086f69e904b49db9bfdc2322d9b0a4fee5d62b09bf72bc7c52f1fac7a6e67a952bdcc7ffd4635a5479101f91f01faafeee0b40f2fe108e8beab199ef592fe6b022745c5da4706e2dc7d37472be2bee566e00e7a9793aa722a6a7058ace755a9ba4e"}, @NL80211_ATTR_BEACON_HEAD={0x315, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x621f}, @broadcast, @device_a, @from_mac=@broadcast, {0x4, 0x95}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x4, @random=0xf322, 0x200, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xa5}, @void, @val={0x6, 0x2, 0x3}, @val={0x5, 0x15, {0x4, 0xa1, 0x7, "28ea30b9f807193bd40b5d243c0e8ca25df8"}}, @val={0x25, 0x3, {0x0, 0x1, 0x5}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x8, 0x9}}, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x7, 0x9, 0x1}}, [{0xdd, 0xf9, "536500f035622c2d32f282c9a9d7269ec4160bb22d07739286762721ca4cca5644a4530e6bc447893b56802a713b5d6e915f86e94d3e769365e95e0cca01b11e463aa98bcf7a2808ce54406f6d52a21f259768810a492d8c1563a475b2cd418b8efe8e6ff5ac7e7211dd1b0e04311de2fe9c2ba2242852cf9e1c319f1997d3d341e678f7b82402465a0a1279ec13eec9c9ec82b465dd8047da9feb1e9cae4bf64e60a0c8fef650b2e500b7a1012f3e86013220d1c14097c2231960ea435c389986e49af2c22c7bb47b52aa37c6345a405bede3c559f44e27d6ed4147c4ca6d69080aa6ff997556ec3a45e74edd441ee488c4c5f940a81cb9d9"}, {0xdd, 0xba, "c3ac18078501ecf6b64328b7a8e1bd80ac44030b6ca1f152b56b09c3032f89b916047ecdaf63b069f6c9c574197c15b86d1428655406d781a9761336e79e071c229c03239db10c0157b4e8c95031685c5200a7f9b04834c88dc92917e882646f51763b60cb3e365d1408b530b35b297fbcb9b01e08c546b952b492e4521f57b2a2aea4484d6ef5d78a79d20d1e2424ed8ac75719c892752411d0e28f29847019dee9be8c9979ba95645635c1e5fff65423cea8ad83bd9053382b"}, {0xdd, 0xa5, "10fa9f2cb2f0808ef21a9f7d03c60f639cff9c8511b965b753fe33eff0f9080600390ee83f7a84eea1bed67c1e55e4b8122a2362383830f6e91a330e045d4e171a748673e36c091542bdcd127c7c2716fe16feac660a100f41a78da6c431c318a5347fc5e1161f97479fc49ea85f1a653e9b76eee4a49d086624783e44767a4f185f02fbd7cfe8bbff9c86b026ce02491075e9384ef7f83cb851a3440cda86e96f5a7cc3cb"}, {0xdd, 0x50, "b0396a2bb9f75c096b4b0d477715ff77d6f16365879b3ba7db7cf4cb8710f4c35cd4b17e9a3dcd3ad34ac9eeff1c36a7d4584216000d37f67c30efee3be69e53711d449e39d8b0e369f4de6c8108e423"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x242, 0x7f, [@measure_req={0x26, 0x3b, {0x7c, 0xff, 0x3, "da1ffed04994ee1cb9943fc7cfd2642b953c183459e4fb4c2f4bb658f137541318792522d6094470705524b4fd662f83a331c7d1ad2e8790"}}, @chsw_timing={0x68, 0x4, {0xaf4, 0xfb}}, @fast_bss_trans={0x37, 0xc3, {0x1, 0x5, "4176e85a5be40090f5a93369ba2279ad", "fab31f22710c7b0df9b8edd03608a6865f415b4eaca8ae66bdee9530b0bf3666", "bb58ad81f8dd2ecce0a7dd3930399650557cf928af07e76cc38368a7ef07c0c7", [{0x1, 0xb, "246112c645c4622840e72d"}, {0x1, 0x27, "ec64fb9ade7e2892d0246c41ef6c65f123bae7b4d6aff7feca5e685fd982ef963596e68839aa0e"}, {0x3, 0x10, "22595f0fcd94c396a64f093162d18362"}, {0x3, 0x17, "908dc1ad7591e25d11911fb899ddf1895082c6e08b72ad"}, {0x4, 0xe, "8331580fe063a3bd2b06ba7ae9bf"}]}}, @perr={0x84, 0x12f, {0x8, 0x13, [{{0x0, 0x1}, @device_a, 0xffffffff, @value=@broadcast, 0x38}, {{}, @device_b, 0x6, @void, 0x18}, {{0x0, 0x1}, @device_a, 0x1000, @value=@device_b, 0x4}, {{}, @broadcast, 0x4, @void, 0xb}, {{0x0, 0x1}, @device_a, 0x2882, @value, 0x1a}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0xd}, {{}, @device_b, 0x1, @void, 0x33}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x35}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x14}, {{}, @device_b, 0x3ff, @void, 0x2c}, {{}, @device_b, 0x9, @void, 0x24}, {{}, @broadcast, 0x5, @void, 0x3c}, {{}, @device_a, 0x4, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x31}, {{}, @broadcast, 0x6, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x3b}, {{}, @device_a, 0xfffffff7, @void, 0x1b}, {{}, @broadcast, 0xc48, @void, 0x12}, {{0x0, 0x1}, @device_b, 0x80000000, @value=@broadcast, 0x30}]}}, @supported_rates={0x1, 0x3, [{0x6c, 0x1}, {0x12}, {0x48}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x1168, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x49, 0x3, "c6459f0597dad50b48f3ea9d35cd8f676b5789c0854a6e95630bfc914590145d546481345306a97d3089295d764e5a849e7153651cc27910d9e38723403f867f54ec5bbdcb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe8, 0x3, "4a0fc798e001b0ec50e167e6022e0a83ebfceaef921d8827040d4bc8a5d7c2e09d4ecbdcea9ccd18b476bf6de48493ee8d654ba5ea243934473c2f08375d104e585515bbe6211faca412b645bcece8e005c7bc7a0ff3db34dfd586eb3e52acf990f1e17e3cd31883de33f4b3c39ff26043144e373e46c135bb403ad43afd9d583b8b317195f2e1c2c87f84d5ffe72f3f87226aef48ca6dcf25cf9016f278453dc8321ec48eefe27a846fd119bc8182b6dc3e6b306e3d887681fdb9a70b571649ec136425a3c4739571cad108791b5abf3c284ddb61f0b58a54a91dc4f9daf9cdde0608dc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x21, 0x2, "e4515fc3fc61d8c266c149197b81276dfdb679f11982c40f281b72ae62"}]}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe, 0x80, [@supported_rates={0x1, 0x8, [{0x36, 0x1}, {0x9}, {0x36}, {0x1b}, {0x6}, {0x3}, {0x6c}, {0x18}]}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x228, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x61, 0x2, "56408fb89b236dc7d0ea4baf5f515e86f36cd3b739a46345001d63947d5e384f0ed011d34d2361c85fd11ffc7372b20716c7c0c9fa29e26bbb33f5503da6f30b9e12fd85eb11ccee0cc9e333205ea00819be45250e28aabac16fbec25b"}, @NL80211_FTM_RESP_ATTR_LCI={0x59, 0x2, "cd40a89e04494072631cc97d8547c69e47552f3a4b19408fc5ace0b5e37a77a6d397ad926a82bc176abf5869071acc3297a679184a3351419e811acfd7279ebd8625ff74082f43fda7ab59027124020d5173615edf"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc8, 0x3, "4c6c448a5f784313b524ac9911193a8ed4658c0d8e81bfb62f0e613c79230ca9db0a1c62e7e97634a3b2b2c4ef419c2a5cec052073847fc9c8ca06ab7cb5971f7b785fdeb534152f997a0415589fe33df88815fd162aac64724bfb2367d6d91876fab113dc9a2b6ec98394eb44d94a8bb8f3699aecf1210767355e92ddc037a544f9ef8881d82d1917cd45e4d2db6eddba3b092d204251a2e1de43f4998c0ddbc122ca77ad9b4d181cf68e7bcffd5901e96f189229d92de044e723916df44128867994ef"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "e3f86caaf08b3e9ea85d0e9aa6d4339915a15dd13303bb5aa163336d587cbab132f8c16f6c4ec362ffc32a3ce137648c6f57b73d1fedbd32858d1c6ec57a758748ce1d4cc63a8c2c30a6d3070fd0b37fede8511db69d3165923c3f06513e0c0c65390fbbc4d2b49e834d8406fd344b917797efae385c6331f4e34a09299be3759b7500c176d6cd36243d4f31fe391df672"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xa1be]}]}]}, 0x2608}, 0x1, 0x0, 0x0, 0x2004c804}, 0x40885) sendmsg(r1, &(0x7f0000002e00)={&(0x7f00000029c0)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002a40)="e37edd876c0ee33403f696e0c446bccdc64b2bb15636bdb67aa440219abb429145c3731fede750ba26d57904898bf2e2bd4e696c8c0e83838059640a6447dccdcea6b1666a0e91efe96910a9571f0b0a0c3a25ae0ddb95dee457430b0f0c10a8bf0387ee38a7bf06761ab84aae552002bdf9fbc8821830500e92c39320d80a65d530657e12546713c86b375a550934f30858cb5ad81485ba92", 0x99}, {&(0x7f0000002b00)="7d64c507369604c587abee1f24c32de7d1bc5ffbf87a21be91dfe21e5e16384338e337709f0bcd5096c69706298082d0f878a50496e01f4fc990e5752df927bd9159d4ea3cae29cf81302e7ec4f471afdda89b594b3c9a94243813516f6a657d22127554bd876311fa014f5cf78b4fec7f8957dfcc50d659411e40dcf67362e4a3274680f8032d", 0x87}], 0x2, &(0x7f0000002c00)=[{0xe0, 0x104, 0x3, "adb489ee94752f1ed8739cb391b5bc98b6c45e39200cfb6bd49d10013cc9d9190cd4f8f0727773caffa42ee35ef5a2598e12375afa9f532cce928fa06f4000f4f3c82d22d2ad43350637908e18e4795d52eff734e5798afc335a3fdb618c6a37f42ff19804e5dbe839fb8eb4b3ad507fd7193b4b03b1d7697a1f715ecd20774cda8caf300c2e4453a35942e88dcf640056ddbe4166ccf05eb744d29e02a39500ff4304abbcf87a26a35967c2805794b9f6a62d7be11a88259f9270244c3afc8d2dca8f90c4b0cc6fd37dac164293bb"}, {0x58, 0x101, 0x6, "610066d54ebde695ff42688637b323427a6bab9af4a46901c3197cd09fb9102b852377d26ad287b6865bd71600b7dc0a6d4b1455e81906ec8fd02f1fed78ef93c9560f818864a9"}, {0xc8, 0x10c, 0x0, "62bc98ea5b64fe56ac76c19584f22a1bc369a4bac48e90b755ced10eb42a5bb1d246b867e71b092268690a803c191a0ac736acbb5c844269fd0b559765a4223e5a39dea6965ba696d5c4514aa4e5d3beb75cbafdc749279990bcc1be2b806bdec83650627be7d8cc35ba6d5ba4f03dadd222fa51a64159971dfff07bd7f2760c096b3064c11700230b4392dbb3bdcbb54a9d12c201058f66d51b51bb19ee89114132233190163cb2cff13300657dd2a18eb4bdc15a829f1e"}], 0x200}, 0x2048800) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x38, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xed}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002f80), r2) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002fc0)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x1c, r6, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x1c}}, 0x20020080) socket$unix(0x1, 0x5, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000030c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000031c0)=0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000003200), 0x460040, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000003240)={@rand_addr=0x64010101, @remote, r9}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000032c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000033c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003400)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000003500)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x44880) r17 = syz_genetlink_get_family_id$nbd(&(0x7f0000003580), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000035c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003840)={&(0x7f0000003780)={0xb4, r17, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r18}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff9}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.795361313s ago: executing program 7 (id=7024): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) (async) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x18}}], 0x1, 0x4880) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808fffeffea0800", @ANYRES32=r4, @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x5d, 0x0, &(0x7f00000002c0)="3e7657b25ae01d038031b14d1db240613a770925c1ddbe0b261ad4cf9ce014831d7746bcefb93e02d02a24bc08f2e5f32627ab5a7a9b490c6e1333152a1872e5b8743920fc006c6e44edd23fbe3bd371c742dc7644419f13f415363aab", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fa}, 0x50) socket(0x29, 0x80000, 0x4) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) 3.604058553s ago: executing program 7 (id=7026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2b, 0xff, 0x622, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x77ffffff, 0x7bffffff, 0xfffa, 0x8, 0x7, 0x6, [0xe, 0xfb]}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r2, 0x100000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.831715302s ago: executing program 8 (id=7029): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r7, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000280)={{0x1, @rand_addr=0x64010102, 0x4e20, 0x3, 'wrr\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f00000000c0)={"017a5c0742664fe46fb0c2c509a3192d", 0x0, 0x0, {0x0, 0x7fff}, {0x3, 0xfff}, 0x3, [0x1, 0xc, 0x0, 0x4, 0x23ea, 0x2, 0x3ff, 0x7f, 0x8, 0x1, 0x2, 0x200, 0x9, 0x5b62, 0x2acebd89, 0x7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)=r10) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="04200810", @ANYRES16=r0, @ANYBLOB="01002bbd700000000000360000000800030003000000"], 0x1c}}, 0x40) 2.39952213s ago: executing program 5 (id=7033): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x1c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2.335199366s ago: executing program 8 (id=7035): socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x3, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r5, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r7, 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730", 0x33}, {&(0x7f0000000040)="0000e10000000000c64f5c2befa7d33bcc809d80a5044846bca15d2c55b3914fcc15c74bf0d0187e46", 0x29}], 0x2}, 0x0) recvmsg(r9, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x10000) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r11, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058008002200f9"], 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2.217388245s ago: executing program 5 (id=7037): r0 = socket(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x5e22, @remote}, 0x10) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000200000000"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x18, r3, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc881) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r8, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$unix(0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010900000000fddbdf250700000008000300", @ANYRES32=r12, @ANYBLOB="0c00990000000100700000001400040064766d7270310000000000000000000008000500070000000400cc00"], 0x4c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x24044804) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x350, r8, 0xc01, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8000, 0x22}}}}, [@NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x2}, {0x3}, {0x6, 0x7}, {0x7, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x4}, {0x6}, {}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x5, 0x3}, {0x6, 0x9}, {}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x1}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x5, 0x6}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x7, 0x4}, {0x4, 0x7}, {0x3, 0x1}, {0x7, 0xa}, {0x3}, {0x5, 0x6}]}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x81, 0x1000, 0x8, 0x2, 0x35, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x1}, {0x1, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x1}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x1}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x2}, {0x4, 0x3}, {0x1, 0x5}, {0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x2, 0x3}, {0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x3, 0x8}, {0x3}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x5, 0x6}, {0x6, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x7, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x4}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x48, 0x18, 0x30, 0xc, 0x1b, 0x60, 0x6c, 0x3, 0x12, 0x4, 0x1b, 0x6, 0x6, 0x72, 0x5, 0x18, 0x4, 0x1b, 0x3c, 0x60, 0x18, 0x36, 0x6, 0x12, 0x36, 0x16, 0x5, 0x1a, 0x6, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xade6, 0x5, 0xce6, 0x6, 0xdd9, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x31ac, 0x4, 0x5918, 0x2, 0x3, 0x100]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x7}, {0x5, 0x4}, {0x5, 0x3}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0x6}, {0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x9}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0x8}, {0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x5}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x8}, {0x5, 0x9}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x3}, {0x5}, {0x1, 0x5}, {0x4, 0x7}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x2}, {0x5, 0x8}, {0x1, 0xa}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x0, 0xb4b2, 0x0, 0x0, 0x7499, 0x9]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x5, 0x4}, {0x1, 0x4}, {0x6}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x2, 0x3}, {0x4, 0x8}, {0x3, 0xa}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x3}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x9}, {0x5}, {0x2, 0x4}, {0x4, 0xa}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x3, 0x3}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x101, 0x7, 0x4, 0xab7, 0x83, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x3, 0x7, 0x3, 0x8, 0x21, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x1}, {0x4, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {}, {0x0, 0x6}, {0x5, 0x9}, {0x5}, {0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x3}, {0x3, 0x4}, {0x3, 0x4}, {0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x3}, {0x1}, {0x2, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0x7}, {0x5, 0x2}, {0x5}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x3, 0x1}, {0x6, 0x4}, {0x5, 0x6}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x7}, {0x3, 0xa}, {0x5, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x5}, {0x2, 0xe}, {0x1, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0xe7, 0x6, 0x1, 0x0, 0x4, 0x8001]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x14}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x2}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0x8}, {0x4, 0x5}, {0x5, 0x9}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x1}, {0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x5}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x6}, {0x4, 0x5}, {0x5, 0x7}, {0x1}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x6}, {0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4e4, 0x8, 0x1, 0x34af, 0x2, 0x3ff, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x1, 0x30, 0x16, 0x9, 0xb, 0x0, 0x14, 0xb, 0xc, 0x36, 0x30, 0x3, 0x1b, 0x0, 0x6c, 0x6, 0x9, 0x6c, 0x36, 0x4, 0x9, 0x12, 0x5, 0x3, 0x30, 0x6c]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x1}, {0x5, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x6, 0x2}, {0x4, 0x5}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x3, 0x7}, {0x4, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x6c, 0x30, 0x30, 0x16, 0x30, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x8890}, 0x4000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x7, 0x4, 0x48, @local, @mcast1, 0x7, 0x700, 0x2, 0x9}}) r15 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) readv(r15, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/144, 0x90}, {&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)}], 0x3) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) (async) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000ffff030000000000", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="1f0000000200"/28], 0x50) (async) socket(0x22, 0x2, 0x3) (async) r17 = socket(0x22, 0x2, 0x23) close(r17) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2.030954191s ago: executing program 5 (id=7038): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (fail_nth: 15) 1.989502224s ago: executing program 8 (id=7040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000a0002000180c2000001000008002900da2800000000"], 0x3c}}, 0x800) 1.462694503s ago: executing program 6 (id=7041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x16c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e28, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa763c9a18bf448c5d9f5459"}}, @encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e21, @in6=@mcast2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x0) 1.445425664s ago: executing program 5 (id=7042): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.390801247s ago: executing program 0 (id=7043): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000800000000000000000000000000000ac1414bc000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000004000"/241], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003a0001032dbd7000fadbdf250300008fbfdfbb95"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000100039042bbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB='h\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800060000000100080006000900000008000400ac14143908000100", @ANYRES32=0x0, @ANYBLOB="0800060003000000080003000d00000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200050000000800030062000000080003000000008008000300010000000800060000000000080002000700000008000300ff0700000800060002000000080006000100000008000100", @ANYRES32=r5, @ANYRESHEX=r3], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf250900020073797a32000000000800416c"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x8040) 1.33988024s ago: executing program 6 (id=7044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x418f440a31dfd1e3, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782", 0x5}], 0x1}}], 0x1, 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3b8, 0x20, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408) 1.338255058s ago: executing program 8 (id=7045): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) (async) r1 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'wlan0\x00', {'team0\x00'}, 0x9}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0xa, 0x201}, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "b2cdac", 0x10, 0x21, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x4e23, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7, "fdb535", 0x1, "5c1e98"}}}}}}}}, 0x52) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x8, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.19939082s ago: executing program 0 (id=7046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000907800007a2e6cbe6fd5c02eec1d75af9c4918cae8eb563cfe7d954a97a7768db633ab5c08e41659c71a407edc678fffaacb6f97edc2d184f207505dfc7dadc19dc2bc5abde084b2299ac60cca52d97ead298a77394a9155a82cf95303f0152513d6677d6e60913318ae5a768b5918163ca5b4c88bb9d6c7b0c63ef10e35abb2cdd6631b0384097e8ec8cb7e9ae9121a5b7343a2353e675ae8c19561048414398720dbc77270430cc28a47c0fa467ec25297b02069b42ffb08f7d0c94d81470438298d951f6746083dc405a4bbed0c30cdce039f7fbf6dbb669e6120f0e098972dc49cc9e3801994ab8d9fe1d50c4734c57a5389714155a02b512a3fb46337cfae20909cb75f716bb3e65d2e23e46a7abf64b0dce2beb9d097f8174524bdb4ff4d3d29dc129fef6701c0b395f6b4cc13bde7433a831d388eb37ac1d8aebed87b82962e3f049a2969ab47d339497994397d98cd5023dfbb00a5b7abf37671c0512f6f03557588e40cc6938227665299994c17d88f55a32d9ee406a561f6a93d738394cbcd"], 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000480)=0x7fff, 0x4) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000020007116b61979e090001006c3274700000000008000240000000000900e561a0a0ead520d300000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES64, @ANYBLOB="501500501129d8248b55e365ca0000f45ea7e7e626017c016217d4a7a6650b13b5d75cb63776ef0de2d7b5c5290d5c4121aa2979309025126b7485576bf9b49941a5d2f75a070d1baa4d8ebb34f9723f4cd3dfe43359a8d9ba29b00b642617a5204a9703c76856a9ec2109784eaed05fa473", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r2, @ANYRES8, @ANYRES8=r0, @ANYRES16], 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a80000810000000806000108000604000000000000000000000000aaaaaaaaaaaaffffffff7edcb439f7258351167cff7283510034bd0f0bb55d9445cd7430ba660fbb3b4f3778fc5b9b40583ffc3b2330dc8c87029913b01c18d4b1071aab5feb699839361e743eb98c12d4126a7957334845eaa3674b03d783a5b74fe2eeebd066cac08a719ea53b61a75fde80cb485ca3a32a0b4f29c4917479aa48c45a45a181aec2df77715dcb46f5f804"], 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc0200000000000000000000000000001400"], 0x84}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x3b, @broadcast, 0x4e22, 0x3, 'dh\x00', 0xa, 0x3, 0x7d}, 0x2c) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.143145025s ago: executing program 6 (id=7047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000ff8477fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x26) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000200"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r5, r0}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1.055725306s ago: executing program 5 (id=7048): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x1ff, 0x5}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae080000000000e9ffbeef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='4', 0x1}], 0x1}, 0x8084) accept(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "0221fb1828a668bd253c58e198e7c04a1c87ecfd70270eeb490b37a1a1cf9d570c5269960a271252ac5f1b6478127d42b70c5d7ea10139910c919c7be6a995098217c237cd0ad37949fba710806b77b17dd5cf75c8d5a66c6a3d0eb0cf1f69c421ea65de4e0a8f5312bc0162419b25f3de2ccc4f12bf9d90107c33ef6e0629be6bdbbf7d4d61126fa3c1801dd8334c67826b26dd235167c359cbfaddb4f7248aba3318e59ddc74ef01f650f1caf475ca71743d361c2743a2d04ef796afb6e2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xd}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x220}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x30}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xd, 0x47, 0x0, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x20000000) (async) recvmsg$can_raw(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) (async) r8 = socket$inet6(0xa, 0x5, 0x0) listen(r8, 0x10000) (async) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r10, 0x6}, &(0x7f0000000240)=0x8) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x4, 0xfffa}, &(0x7f0000000440)=0x90) (rerun: 32) sendmsg$inet_sctp(r7, &(0x7f0000000480)={&(0x7f00000003c0)=@in6={0xa, 0x4e23, 0x1, @mcast1, 0x80}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000b40)="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", 0x1000}], 0x1, &(0x7f0000000780)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x6, 0x6, 0x0, r10}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x5, 0x8, 0x1, 0xf8f, 0x0, 0x0, 0xfe, r11}}, @authinfo={0x18, 0x84, 0x6, {0x1000}}], 0x88, 0x48004}, 0x200040d1) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x90, 0x8, 0xfa04, 0x0, 0x6c02, 0x168, 0x194, 0x194, 0x168, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x5c, 0x3, 0x42}, 0x0, 0x70, 0x90, 0x0, {0x0, 0x74020000}}, @unspec=@NOTRACK={0x20}}, {{@ip={@broadcast, @empty, 0xffffff00, 0xffffff00, 'ip6gre0\x00', 'wg1\x00', {0xff}, {}, 0x11, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x9, 0x5, 0x6, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) (async, rerun: 32) close(r9) (rerun: 32) 1.055223986s ago: executing program 8 (id=7049): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x8) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/207, 0xcf}, {&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f406c4aec4bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f387bdf01ff822a6a26b4cbd04523921adb0bddfd4c657e626ffa46f0a565ee807b56f98d90a48858679c0e5cada93389b479e4547690951c952e877d4139aaddd84d8b01dd791eff7b2c20cad352b1adc9f4e99da7f78d9ee00abe19e8", 0x149}, {&(0x7f0000000740)="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", 0x2b0}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x0, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)="5f72db941b7f8adc9753006940c6f55b4c2f628795ab589be57ae4d2140af8b84b1d463c32d8fa3479a351865ccc5d66c0c1cdee4207e07f321e562730cf06761b01c74c699271d84f", 0x63}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r7, &(0x7f0000001180)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000000780)=""/238, 0xee}], 0x3}, 0x2}, {{&(0x7f0000000400)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/27, 0x1b}], 0x1, &(0x7f0000000980)=""/230, 0xe6}, 0x2315814c}, {{&(0x7f0000000880)=@nl, 0x80, &(0x7f0000000500)=[{&(0x7f0000000b40)=""/84, 0x54}], 0x1, &(0x7f0000000bc0)=""/81, 0x51}, 0x7}, {{&(0x7f0000000c40)=@ax25={{0x3, @default}, [@rose, @netrom, @bcast, @null, @netrom, @rose, @null, @bcast]}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000cc0)=""/202, 0xca}, {&(0x7f0000000dc0)=""/100, 0x64}, {&(0x7f0000000e40)=""/129, 0x81}, {&(0x7f0000000f00)=""/115, 0x73}, {&(0x7f0000000f80)=""/123, 0x7b}, {&(0x7f0000001000)=""/236, 0xec}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x7, &(0x7f0000002d00)=""/4096, 0x1000}}], 0x4, 0x40000001, &(0x7f00000005c0)={0x0, 0x3938700}) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r9 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[@ANYBLOB="540000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="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"], 0x54}}, 0x0) 921.052015ms ago: executing program 6 (id=7050): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000047c00000c004280fa000700fe0000000c00018006000600800a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="e02742e8680d85009882762f86dd", 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x34) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010022bd7000ffdbdf250900020073797a310000626f6e64300000000000000000000000109d4916ba84c9c70ccf1a2005a5952ca3e5c0"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) 739.418973ms ago: executing program 0 (id=7051): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x558}}, 0x4804) 739.192805ms ago: executing program 6 (id=7052): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (fail_nth: 16) 621.809257ms ago: executing program 5 (id=7053): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000440)="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", 0x123, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r3, 0x0, 0x0) socket(0x25, 0x5, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10, 0x3}, {}, {0xa, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4004850, &(0x7f00000001c0)={0x11, 0xf7, r10, 0x1, 0xd8, 0x6, @multicast}, 0xfd92) 575.101006ms ago: executing program 0 (id=7054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES16=r0], 0x0, 0x26, 0x0, 0x2}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES16=r0], 0x0, 0x26, 0x0, 0x2}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/59, 0x3b}], 0x1}, 0x7fffffff}], 0x1, 0x10062, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) pselect6(0x40, &(0x7f0000000400)={0x0, 0x6, 0x2, 0x100000001, 0x0, 0xa, 0x3, 0x80000001}, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(r6, 0x0, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000540), 0x0, 0xc0) recvmmsg(r7, &(0x7f0000000980), 0x0, 0x10000, 0x0) (async) recvmmsg(r7, &(0x7f0000000980), 0x0, 0x10000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYRES32=r3], 0x4c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES8=r8, @ANYRES32=0x0, @ANYRESDEC=r7], 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES8=r8, @ANYRES32=0x0, @ANYRESDEC=r7], 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0000697036346e6400002c000280140003002001000000000100000000000000000114000200fc020000000100"/68], 0x5c}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000380)=0xffffffff, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8, 0x1}, &(0x7f0000000000)=0x90) 67.185044ms ago: executing program 6 (id=7055): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071114800000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32) r2 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) (rerun: 64) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x3, @loopback, 0x80ad}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x23, 0x90, &(0x7f0000000100)="5397351a8f2888cf77e9eac83ee96b9b2d1504b2391903b727f93a8a8e702870ed6ca5", &(0x7f0000000240)=""/144, 0x7ff, 0x0, 0x75, 0xcf, &(0x7f0000000180)="4ac9f16a5f2ddfb488949f22de7941ea1ecddaff50507a4c15caa32a1d025225c7fb4c325db384a29da2ef2e7022a777d9c8f21048ae2ac3f558061803ebeec0e654693c945f9d7197a74378edd411fc6eeb1ce553e369da55f9235aa7b560f1d93c78647467abc25ab00743cad3566b40743e7f77", &(0x7f0000000300)="0d2d550dfe8c262380b52c8d30e17d947fa0f43c471ea4b4b8a4a9735476e890ef107000009a982dad85ae6b97e16bf016ed49b9dee6b974ed5891775204619eaa5e29c59d4deee0bbfee957b75c04081e3f603262fda6574cd407ba0a2b5ccca369c1342baf3c1e1b187a44286042acdc4aef0830fb31c1ced946d41dbb5b6bab14184132450f0c8e2b65ca9cdbab8af177585ca1b505baab84b0c2850932fbe43ddb0410dc75f1ad45e51175a14518e46520e6bf582c11f9010f5f205f1e90565c63470b4a363f3c9bb6bc061ccb", 0x0, 0x0, 0x400}, 0x50) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r3], 0x78}}, 0x4000) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r5 = socket$kcm(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x86) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa000000000200"], 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x100, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 66.962571ms ago: executing program 0 (id=7056): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000800000000000000000000000000000ac1414bc000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000004000"/241], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003a0001032dbd7000fadbdf250300008fbfdfbb95"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="08010000100039042bbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB='h\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800060000000100080006000900000008000400ac14143908000100", @ANYRES32=0x0, @ANYBLOB="0800060003000000080003000d00000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000200050000000800030062000000080003000000008008000300010000000800060000000000080002000700000008000300ff0700000800060002000000080006000100000008000100", @ANYRES32=r5, @ANYRESHEX=r3], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf250900020073797a32000000000800416c"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x8040) 66.601017ms ago: executing program 8 (id=7057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x110, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xffffffffffffffb9, &(0x7f0000000080)}}, 0x10) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 23.232956ms ago: executing program 0 (id=7058): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="95be0e7f065c51f6edb6c4ec24494aafbdc51f0301371fb17c63204fc89a67b8b1ce45c3a163035e9aee"], 0x6c}}, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800) write(r1, &(0x7f00000000c0)="54aee727507deec5a258aea5cce265c8d88bcdc78d70eb711f9f7b8eb37864a1df47219f1d67dfea35eb693cbeff0eda435d5be55b09b92d0460c1a3e078eafb0c992f6d2d0acd4ac9f639592ccfff9911491a475eb0491a648b37", 0x5b) 0s ago: executing program 7 (id=7059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) (async) unshare(0x22020400) (async) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000040)=0x8) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYRES64=r0, @ANYRESDEC=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000095}, 0x24040090) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @remote}, 0x44, {0x2, 0x4e21, @rand_addr=0x64010101}, 'ip6_vti0\x00'}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbf7, 0xa1c0d411876856c}, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0x7c}}, 0x4028800) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300011802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0xc884) (async) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$tun(r7, &(0x7f00000001c0)=ANY=[], 0xc2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) kernel console output (not intermixed with test programs): 50:50:50:50:50 [ 762.237555][T28850] netlink: 'syz.0.5750': attribute type 32 has an invalid length. [ 762.254781][T28850] __nla_validate_parse: 2 callbacks suppressed [ 762.254802][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5750'. [ 762.304031][T28850] bond1: option coupled_control: invalid value (12) [ 762.338642][T28850] bond1 (unregistering): Released all slaves [ 762.496382][T28854] netlink: 'syz.6.5705': attribute type 4 has an invalid length. [ 762.504984][T28854] netlink: 'syz.6.5705': attribute type 1 has an invalid length. [ 762.526108][T28854] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5705'. [ 762.545679][T28854] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5705'. [ 762.575560][T28856] team_slave_0: entered promiscuous mode [ 762.581335][T28856] team_slave_1: entered promiscuous mode [ 762.587982][T28856] vlan2: entered promiscuous mode [ 762.600903][T28856] team0: entered promiscuous mode [ 762.603751][T21355] Bluetooth: hci6: command tx timeout [ 762.786473][T28861] syzkaller0: entered promiscuous mode [ 762.795073][T28861] syzkaller0: entered allmulticast mode [ 763.110967][T28877] vlan3: entered promiscuous mode [ 763.272708][T28885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5761'. [ 763.347801][T28888] netlink: 'syz.6.5763': attribute type 1 has an invalid length. [ 763.356566][T28891] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5762'. [ 763.462455][T28898] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5764'. [ 763.633025][T28907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5768'. [ 763.650604][T28907] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5768'. [ 763.711637][T21355] Bluetooth: hci1: command tx timeout [ 763.847324][T28915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 763.862300][T28915] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5770'. [ 764.696194][T28956] syzkaller0: entered promiscuous mode [ 764.717014][T28956] syzkaller0: entered allmulticast mode [ 764.730846][T28957] lo speed is unknown, defaulting to 1000 [ 764.753121][T28957] wlan1 speed is unknown, defaulting to 1000 [ 764.769767][T28959] net_ratelimit: 7 callbacks suppressed [ 764.769789][T28959] openvswitch: netlink: IPv6 tunnel dst address is zero [ 765.062970][T28966] lo speed is unknown, defaulting to 1000 [ 765.070503][T28966] wlan1 speed is unknown, defaulting to 1000 [ 765.458985][T28997] netlink: 'syz.0.5790': attribute type 10 has an invalid length. [ 765.512174][T28997] veth0_vlan: left promiscuous mode [ 765.519937][T28997] veth0_vlan: entered promiscuous mode [ 765.533044][T28997] team0: Device veth0_vlan failed to register rx_handler [ 765.794360][T21355] Bluetooth: hci1: command tx timeout [ 766.041233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 766.049349][ C1] lec:lec_tx_timeout: lec0 [ 766.054132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 766.083857][T29016] lo speed is unknown, defaulting to 1000 [ 766.118774][T29024] netlink: 'syz.6.5794': attribute type 1 has an invalid length. [ 766.138711][T29016] wlan1 speed is unknown, defaulting to 1000 [ 766.154026][T29024] vlan2: entered allmulticast mode [ 766.165418][T29024] syz_tun: entered allmulticast mode [ 766.268258][T29028] vlan2: entered allmulticast mode [ 766.284601][T29028] veth1_to_batadv: entered allmulticast mode [ 767.310305][T29079] syzkaller0: entered promiscuous mode [ 767.336687][T29079] syzkaller0: entered allmulticast mode [ 767.427157][T29081] __nla_validate_parse: 3 callbacks suppressed [ 767.427180][T29081] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5801'. [ 767.461490][T29081] nbd: socks must be embedded in a SOCK_ITEM attr [ 767.499200][T29079] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5801'. [ 767.559907][T29079] nbd: socks must be embedded in a SOCK_ITEM attr [ 767.692216][T29089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5804'. [ 767.826119][T29093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5805'. [ 768.105588][T29103] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5808'. [ 768.288826][T29110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5810'. [ 768.300687][T29110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5810'. [ 768.386411][T29114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5811'. [ 768.395628][T29114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5811'. [ 768.432110][T29114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5811'. [ 768.442791][T29114] netlink: 'syz.0.5811': attribute type 10 has an invalid length. [ 768.830831][ T29] audit: type=1800 audit(1773499797.775:12): pid=29131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5816" name="blkio.bfq.time_recursive" dev="tmpfs" ino=120 res=0 errno=0 [ 768.980883][T29142] netlink: 'syz.5.5819': attribute type 4 has an invalid length. [ 768.999137][T29142] TCP: TCP_TX_DELAY enabled [ 769.008968][T29141] netlink: 'syz.3.5821': attribute type 11 has an invalid length. [ 769.056729][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 769.066606][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 769.093400][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 769.105178][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 769.116260][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 