last executing test programs: 6m10.422563367s ago: executing program 3 (id=12464): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) socket$inet(0x2, 0x1, 0x100) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1b, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0x0, 0xb, 0x2, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2468152c, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x42}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000003c0)='GPL\x00', 0x7b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x1, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2c8c}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580)=r3, 0x4) (async) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f00000000c0)) (async, rerun: 64) r6 = gettid() (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000100)) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000018"], &(0x7f0000000340)=""/250, 0x42, 0xfa, 0x1, 0x1}, 0x28) (async, rerun: 32) close(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0xc0, 0xe8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@ttl={{0x28}, {0x1, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x9, 0x6}}]}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0xffffff00, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x7, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x403, 0xf7fffff9, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, 0x4002, 0x35004}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_MAP={0x24, 0xe, {0x2, 0x5, 0x6, 0x7, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4802}, 0x4000050) 6m10.206798582s ago: executing program 3 (id=12467): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x28, 0x4, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x1d}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, 0x0) r2 = socket(0x10, 0x3, 0x0) unshare(0x22020400) unshare(0x40050980) write(r2, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 6m9.900514687s ago: executing program 3 (id=12470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000000800010073797a30000000000c000480080001400000000406000240886c00000500030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20050001}, 0x20000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b40000000001400048010"], 0x122}}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x3c}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x884c}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x3, 0x8001, 0xfffffff7}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) close(r3) setsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000580)="6e2d58d8e0fdf78106c8aa776836ebd8d8d35f284607ac467812030d774bec60490a4066955a04a022d6eb9a1996cd5fac95fb10452b095a7778867d66cdbd5b76006afc49d99c469c5502cb3d3ef821b72320ab3589f67ebdacac2c99a4c08b88bcdaddaa20d24cd4b53ea4b2af3a42c1eeae1879252b60a914ba7a16e32eae946ebd1f94e2506ef2836c34b5a6d244b5364bdf34e0ac85582e535c673d79a22a4a0983ef385d969018ec8a9e507a536c0933b2b426e2ffe7edd26c47aecf2b5dff0ffd806122d545628a5b66ff5adeb91f7d43b962f6bbfd123bee0f407f32f3", 0xe1) unshare(0x2a020400) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000040), 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000180)={{0x2b, @rand_addr=0x64010102, 0x4e21, 0x0, 'nq\x00', 0x2, 0x4a1, 0x1d}, {@rand_addr=0x64010102, 0x4e20, 0x0, 0x6, 0x2, 0x5}}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m9.171979383s ago: executing program 3 (id=12474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x1c}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x70001}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 6m8.811131574s ago: executing program 3 (id=12476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @default, @rose={'rose', 0x0}, 0x7, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$rxrpc(r2, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r2, 0x0) write$cgroup_type(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_getanyicast={0x14, 0x3e, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x80) 6m8.723135612s ago: executing program 3 (id=12477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20004804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80}, 0x50) 5m53.63402369s ago: executing program 32 (id=12477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20004804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80}, 0x50) 2m35.442544143s ago: executing program 4 (id=14209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x4) unshare(0x26020480) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8000, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000000000037c0000100003800c00080000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2000c008) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0xfffffffffffffff3) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x11c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xc0, 0x3b}, {@in=@remote, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x373a, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in6=@rand_addr=' \x01\x00'}}, @replay_thresh={0x8, 0xb, 0x10}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2m34.269655997s ago: executing program 4 (id=14229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv6_delrule={0x94, 0x21, 0x414, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x80, 0x2c, 0x2, 0x0, 0x0, 0x6, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_SRC={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x94}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x6, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, &(0x7f00000002c0), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000008500000076000000950000000000000047eae61feffcb9501df90f7bf53c1bb4f721557e5cdc8c830858a7e5152d48e95a6bce3ffe839094f2c3eda91871172ff18544c114ecbe3cb2bb56bc0e46ab65a6838506bc5b38474a8c872e2e1249fe12f9c63a76d5ff406f48d8690dd5546f7e71260fc5693a6fd10d74289f704958f24f072a260da62fd7fbaef070d046fe8eeb843816e397db36e15df736a23fb48d42cf17b599a336ff210c5ccc469e5bf259103a8e7b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m34.055453616s ago: executing program 4 (id=14232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0xfffffffffffffd9a, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0xfffffffffffffd9a, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) (async) 2m33.788551567s ago: executing program 4 (id=14234): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x10f80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000040)={0x0, 0xf}, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x16000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@RTM_NEWNSID={0x1c, 0x58, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c0000006c00030025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="18030100000002001c001a8018000a8014000700fc02000000000000000000000000000108002c000900000008001b00099788771400350076657468305f6dcb95700dcd61637674617000000014000300626f6e645f736c6176655f310000000008001a"], 0x7c}}, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0xfffffffffffffcd5}, 0x1, 0x0, 0x0, 0x8000}, 0x44001) r8 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r12, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r10, 0x0) 2m32.735320467s ago: executing program 4 (id=14246): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) (async) r7 = accept(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x41061df5efd3e95a, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x4010) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, 0x1418, 0x1, 0x2, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}}, 0x0) (async) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000280)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x7, 0xe84b456655e056e8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={&(0x7f0000000700)="2911d72ba7a320045dd76acd3a3d662ea7fcccd43f53ecab033d82cdf16b521ca437b7ee28f3b244699ac6fc2a41b4bdcc69d07f654d2f507e477b65dac818e637694657170cd717bfeace335aac37064f5a5003dbf0987c1aa6189203d65bc78ebb53cfa7d2ab610363fea7136974aee1d72414dd911437a02d9971181f1adc603aaae50b03893dbca96a423715dcc444fdf1d1791839ab1c32fad3c3dcb0e0724852c801e132e16f357c66748e691a79aaef52f44bcebd1edcf32d7486a0e3298d95f5b705c66f83e3ad", &(0x7f0000000800)=""/68, &(0x7f0000000880)="00f1a90184a55b97659d03e8370990230650518710ab5814dc4e2e2cfe5b2afd2de6bf88fb2574947126d67b950536f2a200a6f86185c0380ae05e4309d79fe2e14fc2d020778901fd6e6cf9cbb894e725e21e3faf67504daaaf23b877c2612fc0cc56047460b14462db4cf5b313f63ebd36be24d94ee6c6667324e102bb", &(0x7f0000000900)="d4f40d3c4a33bf6cc0c240695117c286c70b2b640400927ad85094a9deb40ab863437a8fb13fb9188637fe3f7be7c4089a083a6f2391f801295aca92fbd5a6b6063f728604e5be6f70bc21f82c3affd9d779934b9fe7b583a201f8ea49be3cf3b022da72de444e9f9c4b8781e72beefc6adb2cf0bec96a990a97a69ef2393e678fa9475eadb7237cf7866670dfd7887db1712c0e6ad9734ede69d1776ae915951e992ccc18698199217c84676b", 0x7, r10}, 0x38) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000881a550f13"], 0x7) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x1000}) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180), 0x4) 2m32.587960506s ago: executing program 4 (id=14249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m17.325897996s ago: executing program 33 (id=14249): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m56.308029271s ago: executing program 1 (id=14554): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x70bd28, 0x25dfdbfd, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, {@in=@multicast1, @in6=@mcast2, 0x4e21, 0x0, 0x4e21, 0x7, 0xe, 0x30, 0x20, 0x2c}, {{@in=@private=0xa010101, @in=@multicast2, 0x4e22, 0x3, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0xc}, {0x3, 0x3, 0x5, 0xc606, 0xbf3, 0x3d60000000000000, 0x5, 0x4}, {0x8000000000000000, 0x9, 0x10000, 0xffffffffffff602c}, 0xc, 0x6e6bb9, 0x2, 0x1, 0x1}, 0x6, 0x6, 0xad6, 0x70bd2d}}, 0x128}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, 0xfffffffe, 0x7}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0xfffffffffffffffc, 0x57d, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a0, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x0) 1m55.695463791s ago: executing program 1 (id=14560): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000020000300000d000000000300000003000000000000000300000004000000010000000000000000000005000000000000005f5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) 1m55.580119718s ago: executing program 1 (id=14561): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000240), &(0x7f0000000380)=r5}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)='\x00'/14, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet6(r7, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000680)=""/4122, &(0x7f0000000000)=0x101a) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff030}, {0x6}]}, 0x10) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="50010101"], 