769.258532][T29145] lo speed is unknown, defaulting to 1000 [ 769.268294][T29145] wlan1 speed is unknown, defaulting to 1000 [ 769.644905][T29172] netlink: 'syz.0.5826': attribute type 2 has an invalid length. [ 769.657293][T29145] chnl_net:caif_netlink_parms(): no params data found [ 769.682791][T29174] netlink: 'syz.5.5827': attribute type 3 has an invalid length. [ 769.808758][T29145] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.816405][T29145] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.823734][T29145] bridge_slave_0: entered allmulticast mode [ 769.831932][T29145] bridge_slave_0: entered promiscuous mode [ 769.840665][T29145] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.848714][T29145] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.856751][T29145] bridge_slave_1: entered allmulticast mode [ 769.866004][T29145] bridge_slave_1: entered promiscuous mode [ 769.905852][T29145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.919852][T29145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.959335][T29145] team0: Port device team_slave_0 added [ 769.969447][T29145] team0: Port device team_slave_1 added [ 770.011979][T29145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.019467][T29145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.067604][T29145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.082536][T29145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.089610][T29145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.116888][T29145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.225158][T29186] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 770.234549][T29186] bridge1: entered allmulticast mode [ 770.350380][T29145] hsr_slave_0: entered promiscuous mode [ 770.359057][T29145] hsr_slave_1: entered promiscuous mode [ 770.366600][T29145] debugfs: 'hsr0' already exists in 'hsr' [ 770.394778][T29145] Cannot create hsr debugfs directory [ 770.762816][T29145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 770.785829][T29145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 770.804711][T29145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 770.825623][T29145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 771.005922][T29145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.067849][T29145] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.082386][T15821] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.089600][T15821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.128408][T15821] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.135630][T15821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.151553][T21355] Bluetooth: hci7: command tx timeout [ 771.316971][T25531] IPVS: starting estimator thread 0... [ 771.412230][T29221] IPVS: using max 27 ests per chain, 64800 per kthread [ 771.425860][T29227] wg1: entered promiscuous mode [ 771.445705][T29229] netlink: 'syz.6.5836': attribute type 10 has an invalid length. [ 771.461312][T29227] wg1: entered allmulticast mode [ 771.476797][T29229] team0: Cannot enslave team device to itself [ 771.560374][T29145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.727516][T29240] netlink: 'syz.0.5840': attribute type 2 has an invalid length. [ 771.871326][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 771.879423][ C1] lec:lec_tx_timeout: lec0 [ 771.884634][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 772.044000][T29145] veth0_vlan: entered promiscuous mode [ 772.065195][T29145] veth1_vlan: entered promiscuous mode [ 772.111068][T29145] veth0_macvtap: entered promiscuous mode [ 772.136245][T29145] veth1_macvtap: entered promiscuous mode [ 772.163601][T29145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.182794][T29145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.209984][T16344] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.232077][T15814] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.250187][T15814] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.268751][T15814] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.231486][T21355] Bluetooth: hci7: command tx timeout [ 774.289607][T29219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 774.444858][T16344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.456984][T16344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.530214][T15821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.544555][T15821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.754037][T29279] __nla_validate_parse: 7 callbacks suppressed [ 774.754058][T29279] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5815'. [ 774.820174][T29275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.977798][T29288] netlink: 'syz.5.5848': attribute type 2 has an invalid length. [ 775.313387][T21355] Bluetooth: hci7: command tx timeout [ 775.451642][T29305] netlink: 'syz.7.5849': attribute type 10 has an invalid length. [ 775.723414][T29316] sctp: [Deprecated]: syz.6.5851 (pid 29316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.723414][T29316] Use struct sctp_sack_info instead [ 775.766894][T29288] hmac(sha224: entered promiscuous mode [ 775.825921][T29275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.079288][T29275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.175452][T29331] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5854'. [ 776.336879][T29275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.363153][T29331] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 776.524314][T15821] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.589806][T15821] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.698502][T29356] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5860'. [ 776.796742][T15824] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.837289][T15824] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.901210][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 776.909310][ C1] lec:lec_tx_timeout: lec0 [ 776.915735][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 777.266765][T29378] netlink: 'syz.5.5866': attribute type 2 has an invalid length. [ 777.282022][T29378] netlink: 1696 bytes leftover after parsing attributes in process `syz.5.5866'. [ 777.335326][T29382] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5867'. [ 777.395014][T21355] Bluetooth: hci7: command tx timeout [ 777.913417][T29408] team_slave_0: entered promiscuous mode [ 777.919230][T29408] team_slave_1: entered promiscuous mode [ 777.950950][T29408] vlan2: entered promiscuous mode [ 777.967678][T29408] team0: entered promiscuous mode [ 778.024875][T29418] team0 (unregistering): Port device team_slave_0 removed [ 778.068679][T29418] team0 (unregistering): Port device team_slave_1 removed [ 778.077334][T29421] netlink: 'syz.0.5873': attribute type 11 has an invalid length. [ 778.094359][T29421] netlink: 'syz.0.5873': attribute type 23 has an invalid length. [ 778.122139][T29421] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5873'. [ 778.297215][T29432] netlink: 'syz.7.5876': attribute type 1 has an invalid length. [ 778.328732][T29436] xt_bpf: check failed: parse error [ 778.566584][T29447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5881'. [ 779.153840][T29474] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5888'. [ 779.346221][T29483] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5890'. [ 779.392854][T29484] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5890'. [ 779.502986][T29490] netlink: 'syz.7.5892': attribute type 1 has an invalid length. [ 779.579701][T29490] hsr_slave_1 (unregistering): left promiscuous mode [ 779.855010][T29510] __nla_validate_parse: 2 callbacks suppressed [ 779.855035][T29510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5899'. [ 780.115346][T29514] team0: Port device syz_tun added [ 780.131721][T29517] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 780.270182][T29520] bond1: option all_slaves_active: invalid value (13) [ 780.327492][T29520] bond1 (unregistering): Released all slaves [ 780.403700][T21355] block nbd5: Receive control failed (result -32) [ 780.589650][T29538] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 781.363364][T29556] netlink: 840 bytes leftover after parsing attributes in process `syz.6.5908'. [ 781.587494][T29571] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5911'. [ 781.599261][T29571] batadv0: entered promiscuous mode [ 781.931225][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 781.939385][ C1] lec:lec_tx_timeout: lec0 [ 781.944376][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 782.148318][T29594] lo speed is unknown, defaulting to 1000 [ 782.178105][T29594] wlan1 speed is unknown, defaulting to 1000 [ 782.408699][T29609] GUP no longer grows the stack in syz.6.5922 (29609): 200000003000-20000000a000 (200000001000) [ 782.439387][T29610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5923'. [ 782.475426][T29609] CPU: 0 UID: 0 PID: 29609 Comm: syz.6.5922 Not tainted syzkaller #0 PREEMPT(full) [ 782.475461][T29609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.475478][T29609] Call Trace: [ 782.475488][T29609] [ 782.475500][T29609] dump_stack_lvl+0xe8/0x150 [ 782.475541][T29609] __get_user_pages+0x2453/0x29d0 [ 782.475600][T29609] ? __lock_acquire+0x6b5/0x2cf0 [ 782.475658][T29609] ? __gup_longterm_locked+0xc4e/0x1630 [ 782.475694][T29609] ? down_read_killable+0x1bb/0x340 [ 782.475728][T29609] __gup_longterm_locked+0xdcf/0x1630 [ 782.475791][T29609] gup_fast_fallback+0x1d82/0x22e0 [ 782.475861][T29609] ? __pfx_gup_fast_fallback+0x10/0x10 [ 782.475897][T29609] ? is_valid_gup_args+0x11f/0x200 [ 782.475934][T29609] ? get_user_pages_fast+0x4d/0xb0 [ 782.475971][T29609] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 782.476134][T29609] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 782.476164][T29609] iov_iter_get_pages2+0x5e/0xa0 [ 782.476202][T29609] __se_sys_vmsplice+0x7b3/0x1490 [ 782.476257][T29609] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 782.476295][T29609] ? __pfx_futex_wake+0x10/0x10 [ 782.476413][T29609] do_syscall_64+0x14d/0xf80 [ 782.476447][T29609] ? trace_irq_disable+0x3b/0x150 [ 782.476479][T29609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.476503][T29609] ? clear_bhb_loop+0x40/0x90 [ 782.476530][T29609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.476554][T29609] RIP: 0033:0x7fe8ffd9c799 [ 782.476576][T29609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.476596][T29609] RSP: 002b:00007fe900bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 782.476621][T29609] RAX: ffffffffffffffda RBX: 00007fe900015fa0 RCX: 00007fe8ffd9c799 [ 782.476645][T29609] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 782.476661][T29609] RBP: 00007fe8ffe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 782.476675][T29609] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 782.476689][T29609] R13: 00007fe900016038 R14: 00007fe900015fa0 R15: 00007ffedab37ed8 [ 782.476727][T29609] [ 782.485759][T29610] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5923'. [ 782.519849][T29609] dvmrp0: entered allmulticast mode [ 782.729385][T29610] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5923'. [ 782.739992][T29610] netlink: 'syz.5.5923': attribute type 6 has an invalid length. [ 782.749636][T29610] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5923'. [ 782.825825][T29625] tc_dump_action: action bad kind [ 783.240909][T29642] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5927'. [ 783.253764][T29642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5927'. [ 783.342793][T29644] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5930'. [ 783.374934][T29644] openvswitch: netlink: Key type 11488 is out of range max 32 [ 783.409144][T29649] netlink: 'syz.5.5928': attribute type 3 has an invalid length. [ 783.422072][T29642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 783.459448][T29650] netlink: 'syz.7.5931': attribute type 1 has an invalid length. [ 783.557958][T29647] macsec1: entered promiscuous mode [ 783.601700][T29647] bond1: entered promiscuous mode [ 783.706764][T29647] bond1: left promiscuous mode [ 783.838872][T29641] lo speed is unknown, defaulting to 1000 [ 783.846862][T29660] netlink: 'syz.0.5933': attribute type 3 has an invalid length. [ 783.883065][T29641] wlan1 speed is unknown, defaulting to 1000 [ 784.364875][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 784.378791][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 784.387944][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 784.397479][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 784.405837][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 784.489412][T29683] smc: net device wlan0 applied user defined pnetid SYZ0 [ 784.698785][T29681] lo speed is unknown, defaulting to 1000 [ 784.726892][T29681] wlan1 speed is unknown, defaulting to 1000 [ 785.206180][T29681] chnl_net:caif_netlink_parms(): no params data found [ 785.566082][T29721] __nla_validate_parse: 6 callbacks suppressed [ 785.566103][T29721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5946'. [ 785.580843][T29681] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.596747][T29681] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.611655][T29681] bridge_slave_0: entered allmulticast mode [ 785.630468][T29681] bridge_slave_0: entered promiscuous mode [ 785.657677][T29720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5946'. [ 785.681457][T29681] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.697737][T29681] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.711944][T29681] bridge_slave_1: entered allmulticast mode [ 785.730787][T29681] bridge_slave_1: entered promiscuous mode [ 785.848680][T29681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.885982][T29681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.994245][T29681] team0: Port device team_slave_0 added [ 786.014016][T29733] netlink: 'syz.0.5950': attribute type 1 has an invalid length. [ 786.018639][T29681] team0: Port device team_slave_1 added [ 786.198110][T29681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.205382][T29681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.232316][T29681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.288328][T29681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.295428][T29681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.322072][T29681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.338043][T29743] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5953'. [ 786.438363][ T51] Bluetooth: hci8: command tx timeout [ 786.490367][T29743] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5953'. [ 786.656899][T29681] hsr_slave_0: entered promiscuous mode [ 786.666522][T29681] hsr_slave_1: entered promiscuous mode [ 786.676459][T29681] debugfs: 'hsr0' already exists in 'hsr' [ 786.684713][T29681] Cannot create hsr debugfs directory [ 786.951286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 786.959355][ C1] lec:lec_tx_timeout: lec0 [ 786.964470][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 787.030627][T29764] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5958'. [ 787.092492][T29764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.250482][T29781] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5965'. [ 787.283078][T29781] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5965'. [ 787.359785][T29784] bridge1: entered promiscuous mode [ 787.365805][T29792] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5967'. [ 787.378436][T29784] bridge1: entered allmulticast mode [ 787.391024][T29781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 787.402578][T29782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 787.565942][T29792] lo speed is unknown, defaulting to 1000 [ 787.586010][T29681] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 787.625506][T29681] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 787.684512][T29792] wlan1 speed is unknown, defaulting to 1000 [ 787.715134][T29681] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 787.787968][T29681] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 787.998514][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5972'. [ 788.200772][T29832] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5975'. [ 788.518314][ T51] Bluetooth: hci8: command tx timeout [ 788.637408][T29681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.732620][T29681] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.777493][T16344] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.784822][T16344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.847394][T16344] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.854657][T16344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.910297][T29859] tipc: New replicast peer: 255.255.255.255 [ 788.925381][T29859] tipc: Enabled bearer , priority 6 [ 789.247257][T29872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 789.418397][T29681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.626541][T29885] xt_CT: No such helper "pptp" [ 789.633992][T29888] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 789.656016][T29888] bond2 (unregistering): Released all slaves [ 789.698261][T29883] syzkaller1: entered promiscuous mode [ 789.707088][T29883] syzkaller1: entered allmulticast mode [ 789.921441][T25555] tipc: Node number set to 36235830 [ 790.104500][T29908] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 790.144372][T25557] IPVS: starting estimator thread 0... [ 790.243634][T29913] IPVS: using max 38 ests per chain, 91200 per kthread [ 790.336126][T15815] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.345843][T15815] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.396133][T15815] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.405200][T15815] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.480974][T29681] veth0_vlan: entered promiscuous mode [ 790.536363][T29681] veth1_vlan: entered promiscuous mode [ 790.590598][T29681] veth0_macvtap: entered promiscuous mode [ 790.597126][ T51] Bluetooth: hci8: command tx timeout [ 790.663311][T29681] veth1_macvtap: entered promiscuous mode [ 790.707378][T29928] openvswitch: netlink: Actions may not be safe on all matching packets [ 790.737105][T29681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.798744][T29681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.835944][T15815] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.886077][T15815] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.938990][T15815] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.954176][T15815] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.979954][T29941] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 790.999613][T29938] ip6gre1: entered promiscuous mode [ 791.009938][T29938] ip6gre1: entered allmulticast mode [ 791.020559][T29943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.031218][T29943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.092345][T29933] lo speed is unknown, defaulting to 1000 [ 791.105148][T29933] wlan1 speed is unknown, defaulting to 1000 [ 791.259149][T29953] __nla_validate_parse: 6 callbacks suppressed [ 791.259172][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6005'. [ 791.288866][T25109] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.294097][T29953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6005'. [ 791.313528][T25531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.335629][T25109] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.554144][ T7730] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.813840][T29957] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.821511][T29957] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.971237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 