0xe4) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000300)="b5166beff0d64fa08b2289e8c23b6f3782ae0af477ec78523e6060aa273d8c4147dfb04656858a12b9ad350dd16237a165283d43f13bc08f12b85a95436aeb277603e9224828500f621e365eaa64593f07c7c7b91138c95c11bd86c61c3e1273eaa6f3797f8decb22d2fa2d6bf631261c61561f5c7a9e6443278ae53b81b0f7bc89f1a70f7665b3f0db627779b05dc91d9dad777b4e0e3fcb0998a9788ad449280528a31116f9434f1eba175a9c9ae3a3f2e6e1ba48e1ce4edb15e0c0b99a203f46f05a1855348c86349645080224aefa6fbff2b069600f00ada4651efe34acb07748fe41d56de433fdd2a185d77c90b3c789e54", &(0x7f00000004c0)=""/236, &(0x7f00000005c0)="6c78414c4035f7efaed689fbe2fc4a5143306c", &(0x7f0000000600)="3238ec3e0e1bba452a7f3abdd23308c5404b3a2595ae664e508e562cd6be074060bb8736d67a6679dac0ec101b5a81543b7adc5d098201d3b9a4b4c24cbbe953c3018d808f55c4d6cfbbc6687a7f84cd938eba7ae8f56bc396982271f89249baf8d824d9992a6f4a671c", 0x401, r10}, 0x38) 1m55.141606885s ago: executing program 1 (id=14567): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x7, 0xfffffffa}, 0x28) socket$isdn(0x22, 0x2, 0x21) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x7, 0xfffffffa}, 0x28) (async) socket$isdn(0x22, 0x2, 0x21) (async) close(0x3) (async) 1m54.451503389s ago: executing program 1 (id=14571): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000021000300000d000000000300000003000000000000000300000004000000010000000000000000000005000000000000005f5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) 1m54.418956688s ago: executing program 1 (id=14572): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 1m39.251660098s ago: executing program 34 (id=14572): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 6.928966187s ago: executing program 0 (id=15402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="20c83d000102010800000000000000000a0000000600074000000600040001"], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c811}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000c22b6eabe0b57b2ba0bee4000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r6 = socket$inet6(0xa, 0x800000000000002, 0xfffffffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001a00010000000000000000008180800000001c000000000014000200fc0000000000000002"], 0x44}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c, 0x0}}], 0x1, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e21, 0x53b, @mcast2, 0xfff}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xfff, &(0x7f00000014c0)=""/4095, 0x0, 0xd}, 0x94) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000bbabbbbbe78e353e0fc889183ad2a88f4f4364f0fa087df52a485d084e45a71f89229aec8a78ee3c8cda381859c1033128428bc49dc30100000001e5809da862c3a07c5395d22a"]) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) 6.33437678s ago: executing program 5 (id=15407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xb6, 0x0, &(0x7f0000000440)="cb43a9840b035d2433027564635edf1ade6d482f51cf674df882daae1747108ceaa9106000c31e9f33c284730df5b4806fd82512f908fc8af02cb78108000000004e2b92fc623c1604ca116c52a61a542b5d698444c59c0c1e90cd7b71f4f88f335c970ff46536cefb92dfc7a8a82bda327b69b67d787295a144c3e4ffbad99a1f58e7086c18a21bf55b12ada2a10423f44c995b94b1b40822eee193e7e26e48de65705584377e125135e3e9fa30e922e818d9b3015b", 0x0, 0x6e45b461, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000200)) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0x80) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x255fdbfb, {0xa, 0x80, 0x80, 0xc}, [@RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'pim6reg0\x00', @random="924a507457fc"}) socket$kcm(0x11, 0x3, 0x0) 6.332738656s ago: executing program 2 (id=15408): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000007b000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000010900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000b08000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c080006400000000208000440000000220500020094000000080003400000006d0900010073797a30"], 0xdc}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000280)={{r2}, "bcbaab901af8135b2aad31c639bbe84e44dfd84cf7fced1430ff18883e362fe5764de24dfb2926124379ebeba391ab7eaef91f3129027176ace223b8b1c39142a7f74d292233556199e0d9359e5d49295bfa1f2574aae9e2847084dba1789127c3d4e8480c667983fe50f5df970eaebde09e2656264f0b41a56b0dd95efe122abaef9bee250cece8aa9faeb8b6b6a43ab988dc8df2bcaf2334b85398aa8e690b4683122f7beecff1126064722aecb16c021c0506e5879b57fa7558c001a11df4f21024210de2d44820ee941527b24dee8ed13730c8d69dab940223c2a3478e1fdcae288f389fc6b0ec5697d7c6e059e80daa5c69f1b83d570e5c42ade55d8af2a9c578a0d99895cdda41543f444058f07ac8e953d50b82672ff1c7bacb8f8ab52c53fb7be44d7708e179a67f3b78f3fcf68be48cec2d50640e864eaf3f9b28e306426cd484a404999ea606938a0dd8538621fdf558e24bd5af09b7a3a13140c4b59c481203a62c19973b0b45fc9a9309dc5e30a127bb67be6d2d69756910cae5b29ff0a0c7b8792abddc5bc38f83f7cc5dfd88ffc51ac23010040e11bb4f899568c3bc4c1bfe1f211333c13fa956a0031e9506aee684252c29fb4020be55a62df209539d6bf97d02a175e4eee8170342dc3a476e5af929fc37d28be5aca38cd087488732f2b27487eac540adeb4decf82f0aa2888ff8b3018cfbe863ceaa031b105168b5dda4ec88dceca32a5ad4333c4aa391e0d91020755ea707f2c40b3fd020705128bbd03d8f06f9af6f65e816a3089fd572354ad7258ac9cdab8c52f239cd60c4071e0e7614077baff24f32cbe6cd19ae3479afee8a8933ea515d5f73940e31b118ed6c3d7682e1cff05f897f85a38ee93f0ef1bb5c18b0c3497c2b800a57bfab2ccb4dcdaa3858180c06148f79dfd1d11aa2382e260ce1940c8721c59fc4ab26ab331a7c5c11ea39ac6f0479e49087e931f705e0a392980f63b73a7e64d807de13156008237d1edbd82e6d1286cb185f79ec773b226eaf4f43edfa42bd3277296c7a47e2d39ce68a419b50dd465864d579efa1d6a83f3e5deb3b5459327c41391d765fe9c561f06d134f7f16053815574d3c79fce7fd34ada5cc78c9264d6fc59ec3ae594063f3bd2ea411facea257a019fe597cd19129bb53b7f308f351312e0e12fcfbc37c21a1938ce63bffe329cab5c05c6584714a289450da2475ac46b988cc0f7cc9cbdd732f91b54fee5cf785872370d46c674a9c9a7fe93eacd89f09cd8c86f99cd6be30ffc26f2877953b4c98591bb2db31870858a72ff896bb4ba656bea6d1cdcc13741f195f744bc1c2a17f8d7ff02b65c88edaddafc92e81d899edd7231e78df9dde0cfe4b435ac208a905ce7c1f7550e79345e8f952c526bcb8263266a1f8ffc973dec6e5c79fbaba77ee873c78f3d7aaf7469125e6460a15b1f1780fc3e9dc017d0742dc5778c882f020a19b8c13c1a2102b68f5ac080e8bb2c347ba7b9d5ce22295bccfbaa56194dd1f98ecaa9112eed86ad230e28216298a93cc72e06697d2d6a6a1a4ec37fdf4babe06c6fd87bf65846f3d90014b514cdea85aace442711575836983166f193d279398ec85da71d3d0383bd1856f5ead1f40576100da6617ba0182968d474bae123f1863ab8366a46abd51b5a9f6d859436aa6cf30b957e07a578a7315c5af6a7f1f05ad315a01b764d17e8df3837d73da8eebcaf5730c35b9ed635d346dbd6a17a8de93803729a3e75b377e559a1a6e3474539c2757ce69f39a5978723197f7d75a5e618caed993d6fa008c848b4be166ab09039989dd1157664a0a0976cdf347a8f659b25682ec643441c040307fa6960680a9bf0a319d7a3f997b7c78216e049f3b82ddea4dac251090ff8ded1c8b0157667bc047779d3074bbb0763ae6eca37935a21b20a4f5be12fafad768793711301df08c5f782c78d4ee53953961a9991b215694e2761fba41fc32aa63dededcea41f22ce8ce2f017549359f28c7ffc71d9ad4329104216a72f58b89df797abc243b132727a50837f7a38cb58d20a20e03c60c54a1037f75ca32afe9c10b69f24c2f8177fd3875e6f686cd7b507a02fafeffc0375cbea8cf39d7a20a0d0cc738a42fd72f56f55aa2a9cb60f5ebd666068e8f067858dfd6c19bca510e2e7d3d4d9601302e59c14eb3f05a74d8454eec60f42af92fff526cec351514398b4f67e01fcb15d292f360f86280851b033928ac64829f1f0ff1c5e26338eb41a234d9943605dd7adcb4c08becf5579e47a7947a8994df6e98f16ee3c199a1f6815097dd1c89f98cf72122fc00ee52729feb6a57b3cca9034d028958e1ca9b5ca4c5146de0d69df4f1c499b47711b7d70bf8bcfd75d7ec833fd7a799d4a52bb8b651519394907b3bc964dbc80c16e1c286d33338c3eb399be68d2a787587a5d806d9ff4a69afaa4ec5b67803de4e481f02ff33fc8b38b45ce8d009ad21c70c3dd9fe9a43525fff9b9d7378aa52cf64e955bb1e065008db5b96fa6018f45e7457cd4419d0ad5dbfbfcf39592e4c0fdf17be98fd5d5343328b30102620317d4ef756b9287b4cbf1f6d3b340b5950924a81f7f56710beb24b4cfc35dbbc30e1d51f36716d9c0001aaf7ed79e4603cdbab1dd89a0b34f397918c54708abb8b7979e3ea290e3f838d2e684ca948d42ecca318c4749740d4753b4f0fe486573dc12f82f1468170d85d8bb334ea7cc8f15c46137d12c9b3a862b387419de9a945769ea4f496f91364f09733fadc071b54841c669ea2f5cbc836ab9be0bf22edc306ed4a3cbee46456b37798131305fe67c91ddf3aaf731b6cbf448cc5e571baff11f8acfde0db1d3e7d659d2b17d27ef757673404d9c5b8dd2691919fbfdeeb9fde584462d0784342633002019e3258bc8114017770531c96bab261c34fae2361fcf8a123278b498cd4bb2fc4a5f71ca6fff89e7259b3267b0df67c2be4044431f29c578dbe2d0b3f96e2a24256d7848791d6c1f59c78fc2c077902d7c43a802a8eead99b15e7a23523c6ea4da2237b150051bf31d78a026a7dbc2dbbb8957eea42062e682c54b60be947cd4370dde9d7c2dd32bb1af3e6f3787c9ba4facde001dd9ee84757a700b986dd8f3c0228d69e9c15e64c891183a8435f2f2569bfc9b5f67b9eb6367f1154c2c3a3bd02bb23dc16798d36a6159830ffb6c49a9c6be6c90226c1a44e1d54f109b335505f99e8cbb6e904a4b9de51f52b00a474d2b1a624220f1d86566c594859615bf57b88ea0281a0df1796083b2e7bfe178f2b16a8df61591adb77bbbccc410977183c528d72a91bfaa0562416824131a300cd5219e4b33cd29c0d9c05857aa894f0a48e571496dbf213acc57e141af2789da36ecbe3fbe8a4050f6d2559ecc7493b30f3878f0aa5a87298733ae568aef6fb73c254f863f8a8785a53d6c28aeaf862c712e51035c3fd24cf3c1368573644031e2c0dcaade213a429b6f4e79d706914895a09bcadfa7683538b9a974a1232ffc6bdb44f187f000f5ac99410d6acacd96e3eee95580f3f124d7654879012d2884359f9e50b986bd4b817edf5bcb3ebaf17655d430f15a3d46e02c5b7a591f5d23a08de5f6a5ade9b9ecd42428c5ffb807bed062b4189aebf7c213590f3f4411a18684cf1f0ccdd9dfcfa5eeea514122a952a7d71fd4194ca4e92277b10cdce5c89f6519e6a5518da7c746394e7de5cbbd24b4a714ce841ab62c57a2c170b4854cf8f2e356dda3ec28bef07e1441df317cffb2b4df7fd6014592b04e00b4d8a98ea54548387acc9d0fde2000fa097729cf3906953f1016b012c80cee4b90616dc670b43d8ad8d51bc52db7ca94afa789adba3b39fa16ed8b01c25e2fb60a0472d4f098497a686968c6af6c1be5e3560d52241d2b4a0d7b1d7995d3312cc0468656fec29309c87776b6704823ecf5e5542652c30bcc23d5485c79e0b66715858e57cf7663ae1f85dfa7b6ebb4c9434cdf7fb10a77b7450a667ac217686a1bc85644044a3fda6df3fe53f8e76f75397b243d53c44626b7e0283b3942b5ea56aafae967cf38097bee5e3e7a284312f451e2df672c208876ffad2b8ce698e958b522f6c796f6c80696f9718bb0dd38d7201c3dcba92b0d64cf1d4cbc71e83e05cad1e2e77db8ca612d9d8d015f845e98366c7ea77c6fd9e814c1ff414644141449740ef0c741d90c39e789e3205488c4df7ba6bbe20dab3a0a0fd81d0ef979cc3971b09a687af884574e71d427fcec2a9dc7820d6998f3d4ff92effa5db296c5531d498773a36ac49500b2a701fbdfdc5672f7754fd5ef39aab46a87a6cda741361746e73f7de9ed6e17e3cbc85a9d6da6de23f86b31335587bb1861506065ec73494b5af5fbffb745f013041324d334d96f3a22edafb0ce5f18d5c9415060a251ff59dcf2150fbd652bb9ba189e811911ac614f3bf03953b9353e5ad5929c224185936d5d12c62650a999ffb10f6ee900cce1d73a4b1f62f29ebb94e4c01c8cf8c1a2c28ab827cb3eaedcf29b5c498f3864349ace9d8cd3bdc276af7910813b8e0efbe3c163153b75cc99457a94c209eff6a8b397dc106d16f003d185e1c54d5a2c64a9af48db4f2622ced89b234b58fda671635f37eade95acd1321228b1c4d42c7cc7459203b061ff611ffb57cc1dff2246402ca2b38174a7c8cf954d8c413a2ce3bbb2dabeb4556fd212524b7d5ecae3c172112984c7786fea41eb7e64a1d08bdebc41d5a9acbe5e6a747d3653cbf9c57d688640097ac4cf85f6453fe519bb205e0cb5f778283515891dfd2e4645f678422cd8be38d4f5c1a59a707fa416a7697be7a2ea1fcf3350ec2a1f9ee5e901c1369dd51457c09cdb7ba1582b1b373f44d13c0704a90361469792f469f997a136256708b17007f379e82fa885b2e47a11cbf3d2c8197b31ec4caef29c14e31e5d76180449ea04e891497fde63ed872cd6ce3fba6fe2a756988bc4beceb8f56987f80dc4acbdaa6c72df30b0c939062ae08dff2c19a9186c12ae30b670c0f82142c3f9372f8a18826130b7541f7c1591fe131d91f5befd690e8ae9142e026bccd0e8d5b95e04b8c43d7cd11bcc07a6d08b8e39fd19bdec05fa44024ed7a902695289384535aa993fae48c837040ba6d9334ce10be1149e7b877687f2250c4b8cb2a5add2a52112ecafad3feb946f8c6d4d6f81aab2aba6fce98d6df50ddd5ae4cb61d728e64fa78a5bb24c8a858b59224d1c2c99d4cbadb0bfef8ed62b6ff4966977ceebc7c3081c371fd8e3650c5b870b03177c086ee533ad33f0be39aec490eb6107f40c2bc2a0704722418ebe6668a1cad33ada704abe72910a7f4d4cee441eadf87ac9c2e546122d6084cb4bb1c70c4a82c5fc67fc5949657a9cfa48617a6f7b4c9ca8fd66eae2c2275147ac4f072d26955c4c6affd52ba6bb4c26196c1c3ab1baf9a262d5fd6cd010cae97b5c88218a882e94ad3aeb930608046715054d41fedd71d7e84398e72c663b00ac7d2ee629deda58f61c98a0be442003120ac92f736993cf62993634470bc58e663668706e687891598672bec1ff7b58e33a603ebf80ab2f8a1406d72b78ec59afbdd6b387b3bcc292fdf5f4c02f82de41752e9fa5926c934f906d46a634cecb452b24f4763db653f0082da5550cf739aaf2d3d927ebd5b4ed64a6d937a4706240462e0cd313e203db5f238c9a56b12767b0279f4f9fe792ab1d163a23f9359a747c33254ab4fd23dd343bdda521ca7e62fce7fc63533446046b7631691e004feec283465"}) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000851) 