791.979309][ C1] lec:lec_tx_timeout: lec0 [ 791.984380][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 792.192295][T25531] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.353897][T29957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.387993][T29957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.673209][ T51] Bluetooth: hci8: command tx timeout [ 792.696328][T29957] bridge1: left promiscuous mode [ 792.701899][T29957] bridge1: left allmulticast mode [ 792.719362][T29957] ip6gre1: left promiscuous mode [ 792.734778][T29957] ip6gre1: left allmulticast mode [ 792.806517][T15824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.826494][T15824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.866088][T16344] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.902171][T16344] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.942429][T16344] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.957366][T16344] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.209111][T15811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.240786][T15811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.254396][T29991] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6013'. [ 793.537374][T29996] lo speed is unknown, defaulting to 1000 [ 793.603785][T29996] wlan1 speed is unknown, defaulting to 1000 [ 794.048511][T30020] FAULT_INJECTION: forcing a failure. [ 794.048511][T30020] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.062892][T30020] CPU: 1 UID: 0 PID: 30020 Comm: syz.5.6022 Not tainted syzkaller #0 PREEMPT(full) [ 794.062922][T30020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 794.062936][T30020] Call Trace: [ 794.062945][T30020] [ 794.062954][T30020] dump_stack_lvl+0xe8/0x150 [ 794.062991][T30020] should_fail_ex+0x412/0x560 [ 794.063025][T30020] prepare_alloc_pages+0x22a/0x650 [ 794.063062][T30020] __alloc_frozen_pages_noprof+0x12f/0x380 [ 794.063095][T30020] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 794.063127][T30020] ? __pfx_policy_nodemask+0x10/0x10 [ 794.063153][T30020] ? kasan_save_track+0x4f/0x80 [ 794.063175][T30020] ? kasan_save_track+0x3e/0x80 [ 794.063195][T30020] ? __kasan_kmalloc+0x93/0xb0 [ 794.063218][T30020] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 794.063241][T30020] ? __get_vm_area_node+0x13f/0x300 [ 794.063261][T30020] ? __vmalloc_noprof+0xd2/0x120 [ 794.063282][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.063303][T30020] ? bpf_prog_alloc+0x3c/0x1a0 [ 794.063322][T30020] ? bpf_prog_load+0x7ba/0x1ae0 [ 794.063354][T30020] ? __sys_bpf+0x618/0x950 [ 794.063390][T30020] alloc_pages_mpol+0x232/0x4a0 [ 794.063424][T30020] alloc_pages_noprof+0xa8/0x190 [ 794.063455][T30020] get_free_pages_noprof+0xf/0x80 [ 794.063492][T30020] __kasan_populate_vmalloc+0x38/0x1d0 [ 794.063515][T30020] ? do_raw_spin_unlock+0xf5/0x210 [ 794.063543][T30020] alloc_vmap_area+0xd73/0x14b0 [ 794.063591][T30020] ? __pfx_alloc_vmap_area+0x10/0x10 [ 794.063618][T30020] ? __kasan_kmalloc+0x93/0xb0 [ 794.063642][T30020] ? __get_vm_area_node+0x13f/0x300 [ 794.063658][T30020] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 794.063681][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.063703][T30020] __get_vm_area_node+0x1f8/0x300 [ 794.063732][T30020] __vmalloc_node_range_noprof+0x372/0x1730 [ 794.063756][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.063792][T30020] ? __lock_acquire+0x6b5/0x2cf0 [ 794.063834][T30020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 794.063859][T30020] ? aa_file_perm+0x192/0x15e0 [ 794.063902][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.063922][T30020] __vmalloc_noprof+0xd2/0x120 [ 794.063945][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.063969][T30020] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.063996][T30020] bpf_prog_alloc+0x3c/0x1a0 [ 794.064020][T30020] bpf_prog_load+0x7ba/0x1ae0 [ 794.064070][T30020] ? __pfx_bpf_prog_load+0x10/0x10 [ 794.064128][T30020] ? bpf_lsm_bpf+0x9/0x20 [ 794.064156][T30020] ? security_bpf+0x7e/0x2d0 [ 794.064184][T30020] __sys_bpf+0x618/0x950 [ 794.064219][T30020] ? __pfx___sys_bpf+0x10/0x10 [ 794.064269][T30020] ? ksys_write+0x242/0x270 [ 794.064295][T30020] ? __pfx_ksys_write+0x10/0x10 [ 794.064327][T30020] __x64_sys_bpf+0x7c/0x90 [ 794.064359][T30020] do_syscall_64+0x14d/0xf80 [ 794.064389][T30020] ? trace_irq_disable+0x3b/0x150 [ 794.064421][T30020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.064444][T30020] ? clear_bhb_loop+0x40/0x90 [ 794.064479][T30020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.064502][T30020] RIP: 0033:0x7ff77939c799 [ 794.064524][T30020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.064544][T30020] RSP: 002b:00007ff77a186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.064567][T30020] RAX: ffffffffffffffda RBX: 00007ff779615fa0 RCX: 00007ff77939c799 [ 794.064583][T30020] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 794.064599][T30020] RBP: 00007ff77a186090 R08: 0000000000000000 R09: 0000000000000000 [ 794.064612][T30020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.064626][T30020] R13: 00007ff779616038 R14: 00007ff779615fa0 R15: 00007ffc21de37e8 [ 794.064662][T30020] [ 794.064923][T30020] syz.5.6022: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 794.368256][T30015] lo speed is unknown, defaulting to 1000 [ 794.449230][T30020] ,cpuset=/,mems_allowed=0-1 [ 794.489523][T30020] CPU: 0 UID: 0 PID: 30020 Comm: syz.5.6022 Not tainted syzkaller #0 PREEMPT(full) [ 794.489553][T30020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 794.489568][T30020] Call Trace: [ 794.489578][T30020] [ 794.489588][T30020] dump_stack_lvl+0xe8/0x150 [ 794.489624][T30020] warn_alloc+0x249/0x340 [ 794.489651][T30020] ? kasan_quarantine_put+0xbb/0x1f0 [ 794.489679][T30020] ? __pfx_warn_alloc+0x10/0x10 [ 794.489706][T30020] ? __get_vm_area_node+0x211/0x300 [ 794.489726][T30020] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 794.489753][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.489776][T30020] ? __get_vm_area_node+0x211/0x300 [ 794.489806][T30020] __vmalloc_node_range_noprof+0x397/0x1730 [ 794.489845][T30020] ? __lock_acquire+0x6b5/0x2cf0 [ 794.489890][T30020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 794.489916][T30020] ? aa_file_perm+0x192/0x15e0 [ 794.489959][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.489979][T30020] __vmalloc_noprof+0xd2/0x120 [ 794.490002][T30020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.490027][T30020] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 794.490055][T30020] bpf_prog_alloc+0x3c/0x1a0 [ 794.490079][T30020] bpf_prog_load+0x7ba/0x1ae0 [ 794.490130][T30020] ? __pfx_bpf_prog_load+0x10/0x10 [ 794.490188][T30020] ? bpf_lsm_bpf+0x9/0x20 [ 794.490214][T30020] ? security_bpf+0x7e/0x2d0 [ 794.490243][T30020] __sys_bpf+0x618/0x950 [ 794.490278][T30020] ? __pfx___sys_bpf+0x10/0x10 [ 794.490328][T30020] ? ksys_write+0x242/0x270 [ 794.490363][T30020] ? __pfx_ksys_write+0x10/0x10 [ 794.490395][T30020] __x64_sys_bpf+0x7c/0x90 [ 794.490426][T30020] do_syscall_64+0x14d/0xf80 [ 794.490459][T30020] ? trace_irq_disable+0x3b/0x150 [ 794.490490][T30020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.490513][T30020] ? clear_bhb_loop+0x40/0x90 [ 794.490545][T30020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.490567][T30020] RIP: 0033:0x7ff77939c799 [ 794.490588][T30020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.490608][T30020] RSP: 002b:00007ff77a186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.490631][T30020] RAX: ffffffffffffffda RBX: 00007ff779615fa0 RCX: 00007ff77939c799 [ 794.490647][T30020] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 794.490662][T30020] RBP: 00007ff77a186090 R08: 0000000000000000 R09: 0000000000000000 [ 794.490677][T30020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.490691][T30020] R13: 00007ff779616038 R14: 00007ff779615fa0 R15: 00007ffc21de37e8 [ 794.490726][T30020] [ 794.490790][T30020] Mem-Info: [ 794.548306][T30015] wlan1 speed is unknown, defaulting to 1000 [ 794.686914][T30024] netlink: 'syz.6.6023': attribute type 1 has an invalid length. [ 794.696232][T30020] active_anon:10015 inactive_anon:0 isolated_anon:0 [ 794.696232][T30020] active_file:3539 inactive_file:40232 isolated_file:0 [ 794.696232][T30020] unevictable:768 dirty:219 writeback:0 [ 794.696232][T30020] slab_reclaimable:13510 slab_unreclaimable:166007 [ 794.696232][T30020] mapped:53745 shmem:3820 pagetables:1629 [ 794.696232][T30020] sec_pagetables:0 bounce:0 [ 794.696232][T30020] kernel_misc_reclaimable:0 [ 794.696232][T30020] free:1174876 free_pcp:26905 free_cma:0 [ 794.845903][T30020] Node 0 active_anon:40116kB inactive_anon:0kB active_file:14156kB inactive_file:160724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116880kB dirty:872kB writeback:0kB shmem:13948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16240kB pagetables:6132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 794.935950][T30020] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 794.968757][T30020] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 794.987682][T30024] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6023'. [ 795.004921][T30020] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 795.014499][T30020] Node 0 DMA32 free:1067784kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41444kB inactive_anon:0kB active_file:14156kB inactive_file:160728kB unevictable:1536kB writepending:892kB zspages:0kB present:3129332kB managed:2552740kB mlocked:0kB bounce:0kB free_pcp:38240kB local_pcp:16848kB free_cma:0kB [ 795.058893][T30020] lowmem_reserve[]: 0 0 0 0 0 [ 795.064698][T30020] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 795.101064][T30020] lowmem_reserve[]: 0 0 0 0 0 [ 795.123916][T30023] veth3: entered promiscuous mode [ 795.164813][T30020] Node 1 Normal free:3620352kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:67600kB local_pcp:34768kB free_cma:0kB [ 795.223521][T29996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6015'. [ 795.231075][T30029] lo speed is unknown, defaulting to 1000 [ 795.253131][T30029] wlan1 speed is unknown, defaulting to 1000 [ 795.261129][T30020] lowmem_reserve[]: 0 0 0 0 0 [ 795.266022][T30020] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 795.357442][T30020] Node 0 DMA32: 4034*4kB (UM) 6179*8kB (UM) 3264*16kB (UM) 70*32kB (UE) 275*64kB (UM) 351*128kB (UM) 505*256kB (UM) 431*512kB (UM) 322*1024kB (UM) 100*2048kB (UM) 0*4096kB = 1067040kB [ 795.421952][T30020] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 795.437744][T30020] Node 1 Normal: 0*4kB 4*8kB (UM) 10*16kB (UM) 4*32kB (UM) 13*64kB (UM) 7*128kB (UM) 6*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 881*4096kB (UM) = 3620352kB [ 795.461057][T30020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.468529][T30040] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 795.490789][T30036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.498953][T30020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.510235][T30020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.513461][T30036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.532555][T30020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.542903][T30020] 48001 total pagecache pages [ 795.547656][T30020] 0 pages in swap cache [ 795.554984][T30020] Free swap = 124996kB [ 795.559259][T30020] Total swap = 124996kB [ 795.571988][T30020] 2097051 pages RAM [ 795.575982][T30020] 0 pages HighMem/MovableOnly [ 795.580690][T30020] 427030 pages reserved [ 795.595582][T30036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.632313][T30020] 0 pages cma reserved [ 795.755956][T30033] syzkaller0: entered promiscuous mode [ 795.767185][T30033] syzkaller0: entered allmulticast mode [ 795.855715][T30044] netlink: 'syz.5.6027': attribute type 1 has an invalid length. [ 795.866793][T30035] lo speed is unknown, defaulting to 1000 [ 795.910013][T30035] wlan1 speed is unknown, defaulting to 1000 [ 796.080363][T30053] Cannot find set identified by id 0 to match [ 796.245949][T30057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6030'. [ 796.267732][T30057] vlan2: entered promiscuous mode [ 796.273927][T30057] dummy0: entered promiscuous mode [ 796.444420][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6031'. [ 796.462593][T30061] vlan2: entered promiscuous mode [ 796.467858][T30061] dummy0: entered promiscuous mode [ 796.484588][T30035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.509380][T30035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.620524][T30065] syzkaller0: entered promiscuous mode [ 796.626343][T30065] syzkaller0: entered allmulticast mode [ 796.817237][T30071] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6036'. [ 796.991543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 796.999668][ C1] lec:lec_tx_timeout: lec0 [ 797.004345][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 797.146774][T30083] netlink: 'syz.7.6040': attribute type 1 has an invalid length. [ 797.165865][T30084] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6039'. [ 797.538957][T30079] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.546510][T30079] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.982643][T30079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.037267][T30079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.735377][T30083] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 798.856992][T25109] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.904440][T25109] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.950213][T25109] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.995803][T25109] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.134165][T30105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6045'. [ 799.211983][T30105] vlan0: entered promiscuous mode [ 799.219824][T30105] dummy0: entered promiscuous mode [ 799.430577][T30123] Cannot find del_set index 0 as target [ 799.611548][T30117] lo speed is unknown, defaulting to 1000 [ 799.651877][T30117] wlan1 speed is unknown, defaulting to 1000 [ 799.762726][T30142] netlink: 'syz.0.6058': attribute type 11 has an invalid length. [ 799.968396][T30160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6060'. [ 800.839826][T30194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6070'. [ 801.197372][T30217] IPv6: Can't replace route, no match found [ 801.213321][T30217] IPv6: Can't replace route, no match found [ 801.619776][T30213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.643397][T30213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.712283][T30229] caif0: entered allmulticast mode [ 801.757093][T30223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6075'. [ 801.786899][T30226] caif0: left allmulticast mode [ 802.011231][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 802.019320][ C1] lec:lec_tx_timeout: lec0 [ 802.024445][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 802.362678][T30261] veth0_to_bond: entered promiscuous mode [ 802.372863][T30261] veth0_to_bond: entered allmulticast mode [ 802.423249][T30260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6085'. [ 802.500145][T30266] gretap0: entered promiscuous mode [ 802.507854][T30266] gretap0: entered allmulticast mode [ 802.780014][T30277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6089'. [ 803.180075][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.212860][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.220520][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.262959][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.270780][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.297639][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.333801][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.373162][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.385204][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.397645][T30283] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 803.471111][T30285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6091'. [ 805.337553][T30307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6096'. [ 805.416016][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6097'. [ 805.433035][T25108] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.433053][T30311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6097'. [ 805.452148][T25108] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.463619][T25108] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.479568][T25108] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.580562][T30271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.784645][T30321] pimreg: tun_chr_ioctl cmd 1342215171 [ 805.812070][T30321] pimreg: tun_chr_ioctl cmd 1074025677 [ 805.837666][T30321] pimreg: linktype set to 776 [ 805.856510][T30329] netlink: 496 bytes leftover after parsing attributes in process `syz.8.6101'. [ 805.876893][T30321] pimreg: tun_chr_ioctl cmd 1074025673 [ 806.179770][T30351] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6108'. [ 806.505639][T30368] IPv6: addrconf: prefix option has invalid lifetime [ 806.935943][T30379] tipc: Started in network mode [ 806.950213][T30379] tipc: Node identity 080211, cluster identity 4711 [ 806.979411][T30389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6116'. [ 807.012177][T30379] tipc: Enabled bearer , priority 0 [ 807.031253][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 807.039302][ C1] lec:lec_tx_timeout: lec0 [ 807.044000][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 807.082071][T30385] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 807.089623][T30385] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 807.789201][T30416] bridge0: entered promiscuous mode [ 807.968587][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6123'. [ 808.219171][T25557] tipc: Node number set to 134353152 [ 808.387303][T30458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6129'. [ 808.406033][T30458] vlan0: entered promiscuous mode [ 808.415710][T30459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6130'. [ 808.526949][T30463] netlink: 'syz.0.6132': attribute type 13 has an invalid length. [ 808.535905][T30463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6132'. [ 808.678286][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.965184][T30482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6137'. [ 809.034224][T30482] vlan3: entered promiscuous mode [ 809.044835][T30482] dummy0: entered promiscuous mode [ 809.379366][T30497] sctp: [Deprecated]: syz.0.6141 (pid 30497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.379366][T30497] Use struct sctp_sack_info instead [ 809.442367][T30505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6142'. [ 809.607964][T30505] bond3: option broadcast_neighbor: invalid value (30) [ 809.686747][T30505] bond3 (unregistering): Released all slaves [ 809.838069][T30517] x_tables: duplicate underflow at hook 2 [ 809.885946][T30523] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 810.157688][T30538] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6149'. [ 810.297585][T30541] bridge: RTM_NEWNEIGH with invalid ether address [ 810.315446][T30541] bridge: RTM_NEWNEIGH with invalid ether address [ 810.794486][T30566] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6158'. [ 810.807341][T30558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6156'. [ 811.154690][T30581] vlan2: entered promiscuous mode [ 811.161146][T30581] dummy0: entered promiscuous mode [ 811.309851][T30586] geneve2: entered promiscuous mode [ 811.324190][T30588] netlink: 'syz.8.6166': attribute