6.099022402s ago: executing program 2 (id=15410): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x80080, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000ddc2348669ed0d84a984d5fce2e5c47dc1e03a40a10c0cc5e5a305bb175e0adc9ffa022cde09de47", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r9 = socket(0x1e, 0x4, 0x0) unshare(0x400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={0xffffffffffffffff, r8, 0x4, r5}, 0x10) unshare(0x62040080) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x88, @private2, 0xa77}, 0x1c) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001a180400020208000200030001001400030007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.655447923s ago: executing program 0 (id=15411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50) socket(0x11, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7dfb}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.145121766s ago: executing program 0 (id=15412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x20, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) shutdown(r1, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000080)="cf4a7ad19d8db9e7aef10f29570458a7", 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x7d, &(0x7f00000004c0)={r7, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0xfffffffc, {0x2, 0x0, 0x0, 0xa, 0x0, 0x1, 0xc8, 0x9, 0x1500}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_OIF={0xfb}]}, 0x2c}}, 0x24008800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009f080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.891361092s ago: executing program 5 (id=15414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3ff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002500000009000000070000000000000700000000070000000000001201000000000000000000000d020000000030000030005f5f00aa3571c4c02397b6384de03c149226"], 0x0, 0x45}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c1}, 0x20008044) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a800dd8600", 0x20, 0x24040011, &(0x7f0000000300)={0x11, 0x8100, r10, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50f1}, 0x4040) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r12, 0x114, 0x2, &(0x7f0000000740)={{&(0x7f0000000600)=""/236, 0xec}, &(0x7f0000000700)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) 2.887617556s ago: executing program 0 (id=15415): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x7fc9, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4040) (async) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000006c0)={0x2, {{0x2, 0x4e20, @multicast1}}, 0x1}, 0x90) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000800)={0x7f8, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x630, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x2000}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x358, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x17cb}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffff800}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80000001}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2dc, 0x84, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x200}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x40}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="46dfcbdf7b2b"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1a}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x23}, @NL80211_BAND_LC={0x8, 0x5, 0x55}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x800}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf33}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a1f22701f422"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x477fdfe6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x70}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xb}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x13, 0x1, @random="247fb8b644096daf58fda824a65cab"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x4}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="200e2bf7b0dd"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5931}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xf5e}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5285}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa199}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x85}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5a4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="046701b7fab7"}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x81}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2a8, 0x4, 0x0, 0x1, [{0x2a4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x6e, 0x1, "82a3a3b9ebc1e97282bd1b21b2558940c69158fa90f2b8f506808f6fcc47384e6848f51adcbfab6f3eafd919ed1064af721642f0bfd5bc8062a84b696578c4d193ede09c6b539f197a0c9810865749fe3b8bac742eb62f7ccaea35486107ce8ec87eab6dfa2d6196d2bf"}, @NL80211_PKTPAT_PATTERN={0xe2, 0x2, "1fdeef6216bee57fd016c1dfdaabd6749a0027ac9b4988b6112759248a1a700474c3fd86eecbe3e81a0d7b980e8b533757b67e15e2bf5ba70d51d4be73173ec277c80127f38964e20aa0d684a835390d875d99e6cd0a10b28be739cd7d907cbd0b93c323c9b86e33a3d5f8732407681a39902b67ad5469d7d0f41e33f2e9e4c109700cb545a0517355086d54bdbd4ec8e70a90decc2cf318f6632cd0831605ecf64a5c01d4d2ec6a7709ac2c65627461c6af8d5c901738aebdc498dc7c9f36f78def52c6379fb8c1b340c43e68463d8814d88347c2c7395fb241a44525c2"}, @NL80211_PKTPAT_PATTERN={0xad, 0x2, "964b50f664132c4829733c13c926314cca8a2f11a0b1dc7f42150dd0a7ee64a8d18a138020541bbe5a8f3b89665f5c6008045b146c6adafedde6b1d39bd5e90d4fa7dc6e8040a3f7f91c4f98d92cf8282f56b8e31ddb29a91c22270349dcb6398f276e314eeefc52a566a351af2e3a3ad61ff93de021882f4d4d527b53dd9581d8de726c6f96a80775f7b335bd81368a4d3b3066b9c0a72e153aab82cb301347286f54578255049480"}, @NL80211_PKTPAT_MASK={0x9a, 0x1, "acd62e58d84b6df1e47fdbcd582870a29f03aa14d249875c009695ac344ec4028ccca3a3ad6735fbdf99a92a1ca9a7fb764fa17468df8f585f1a1cc213ac291b3e64bfc86fb07a435ea71a68b9989ce39de486b8aaa6f2609145a936f754c39509cd0e1286c582d16939cd6cc3b62305bf91b0a0107d23b8907e56c6c2ca235341c9c35939422b230a0251cc561f321c8967045fd6d0"}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x188, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xfc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xde, 0xa, "24c2ed7b7b8931ca60958393c9ba3322e6fc27f8ba08255530234b743459b6b9697202384a45f607831762a9571478abbf4fd87fa1d1d1cffa8fe0ce2e5df3a22bf20639673ff67bb2518e914e9fc617d8bea2297057187c71bf6f799c208c3c63f9d339558456fb644d2096939cd2793c20248ccfc9f1c96db1bac735c46d3891278f25f99865c9d7b5dae9e57a2909667d3cf392f8289581734518beb22be446cb007dfa20473b3d6d4e7539ecfac3ee880c45188802c30c027d031d78aa726092172a509de2fa56e91945031cf616c841b707b5e3d688fe5f"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0xfffffffb, 0xffff, 0x3}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @remote}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x74, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x6a, 0x2a, [@prep={0x83, 0x1f, {{}, 0x6, 0x6, @broadcast, 0x1, @void, 0x6, 0x4, @device_a, 0xffffff81}}, @ibss={0x6, 0x2, 0xe}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x34, {0x8, 0x6, 0x0, "02565eab41f5a646e4cee817d4ed1ec1243a5515becb0d7c245ffaa453add7793020ca36c6e7e6c5034d9dacc64fbcd075"}}, @dsss={0x3, 0x1, 0x4}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x80}, 0x4840) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 2.490831274s ago: executing program 6 (id=15417): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmsg$qrtr(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/34, 0x22}], 0x1, 0x0, 0x0, 0x40000040}, 0x38, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r6], 0x70}}, 0x0) 2.490256527s ago: executing program 7 (id=15418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x11e, 0x6, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f00000001c0)=""/90, 0x58}, {&(0x7f0000000f00)=""/217, 0xe7}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000000)=""/80, 0x4a}], 0x6}, 0x70001}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x75}], 0x40000000000021a, 0x102, 0x0) r5 = bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff03, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES8=r0, @ANYBLOB="0000000000510000b7080000000000007b5af8ff00000020bfa200b703000008000000b714000000000000850000001e0000001801000064c76408b7a8eb61f52020207b1af8ff000cdb0bf8c8cae63000000007010000f8ffffffb702004008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfcc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r8, 0x58, &(0x7f0000000780)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffb342}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x2, 0x2, 0x1, 0x8, 0x7, 0xffffffffffffffc0, 0x8}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x3, 0x11, &(0x7f0000000440)=""/17, 0x41100, 0x11, '\x00', r2, 0x25, r8, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x6, 0x8a4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r5, r1, r5, r9, r5], 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="03050000417400003000128009000100766c616e0800000020000280100004800c000803050001000b00000006000100030000000410038002000500cc50a283e87e40cb7ac4f50a149e1bd6ab873b0df94030ed7dc613feadce138fe94fbf39444b83c39305b5e6f7ee1fc5d8f13dfb1fe4309bfaeac254523e42848318d60a99524b0f79cbd6c9f369a6fb1471c81a954ec581611896e6834039abc5721a096129374dae", @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) 2.487786966s ago: executing program 5 (id=15419): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa000000d}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000000)=0x1) 2.339956475s ago: executing program 6 (id=15420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0e75d49", @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08003200050000000500380000000000"], 0x2c}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0x8}, {0xb, 0xd}, {0x5, 0x3}}, [{0x8, 0xb, 0xfffffff8}]}, 0x2c}}, 0x200000c0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x5) r11 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r13, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r12, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r10], 0x20}}, 0x8080) 1.883794982s ago: executing program 6 (id=15421): socket(0x22, 0x800, 0x6) (async) r0 = socket(0x22, 0x800, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="00943a", @ANYRES32=0x0, @ANYBLOB='\f\x00C'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000efcadd8a8500000071000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000efcadd8a8500000071000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r3, 0x6f, 0x9, 0x7fffffffffffffff}) getsockname$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom}, [@null, @rose, @remote, @default, @bcast, @default, @remote, @netrom]}, &(0x7f0000000280)=0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0cff0900a244984f2595f43dfb1e", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x2a020400) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) connect$pptp(r0, &(0x7f0000000340)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) (async) connect$pptp(r0, &(0x7f0000000340)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) sendfile(r6, r7, 0x0, 0xffffffff000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x11) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x1, 0x0, 0xffcffffc}, {0x6, 0x0, 0x0, 0x3}]}) write$ppp(r8, &(0x7f0000000300)="5af9", 0x2) (async) write$ppp(r8, &(0x7f0000000300)="5af9", 0x2) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000f26dffaaa840556c0942dfb6e65c1244a2f00580b53c12d4af86d50ce90f385600000000000055c9e8d685ffdbd60001000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r10 = socket(0x15, 0x80005, 0x0) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x180) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000500008000ba845c75e3be110bd563dbf6e29dda0000b9a0616308000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) 1.67309794s ago: executing program 6 (id=15422): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000040)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1) r1 = socket(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x20, 0x70bd26, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0xf5a7ab78bfb0520a, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x8091}, 0x8070) 1.558687388s ago: executing program 6 (id=15423): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0xc5ba, 0x0, [0xaf, 0x4, 0x400, 0x513, 0x3], [0xfffffffffffffffa, 0x0, 0xd6f, 0x9, 0x8, 0x10000, 0x9, 0x4, 0xffffffffffffffff, 0x401, 0x1, 0x3, 0x6, 0xdc, 0x7, 0x2, 0xfffffffffffffffc, 0x1, 0x0, 0x7, 0x6, 0x3, 0x401, 0x1, 0x0, 0x4, 0x3400000000, 0x7fffffffffffffff, 0xd, 0x10000, 0x5, 0x4, 0x10000, 0xeb, 0x7, 0x4, 0x3, 0x3ff, 0x3, 0x400, 0x0, 0x1, 0x3, 0x5, 0x8, 0x7, 0x3, 0x2, 0x180000000000, 0x4, 0x3, 0x7, 0x7, 0x533, 0x2, 0x4, 0x7fff, 0x7, 0x9, 0x8, 0x9, 0x7e6, 0x0, 0x2, 0x2, 0x1, 0xfffffffffffffffd, 0x4, 0xa, 0x7, 0x7ff, 0x5c5, 0x2, 0xff, 0x0, 0xd5, 0x3, 0x269d, 0x10001, 0x8, 0x8000000000000001, 0x1f04e749, 0x76c9, 0x1, 0x4, 0xbac, 0xff, 0xffff, 0x10, 0xfffffffffffffff9, 0x5, 0x5c7, 0x6a0f, 0xfffffffffffffffc, 0x6, 0x0, 0xbcd, 0x1, 0x5, 0x6, 0x4, 0x5, 0x7, 0x8000000000000001, 0x8, 0x1b, 0x423f000, 0x3, 0x5, 0x1, 0xe5, 0x3, 0x7, 0x6, 0x88b9, 0x8, 0x3, 0x8, 0xb08, 0xf, 0xfffffffffffffff7]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={r1, 0x5, 0x1, [0x855, 0x9, 0xb0, 0x7, 0x8], [0x1000, 0xd, 0xfff, 0x2, 0x0, 0x5, 0x5c48f956, 0x50, 0x401, 0x861, 0x100000001, 0x3, 0x2, 0x1, 0xff, 0x7f, 0x5, 0xffffffffffffff20, 0x2, 0x7, 0x6, 0x0, 0x4b7e, 0x5c69, 0x5, 0x3, 0xfff, 0x4, 0x8000000000000001, 0x8, 0x8f, 0x21, 0x11, 0x5, 0x2, 0x1, 0x8000000000000000, 0x0, 0xffffffffffffffff, 0x6, 0x2, 0x7fff, 0x2, 0xa, 0x7f, 0xd, 0x8, 0x3, 0x9d, 0x8, 0x46, 0x2, 0x1000, 0x2, 0x2, 0x6, 0x100000000, 0x250, 0x9, 0x2, 0x96d2, 0x2, 0x4, 0x3, 0x0, 0x6, 0x4, 0xf4d, 0xffffffffffffffff, 0x9, 0x3, 0x6, 0x8000, 0xeb3, 0xe96, 0xfffffffffffffffe, 0xae72, 0xa, 0x6, 0xfffffffffffffff7, 0x3, 0x9, 0x1, 0x3, 0xfa, 0x3, 0x6, 0x6, 0x9, 0x8, 0x7, 0x4, 0x100, 0x2, 0x5, 0x3, 0x8, 0xb, 0x8, 0x5, 0x3, 0x9, 0x16d, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x5, 0xfffffffffffffffb, 0xfff, 0x3, 0x2, 0x10000, 0x12f, 0x1, 0x7, 0x7, 0x1, 0x1ff, 0x4, 0x401, 0x9, 0x2]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000880)={'raw\x00', 0x8b, "49b86943a2f3bf9fa8ae8891665ffecc9798f8dade1e1fb2b6a909cf79d6eb16cf8f37d23494c4e679ac44bb1988aa6bed32f01b6120579b5311295c48409b5a47ef9e8e9a0256cfdeb890f9433b55026aba6905f6be08bf960a806f49cc0a26137016e0cc7502c9ea9ee17c7f1c4da2d7af9368e085561eee1fdfd4a4d8be5b8e359ce78dde26e997ae3f"}, &(0x7f0000000940)=0xaf) r3 = socket$kcm(0x29, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000980)=0x5, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r4) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r5, 0x210, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000d80)={r4, &(0x7f0000000c80)='\x00', 0x8000, &(0x7f0000000cc0)={@_ha_fsid={[0x88, 0x3]}, {0x1, 0x81, 0x81, 0xfffffffffffffffd}}, 0x1ff, &(0x7f0000000d00), &(0x7f0000000d40)=0x38c}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000002200)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000000e80)={0x1310, r9, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x12f2, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xcf9}, @broadcast, @broadcast, @initial, {0x1, 0x9}, "", @value={0x5, 0x1, 0x1, 0x1, 0xfa}}, @a_msdu=[{@device_b, @device_a, 0xaf, "da2dab04c1f20b5bdce69bf89c2b1c9bb2ff620d5dfcbd30dc3ff86db70b9a527f1350bb0c8aa0dc095937d7262fcc10aa92bb6265798c0ad060c69455da3cfad04748a70a67133fe342671e333d96c525b394e8ee1db9447c11f10899d9d7c108b464f4d32a95921254386465de6abcd7065e376402cbdf55f4baffe6965ca909a407600ef8da964f65fda4be835f8096129030db3426fec0ed5e0125959b4976ba43e5fd6665b0b5ab8a5b229b2f"}, {@device_b, @broadcast, 0x8d, "0f3e620a369ee115df62afebe969c2ed4e3c20845b44cc6ac9ae92228130af2cab81353844b17b776b5577b2b56f96ce4229f9df0f3829a0456f159d9f7a6c630246c884cd7ad7f8505f5ee8d10e46e7733044081349f4df22c13acb45df66e112978d2a6cc3d2d4230c62e742f7fd62431c06806f4a891e6ac5efec87b6011c51a9cfcdd123eb812c27854977"}, {@device_a, @device_a, 0xfc, "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"}, {@device_a, @device_a, 0x1000, "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"}, {@broadcast, @device_a, 0x4e, "b1f5074a94ba3d69a2bb96822641f4de7e3ac8025995722dd07f91cf390802a04ae9487dd5104d0e58bbf5a2acf6d6dc94d371f614b2ef77af563384e7e0e1a24a4a4e9255ae8d5f3303ddfb0aba"}]}}]}, 0x1310}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000002240), &(0x7f0000002280)=0x4) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002300)={0xdc, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xb}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_REVISION={0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) sendmsg$nl_route(r7, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=@delnexthop={0x28, 0x69, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{0x8}, {0x8}]}, 0x28}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000025c0)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000002580), {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [0xff, 0xffffff00, 0xff, 0xff000000], [0x0, 0xff], 'veth0_macvtap\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xcb0c, 0x8, 0x5, 'snmp\x00', 'syz1\x00', {0x3}}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x1f}, [0xff, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'ipvlan1\x00', {}, {}, 0x1d, 0x5, 0x6, 0x80}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x2, 0x8001, 'pptp\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockname$packet(r8, &(0x7f0000002900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002940)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002980)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x48, '\x00', r11, r8, 0x3, 0x4, 0x5}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000003340)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003300)={&(0x7f0000002a40)={0x888, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x7ff, 0x8, 0xfe00, 0x1, 0x0, 0xbeb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9951, 0x1ff, 0xfff7, 0x4, 0x2, 0x7, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x7, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x8}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0x9}, {0x3, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x19}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x9}, {0x2, 0x8}, {0x7, 0x4}, {0x4, 0xa}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0x7}]}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5a, 0x6c, 0x6c, 0x5, 0x30, 0x1b, 0x0, 0x36, 0xb, 0x18, 0xb, 0xc, 0x18, 0x60, 0x18, 0x1, 0x24, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x48, 0x2, 0xfffc, 0x7, 0x7ff, 0x4, 0x10, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe8, 0xb1, 0x331b, 0x4, 0x9, 0x0, 0x7f, 0x3]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x9}, {0x6, 0x7}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x6, 0xa}, {0x3, 0xa}, {}, {0x0, 0x4}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0xb, 0x12, 0x5, 0x1b, 0x16, 0x24, 0x1b, 0x6, 0x1, 0x24, 0x1b, 0xc, 0x18, 0x18, 0x15, 0xb, 0x70, 0x1, 0x1, 0x18, 0xb, 0x2, 0x1b, 0x5, 0x60, 0x9, 0x60, 0x1, 0x9, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x8}, {0x4, 0x6}, {0x5, 0xa}, {0x6, 0x7}, {0x3, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x6, 0x1b, 0x16, 0x12, 0x1, 0x0, 0x1, 0x18, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x0, 0x1, 0x1000, 0x2, 0x3ff, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x3, 0x3, 0x48, 0x36, 0x36, 0x0, 0x36, 0x9, 0x2]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x54, 0x60, 0x4, 0x9, 0x1b, 0x18, 0x60, 0x6c, 0x5, 0x12, 0x6c, 0x6, 0x18, 0xb, 0x0, 0x60, 0x1, 0x5, 0x1, 0xb, 0x30, 0x3, 0x48, 0x2]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x6c, 0x60, 0x7, 0x60, 0x6, 0x1, 0x16, 0x6c, 0x6c, 0x48, 0x18, 0x3, 0x18, 0x1b, 0x3, 0x33, 0x24, 0x18, 0xc, 0x4, 0x36, 0x24, 0x6c, 0x12, 0x3f, 0x4, 0x3, 0x1b, 0x5, 0x18, 0x6]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x10, 0x1, 0x5, 0x4, 0x30, 0x48, 0x48, 0x3, 0x5, 0x16, 0x24, 0x6c, 0x1, 0x1]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x5a37, 0x7, 0x4, 0x62, 0xf2a, 0x7fff, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbe, 0xfffa, 0x1, 0x4, 0x7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xdada, 0x4, 0x101, 0x10, 0x1, 0x0, 0x5a9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x48, 0x6, 0xc, 0x74, 0x5, 0xb, 0x5, 0x30, 0x36, 0x5, 0x16, 0x6c, 0x2, 0xc, 0x60, 0x1, 0x24, 0x1b, 0x56, 0x1b, 0x12, 0x3, 0xc, 0x3, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0xc, 0x3, 0x0, 0x48, 0x1, 0x6c, 0x4, 0x16, 0x3, 0x16, 0x6c, 0x6, 0x3]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x9, 0x1, 0x16, 0xc, 0x36, 0x6c, 0x6c, 0xc, 0x1b, 0x30, 0x6c, 0xc, 