type 1 has an invalid length. [ 811.343788][T30588] netlink: 'syz.8.6166': attribute type 2 has an invalid length. [ 811.353972][T15814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 40492 - 0 [ 811.374475][T30596] netlink: 'syz.8.6166': attribute type 1 has an invalid length. [ 811.384912][T30596] netlink: 'syz.8.6166': attribute type 2 has an invalid length. [ 811.416393][T15814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 40492 - 0 [ 811.432116][T15814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 40492 - 0 [ 811.450688][T15814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 40492 - 0 [ 811.735522][T30601] bond2: entered promiscuous mode [ 811.756940][T30601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 811.779485][T30614] xt_hashlimit: max too large, truncated to 1048576 [ 811.787640][T30614] Cannot find add_set index 3 as target [ 811.865531][T30622] bond3: option mode: invalid value (255) [ 811.901829][T30622] bond3 (unregistering): Released all slaves [ 811.998171][T30621] bond3: option mode: invalid value (255) [ 812.007458][T30621] bond3 (unregistering): Released all slaves [ 812.051216][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 812.059442][ C1] lec:lec_tx_timeout: lec0 [ 812.064791][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 812.183051][T30625] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.190822][T30625] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.228854][T30646] __nla_validate_parse: 8 callbacks suppressed [ 812.228874][T30646] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6178'. [ 812.318676][T30625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.334504][T30625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.603764][T30654] gretap1: entered promiscuous mode [ 812.615855][T30658] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 812.633061][T30654] batman_adv: batadv0: Adding interface: gretap1 [ 812.639447][T30654] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 812.660478][T30654] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 812.683493][T30660] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6182'. [ 812.706593][T30658] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 812.741904][T30660] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6182'. [ 812.915533][T30663] netlink: 'syz.5.6184': attribute type 3 has an invalid length. [ 812.979729][T30667] lo speed is unknown, defaulting to 1000 [ 813.007251][T30667] wlan1 speed is unknown, defaulting to 1000 [ 813.018535][T30679] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6186'. [ 813.034517][T30677] netlink: 'syz.6.6189': attribute type 21 has an invalid length. [ 813.066738][T30677] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6189'. [ 813.204941][T30681] Cannot find set identified by id 0 to match [ 813.284026][T30684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.307780][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6192'. [ 813.320233][T30686] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6192'. [ 813.341446][T30684] netlink: 277 bytes leftover after parsing attributes in process `syz.6.6191'. [ 813.412251][T30689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6193'. [ 813.522230][T30689] vlan0: entered promiscuous mode [ 813.823622][T30703] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6196'. [ 814.293186][T30729] netlink: 'syz.5.6200': attribute type 9 has an invalid length. [ 814.365927][T30732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.444991][T30730] bond3: option arp_interval: invalid value (18446744073709551615) [ 814.472509][T30730] bond3: option arp_interval: allowed values 0 - 2147483647 [ 814.543960][T30730] bond3 (unregistering): Released all slaves [ 814.873786][T30753] lo speed is unknown, defaulting to 1000 [ 814.883444][T30753] wlan1 speed is unknown, defaulting to 1000 [ 815.470024][T30770] "syz.5.6211" (30770) uses obsolete ecb(arc4) skcipher [ 815.806291][T30789] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 815.990818][T30798] netlink: 'syz.0.6218': attribute type 11 has an invalid length. [ 816.012997][T30798] netlink: 'syz.0.6218': attribute type 23 has an invalid length. [ 816.868486][T30840] nbd: socks must be embedded in a SOCK_ITEM attr [ 816.895360][T30835] vlan2: entered promiscuous mode [ 816.953578][T30839] lo speed is unknown, defaulting to 1000 [ 816.979186][T30839] wlan1 speed is unknown, defaulting to 1000 [ 817.200714][T30852] IPv6: NLM_F_CREATE should be specified when creating new route [ 817.383940][T30861] __nla_validate_parse: 13 callbacks suppressed [ 817.383965][T30861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6234'. [ 817.485551][T30861] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6234'. [ 817.585423][T30867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6237'. [ 817.602554][T30867] vlan2: entered promiscuous mode [ 818.271245][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 818.279346][ C1] lec:lec_tx_timeout: lec0 [ 818.287658][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 818.304958][T30899] siw: device registration error -23 [ 818.321946][T30899] siw: device registration error -23 [ 818.443999][T30902] lo speed is unknown, defaulting to 1000 [ 818.462490][T30907] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6250'. [ 818.476947][T30905] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.6249'. [ 818.489811][T30907] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6250'. [ 818.518580][T30902] wlan1 speed is unknown, defaulting to 1000 [ 818.736243][T30922] batadv_slave_0: entered promiscuous mode [ 818.756167][T30887] ipt_ECN: cannot use operation on non-tcp rule [ 818.764733][T30922] batadv_slave_0: entered allmulticast mode [ 819.167842][T30932] ip6erspan0: entered allmulticast mode [ 819.262523][T30945] netlink: 'syz.8.6258': attribute type 3 has an invalid length. [ 819.285483][T30945] netlink: 'syz.8.6258': attribute type 1 has an invalid length. [ 819.315651][T30945] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6258'. [ 819.349554][T30945] NCSI netlink: No device for ifindex 808464432 [ 819.633556][T30962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6260'. [ 819.659257][T30952] lo speed is unknown, defaulting to 1000 [ 819.739272][T30952] wlan1 speed is unknown, defaulting to 1000 [ 819.866676][T30967] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6262'. [ 820.399567][T30995] netlink: 'syz.7.6271': attribute type 1 has an invalid length. [ 820.580523][T31009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6272'. [ 821.006624][T31028] netlink: 'syz.7.6279': attribute type 58 has an invalid length. [ 823.519063][T31003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.792545][T31079] netlink: 'syz.5.6290': attribute type 29 has an invalid length. [ 823.828792][T31079] __nla_validate_parse: 4 callbacks suppressed [ 823.828812][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6290'. [ 823.895060][T31079] netlink: 'syz.5.6290': attribute type 29 has an invalid length. [ 823.927171][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6290'. [ 823.983080][T31079] netlink: 'syz.5.6290': attribute type 29 has an invalid length. [ 823.990954][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6290'. [ 824.031248][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 824.039175][T31079] netlink: 'syz.5.6290': attribute type 29 has an invalid length. [ 824.039368][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6290'. [ 824.039852][T31079] netlink: 'syz.5.6290': attribute type 29 has an invalid length. [ 824.047244][ C1] lec:lec_tx_timeout: lec0 [ 824.122095][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6290'. [ 824.178151][T31089] lo speed is unknown, defaulting to 1000 [ 824.186505][T31089] wlan1 speed is unknown, defaulting to 1000 [ 824.460713][T31107] netlink: 'syz.7.6297': attribute type 1 has an invalid length. [ 824.473044][T31107] netlink: 'syz.7.6297': attribute type 1 has an invalid length. [ 824.509317][T31110] netlink: 27 bytes leftover after parsing attributes in process `syz.8.6298'. [ 824.785799][T31120] lo speed is unknown, defaulting to 1000 [ 824.822441][T31106] lo speed is unknown, defaulting to 1000 [ 824.886828][T31106] wlan1 speed is unknown, defaulting to 1000 [ 824.899287][T31120] wlan1 speed is unknown, defaulting to 1000 [ 824.997562][T31129] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6303'. [ 825.076608][T31136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6305'. [ 825.086618][T31136] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6305'. [ 825.206278][T31140] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6306'. [ 825.244321][T31139] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 825.256847][T31139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.392167][T31142] syzkaller0: entered promiscuous mode [ 825.397721][T31142] syzkaller0: entered allmulticast mode [ 826.260447][T31180] netlink: 'syz.7.6316': attribute type 1 has an invalid length. [ 826.402686][T31180] bond1: entered promiscuous mode [ 826.438323][T31180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.534749][T31180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 826.550724][T31191] xt_hashlimit: size too large, truncated to 1048576 [ 826.562231][T31180] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 826.582671][T31191] xt_hashlimit: max too large, truncated to 1048576 [ 826.618025][T31180] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 826.669805][T31180] bond1: (slave vcan0): making interface the new active one [ 826.697596][T31180] vcan0: entered promiscuous mode [ 826.718261][T31180] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 826.819796][T31201] netlink: 'syz.5.6324': attribute type 1 has an invalid length. [ 826.871077][T31201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 826.924206][T31205] bond3: (slave geneve3): making interface the new active one [ 826.943619][T31205] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 826.973216][T15811] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 826.993254][T15811] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 827.085981][T15811] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 827.105521][T15811] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 827.207139][T31226] syz.5.6333: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 827.223592][T31226] CPU: 1 UID: 0 PID: 31226 Comm: syz.5.6333 Not tainted syzkaller #0 PREEMPT(full) [ 827.223624][T31226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.223640][T31226] Call Trace: [ 827.223650][T31226] [ 827.223661][T31226] dump_stack_lvl+0xe8/0x150 [ 827.223702][T31226] warn_alloc+0x249/0x340 [ 827.223733][T31226] ? stack_trace_save+0xa9/0x100 [ 827.223762][T31226] ? __pfx_warn_alloc+0x10/0x10 [ 827.223805][T31226] ? kasan_save_track+0x4f/0x80 [ 827.223829][T31226] ? kasan_save_track+0x3e/0x80 [ 827.223851][T31226] ? __kasan_kmalloc+0x93/0xb0 [ 827.223875][T31226] ? __kmalloc_cache_noprof+0x31c/0x660 [ 827.223900][T31226] ? xskq_create+0x56/0x170 [ 827.224032][T31226] ? xsk_setsockopt+0x54c/0x990 [ 827.224057][T31226] ? do_sock_setsockopt+0x17c/0x1b0 [ 827.224093][T31226] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 827.224127][T31226] ? do_syscall_64+0x14d/0xf80 [ 827.224165][T31226] __vmalloc_node_range_noprof+0x132/0x1730 [ 827.224228][T31226] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 827.224262][T31226] ? __kasan_kmalloc+0x93/0xb0 [ 827.224298][T31226] vmalloc_user_noprof+0xad/0xe0 [ 827.224323][T31226] ? xskq_create+0xbf/0x170 [ 827.224353][T31226] xskq_create+0xbf/0x170 [ 827.224385][T31226] xsk_init_queue+0x8a/0xe0 [ 827.224417][T31226] xsk_setsockopt+0x54c/0x990 [ 827.224448][T31226] ? __pfx_xsk_setsockopt+0x10/0x10 [ 827.224476][T31226] ? __pfx_aa_sk_perm+0x10/0x10 [ 827.224510][T31226] ? aa_sock_opt_perm+0xff/0x1a0 [ 827.224543][T31226] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 827.224570][T31226] ? __pfx_xsk_setsockopt+0x10/0x10 [ 827.224599][T31226] do_sock_setsockopt+0x17c/0x1b0 [ 827.224640][T31226] __x64_sys_setsockopt+0x13d/0x1b0 [ 827.224682][T31226] do_syscall_64+0x14d/0xf80 [ 827.224713][T31226] ? trace_irq_disable+0x3b/0x150 [ 827.224747][T31226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.224771][T31226] ? clear_bhb_loop+0x40/0x90 [ 827.224808][T31226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.224832][T31226] RIP: 0033:0x7ff77939c799 [ 827.224854][T31226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.224875][T31226] RSP: 002b:00007ff77a186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 827.224901][T31226] RAX: ffffffffffffffda RBX: 00007ff779615fa0 RCX: 00007ff77939c799 [ 827.224919][T31226] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 827.224934][T31226] RBP: 00007ff779432c99 R08: 0000000000000004 R09: 0000000000000000 [ 827.224949][T31226] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.224965][T31226] R13: 00007ff779616038 R14: 00007ff779615fa0 R15: 00007ffc21de37e8 [ 827.225003][T31226] [ 827.225127][T31226] Mem-Info: [ 827.566205][T31226] active_anon:7536 inactive_anon:0 isolated_anon:0 [ 827.566205][T31226] active_file:3539 inactive_file:40246 isolated_file:0 [ 827.566205][T31226] unevictable:768 dirty:210 writeback:0 [ 827.566205][T31226] slab_reclaimable:13850 slab_unreclaimable:166145 [ 827.566205][T31226] mapped:52352 shmem:1374 pagetables:1568 [ 827.566205][T31226] sec_pagetables:0 bounce:0 [ 827.566205][T31226] kernel_misc_reclaimable:0 [ 827.566205][T31226] free:1169509 free_pcp:33140 free_cma:0 [ 827.658936][T31226] Node 0 active_anon:30244kB inactive_anon:0kB active_file:14156kB inactive_file:160780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107204kB dirty:840kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16392kB pagetables:6188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 827.775559][T31226] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 827.841896][T31226] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 827.888550][T31226] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 827.894810][T31226] Node 0 DMA32 free:1045420kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30212kB inactive_anon:0kB active_file:14156kB inactive_file:160780kB unevictable:1536kB writepending:848kB zspages:0kB present:3129332kB managed:2552740kB mlocked:0kB bounce:0kB free_pcp:65400kB local_pcp:18772kB free_cma:0kB [ 827.932298][T31226] lowmem_reserve[]: 0 0 0 0 0 [ 827.937244][T31226] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 827.991644][T31226] lowmem_reserve[]: 0 0 0 0 0 [ 827.996515][T31226] Node 1 Normal free:3625448kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62500kB local_pcp:30756kB free_cma:0kB [ 828.106649][T31226] lowmem_reserve[]: 0 0 0 0 0 [ 828.132692][T31226] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 828.152782][T31226] Node 0 DMA32: 6154*4kB (UME) 7499*8kB (UM) 3830*16kB (UME) 316*32kB (UM) 280*64kB (UME) 308*128kB (UME) 313*256kB (UM) 435*512kB (UME) 328*1024kB (UME) 94*2048kB (UM) 0*4096kB = 1044576kB [ 828.178721][T31226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 828.232550][T31226] Node 1 Normal: 0*4kB 5*8kB (UM) 10*16kB (UM) 3*32kB (UM) 11*64kB (UM) 8*128kB (UM) 8*256kB (UM) 7*512kB (UM) 5*1024kB (UM) 2*2048kB (U) 881*4096kB (UM) = 3625448kB [ 828.259839][T31226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.277958][T31226] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 828.287654][T31226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.297972][T31226] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 828.336689][T31226] 45155 total pagecache pages [ 828.342565][T31226] 0 pages in swap cache [ 828.346967][T31226] Free swap = 124996kB [ 828.354598][T31226] Total swap = 124996kB [ 828.360120][T31226] 2097051 pages RAM [ 828.364427][T31226] 0 pages HighMem/MovableOnly [ 828.369140][T31226] 427030 pages reserved [ 828.374018][T31226] 0 pages cma reserved [ 828.687286][T31291] netlink: 'syz.5.6348': attribute type 1 has an invalid length. [ 829.166892][T31314] syzkaller0: entered promiscuous mode [ 829.181913][T31314] syzkaller0: entered allmulticast mode [ 829.233517][T31314] __nla_validate_parse: 16 callbacks suppressed [ 829.233540][T31314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6356'. [ 829.275309][T31314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6356'. [ 829.385587][T31330] netlink: 272 bytes leftover after parsing attributes in process `syz.7.6360'. [ 829.519984][T31326] lo speed is unknown, defaulting to 1000 [ 829.528864][T31326] wlan1 speed is unknown, defaulting to 1000 [ 830.007840][T11641] lec:lec_start_xmit: lec0:No lecd attached [ 830.574067][T31366] syzkaller0: entered promiscuous mode [ 830.579723][T31366] syzkaller0: entered allmulticast mode [ 831.228572][T31402] netlink: 'syz.5.6372': attribute type 16 has an invalid length. [ 831.238150][T31402] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6372'. [ 832.916309][T31408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6375'. [ 832.962455][T31409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6376'. [ 833.009194][T31414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6379'. [ 833.165175][T31426] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 833.273830][T31435] netlink: 'syz.8.6383': attribute type 11 has an invalid length. [ 833.292874][T31435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6383'. [ 833.317778][T31435] netlink: 'syz.8.6383': attribute type 11 has an invalid length. [ 833.324342][T25108] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.335250][T15814] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.345936][T31435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6383'. [ 833.358198][T15814] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.369380][T15814] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.522398][T31441] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6383'. [ 833.779107][ T51] block nbd4: Receive control failed (result -32) [ 833.814134][T31416] nbd4: detected capacity change from 0 to 63 [ 833.877059][T27408] block nbd4: Dead connection, failed to find a fallback [ 833.896326][T27408] block nbd4: shutting down sockets [ 833.912159][T27408] blk_print_req_error: 138 callbacks suppressed [ 833.912179][T27408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 833.949774][T27408] buffer_io_error: 138 callbacks suppressed [ 833.949793][T27408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 833.996213][T27408] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.016093][T27408] Buffer I/O error on dev nbd4, logical block 1, async page read [ 834.036442][T27408] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.047042][T27408] Buffer I/O error on dev nbd4, logical block 2, async page read [ 834.050163][T31435] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.062545][T31435] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.063209][T27408] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.091945][T27408] Buffer I/O error on dev nbd4, logical block 3, async page read [ 834.101054][T27408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.122218][T27408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 834.130560][T27408] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.151073][T27408] Buffer I/O error on dev nbd4, logical block 1, async page read [ 834.163018][T27408] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.175827][T27408] Buffer I/O error on dev nbd4, logical block 2, async page read [ 834.184608][T27408] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.195983][T27408] Buffer I/O error on dev nbd4, logical block 3, async page read [ 