0x2, 0x5, 0x3, 0x6c, 0x62, 0x6b, 0x1, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xf, 0x3, 0x36, 0x4, 0x0, 0x18, 0x6c, 0x60, 0x18, 0x4c, 0x18, 0x24, 0x6, 0x30, 0x36, 0x18, 0x6c, 0x12, 0xb, 0x9, 0x1, 0xc, 0x60, 0x18, 0x36]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x4}, {0x0, 0xa}, {0x4, 0x4}, {0x4, 0x3}, {0x4, 0x8}, {0x6}, {0x5}, {0x7, 0x8}, {0x3, 0x2}, {0x5, 0x13}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x1}, {0x1}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0x9}, {0x2, 0x4}, {0x3}, {0x7}, {0x4, 0xa}, {0x3}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0x1}, {0x6, 0x7}, {0x2, 0x19}, {0x7, 0xa}, {0x5, 0x1}, {0x3, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {}, {0x1}, {0x2, 0xa}, {}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x7}, {0x1}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x2, 0x7}, {0x6, 0x5}, {0x7, 0x2}, {0x3, 0x4}, {0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x6}, {0x7, 0x8}, {0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x6}, {0x0, 0x16}, {0x3, 0x7}, {0x7, 0xa}, {0x3, 0x7}, {0x4}, {0x7}, {0x0, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x5}, {0x6, 0x7}, {0x6, 0x9}, {0x5, 0x3}, {0x5, 0x1}, {0x5, 0x9}, {0x3, 0x7}, {0x7, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfffd, 0xf21b, 0x5, 0x5, 0x6, 0x7ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff7, 0x3, 0xf, 0x0, 0x100, 0x6, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe38, 0x681d, 0xffef, 0x72, 0x6, 0x5, 0xfffa, 0x7b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x6, 0x60, 0x78, 0x30, 0x36, 0x3d, 0xb, 0xc, 0xc, 0x1, 0xb, 0x1b, 0x1b, 0xc, 0x1, 0xc, 0x6c, 0x24, 0xc, 0x9, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff81, 0x5, 0x3, 0x4deb, 0x3, 0x7, 0x8001, 0x7e]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x16, 0x48, 0x1f, 0x2, 0x12, 0x6, 0x48, 0x9, 0x3, 0x1b, 0x30, 0x48, 0x48, 0x16, 0x5, 0x1b, 0x36, 0x6, 0x12, 0x4, 0xc, 0x36, 0x60, 0x4, 0x3, 0x30, 0x1, 0x6c, 0x3, 0x6, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0x10, 0x1, 0x7f, 0x7, 0x9]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0xa, 0x1, 0x6, 0x5, 0x2cee, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x96, 0x4, 0xff, 0x7fff, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0xa5, 0x200, 0x3, 0x247, 0x10, 0x83c3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xfff, 0x4, 0x9e3, 0x3, 0x2, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4c}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xd558, 0x8, 0xfffe, 0x7, 0x2, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc83, 0x9, 0x0, 0xf8a7, 0x3, 0x2000, 0xfff, 0x100]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5c2, 0x6, 0x9528, 0x7, 0x3, 0x4, 0x6, 0x80]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x0, 0x2, 0xb, 0x97f, 0xc, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xcdd1, 0xa, 0x9, 0x40, 0xfffe, 0xf9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x3, 0x1b, 0x6, 0x2e, 0x30, 0x6c, 0x18, 0x24, 0x24, 0x1, 0x4, 0x2, 0x3, 0x2, 0x6, 0x4]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x3}, {0x5, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x9}, {0x5, 0x6}, {0x2, 0x7}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc43, 0x9, 0x401, 0x100, 0x7, 0x5, 0x0, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x36, 0x6, 0x16, 0x9, 0x60, 0x4, 0x4, 0xc, 0x1b, 0x2, 0x3, 0x5, 0x4, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x8, 0x8, 0x200, 0x3, 0x4, 0x88b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0xb, 0x1, 0x78, 0x18, 0x18, 0xb, 0x22, 0x2, 0x4, 0x1e, 0x4, 0x36, 0x5, 0x12, 0x4, 0xc, 0x48, 0x36, 0x48, 0x5, 0x48, 0xf, 0x6c, 0x9, 0x24, 0x5, 0x24, 0x1a, 0x4, 0x30]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x3}, {0x5, 0x7}, {0x1}, {0x6, 0x2}, {0x6, 0x3}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0x2}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0x8}, {0x1, 0x1}, {0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x4}, {0x4, 0x4}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x1}, {0x3, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0x7}, {0x5}, {0x3, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0x8}, {0x0, 0x2}, {0x5, 0xa}, {}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0xa}, {}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x7}, {0x7, 0x2}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x4, 0x8}, {0x7}, {0x0, 0x6}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x3}, {0x4, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x1}, {0x1}, {0x4, 0x6}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x5}, {0x7, 0xa}, {0x2, 0xa}, {0x3, 0x5}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x4}, {0x5}, {0x2}, {0x4}, {0x3, 0x5}, {0x7}, {0x6, 0x3}, {0x7, 0x1}, {0x6, 0x3}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x9}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x5}, {0x2, 0xa}, {0x1, 0x4}, {0x6, 0x3}, {0x5, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0x1}, {0x5, 0x9}, {}, {0x1, 0x7}, {0x7, 0x8}, {0x2}, {0x2, 0xa}, {0x4, 0x1}, {0x3, 0x3}, {0x2, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x1, 0x7}, {0x1}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0xa}, {0x5, 0x1}, {}, {}, {0x2, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x7, 0x6}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0x5}, {0x2, 0x7}, {0x4, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6}, {0x5, 0x7}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x5, 0x9}, {0x7, 0x7}, {0x2, 0xa}, {0x3, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x1}, {0x2}, {0x6, 0x4}, {0x7, 0x5}, {0x4}, {0x7, 0x8}, {0x7, 0x9}, {0x2, 0x4}, {0x3}, {0x3, 0x6}, {0x0, 0x9}, {0x5, 0x1}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x12, 0x18, 0x4, 0x9, 0x24, 0x6a, 0x4, 0xb, 0x1, 0x6c, 0x5, 0xb, 0x18, 0xb, 0x1, 0xc, 0x7, 0x2, 0x3, 0x30, 0x60, 0x3, 0x6, 0x24, 0xb, 0x18, 0x24]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x3}, {}, {0x4, 0x7}, {0x5, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x75c0, 0x6, 0x2, 0x8000, 0x1, 0x1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0xfff5, 0x3, 0x8, 0x5, 0x2, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3, 0x1, 0x3, 0x447, 0x8, 0x8, 0xc]}}]}, @NL80211_BAND_2GHZ={0x100, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x7}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x5}, {0x4, 0x2}, {0x1, 0x6}, {}, {0x4, 0x8}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x6}, {0x7, 0x6}, {0x4, 0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x4}, {0x7, 0x7}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x2, 0x2}, {0x4, 0x4}, {0x5, 0x5}, {0x2, 0x9}, {0x5, 0x1}, {0x6}, {0x2, 0x2}, {}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0x7}, {0x7, 0x8}, {0x2}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x4}, {0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x3, 0x7}, {0x3, 0x5}, {0x3}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x7}, {0x3, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x3}, {0x0, 0x2}, {0x1, 0x1}, {}, {0x3, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x9}, {0x0, 0x7}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x6, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x2, 0x8}, {}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x3}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x6}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x10, 0xe83, 0xe, 0x97bb, 0x1, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xdf29, 0x81, 0x7fff, 0x5, 0xc, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xe, 0xff7f, 0x3, 0x2ed, 0x8, 0x2]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x888}, 0x1, 0x0, 0x0, 0x4004000}, 0x801) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000033c0)={0x5, &(0x7f0000003380)=[{0x9, 0x7, 0x5, 0x9}, {0x8, 0x6, 0x7f, 0x413f491}, {0xe5c, 0x10, 0x0, 0x9}, {0x2f2, 0x8, 0x1, 0x1}, {0xe, 0x69, 0x2, 0xed}]}, 0x10) getsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000003400), &(0x7f0000003440)=0x4) write$tun(r8, &(0x7f0000003480)={@val={0x0, 0x805}, @void, @ipv4=@tipc={{0x16, 0x4, 0x1, 0x0, 0x7e, 0x3, 0x0, 0x2, 0x6, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x6e, 0x3, 0x7, [{@rand_addr=0x64010102, 0x11f3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x893}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @ssrr={0x89, 0xf, 0xa5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}, @timestamp_prespec={0x44, 0x14, 0xf6, 0x3, 0x7, [{@multicast1, 0x85e}, {@private=0xa010100, 0x9}]}, @noop, @ra={0x94, 0x4}]}}, @payload_direct={{{{0x26, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x2, 0xc, 0x0, 0x1, 0x4, 0x3, 0x3, 0x7, 0xce25, 0x2, 0x4e22, 0x4e21}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x82) 1.537624056s ago: executing program 7 (id=15424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffc, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003", @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES8, @ANYRES8=r2, @ANYRES8=r0], 0x148}}, 0x4000000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000d1fbffff00", "1d1cbe23", "ffba06893bcdc493"}, 0x28) 1.478493936s ago: executing program 5 (id=15425): syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@ssrr={0x89, 0xb, 0xa2, [@broadcast, @broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x400]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@generic="b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca499"]}]}, 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}}, 0x0) 1.347392265s ago: executing program 7 (id=15426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111b9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f000d"], 0x40}}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x2, 0x3, 0x4, 0x8, 0x4, 0x0, [{0xa, 0x6, 0x6, '\x00', 0x1000}, {0xb93, 0x0, 0x100000000, '\x00', 0x80}, {0x8, 0x4, 0x1, '\x00', 0x808}, {0x8000000000000000, 0x8000, 0x3, '\x00', 0x4}]}) 1.321097877s ago: executing program 5 (id=15427): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff03, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000008510000002000000850000000800000095000000000000009500"/48], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1.244048504s ago: executing program 5 (id=15428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x1000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x5a85, 0x4, 0x1, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000000040)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 1.114108805s ago: executing program 7 (id=15429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000001580)={&(0x7f0000000580)=""/4096, 0x3000, 0x1800, 0x7, 0x1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="84c57c137a56f08a0deb1488677bcc7c61c665ae56ce7545bbd81022b8c7706d1da0b58b1bc7efed271f1f04676dfebfa8610fce086b3bb8bd7225e85c230296a5439d9184710ad3544f13d045be8a795731bbd36e46fe620b425d087abdbb0682a317a0a97edc20ab536a673eb6ef9170ce03e39645e08f9c34e73ef490e84dabf72997cf76b2f14a5e91ec41938f6e85c0406ebfeb6914973687478105308696fe6636471f91148c51fc9d6198756c00bc57101a4eb66cdb1b38a47cd7847575683a7a6d30785a929db478ae11d70400"/218], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) 863.756572ms ago: executing program 7 (id=15430): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000440)=[@iv={0xb8, 0x117, 0x2, 0xa4, "16df8be643bbcfcd0c0361b95515ef696ce512dcea03d541e31291965aff4a88d0f956d9a360505ccaa44215c256008b46ddd92587cc0f9e2c5c6f13d42919901a21db4fa7ce0bb3f01191d2eee8e0037633f6fa1a31bb23d7e05c906b7d83882aa669dda032ac35aa7e98a9180a225a1176cfc80644ba4dc8c99ffcfb8e9bbe9873c839f39e5f909a6dbbeac557a7c438a2f7db44a40997592298160f01f2e86f7bf81b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x13, 0x117, 0x4, 0x40}], 0xe8}], 0x1, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000440)=[@iv={0xb8, 0x117, 0x2, 0xa4, "16df8be643bbcfcd0c0361b95515ef696ce512dcea03d541e31291965aff4a88d0f956d9a360505ccaa44215c256008b46ddd92587cc0f9e2c5c6f13d42919901a21db4fa7ce0bb3f01191d2eee8e0037633f6fa1a31bb23d7e05c906b7d83882aa669dda032ac35aa7e98a9180a225a1176cfc80644ba4dc8c99ffcfb8e9bbe9873c839f39e5f909a6dbbeac557a7c438a2f7db44a40997592298160f01f2e86f7bf81b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x13, 0x117, 0x4, 0x40}], 0xe8}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r2, &(0x7f0000000040)=0x1ff, 0x12) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x1ff, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000bc00000085000000ad00000085000000d300000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000bc00000085000000ad00000085000000d300000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 796.397979ms ago: executing program 7 (id=15431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000300000000000000000006000000000000000000000000000000ac1414aa000000000000000000000000e000000200000000000000000000000005000500000000000a004e2200000000fc0100000000000000000000000000000000000000000000070019"], 0xd8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8], 0x18}, 0x0) close(r8) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030"], 0x88}, 0x0) close(r7) splice(r5, 0x0, r6, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r6, 0x0) r9 = openat$cgroup_ro(r6, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) write$cgroup_pid(r9, &(0x7f00000004c0)=r10, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000001880)=""/4096, &(0x7f0000002880)=0x1000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r11 = socket(0x8, 0x3, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r12, &(0x7f0000005400), 0x0, 0x60012001, 0x0) accept4$inet6(r11, 0x0, 0x0, 0x800) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) 663.940356ms ago: executing program 6 (id=15432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000680001000000b84acaeed82a46e1000000000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x20008845}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, r5, 0x200, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000f65dc9be00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc01000000000000000000000000000000000000040000000700"/180], 0xfc}}, 0x0) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000110, 0xf1c) (async) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000110, 0xf1c) r11 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept$inet6(r11, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r6, 0x111, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 654.839416ms ago: executing program 2 (id=15433): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x26}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (async, rerun: 64) r1 = socket(0x2, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4004804) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) 477.429433ms ago: executing program 2 (id=15434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="088480c6b57e00080027000000000014000000456f002000660000401190780a010102ac1414124e204e20ffffff"], 0x2e) 271.961097ms ago: executing program 2 (id=15435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xa}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 242.219588ms ago: executing program 0 (id=15436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_0\x00', @random="5f01b8314011"}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00', 0x5}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_0\x00', @random="5f01b8314011"}) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00', 0x5}], 0x2) (async) 78.819494ms ago: executing program 2 (id=15437): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x401, 0xffff000000000000}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x861a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x47}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20004010) vmsplice(r0, &(0x7f0000001640)=[{&(0x7f0000000180)="e7e1e512a83935ab1dd3c54f261fbc83b3210154034109cb91b3db7d4e5b5aba3396c7edc0c1552a432878fc586ec85c1668ecdbb77b683ce4414b880be2e963debfc17b190db2f9dd7ef18720eb90870995a9076529ae84e3ccc7d56402f136a086f4e726fd3609b92826617e11560626d9df631eb77870e4fc23be51751df9ec803d683ba01467c6f26ece08532d09fdfe83d61e051660f691d0ef20f60e6156080db8b3eb7f89ac61871fac5c009b6fc5fca254875edf69f326dc6da13062805a667b", 0xc4}, {&(0x7f0000000280)="38f6742b731ded18554e8db56e0344ca1b7f8a4aec219eafa928a4f6042bb24bb0cd40254d9438f212d941109bb1e0339b5e9afb03a5bf5d", 0x38}, {&(0x7f00000002c0)="b32e66b575435e69df2e8abc2fb8b05bbb16497a34af6f5144a2d26413016d94ee4a01ec193b0467997b2f87ea631bb03c07ba1dd47b6db73d988b2d9f17acb6980cc778c5362d10a2ed22a889307d4cbcd39d34424de054c99445b05a73754d070d9db226f623cb066ad482652747bca7bf07a6d350b45945391a9617fc245a37", 0x81}, {&(0x7f0000000380)="46bb41d81ada495270798e027b1f6aaa3da464cb7752b9b9ca38b30abd63cedb2ba8b7498510c2e7f9ec6656a5985e23899ffc3e1f9b96a62bc10621ef6e92c1c94b5c6d45e46e4bcddcefe6c0873d0a6e8ca9a58f23d720c8b067ceb1bc5e2adce511a8a5", 0x65}, {&(0x7f0000000400)="54eb7c6fad26413b", 0x8}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="2a3fe7a1f6cc3cbad91b38c6d5a781e0481b558db11a84d0eec929e378a7c1cbd43818d96512f89f615a85af2fd782a9add777b5e5fdc55386d91b3da690d036d1e4aaa2a7352594dbb08c14f6aa88381a0e65bbde8d0ca761c569112dc14fcf5c3ee1037b804872a869c3f5869b39129113c568098ce1b328ed9e39d6caae", 0x7f}, {&(0x7f00000014c0)="527d9a166ed237c34eae2f029676266a933a392f3acf413a41d1cbdc8108144ec4b1793e131cc9e0ffac75f09602021c8272e903e26575bbfd10b008eec4dd5d71c162af4abf52df45bc3b6f6ac15c990784c1b32ae27aa61aa23ff53650bf8032ebe52152cd56a3bc0222d8a4e48b964d15c44b79794128df867ea31737b2042dd55ee70ec5c1d0f532b159f1387ce4b711734e8c8e679b97bee2d4780d6e2d4ba624a447dbd0112512eb", 0xab}, {&(0x7f0000001580)="efc0618e889fa6c54584756928e38f6faa8227f582a8b6a26347bd4fe40b7ab872dd14151b9d706d8c35d367b6dcc53e47861c4d78cec637048463572a7b999e0a74729b7ef67ed6fc8d22a6a6885ae620ae75e7f6f1f38b5882e7d322ffea1dfad0dfa7ff01b9b29deb75e59fe77f28d9e0e896a135d2c6debb0b8dc9210059932dddda7e65314405ffca475b3d0c7e", 0x90}], 0x9, 0xf) r2 = accept4$x25(r0, &(0x7f0000001700), &(0x7f0000001740)=0x12, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000018c0)={r0, 0x58, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xe, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x6, 0x2, 0x0, r0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000001800)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4a, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000001900)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x2, 0xf, 0x58, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001980)=[r0, r0], &(0x7f00000019c0)=[{0x1, 0x2, 0x1, 0x7}, {0x4, 0x3, 0x5, 0x8}, {0x3, 0x3, 0x10}, {0x3, 0x4, 0xa, 0x1}], 0x10, 0x8}, 0x94) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000001ac0)=0x200, &(0x7f0000001b00)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x78, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfff, 0x7a}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x45c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x66e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x900}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4000062) r6 = accept4(r2, &(0x7f0000001d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000001d80)=0x80, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001dc0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000001f00)={0xffffffffffffffff, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e00)={0xb0, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x4011) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000002040)=@dstopts={0x2c, 0x5, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x3, 0x2, 0xff, 0x1e93, [0xac88]}}]}, 0x30) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000002080)={0x0, 0xfff}, &(0x7f00000020c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002140)={r9, 0x2c, &(0x7f0000002100)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x4}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000002180)=0x10) ioctl$OCFS2_IOC_UNRESVSP(r7, 0x40305829, &(0x7f00000021c0)={0x0, 0x1, 0x8, 0xffffffffffff0001, 0x7, 0xfffffff9}) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000002200), &(0x7f0000002240)=0xc) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x670654b5}}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x14, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40004) ioctl$XFS_IOC_FSGROWFSRT(r7, 0x40105870, &(0x7f0000002480)={0x800, 0x67a}) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000002500)=@get={0x1, &(0x7f00000024c0)=""/61, 0x7}) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000002540)) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000002580)) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000002880)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002840)={&(0x7f0000002600)={0x228, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x1ec, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0x28, {0x0, 0x2, [{{0x0, 0x1}, @broadcast, 0xa0e, @value=@broadcast, 0x41}, {{0x0, 0x1}, @broadcast, 0x200, @value, 0x3e}]}}, @measure_req={0x26, 0xdf, {0xf2, 0xf8, 0x3, "e2c532ce0cbb24d38f5443cb96b40749fe850104c4b375e8c2ebe101411493a5d2d74cacbe515a0eea98dc5b22a508c0387a2b1b048174bc85c5b8f4d6a8d8a8fdd17962269e79f8ac01daa4b2dacf56b430a2575f9841332bb0250e55b178f1098210dc10e2e8501a8b36ec2c9577496d4d3f70c0000e1bc451ebe225d326325778ff8dcdd474af9d05f7a572c8aea183b495976cdaa2984faf9cb2252751bfe050aa7226ae7ef2de927f45dd0e8c35c97d13ef3153ba9abf3d33c39b342fa7e4219780c88262294644c4541a4bbc770a7d8a5fb75b8ea92e85f8f5"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @dsss={0x3, 0x1, 0xb8}, @tim={0x5, 0xae, {0x8, 0x54, 0x5, "3ed76e2aeb100bddaa106c1de737f5951f116625a8f17d51f4ae71e58b6f131bd16cdfb854047ffb97e20e339054ad399d2127064497899177267289bff665fecb36e5f9c54a84127603cb35551e90a85d446b039a77dac8a3db5e4dc42ff765508a811ffe26e9674e92946ed9fd66c20f7621eb055bab6349b63320ccedb50a78490841680ccac7893bb9bf9e7242ba1bf5534eebbcca8322935a922485a2e0338455731e1791e4b576d4"}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x7, 