834.207019][T27408] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.218686][T27408] Buffer I/O error on dev nbd4, logical block 0, async page read [ 834.227431][T27408] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 834.243845][T27408] Buffer I/O error on dev nbd4, logical block 1, async page read [ 834.254165][T27408] ldm_validate_partition_table(): Disk read failed. [ 834.262393][T27408] Dev nbd4: unable to read RDB block 0 [ 834.268614][T27408] nbd4: unable to read partition table [ 834.280770][T31454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6386'. [ 834.303710][T31454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6386'. [ 834.315310][T27408] ldm_validate_partition_table(): Disk read failed. [ 834.324111][T27408] Dev nbd4: unable to read RDB block 0 [ 834.333274][T27408] nbd4: unable to read partition table [ 834.373406][T31435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.404696][T31435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.534650][T31460] netlink: 'syz.0.6387': attribute type 21 has an invalid length. [ 834.545773][T31460] IPv6: NLM_F_CREATE should be specified when creating new route [ 834.648742][T15824] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.663251][T15824] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.692214][T15824] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.709264][T15824] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.828209][T31457] syzkaller0: entered promiscuous mode [ 834.834046][T31457] syzkaller0: entered allmulticast mode [ 834.845900][T15824] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.872750][T15824] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.021673][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 835.029762][ C1] lec:lec_tx_timeout: lec0 [ 836.643713][T15824] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.653686][T15824] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.775048][T31485] lo speed is unknown, defaulting to 1000 [ 836.785087][T31485] wlan1 speed is unknown, defaulting to 1000 [ 836.927009][T31503] netlink: 'syz.0.6396': attribute type 1 has an invalid length. [ 837.400204][T31511] lo speed is unknown, defaulting to 1000 [ 837.436118][T31511] wlan1 speed is unknown, defaulting to 1000 [ 837.695449][T31536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6404'. [ 837.790981][T31535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6405'. [ 838.073014][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6408'. [ 838.401148][T31564] syzkaller0: entered promiscuous mode [ 838.415734][T31564] 0: reclassify loop, rule prio 0, protocol 800 [ 838.444903][T31565] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 838.823612][T31583] netlink: 'syz.0.6419': attribute type 1 has an invalid length. [ 838.832302][T31583] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6419'. [ 839.179175][T31606] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6427'. [ 839.290222][T31609] netlink: 'syz.0.6428': attribute type 10 has an invalid length. [ 839.319117][T31609] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6428'. [ 839.412128][T31619] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6431'. [ 839.428149][T31619] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6431'. [ 839.826994][T31639] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 839.842772][T31646] netlink: 'syz.5.6439': attribute type 1 has an invalid length. [ 839.858538][T31639] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 839.887084][T31639] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 839.900934][T31646] bond4: entered promiscuous mode [ 839.908344][T31646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 839.962269][T31646] IPv6: Can't replace route, no match found [ 839.975206][T31646] IPv6: Can't replace route, no match found [ 840.020891][T31648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 840.032670][T31648] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 840.049779][T31648] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 840.084881][T31648] bond4: (slave wireguard1): making interface the new active one [ 840.101965][T31648] wireguard1: entered promiscuous mode [ 840.124971][T31648] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 840.452972][T31671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6447'. [ 840.733399][T31692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6453'. [ 840.746760][T31695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6456'. [ 840.757985][T31695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6456'. [ 840.767764][T31695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6456'. [ 840.777900][T31695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6456'. [ 840.788029][T31695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6456'. [ 840.890555][T31696] tls_set_device_offload_rx: netdev not found [ 841.027690][T31707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.289637][T31723] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 842.406356][T31791] sock: sock_timestamping_bind_phc: sock not bind to device [ 842.563067][T31811] netlink: 'syz.6.6479': attribute type 3 has an invalid length. [ 842.571872][T31810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.622549][T31811] block nbd6: NBD_DISCONNECT [ 842.806114][T31820] netlink: 'syz.6.6480': attribute type 1 has an invalid length. [ 843.643130][T31845] batadv0: left promiscuous mode [ 843.657678][T31845] batadv_slave_0: left promiscuous mode [ 843.681928][T31845] batadv_slave_0: left allmulticast mode [ 843.723266][T31845] vlan2: left allmulticast mode [ 843.738394][T31845] veth1_to_batadv: left allmulticast mode [ 843.758811][T31845] bridge1: left allmulticast mode [ 843.773344][T31845] veth3: left promiscuous mode [ 843.829826][T31847] lo speed is unknown, defaulting to 1000 [ 843.845190][T31847] wlan1 speed is unknown, defaulting to 1000 [ 843.868362][T16344] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.901698][T31857] lo speed is unknown, defaulting to 1000 [ 843.909583][T31857] wlan1 speed is unknown, defaulting to 1000 [ 843.971953][T16344] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.985469][T16344] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.012749][T16344] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.313196][T31871] lo speed is unknown, defaulting to 1000 [ 844.323247][T31871] wlan1 speed is unknown, defaulting to 1000 [ 844.854650][T31892] syz_tun: entered allmulticast mode [ 845.433957][T31884] syz_tun: left allmulticast mode [ 846.417834][T31852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.451488][T31885] netlink: 'syz.5.6498': attribute type 1 has an invalid length. [ 846.471453][T31885] __nla_validate_parse: 97 callbacks suppressed [ 846.471474][T31885] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6498'. [ 846.735885][T31923] xt_cgroup: invalid path, errno=-2 [ 846.946592][T31934] bond2 (unregistering): Released all slaves [ 847.034019][T31948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6510'. [ 847.049149][T31950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.090696][T31936] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 847.115422][T31936] bond3 (unregistering): Released all slaves [ 847.251671][T31943] netlink: 'syz.6.6511': attribute type 1 has an invalid length. [ 847.527159][T31969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 848.150375][T32008] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6526'. [ 848.396608][T32023] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6530'. [ 848.435076][T32025] bond4: option lacp_active: invalid value (8) [ 848.445588][T32025] bond4 (unregistering): Released all slaves [ 848.544366][T32023] bond2: option ad_select: invalid value (99) [ 848.564116][T32023] bond2 (unregistering): Released all slaves [ 848.612273][T32040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6534'. [ 848.644931][T32034] bond2: option fail_over_mac: invalid value (127) [ 848.682386][T32034] bond2 (unregistering): Released all slaves [ 848.714208][T32048] "syz.6.6536" (32048) uses obsolete ecb(arc4) skcipher [ 848.739107][T32040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.912887][T32060] lo speed is unknown, defaulting to 1000 [ 848.920602][T32060] wlan1 speed is unknown, defaulting to 1000 [ 849.460248][T32047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.717265][T32106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6549'. [ 849.817049][T32108] lo speed is unknown, defaulting to 1000 [ 849.825554][T32108] wlan1 speed is unknown, defaulting to 1000 [ 849.898490][T32113] pimreg: entered allmulticast mode [ 849.979935][T32116] tipc: Enabling of bearer rejected, failed to enable media [ 850.065721][T32121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6553'. [ 850.081995][T32121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6553'. [ 850.530026][T32147] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6557'. [ 851.205019][T32160] tipc: Resetting bearer [ 851.233351][T32161] batadv0: entered promiscuous mode [ 851.250829][T32161] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 851.350633][T32146] lo speed is unknown, defaulting to 1000 [ 851.394164][T32146] wlan1 speed is unknown, defaulting to 1000 [ 851.874035][T32186] netlink: 'syz.7.6564': attribute type 7 has an invalid length. [ 851.883258][T32186] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6564'. [ 851.908357][T32190] bridge: RTM_NEWNEIGH with invalid ether address [ 852.270502][T32211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6576'. [ 852.410578][T32215] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6577'. [ 852.500956][T32221] netlink: 212280 bytes leftover after parsing attributes in process `syz.8.6578'. [ 852.514926][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6579'. [ 852.526112][T32223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6579'. [ 852.552035][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6579'. [ 852.562327][T32223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6579'. [ 852.600138][T32225] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6580'. [ 852.820069][T32241] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6582'. [ 853.099261][T32261] sctp: [Deprecated]: syz.0.6587 (pid 32261) Use of int in max_burst socket option. [ 853.099261][T32261] Use struct sctp_assoc_value instead [ 853.376043][T32266] lo speed is unknown, defaulting to 1000 [ 853.384833][T32266] wlan1 speed is unknown, defaulting to 1000 [ 853.534159][T32274] lo speed is unknown, defaulting to 1000 [ 853.603495][T32274] wlan1 speed is unknown, defaulting to 1000 [ 854.207925][T32294] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 854.216058][T32294] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 854.438948][T32312] pimreg: tun_chr_ioctl cmd 1074025677 [ 854.450509][T32312] pimreg: linktype set to 780 [ 854.458594][T32312] netlink: 'syz.5.6602': attribute type 16 has an invalid length. [ 854.468320][T32312] netlink: 'syz.5.6602': attribute type 17 has an invalid length. [ 854.527467][T32321] veth1: entered promiscuous mode [ 854.558795][T32321] macsec1: entered allmulticast mode [ 854.569134][T32321] veth1: entered allmulticast mode [ 854.800896][T32329] macsec2: entered promiscuous mode [ 855.047857][T32347] netlink: 'syz.7.6611': attribute type 13 has an invalid length. [ 855.092867][T32347] gretap0: refused to change device tx_queue_len [ 855.112632][T32347] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 855.223024][T32355] sctp: [Deprecated]: syz.0.6613 (pid 32355) Use of int in maxseg socket option. [ 855.223024][T32355] Use struct sctp_assoc_value instead [ 855.568783][T32379] xt_check_match: 23 callbacks suppressed [ 855.568806][T32379] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 855.699031][T32371] lo speed is unknown, defaulting to 1000 [ 855.721052][T32371] wlan1 speed is unknown, defaulting to 1000 [ 856.833052][T21355] Bluetooth: hci4: command 0x0406 tx timeout [ 856.855104][T32446] openvswitch: netlink: IP tunnel dst address not specified [ 856.882439][T32446] netlink: 'syz.8.6635': attribute type 1 has an invalid length. [ 856.893839][T32446] syzkaller0: entered promiscuous mode [ 856.899876][T32446] syzkaller0: entered allmulticast mode [ 856.927318][T32451] netlink: 'syz.6.6637': attribute type 1 has an invalid length. [ 857.030896][T32457] __nla_validate_parse: 13 callbacks suppressed [ 857.030919][T32457] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6639'. [ 857.460395][T32480] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 857.540302][T32482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6646'. [ 857.934224][T32502] tipc: Enabling of bearer rejected, failed to enable media [ 858.076449][T32509] rdma_op ffff8880289981f0 conn xmit_rdma 0000000000000000 [ 858.229310][T32512] netlink: 'syz.5.6654': attribute type 13 has an invalid length. [ 858.295173][T32512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 858.498805][T32524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6658'. [ 858.573925][T32530] netlink: 'syz.0.6656': attribute type 1 has an invalid length. [ 858.592366][T32530] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6656'. [ 858.610126][T32530] ip6tnl1: entered promiscuous mode [ 858.622611][T32530] ip6tnl1: entered allmulticast mode [ 858.798268][T32537] netlink: 'syz.8.6662': attribute type 83 has an invalid length. [ 858.822811][T32537] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6662'. [ 858.879565][T32537] vlan0: entered allmulticast mode [ 858.885437][T32537] bridge2: entered allmulticast mode [ 859.029242][T32547] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6667'. [ 859.044860][T32549] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6665'. [ 859.263583][T32561] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6670'. [ 859.303015][T32561] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6670'. [ 859.357826][T32564] netlink: 'syz.0.6672': attribute type 10 has an invalid length. [ 859.388224][T32564] team0: Port device dummy0 added [ 859.398478][T32567] netlink: 'syz.5.6673': attribute type 10 has an invalid length. [ 859.513923][T32567] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 859.590055][T32578] netlink: 'syz.8.6676': attribute type 10 has an invalid length. [ 859.611907][T32578] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6676'. [ 859.635917][T32580] openvswitch: netlink: Missing key (keys=40, expected=80) [ 859.644373][T32578] team0: entered promiscuous mode [ 859.649809][T32578] team_slave_0: entered promiscuous mode [ 859.686860][T32578] team_slave_1: entered promiscuous mode [ 859.714837][T32578] team0: entered allmulticast mode [ 859.722145][T32578] team_slave_0: entered allmulticast mode [ 859.741011][T32578] team_slave_1: entered allmulticast mode [ 859.769923][T32578] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.795480][T32578] bridge0: port 3(team0) entered blocking state [ 859.818572][T32578] bridge0: port 3(team0) entered disabled state [ 860.377895][T32607] netlink: 'syz.6.6687': attribute type 5 has an invalid length. [ 860.680773][T32631] openvswitch: netlink: Actions may not be safe on all matching packets [ 860.690778][T32630] openvswitch: netlink: Actions may not be safe on all matching packets [ 860.754933][T32635] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 860.948266][T32643] xt_policy: neither incoming nor outgoing policy selected [ 861.079024][T32647] IPVS: length: 164 != 8 [ 861.235574][T32663] syzkaller1: entered promiscuous mode [ 861.468994][T32679] netlink: 'syz.6.6709': attribute type 2 has an invalid length. [ 861.489449][T32679] !: entered promiscuous mode [ 862.098966][T32706] __nla_validate_parse: 16 callbacks suppressed [ 862.098989][T32706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6718'. [ 862.140720][T32706] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6718'. [ 862.165475][T32706] tipc: Invalid UDP bearer configuration [ 862.165535][T32706] tipc: Enabling of bearer rejected, failed to enable media [ 862.592365][T32726] batadv0: entered promiscuous mode [ 862.706639][T32740] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6725'. [ 862.873117][T32750] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6729'. [ 862.880577][T32751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6727'. [ 862.952425][T32750] netlink: 232 bytes leftover after parsing attributes in process `syz.7.6729'. [ 862.965597][T32750] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6729'. [ 863.068295][T32761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6732'. [ 863.146364][ T304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6735'. [ 863.173350][ T304] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6735'. [ 863.192026][ T304] netlink: 'syz.0.6735': attribute type 5 has an invalid length. [ 863.249572][ T304] vlan3: entered allmulticast mode [ 863.465435][ T325] netlink: 'syz.7.6741': attribute type 10 has an invalid length. [ 863.896597][ T349] netlink: 'syz.0.6749': attribute type 2 has an invalid length. [ 863.965451][ T349] hmac(sha224): entered promiscuous mode [ 864.126089][ T361] netlink: 'syz.6.6754': attribute type 10 has an invalid length. [ 864.253486][ T364] mac80211_hwsim hwsim68 syzkaller0: left promiscuous mode [ 864.260833][ T364] mac80211_hwsim hwsim68 syzkaller0: left allmulticast mode [ 864.289697][ T364] tipc: Resetting bearer [ 864.392987][T15815] tipc: Resetting bearer [ 864.592196][ T51] Bluetooth: hci8: link tx timeout [ 864.600593][ T51] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 864.602959][ T386] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 864.766996][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.774793][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.671525][T21355] Bluetooth: hci8: command 0x0406 tx timeout [ 867.565268][ T386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.833376][ T482] netlink: 'syz.8.6786': attribute type 10 has an invalid length. [ 867.857482][ T482] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 868.053464][ T500] netlink: 'syz.8.6792': attribute type 1 has an invalid length. [ 868.074927][ T492] netlink: 'syz.5.6787': attribute type 15 has an invalid length. [ 868.168723][ T500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 868.279424][ T502] bond2: (slave veth3): Enslaving as an active interface with a down link [ 868.293892][ T506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.309460][ T504] bond2: entered allmulticast mode [ 868.470663][ T508] IPv6: NLM_F_CREATE should be specified when creating new route [ 868.522128][ T510] __nla_validate_parse: 16 callbacks suppressed [ 868.522154][ T510] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6795'. [ 868.594230][ T511] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6795'. [ 868.656370][ T510] pimreg: tun_chr_ioctl cmd 2147767520 [ 869.069090][ T528] bridge0: port 4(macvlan0) entered blocking state [ 869.128234][ T528] bridge0: port 4(macvlan0) entered disabled state [ 869.162872][ T528] macvlan0: entered allmulticast mode [ 869.168331][ T528] bridge0: entered allmulticast mode [ 869.177207][ T528] macvlan0: left allmulticast mode [ 869.183039][ T528] bridge0: left allmulticast mode [ 869.209681][ T531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6802'. [ 869.786070][ T564] lo speed is unknown, defaulting to 1000 [ 869.795281][ T563] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6812'. [ 869.805667][ T563] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6812'. [ 869.863364][ T564] wlan1 speed is unknown, defaulting to 1000 [ 870.023501][ T577] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6816'. [ 