0xbb, @device_b, 0xe617, 0x8, 0x800}}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x944, "d98fcaf60aa2", @long="0362c67fb1f59c2572ac4b012559b0b9"}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4040801}, 0x40010) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x5c, r4, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="70df7c3c0c97"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e63e8969fdac"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9bee1002a187"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000002a40)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x280, 0x1b0, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000002a00), {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff00, 0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff, 0xff, 0xffffffff, 0xff000000], @ipv4=@empty, [0x0, 0x0, 0xffffff00], @ipv4=@remote, [0xffffff00, 0xff, 0xff000000], 0x9, 0xfffffffa, 0x6, 0x4e23, 0x4e22, 0x4e20, 0x4e20, 0x228, 0x1}, 0x1, 0x4}}, @common=@icmp6={{0x28}, {0xd, "2a97", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @private1, [0xff000000, 0x0, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'veth1_vlan\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x29, 0x6, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"8856"}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 0s ago: executing program 0 (id=15438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x280, 0x280, 0xfeffffff, 0x280, 0x98, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@ah={{0x30}, {[0x4, 0x6]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x10, 0x70bd29, 0x25dfdc02, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x15}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xb11}, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) kernel console output (not intermixed with test programs): netlink: 'syz.2.14314': attribute type 1 has an invalid length. [ 1561.524918][T29611] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1561.586250][T29611] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1561.719518][T29620] netlink: 'syz.5.14318': attribute type 1 has an invalid length. [ 1561.799112][T29624] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1562.068126][ T8380] bridge_slave_1: left allmulticast mode [ 1562.082901][ T8380] bridge_slave_1: left promiscuous mode [ 1562.101052][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.137530][ T8380] bridge_slave_0: left allmulticast mode [ 1562.146995][ T8380] bridge_slave_0: left promiscuous mode [ 1562.160023][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.256655][T29649] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1562.582134][ T8380] bond14 (unregistering): (slave vti0): Releasing backup interface [ 1562.590428][ T8380] vti0 (unregistering): left promiscuous mode [ 1562.661219][ T8380] bond9 (unregistering): (slave erspan2): Releasing active interface [ 1562.702376][ T8380] bond15 (unregistering): (slave gretap1): Releasing active interface [ 1562.731752][ T8380] bond19 (unregistering): (slave gretap2): Releasing active interface [ 1562.790365][ T8380] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1562.850236][ T8380] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1562.858784][ T8380] bridge1 (unregistering): left promiscuous mode [ 1563.136308][ T8380] bond0 (unregistering): Released all slaves [ 1563.150244][ T8380] bond1 (unregistering): Released all slaves [ 1563.167601][ T8380] bond2 (unregistering): Released all slaves [ 1563.189216][ T8380] bond3 (unregistering): Released all slaves [ 1563.203046][ T8380] bond4 (unregistering): Released all slaves [ 1563.223017][ T8380] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1563.230997][ T8380] bond6 (unregistering): left promiscuous mode [ 1563.246955][ T8380] bond5 (unregistering): Released all slaves [ 1563.261054][ T8380] bond6 (unregistering): Released all slaves [ 1563.274869][ T8380] bond7 (unregistering): Released all slaves [ 1563.288684][ T8380] bond8 (unregistering): Released all slaves [ 1563.316876][ T8380] bond9 (unregistering): Released all slaves [ 1563.331832][ T8380] bond10 (unregistering): Released all slaves [ 1563.346698][ T8380] bond11 (unregistering): Released all slaves [ 1563.360597][ T8380] bond12 (unregistering): Released all slaves [ 1563.387716][ T8380] bond13 (unregistering): (slave veth13): Releasing active interface [ 1563.397421][ T8380] bond13 (unregistering): Released all slaves [ 1563.410986][ T8380] bond14 (unregistering): Released all slaves [ 1563.425765][ T8380] bond15 (unregistering): Released all slaves [ 1563.441030][ T8380] bond16 (unregistering): Released all slaves [ 1563.459482][ T8380] bond17 (unregistering): (slave veth15): Releasing backup interface [ 1563.468157][ T8380] veth15: left promiscuous mode [ 1563.475103][ T8380] bond17 (unregistering): Released all slaves [ 1563.491397][ T8380] bond18 (unregistering): Released all slaves [ 1563.505125][ T8380] bond19 (unregistering): Released all slaves [ 1563.519111][ T8380] bond20 (unregistering): Released all slaves [ 1563.539005][ T8380] bond21 (unregistering): Released all slaves [ 1563.555315][T29641] xfrm0: Caught tx_queue_len zero misconfig [ 1563.567192][T29643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1563.574967][T29663] __nla_validate_parse: 8 callbacks suppressed [ 1563.574980][T29663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14328'. [ 1563.778481][ T8380] hmó3)óÿ: left promiscuous mode [ 1563.894108][ T8380] tipc: Disabling bearer [ 1563.900963][T29678] netlink: 'syz.2.14331': attribute type 1 has an invalid length. [ 1563.901923][ T8380] tipc: Left network mode [ 1563.923773][T29678] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14331'. [ 1563.955539][T29678] netlink: 'syz.2.14331': attribute type 1 has an invalid length. [ 1563.990555][T29678] netlink: 634 bytes leftover after parsing attributes in process `syz.2.14331'. [ 1564.110687][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14333'. [ 1564.225609][T29691] netlink: 'syz.0.14333': attribute type 13 has an invalid length. [ 1564.265612][T29691] netlink: 'syz.0.14333': attribute type 17 has an invalid length. [ 1564.396051][T29691] gretap0: left promiscuous mode [ 1564.471477][T29691] batman_adv: batadv0: Interface activated: vlan3 [ 1564.627300][T29691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.658289][T29691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.696074][T29691] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1564.719846][T11431] gre0 speed is unknown, defaulting to 1000 [ 1564.732003][T11431] syz1: Port: 1 Link ACTIVE [ 1564.833113][T11431] gre0 speed is unknown, defaulting to 1000 [ 1565.117730][T29712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1565.118310][T29712] x_tables: duplicate underflow at hook 2 [ 1565.259987][T29715] tipc: New replicast peer: 255.255.255.255 [ 1565.284384][T29715] tipc: Enabled bearer , priority 10 [ 1565.596617][T29719] sit0: entered promiscuous mode [ 1565.620557][T29719] netlink: 'syz.0.14341': attribute type 1 has an invalid length. [ 1565.634265][T29719] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1565.644447][T29719] netlink: 'syz.0.14341': attribute type 1 has an invalid length. [ 1565.667533][T29719] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1565.697251][T29719] netlink: 'syz.0.14341': attribute type 1 has an invalid length. [ 1565.706352][T29719] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1565.721321][T29721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14342'. [ 1565.756166][T29719] netlink: 'syz.0.14341': attribute type 1 has an invalid length. [ 1565.774631][T29719] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1565.823685][T29719] netlink: 1 bytes leftover after parsing attributes in process `syz.0.14341'. [ 1566.012898][ T8380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.020713][ T8380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.037110][ T8380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.058802][ T8380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1566.078956][ T8380] batman_adv: batadv0: Removing interface: macvlan3 [ 1566.127745][ T8380] batman_adv: batadv0: Removing interface: ipvlan2 [ 1566.144183][ T8380] veth1_macvtap: left promiscuous mode [ 1566.151564][ T8380] veth0_macvtap: left promiscuous mode [ 1566.161852][ T8380] veth1_vlan: left promiscuous mode [ 1566.167372][ T8380] veth0_vlan: left promiscuous mode [ 1566.919659][ T5921] tipc: Node number set to 2561363484 [ 1567.235592][T29769] validate_nla: 29 callbacks suppressed [ 1567.235615][T29769] netlink: 'syz.5.14350': attribute type 10 has an invalid length. [ 1567.299867][T29769] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1567.321636][T29769] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.372757][T29769] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1567.541661][ T8380] IPVS: stop unused estimator thread 0... [ 1567.633879][T29786] syzkaller1: entered promiscuous mode [ 1567.639466][T29786] syzkaller1: entered allmulticast mode [ 1567.674245][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880af20e400: rx timeout, send abort [ 1567.835555][T29795] syzkaller0: entered promiscuous mode [ 1567.841127][T29795] syzkaller0: entered allmulticast mode [ 1568.182556][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880af20e400: abort rx timeout. Force session deactivation [ 1568.258715][T29797] lo speed is unknown, defaulting to 1000 [ 1568.266668][T29797] gre0 speed is unknown, defaulting to 1000 [ 1568.369920][T29886] Bluetooth: hci1: command 0x0405 tx timeout [ 1570.316467][T29773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.465520][T29805] __nla_validate_parse: 31 callbacks suppressed [ 1570.465539][T29805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14358'. [ 1570.495074][T29810] netlink: 712 bytes leftover after parsing attributes in process `syz.5.14360'. [ 1570.506802][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14359'. [ 1570.517016][T29810] netlink: 5504 bytes leftover after parsing attributes in process `syz.5.14360'. [ 1570.526841][T29810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14360'. [ 1570.547912][T29806] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14359'. [ 1570.568000][T29810] Cannot find del_set index 49151 as target [ 1570.660517][T29821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14363'. [ 1570.677994][T29821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14363'. [ 1570.835322][T29831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14367'. [ 1570.885785][T29836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14369'. [ 1571.789460][T29886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1571.801313][T29886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1571.811212][T29886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1571.821498][T29886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1571.829427][T29886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1571.891873][T29869] lo