870.065531][ T577] openvswitch: netlink: Flow key attr not present in new flow. [ 870.100643][ T581] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.6818'. [ 870.117914][ T1299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.135553][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 870.583020][ T593] netlink: 'syz.7.6823': attribute type 1 has an invalid length. [ 870.676108][ T593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 870.700498][ T595] vlan3: entered promiscuous mode [ 870.706633][ T595] bond3: entered promiscuous mode [ 870.712780][ T595] vlan3: entered allmulticast mode [ 870.718295][ T595] bond3: entered allmulticast mode [ 870.776386][ T593] bond3: (slave bridge1): making interface the new active one [ 870.799018][ T593] bridge1: entered promiscuous mode [ 870.806390][ T593] bridge1: entered allmulticast mode [ 870.814083][ T593] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 870.929915][ T602] netlink: 'syz.0.6824': attribute type 32 has an invalid length. [ 870.975745][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6827'. [ 870.987907][ T610] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6827'. [ 871.054458][ T616] netlink: 'syz.0.6824': attribute type 1 has an invalid length. [ 871.092626][ T616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6824'. [ 871.168167][ T622] netlink: 'syz.8.6830': attribute type 8 has an invalid length. [ 871.274604][ T625] lo speed is unknown, defaulting to 1000 [ 871.286556][ T620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.295985][ T620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.322367][ T620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.331790][ T625] wlan1 speed is unknown, defaulting to 1000 [ 871.982330][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.999276][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.677126][ T669] xt_CT: No such helper "snmp_trap" [ 872.989548][ T689] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 873.296377][ T704] macsec2: entered allmulticast mode [ 873.331106][ T704] dummy0: entered allmulticast mode [ 873.353033][ T704] dummy0: left allmulticast mode [ 873.504416][ T713] x_tables: duplicate underflow at hook 1 [ 873.592706][ T717] __nla_validate_parse: 6 callbacks suppressed [ 873.592725][ T717] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6861'. [ 873.763556][ T728] netlink: 'syz.6.6864': attribute type 16 has an invalid length. [ 873.794229][ T728] netlink: 'syz.6.6864': attribute type 3 has an invalid length. [ 873.811923][ T728] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.6864'. [ 874.412758][ T755] bridge: RTM_NEWNEIGH with invalid ether address [ 874.429932][ T755] bridge: RTM_NEWNEIGH with invalid ether address [ 874.453391][ T755] openvswitch: netlink: Key type 2054 is out of range max 32 [ 874.868687][ T757] tipc: Started in network mode [ 874.903003][ T757] tipc: Node identity 12ac31203fb7, cluster identity 4711 [ 875.196596][ T757] tipc: Enabled bearer , priority 0 [ 875.227544][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6872'. [ 875.323814][ T761] syzkaller0: mtu greater than device maximum [ 875.338543][ T758] syzkaller0: entered promiscuous mode [ 875.432965][ T756] tipc: Resetting bearer [ 875.532644][ T756] tipc: Disabling bearer [ 875.815013][ T786] netlink: 'syz.0.6874': attribute type 21 has an invalid length. [ 875.840628][ T784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6876'. [ 875.854335][ T790] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6878'. [ 875.871265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 875.879355][ C1] lec:lec_tx_timeout: lec0 [ 875.895646][ T784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6876'. [ 875.918593][ T786] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6874'. [ 875.925557][ T790] netlink: 232 bytes leftover after parsing attributes in process `syz.8.6878'. [ 875.938367][ T784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6876'. [ 875.969263][ T784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6876'. [ 876.127038][ T786] netlink: 'syz.0.6874': attribute type 5 has an invalid length. [ 876.150450][ T786] netlink: 'syz.0.6874': attribute type 6 has an invalid length. [ 876.523705][ T802] netlink: 'syz.6.6881': attribute type 1 has an invalid length. [ 876.794003][ T808] bond4: (slave bridge3): making interface the new active one [ 876.809954][ T808] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 877.317355][T21355] Bluetooth: hci6: command 0x0406 tx timeout [ 877.352725][ T849] macsec0: entered promiscuous mode [ 877.789769][ T852] macsec0: left promiscuous mode [ 878.153199][ T864] tipc: Resetting bearer [ 878.544960][ T864] tipc: Resetting bearer [ 878.617476][ T888] netlink: 'syz.0.6902': attribute type 1 has an invalid length. [ 878.787676][ T892] bond4: (slave bridge2): making interface the new active one [ 878.808558][ T896] __nla_validate_parse: 72 callbacks suppressed [ 878.808581][ T896] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6904'. [ 878.827006][ T892] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 878.854152][ T896] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6904'. [ 879.125425][ T906] netlink: 'syz.6.6905': attribute type 9 has an invalid length. [ 879.279577][ T922] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6908'. [ 879.299741][ T912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6907'. [ 879.345134][ T928] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6908'. [ 879.351049][ T908] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input6 [ 879.438190][ T936] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 879.690319][ T951] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 879.977769][ T967] netlink: 'syz.0.6913': attribute type 8 has an invalid length. [ 880.258653][ T979] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6916'. [ 880.301068][ T979] netlink: 232 bytes leftover after parsing attributes in process `syz.8.6916'. [ 880.341872][ T984] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 880.365804][ T984] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 880.388239][ T984] tipc: Resetting bearer [ 880.767596][ T1010] netlink: 112 bytes leftover after parsing attributes in process `syz.8.6921'. [ 880.792207][ T1000] tipc: Enabled bearer , priority 10 [ 880.843006][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6921'. [ 881.007629][ T1018] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.042187][ T1018] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.146671][ T1020] bond4 (unregistering): Released all slaves [ 881.240730][ T1015] vxcan5: entered promiscuous mode [ 881.299851][ T1018] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.313488][ T1018] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.347772][ T1031] netlink: 'syz.5.6922': attribute type 33 has an invalid length. [ 881.356063][ T1031] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6922'. [ 881.366545][ T1031] `: renamed from team0 [ 881.425613][ T1018] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.460005][ T1018] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.573774][ T1018] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.602656][ T1018] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.768904][T15814] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.797872][T15814] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.877465][T15824] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.896699][T15824] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.962275][ T24] tipc: Node number set to 756756768 [ 881.968959][T15824] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.982334][T15824] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.075167][ T1057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.087713][T25109] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.112342][T25109] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.476664][ T1066] bond5: (slave veth13): Enslaving as an active interface with a down link [ 882.577395][ T1075] bond5: (slave veth15): Enslaving as an active interface with a down link [ 882.795036][ T1097] lo speed is unknown, defaulting to 1000 [ 882.819112][ T1097] wlan1 speed is unknown, defaulting to 1000 [ 882.958376][T15824] bond0: (slave bond_slave_0): interface is now down [ 882.969287][T15824] bond0: (slave bond_slave_1): interface is now down [ 882.987529][T15824] bond0: (slave veth3): interface is now down [ 883.011677][T15824] bond0: (slave dummy0): interface is now down [ 883.173660][T15814] bond0: (slave bond_slave_0): interface is now down [ 883.183279][T15814] bond0: (slave bond_slave_1): interface is now down [ 883.201595][T15814] bond0: (slave veth3): interface is now down [ 883.214620][T15814] bond0: (slave dummy0): interface is now down [ 883.289941][ T1125] vlan0: entered promiscuous mode [ 883.365190][ T1122] dvmrp0: entered allmulticast mode [ 883.371318][T25108] bond0: (slave bond_slave_0): interface is now down [ 883.378051][T25108] bond0: (slave bond_slave_1): interface is now down [ 883.388879][T25108] bond0: (slave veth3): interface is now down [ 883.406816][T25108] bond0: (slave dummy0): interface is now down [ 883.432221][T25108] bond0: now running without any active interface! [ 883.838144][ T1134] vlan4: entered promiscuous mode [ 883.918569][ T1138] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 883.918720][ T1141] 8021q: VLANs not supported on nlmon0 [ 883.955541][ T1138] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 883.981878][ T1138] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 884.152539][ T1144] netlink: 'syz.7.6951': attribute type 10 has an invalid length. [ 884.188879][ T1144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.199629][ T1151] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 884.265814][ T1147] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 884.273845][ T1148] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 884.662654][ T1176] __nla_validate_parse: 14 callbacks suppressed [ 884.662675][ T1176] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6961'. [ 884.727424][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6960'. [ 884.955587][ T1183] lo speed is unknown, defaulting to 1000 [ 884.984300][ T1183] wlan1 speed is unknown, defaulting to 1000 [ 885.106036][ T1180] lo speed is unknown, defaulting to 1000 [ 885.162718][ T1180] wlan1 speed is unknown, defaulting to 1000 [ 885.694611][ T1219] syzkaller0: entered promiscuous mode [ 885.700228][ T1219] syzkaller0: entered allmulticast mode [ 885.719598][ T1209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6970'. [ 886.149929][ T1232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6975'. [ 886.392505][ T1237] lo speed is unknown, defaulting to 1000 [ 886.439675][ T1237] wlan1 speed is unknown, defaulting to 1000 [ 886.908335][ T1268] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6987'. [ 887.458773][ T1286] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.615334][ T1286] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.707236][ T1294] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6993'. [ 887.733004][ T1294] netlink: 232 bytes leftover after parsing attributes in process `syz.6.6993'. [ 887.747787][ T1286] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.914979][ T1286] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.955010][ T1307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6997'. [ 888.030258][ T1306] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 888.073659][ T1306] bond5 (unregistering): Released all slaves [ 888.132462][ T1314] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6999'. [ 888.359425][T25109] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.398691][T15824] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.446999][T15821] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.504971][T15821] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.516814][ T1324] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7003'. [ 888.873912][ T1332] bond3 (unregistering): Released all slaves [ 889.265603][ T1346] netlink: 'syz.7.7011': attribute type 12 has an invalid length. [ 889.614239][ T1357] netlink: 'syz.7.7014': attribute type 1 has an invalid length. [ 889.668046][ T1359] netlink: 'syz.8.7016': attribute type 11 has an invalid length. [ 889.694698][ T1359] __nla_validate_parse: 4 callbacks suppressed [ 889.695451][ T1359] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7016'. [ 889.737906][ T1359] netlink: 'syz.8.7016': attribute type 11 has an invalid length. [ 889.767801][ T1359] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7016'. [ 889.818814][ T1364] lo speed is unknown, defaulting to 1000 [ 889.828233][ T1364] wlan1 speed is unknown, defaulting to 1000 [ 890.011625][ T1367] syzkaller0: entered promiscuous mode [ 890.053624][ T1367] syzkaller0: entered allmulticast mode [ 890.095475][ T1377] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7020'. [ 890.123994][ T1377] netlink: 232 bytes leftover after parsing attributes in process `syz.8.7020'. [ 890.454970][ T1361] mpoa:mpoad_close: () going down [ 890.643971][ T1390] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 890.690132][ T1392] netlink: 272 bytes leftover after parsing attributes in process `syz.7.7024'. [ 890.715488][ T1384] lo speed is unknown, defaulting to 1000 [ 890.724607][ T1384] wlan1 speed is unknown, defaulting to 1000 [ 890.925634][ T1398] FAULT_INJECTION: forcing a failure. [ 890.925634][ T1398] name failslab, interval 1, probability 0, space 0, times 0 [ 890.971295][ T1398] CPU: 1 UID: 0 PID: 1398 Comm: syz.5.7025 Not tainted syzkaller #0 PREEMPT(full) [ 890.971328][ T1398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.971343][ T1398] Call Trace: [ 890.971353][ T1398] [ 890.971364][ T1398] dump_stack_lvl+0xe8/0x150 [ 890.971402][ T1398] should_fail_ex+0x412/0x560 [ 890.971443][ T1398] should_failslab+0xa8/0x100 [ 890.971474][ T1398] __kvmalloc_node_noprof+0x178/0x8a0 [ 890.971502][ T1398] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 890.971645][ T1398] alloc_netdev_mqs+0x8a6/0x11b0 [ 890.971679][ T1398] rtnl_create_link+0x31f/0xd70 [ 890.971736][ T1398] rtnl_newlink_create+0x277/0xb70 [ 890.971792][ T1398] ? __pfx___nla_validate_parse+0x10/0x10 [ 890.971837][ T1398] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 890.971875][ T1398] ? __pfx___mutex_lock+0x10/0x10 [ 890.971920][ T1398] ? ns_capable+0x89/0xe0 [ 890.971973][ T1398] rtnl_newlink+0x1666/0x1be0 [ 890.972023][ T1398] ? __pfx_rtnl_newlink+0x10/0x10 [ 890.972065][ T1398] ? __lock_acquire+0x6b5/0x2cf0 [ 890.972101][ T1398] ? __lock_acquire+0x6b5/0x2cf0 [ 890.972131][ T1398] ? __lock_acquire+0x6b5/0x2cf0 [ 890.972172][ T1398] ? unwind_next_frame+0xa5/0x23c0 [ 890.972230][ T1398] ? __lock_acquire+0x6b5/0x2cf0 [ 890.972262][ T1398] ? is_bpf_text_address+0x26/0x2b0 [ 890.972290][ T1398] ? kernel_text_address+0xa5/0xe0 [ 890.972346][ T1398] ? __pfx_rtnl_newlink+0x10/0x10 [ 890.972376][ T1398] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 890.972411][ T1398] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 890.972439][ T1398] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 890.972473][ T1398] ? __lock_acquire+0x6b5/0x2cf0 [ 890.972512][ T1398] netlink_rcv_skb+0x232/0x4b0 [ 890.972587][ T1398] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 890.972618][ T1398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 890.972661][ T1398] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.972699][ T1398] netlink_unicast+0x80f/0x9b0 [ 890.972737][ T1398] ? __pfx_netlink_unicast+0x10/0x10 [ 890.972766][ T1398] ? netlink_sendmsg+0x650/0xb40 [ 890.972793][ T1398] ? skb_put+0x11b/0x210 [ 890.972856][ T1398] netlink_sendmsg+0x813/0xb40 [ 890.972897][ T1398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.972932][ T1398] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.972971][ T1398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.973000][ T1398] ____sys_sendmsg+0x972/0x9f0 [ 890.973038][ T1398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.973069][ T1398] ? import_iovec+0x73/0xa0 [ 890.973108][ T1398] ___sys_sendmsg+0x2a5/0x360 [ 890.973137][ T1398] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.973200][ T1398] ? __fget_files+0x2a/0x420 [ 890.973231][ T1398] ? __fget_files+0x3a0/0x420 [ 890.973274][ T1398] __x64_sys_sendmsg+0x1bd/0x2a0 [ 890.973300][ T1398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.973332][ T1398] ? rcu_is_watching+0x15/0xb0 [ 890.973377][ T1398] do_syscall_64+0x14d/0xf80 [ 890.973407][ T1398] ? trace_irq_disable+0x3b/0x150 [ 890.973438][ T1398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.973460][ T1398] ? clear_bhb_loop+0x40/0x90 [ 890.973488][ T1398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.973510][ T1398] RIP: 0033:0x7ff77939c799 [ 890.973532][ T1398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.973551][ T1398] RSP: 002b:00007ff77a186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.973574][ T1398] RAX: ffffffffffffffda RBX: 00007ff779615fa0 RCX: 00007ff77939c799 [ 890.973591][ T1398] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 890.973605][ T1398] RBP: 00007ff77a186090 R08: 0000000000000000 R09: 0000000000000000 [ 890.973618][ T1398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 890.973631][ T1398] R13: 00007ff779616038 R14: 00007ff779615fa0 R15: 00007ffc21de37e8 [ 890.973667][ T1398] [ 891.917872][ T1420] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7032'. [ 891.933941][ T1420] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7032'. [ 892.147693][ T1431] netlink: 'syz.8.7035': attribute type 29 has an invalid length. [ 892.186343][ T1431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7035'. [ 892.229364][ T1433] netlink: 'syz.0.7036': attribute type 15 has an invalid length. [ 892.253557][ T1433] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7036'. [ 892.274985][ T1433] ip6t_srh: unknown srh invflags BA61 [ 892.286668][ T1437] tipc: Enabling of bearer rejected, already enabled [ 892.445335][ T1442] FAULT_INJECTION: forcing a failure. [ 892.445335][ T1442] name failslab, interval 1, probability 0, space 0, times 0 [ 892.471945][ T1442] CPU: 1 UID: 0 PID: 1442 Comm: syz.5.7038 Not tainted syzkaller #0 PREEMPT(full) [ 892.471977][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 892.471992][ T1442] Call Trace: [ 892.472001][ T1442] [ 892.472012][ T1442] dump_stack_lvl+0xe8/0x150 [ 892.472049][ T1442] should_fail_ex+0x412/0x560 [ 892.472085][ T1442] should_failslab+0xa8/0x100 [ 892.472116][ T1442] __kmalloc_cache_noprof+0x88/0x660 [ 892.472141][ T1442] ? __asan_memset+0x22/0x50 [ 892.472161][ T1442] ? alloc_netdev_mqs+0xb97/0x11b0 [ 892.472197][ T1442] ? __xdp_rxq_info_reg+0x171/0x280 [ 892.472326][ T1442] alloc_netdev_mqs+0xb97/0x11b0 [ 892.472361][ T1442] rtnl_create_link+0x31f/0xd70 [ 892.472395][ T1442] rtnl_newlink_create+0x277/0xb70 [ 892.472429][ T1442] ? __pfx___nla_validate_parse+0x10/0x10 [ 892.472472][ T1442] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 892.472511][ T1442] ? __pfx___mutex_lock+0x10/0x10 [ 892.472557][ T1442] ? ns_capable+0x89/0xe0 [ 892.472589][ T1442] rtnl_newlink+0x1666/0x1be0 [ 892.472636][ T1442] ? __pfx_rtnl_newlink+0x10/0x10 [ 892.472679][ T1442] ? __lock_acquire+0x6b5/0x2cf0 [ 892.472714][ T1442] ? __lock_acquire+0x6b5/0x2cf0 [ 892.472745][ T1442] ? __lock_acquire+0x6b5/0x2cf0 [ 892.472786][ T1442] ? unwind_next_frame+0xa5/0x23c0 [ 892.472848][ T1442] ? __lock_acquire+0x6b5/0x2cf0 [ 892.472878][ T1442] ? is_bpf_text_address+0x26/0x2b0 [ 892.472904][ T1442] ? kernel_text_address+0xa5/0xe0 [ 892.472953][ T1442] ? __pfx_rtnl_newlink+0x10/0x10 [ 892.472982][ T1442] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 892.473015][ T1442] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 892.473043][ T1442] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 892.473077][ T1442] ? __lock_acquire+0x6b5/0x2cf0 [ 892.473114][ T1442] netlink_rcv_skb+0x232/0x4b0 [ 892.473145][ T1442] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 892.473186][ T1442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 892.473227][ T1442] ? netlink_deliver_tap+0x2e/0x1b0 [ 892.473265][ T1442] netlink_unicast+0x80f/0x9b0 [ 892.473301][ T1442] ? __pfx_netlink_unicast+0x10/0x10 [ 892.473331][ T1442] ? netlink_sendmsg+0x650/0xb40 [ 892.473358][ T1442] ? skb_put+0x11b/0x210 [ 892.473394][ T1442] netlink_sendmsg+0x813/0xb40 [ 892.473435][ T1442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.473470][ T1442] ? aa_sock_msg_perm+0xf1/0x1b0 [ 892.473500][ T1442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 892.473529][ T1442] ____sys_sendmsg+0x972/0x9f0 [ 892.473562][ T1442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.473595][ T1442] ? import_iovec+0x73/0xa0 [ 892.473634][ T1442] ___sys_sendmsg+0x2a5/0x360 [ 892.473663][ T1442] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.473729][ T1442] ? __fget_files+0x2a/0x420 [ 892.473760][ T1442] ? __fget_files+0x3a0/0x420 [ 892.473805][ T1442] __x64_sys_sendmsg+0x1bd/0x2a0 [ 892.473831][ T1442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 892.473866][ T1442] ? __pfx_ksys_write+0x10/0x10 [ 892.473905][ T1442] do_syscall_64+0x14d/0xf80 [ 892.473937][ T1442] ? trace_irq_disable+0x3b/0x150 [ 892.473969][ T1442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.473992][ T1442] ? clear_bhb_loop+0x40/0x90 [ 892.474019][ T1442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.474041][ T1442] RIP: 0033:0x7ff77939c799 [ 892.474062][ T1442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.474082][ T1442] RSP: 002b:00007ff77a186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.474105][ T1442] RAX: ffffffffffffffda RBX: 00007ff779615fa0 RCX: 00007ff77939c799 [ 892.474121][ T1442] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 892.474135][ T1442] RBP: 00007ff77a186090 R08: 0000000000000000 R09: 0000000000000000 [ 892.474149][ T1442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 892.474162][ T1442] R13: 00007ff779616038 R14: 00007ff779615fa0 R15: 00007ffc21de37e8 [ 892.474207][ T1442] [ 892.860056][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 892.988766][ T1445] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7040'. [ 893.165141][ T1454] 8021q: VLANs not supported on nlmon0 [ 893.334782][ T1465] netlink: 'syz.6.7047': attribute type 2 has an invalid length. [ 893.390443][ T1463] netlink: 'syz.0.7046': attribute type 4 has an invalid length. [ 893.437320][ T1463] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 893.458411][T11641] lec:lec_start_xmit: lec0:No lecd attached [ 893.465794][ T1463] netlink: 'syz.0.7046': attribute type 4 has an invalid length. [ 893.499928][ T1469] netlink: 'syz.8.7049': attribute type 1 has an invalid length. [ 893.526211][ T1473] No such timeout policy "syz1" [ 893.534632][ T1473] No such timeout policy "syz1" [ 893.542744][ T1473] No such timeout policy "syz1" [ 893.548262][ T1473] No such timeout policy "syz1" [ 893.556868][ T1473] No such timeout policy "syz1" [ 893.563825][ T1473] No such timeout policy "syz1" [ 893.569570][ T1473] No such timeout policy "syz1" [ 893.578475][ T1473] No such timeout policy "syz1" [ 893.586723][ T1473] No such timeout policy "syz1" [ 893.594009][ T1476] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 893.605792][ T1473] No such timeout policy "syz1" [ 893.639788][ T1470] bond3 (unregistering): Released all slaves [ 893.708142][ T1469] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 893.806600][ T1486] FAULT_INJECTION: forcing a failure. [ 893.806600][ T1486] name failslab, interval 1, probability 0, space 0, times 0 [ 893.876764][ T1486] CPU: 1 UID: 0 PID: 1486 Comm: syz.6.7052 Not tainted syzkaller #0 PREEMPT(full) [ 893.876795][ T1486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 893.876809][ T1486] Call Trace: [ 893.876819][ T1486] [ 893.876829][ T1486] dump_stack_lvl+0xe8/0x150 [ 893.876865][ T1486] should_fail_ex+0x412/0x560 [ 893.876900][ T1486] should_failslab+0xa8/0x100 [ 893.876932][ T1486] __kmalloc_cache_noprof+0x88/0x660 [ 893.876957][ T1486] ? __asan_memset+0x22/0x50 [ 893.876977][ T1486] ? alloc_netdev_mqs+0xb97/0x11b0 [ 893.877002][ T1486] ? __xdp_rxq_info_reg+0x171/0x280 [ 893.877041][ T1486] alloc_netdev_mqs+0xb97/0x11b0 [ 893.877076][ T1486] rtnl_create_link+0x31f/0xd70 [ 893.877110][ T1486] rtnl_newlink_create+0x277/0xb70 [ 893.877144][ T1486] ? __pfx___nla_validate_parse+0x10/0x10 [ 893.877197][ T1486] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 893.877236][ T1486] ? __pfx___mutex_lock+0x10/0x10 [ 893.877280][ T1486] ? ns_capable+0x89/0xe0 [ 893.877321][ T1486] rtnl_newlink+0x1666/0x1be0 [ 893.877368][ T1486] ? __pfx_rtnl_newlink+0x10/0x10 [ 893.877409][ T1486] ? __lock_acquire+0x6b5/0x2cf0 [ 893.877445][ T1486] ? __lock_acquire+0x6b5/0x2cf0 [ 893.877478][ T1486] ? __lock_acquire+0x6b5/0x2cf0 [ 893.877519][ T1486] ? unwind_next_frame+0xa5/0x23c0 [ 893.877579][ T1486] ? __lock_acquire+0x6b5/0x2cf0 [ 893.877612][ T1486] ? is_bpf_text_address+0x26/0x2b0 [ 893.877639][ T1486] ? kernel_text_address+0xa5/0xe0 [ 893.877697][ T1486] ? __pfx_rtnl_newlink+0x10/0x10 [ 893.877729][ T1486] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 893.877763][ T1486] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 893.877793][ T1486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 893.877827][ T1486] ? __lock_acquire+0x6b5/0x2cf0 [ 893.877866][ T1486] netlink_rcv_skb+0x232/0x4b0 [ 893.877898][ T1486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 893.877929][ T1486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 893.877971][ T1486] ? netlink_deliver_tap+0x2e/0x1b0 [ 893.878010][ T1486] netlink_unicast+0x80f/0x9b0 [ 893.878048][ T1486] ? __pfx_netlink_unicast+0x10/0x10 [ 893.878078][ T1486] ? netlink_sendmsg+0x650/0xb40 [ 893.878106][ T1486] ? skb_put+0x11b/0x210 [ 893.878141][ T1486] netlink_sendmsg+0x813/0xb40 [ 893.878189][ T1486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.878223][ T1486] ? aa_sock_msg_perm+0xf1/0x1b0 [ 893.878254][ T1486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 893.878282][ T1486] ____sys_sendmsg+0x972/0x9f0 [ 893.878314][ T1486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.878348][ T1486] ? import_iovec+0x73/0xa0 [ 893.878385][ T1486] ___sys_sendmsg+0x2a5/0x360 [ 893.878413][ T1486] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.878476][ T1486] ? __fget_files+0x2a/0x420 [ 893.878507][ T1486] ? __fget_files+0x3a0/0x420 [ 893.878549][ T1486] __x64_sys_sendmsg+0x1bd/0x2a0 [ 893.878575][ T1486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.878608][ T1486] ? __pfx_ksys_write+0x10/0x10 [ 893.878646][ T1486] do_syscall_64+0x14d/0xf80 [ 893.878676][ T1486] ? trace_irq_disable+0x3b/0x150 [ 893.878707][ T1486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.878730][ T1486] ? clear_bhb_loop+0x40/0x90 [ 893.878756][ T1486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.878778][ T1486] RIP: 0033:0x7fe8ffd9c799 [ 893.878797][ T1486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.878816][ T1486] RSP: 002b:00007fe900bb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.878839][ T1486] RAX: ffffffffffffffda RBX: 00007fe900015fa0 RCX: 00007fe8ffd9c799 [ 893.878856][ T1486] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 893.878870][ T1486] RBP: 00007fe900bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 893.878883][ T1486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.878896][ T1486] R13: 00007fe900016038 R14: 00007fe900015fa0 R15: 00007ffedab37ed8 [ 893.878931][ T1486] [ 894.340559][ T1496] syzkaller0: entered promiscuous mode [ 894.365177][ T1496] syzkaller0: entered allmulticast mode [ 894.432866][ T30] INFO: task syz.2.5562:28096 blocked for more than 143 seconds. [ 894.452482][ T30] Not tainted syzkaller #0 [ 894.457543][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.482170][ T30] task:syz.2.5562 state:D stack:24384 pid:28096 tgid:28095 ppid:16897 task_flags:0x400140 flags:0x00080002 [ 894.494815][ T30] Call Trace: [ 894.498148][ T30] [ 894.501499][ T30] __schedule+0x15dd/0x52d0 [ 894.506389][ T30] ? __pfx___schedule+0x10/0x10 [ 894.514461][ T30] ? schedule+0x90/0x360 [ 894.518973][ T30] schedule+0x164/0x360 [ 894.523269][ T30] schedule_preempt_disabled+0x13/0x30 [ 894.529145][ T30] __mutex_lock+0x7fe/0x1300 [ 894.535248][ T30] ? __mutex_lock+0x5ac/0x1300 [ 894.540244][ T30] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 894.546586][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 894.551872][ T30] ? __asan_memset+0x22/0x50 [ 894.556565][ T30] ? __nla_validate_parse+0x2480/0x2dc0 [ 894.562759][ T30] nfsd_nl_listener_set_doit+0x141/0x1670 [ 894.568547][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 894.574588][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 894.580812][ T30] ? __nla_parse+0x40/0x60 [ 894.585640][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 894.592502][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 894.599090][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 894.604772][ T30] ? __asan_memcpy+0x40/0x70 [ 894.609568][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 894.616191][ T30] ? bpf_lsm_capable+0x9/0x20 [ 894.621181][ T30] ? security_capable+0x7e/0x2c0 [ 894.626185][ T30] genl_rcv_msg+0x61c/0x7a0 [ 894.630788][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 894.636469][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 894.642771][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 894.647918][ T30] netlink_rcv_skb+0x232/0x4b0 [ 894.652787][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 894.657861][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 894.663808][ T30] ? down_read+0x272/0x2e0 [ 894.668413][ T30] ? genl_rcv+0xd/0x40 [ 894.672617][ T30] genl_rcv+0x28/0x40 [ 894.676641][ T30] netlink_unicast+0x80f/0x9b0 [ 894.681753][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 894.687099][ T30] ? netlink_sendmsg+0x650/0xb40 [ 894.692743][ T30] ? skb_put+0x11b/0x210 [ 894.697090][ T30] netlink_sendmsg+0x813/0xb40 [ 894.702158][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.707662][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 894.712705][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 894.718154][ T30] ____sys_sendmsg+0x972/0x9f0 [ 894.723451][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.729329][ T30] ? import_iovec+0x73/0xa0 [ 894.734655][ T30] ___sys_sendmsg+0x2a5/0x360 [ 894.739532][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.745447][ T30] ? futex_wake+0x4ac/0x580 [ 894.750180][ T30] ? __fget_files+0x2a/0x420 [ 894.759101][ T30] ? __fget_files+0x3a0/0x420 [ 894.764054][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 894.769169][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 894.775181][ T30] ? rcu_is_watching+0x15/0xb0 [ 894.780063][ T30] do_syscall_64+0x14d/0xf80 [ 894.807901][ T30] ? trace_irq_disable+0x3b/0x150 [ 894.815480][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.823342][ T30] ? clear_bhb_loop+0x40/0x90 [ 894.828313][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.837569][ T30] RIP: 0033:0x7fc6b0f9c799 [ 894.844680][ T30] RSP: 002b:00007fc6b1e5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.855068][ T30] RAX: ffffffffffffffda RBX: 00007fc6b1215fa0 RCX: 00007fc6b0f9c799 [ 894.864736][ T30] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000004 [ 894.873810][ T30] RBP: 00007fc6b1032c99 R08: 0000000000000000 R09: 0000000000000000 [ 894.882655][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.890752][ T30] R13: 00007fc6b1216038 R14: 00007fc6b1215fa0 R15: 00007ffdb435a898 [ 894.899220][ T30] [ 894.902519][ T30] [ 894.902519][ T30] Showing all locks held in the system: [ 894.910301][ T30] 1 lock held by khungtaskd/30: [ 894.917184][ T30] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 894.927393][ T30] 2 locks held by getty/5582: [ 894.932261][ T30] #0: ffff8880368a00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 894.942570][ T30] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 894.953545][ T1487] caif:caif_disconnect_client(): nothing to disconnect [ 894.966834][ T30] 5 locks held by kworker/u8:33/15824: [ 894.973038][ T30] 2 locks held by syz.4.5225/26791: [ 894.978466][ T30] #0: ffffffff8fc352d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 894.987084][ T30] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 894.997822][ T30] 2 locks held by syz.2.5562/28096: [ 895.003746][ T30] #0: ffffffff8fc352d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 895.013147][ T30] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 895.023948][ T30] 2 locks held by syz.1.5681/28562: [ 895.029290][ T30] #0: ffffffff8fc352d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 895.038558][ T30] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 895.050596][ T30] 2 locks held by syz.3.5821/29141: [ 895.056387][ T30] #0: ffffffff8fc352d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 895.065371][ T30] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 895.075923][ T30] 3 locks held by syz.5.7053/1487: [ 895.081220][ T30] #0: ffff88808ee6d288 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 895.092136][ T30] #1: ffff88807d27d260 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0xf9/0x380 [ 895.101780][ T30] #2: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 895.112982][ T30] 1 lock held by syz.8.7057/1502: [ 895.118152][ T30] [ 895.120590][ T30] ============================================= [ 895.120590][ T30] [ 895.129580][ T30] NMI backtrace for cpu 1 [ 895.129600][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 895.129626][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.129641][ T30] Call Trace: [ 895.129652][ T30] [ 895.129663][ T30] dump_stack_lvl+0xe8/0x150 [ 895.129701][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 895.129729][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 895.129761][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 895.129791][ T30] sys_info+0x135/0x170 [ 895.129811][ T30] watchdog+0xfd9/0x1030 [ 895.129851][ T30] ? watchdog+0x21a/0x1030 [ 895.129892][ T30] kthread+0x388/0x470 [ 895.129914][ T30] ? __pfx_watchdog+0x10/0x10 [ 895.129945][ T30] ? __pfx_kthread+0x10/0x10 [ 895.129967][ T30] ret_from_fork+0x51e/0xb90 [ 895.130007][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 895.130034][ T30] ? __switch_to+0xc7d/0x1450 [ 895.130097][ T30] ? __pfx_kthread+0x10/0x10 [ 895.130119][ T30] ret_from_fork_asm+0x1a/0x30 [ 895.130170][ T30] [ 895.130178][ T30] Sending NMI from CPU 1 to CPUs 0: [ 895.242816][ C0] NMI backtrace for cpu 0 [ 895.242835][ C0] CPU: 0 UID: 0 PID: 1502 Comm: syz.8.7057 Not tainted syzkaller #0 PREEMPT(full) [ 895.242855][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.242867][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 895.242903][ C0] Code: a0 b4 27 8c 48 c7 c6 e0 b4 27 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 57 d3 6c 07 65 8b 0d 4c d3 6c 07 f7 c1 ff [ 895.242920][ C0] RSP: 0018:ffffc90002d774c0 EFLAGS: 00000202 [ 895.242937][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000200 [ 895.242949][ C0] RDX: ffff8880a3651e80 RSI: ffffffff8c27b4e0 RDI: ffffffff8c27b4a0 [ 895.242963][ C0] RBP: ffffc90002d77680 R08: 0000000000000003 R09: 0000000000000000 [ 895.242977][ C0] R10: ffffc90002d775c0 R11: fffff520005aeebc R12: ffff8880617639f0 [ 895.242990][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: 000000000000169e [ 895.243003][ C0] FS: 00007fa65428a6c0(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 895.243019][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.243031][ C0] CR2: 00007fff1ba42cc0 CR3: 000000007b254000 CR4: 00000000003526f0 [ 895.243048][ C0] Call Trace: [ 895.243055][ C0] [ 895.243064][ C0] rcu_lockdep_current_cpu_online+0x37/0x120 [ 895.243096][ C0] rcu_read_lock_bh_held+0x23/0x50 [ 895.243126][ C0] dev_map_enqueue_multi+0x292/0x1110 [ 895.243156][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 895.243188][ C0] ? __pfx_dev_map_enqueue_multi+0x10/0x10 [ 895.243214][ C0] ? rcu_is_watching+0x15/0xb0 [ 895.243243][ C0] ? pfn_valid+0x125/0x4c0 [ 895.243274][ C0] xdp_do_redirect_frame+0x4ec/0x670 [ 895.243308][ C0] bpf_test_run_xdp_live+0xe34/0x1cf0 [ 895.243367][ C0] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 895.243398][ C0] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 895.243437][ C0] ? 0xffffffffa0201a58 [ 895.243452][ C0] ? 0xffffffffa020320c [ 895.243471][ C0] ? 0xffffffffa02033e0 [ 895.243500][ C0] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 895.243534][ C0] ? _copy_from_user+0x94/0xb0 [ 895.243563][ C0] ? bpf_test_init+0x113/0x150 [ 895.243586][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 895.243613][ C0] bpf_prog_test_run_xdp+0x81c/0x1160 [ 895.243648][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 895.243677][ C0] ? __fget_files+0x2a/0x420 [ 895.243707][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 895.243732][ C0] bpf_prog_test_run+0x2c7/0x340 [ 895.243752][ C0] __sys_bpf+0x643/0x950 [ 895.243781][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 895.243820][ C0] ? rcu_is_watching+0x15/0xb0 [ 895.243850][ C0] __x64_sys_bpf+0x7c/0x90 [ 895.243875][ C0] do_syscall_64+0x14d/0xf80 [ 895.243901][ C0] ? trace_irq_disable+0x3b/0x150 [ 895.243927][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.243946][ C0] ? clear_bhb_loop+0x40/0x90 [ 895.243969][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.243987][ C0] RIP: 0033:0x7fa65339c799 [ 895.244002][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.244019][ C0] RSP: 002b:00007fa65428a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 895.244037][ C0] RAX: ffffffffffffffda RBX: 00007fa653615fa0 RCX: 00007fa65339c799 [ 895.244052][ C0] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 895.244064][ C0] RBP: 00007fa653432c99 R08: 0000000000000000 R09: 0000000000000000 [ 895.244075][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.244087][ C0] R13: 00007fa653616038 R14: 00007fa653615fa0 R15: 00007ffc2007c818 [ 895.244111][ C0] [ 895.619418][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 895.626336][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 895.635473][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.645552][ T30] Call Trace: [ 895.648854][ T30] [ 895.651802][ T30] vpanic+0x56c/0xa60 [ 895.655865][ T30] ? __pfx___schedule+0x10/0x10 [ 895.660917][ T30] ? __pfx_vpanic+0x10/0x10 [ 895.665447][ T30] ? __pfx_console_unlock+0x10/0x10 [ 895.670688][ T30] panic+0xc5/0xd0 [ 895.674433][ T30] ? __pfx_panic+0x10/0x10 [ 895.678881][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 895.684402][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 895.690594][ T30] watchdog+0x1023/0x1030 [ 895.694963][ T30] ? watchdog+0x21a/0x1030 [ 895.699419][ T30] kthread+0x388/0x470 [ 895.703518][ T30] ? __pfx_watchdog+0x10/0x10 [ 895.708233][ T30] ? __pfx_kthread+0x10/0x10 [ 895.712845][ T30] ret_from_fork+0x51e/0xb90 [ 895.717481][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 895.722640][ T30] ? __switch_to+0xc7d/0x1450 [ 895.727357][ T30] ? __pfx_kthread+0x10/0x10 [ 895.731976][ T30] ret_from_fork_asm+0x1a/0x30 [ 895.736792][ T30] [ 895.740440][ T30] Kernel Offset: disabled [ 895.744783][ T30] Rebooting in 86400 seconds..