speed is unknown, defaulting to 1000 [ 1571.900168][T29869] gre0 speed is unknown, defaulting to 1000 [ 1572.310808][T29869] chnl_net:caif_netlink_parms(): no params data found [ 1572.378943][T29869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.386269][T29869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.393698][T29869] bridge_slave_0: entered allmulticast mode [ 1572.400758][T29869] bridge_slave_0: entered promiscuous mode [ 1572.408852][T29869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.416171][T29869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.423561][T29869] bridge_slave_1: entered allmulticast mode [ 1572.430589][T29869] bridge_slave_1: entered promiscuous mode [ 1572.461322][T29869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.473472][T29869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.500680][T29869] team0: Port device team_slave_0 added [ 1572.508679][T29869] team0: Port device team_slave_1 added [ 1572.531590][T29869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.539115][T29869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.565499][T29869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.578899][T29869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.585962][T29869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.612456][T29869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.650188][T29869] hsr_slave_0: entered promiscuous mode [ 1572.656674][T29869] hsr_slave_1: entered promiscuous mode [ 1572.663072][T29869] debugfs: 'hsr0' already exists in 'hsr' [ 1572.668814][T29869] Cannot create hsr debugfs directory [ 1573.015980][T29889] syzkaller0: entered promiscuous mode [ 1573.021497][T29889] syzkaller0: entered allmulticast mode [ 1573.892166][T13336] Bluetooth: hci6: command tx timeout [ 1574.020895][T29843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1574.054589][T29869] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1574.087920][T29869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1574.113542][T29869] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1574.146493][T29869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1574.172989][T29869] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1574.205380][T29869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1574.225629][T29869] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1574.248340][T29869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1574.544923][T29869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.599890][T29869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.650875][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.658106][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.718423][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.725631][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.026983][T29949] syzkaller0: entered promiscuous mode [ 1575.033889][T29949] syzkaller0: entered allmulticast mode [ 1575.256978][T29869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.527620][T29965] __nla_validate_parse: 5 callbacks suppressed [ 1575.527638][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14396'. [ 1575.553145][T29969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14398'. [ 1575.564365][T29965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14396'. [ 1575.966818][T13336] Bluetooth: hci6: command tx timeout [ 1576.106463][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1576.303826][T29992] syzkaller0: entered promiscuous mode [ 1576.316069][T29992] syzkaller0: entered allmulticast mode [ 1576.407776][T29869] veth0_vlan: entered promiscuous mode [ 1576.459520][T29996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14405'. [ 1576.483307][T29869] veth1_vlan: entered promiscuous mode [ 1576.577264][T29869] veth0_macvtap: entered promiscuous mode [ 1576.605802][T29869] veth1_macvtap: entered promiscuous mode [ 1576.660336][T29869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.688653][T30006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14407'. [ 1576.707759][T29869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.735777][ T1160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.768928][ T1160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.930200][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1577.067787][ T1160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.095799][ T1160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.228757][T30016] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1577.307589][T30023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14411'. [ 1577.359354][T30027] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14411'. [ 1577.544336][T30034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14412'. [ 1577.604116][T30032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14412'. [ 1577.688075][T30039] netlink: 'syz.0.14413': attribute type 39 has an invalid length. [ 1577.942988][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.974643][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.042673][T13336] Bluetooth: hci6: command tx timeout [ 1578.076522][T30051] syzkaller0: entered promiscuous mode [ 1578.085914][T30051] syzkaller0: entered allmulticast mode [ 1578.104744][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.134464][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.232246][T30058] netlink: 'syz.0.14416': attribute type 1 has an invalid length. [ 1578.475575][T30066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1578.520708][T30069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14418'. [ 1578.613467][T30074] netlink: 'syz.5.14418': attribute type 4 has an invalid length. [ 1579.240410][T30102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1579.399310][T30105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.438925][T30105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.476017][T30105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.488572][T30105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.132705][T13336] Bluetooth: hci6: command tx timeout [ 1581.010766][T30202] sctp: [Deprecated]: syz.2.14452 (pid 30202) Use of int in maxseg socket option. [ 1581.010766][T30202] Use struct sctp_assoc_value instead [ 1581.037057][T30203] __nla_validate_parse: 5 callbacks suppressed [ 1581.037075][T30203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14451'. [ 1581.084587][T30203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14451'. [ 1581.119455][T30203] netlink: 124 bytes leftover after parsing attributes in process `syz.1.14451'. [ 1581.259171][T24544] lec:lec_start_xmit: lec0:No lecd attached [ 1581.321884][T30218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14454'. [ 1581.348397][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14454'. [ 1581.382486][T30218] netlink: 'syz.5.14454': attribute type 18 has an invalid length. [ 1581.589549][T30216] geneve2: entered promiscuous mode [ 1581.626183][T30203] lo speed is unknown, defaulting to 1000 [ 1581.651053][T30203] gre0 speed is unknown, defaulting to 1000 [ 1583.058803][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14467'. [ 1583.530986][T30287] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14470'. [ 1583.693552][T30289] batman_adv: batadv0: Interface deactivated: vlan3 [ 1583.706823][T30292] netlink: 'syz.0.14471': attribute type 13 has an invalid length. [ 1583.728993][T30292] netlink: 'syz.0.14471': attribute type 17 has an invalid length. [ 1583.868087][T30302] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14474'. [ 1583.898311][ T9284] gre0 speed is unknown, defaulting to 1000 [ 1583.907961][T30303] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14474'. [ 1583.920828][ T9284] syz1: Port: 1 Link DOWN [ 1583.943561][T30292] batman_adv: batadv0: Interface activated: vlan3 [ 1583.978657][T30292] sit0: left promiscuous mode [ 1584.079710][T30292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.117863][T30292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.155800][T30292] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1584.189027][T30029] gre0 speed is unknown, defaulting to 1000 [ 1584.200825][T30029] syz1: Port: 1 Link ACTIVE [ 1584.228717][ T5921] gre0 speed is unknown, defaulting to 1000 [ 1584.687680][T30340] syzkaller0: entered promiscuous mode [ 1584.693906][T30337] netlink: 'syz.6.14480': attribute type 10 has an invalid length. [ 1584.704607][T30340] syzkaller0: entered allmulticast mode [ 1584.801551][T30337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1584.825807][T30336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1584.858561][T30342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14482'. [ 1585.991372][T30384] syzkaller0: entered promiscuous mode [ 1586.007448][T30384] syzkaller0: entered allmulticast mode [ 1586.194243][T30382] netlink: 'syz.6.14493': attribute type 33 has an invalid length. [ 1586.226152][T30382] netlink: 152 bytes leftover after parsing attributes in process `syz.6.14493'. [ 1586.288690][T30382] `: renamed from team0 (while UP) [ 1586.340534][T30389] lo speed is unknown, defaulting to 1000 [ 1586.356722][T30389] gre0 speed is unknown, defaulting to 1000 [ 1586.449634][T30386] lo speed is unknown, defaulting to 1000 [ 1586.593803][T30409] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14500'. [ 1586.642467][T30405] lo speed is unknown, defaulting to 1000 [ 1586.681978][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1586.690090][ C1] lec:lec_tx_timeout: lec0 [ 1586.738984][T30386] gre0 speed is unknown, defaulting to 1000 [ 1586.762285][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1586.988658][T30418] lo speed is unknown, defaulting to 1000 [ 1587.104496][T30405] gre0 speed is unknown, defaulting to 1000 [ 1587.496274][T30430] netem: invalid attributes len -1 [ 1587.517874][T30430] netem: change failed [ 1587.576922][T30432] gretap3: entered promiscuous mode [ 1587.605044][T30432] gretap3: entered allmulticast mode [ 1587.696664][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14508'. [ 1587.739327][T30418] gre0 speed is unknown, defaulting to 1000 [ 1587.759037][T30435] syzkaller0: entered promiscuous mode [ 1587.774478][T30435] syzkaller0: entered allmulticast mode [ 1587.968472][T30438] xt_hashlimit: size too large, truncated to 1048576 [ 1588.242352][T30447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14511'. [ 1589.171441][T30456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14513'. [ 1589.187352][T30456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14513'. [ 1589.303914][T30459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14514'. [ 1589.327992][T30459] netlink: 'syz.5.14514': attribute type 2 has an invalid length. [ 1589.591144][T30469] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1590.060598][T30481] syzkaller0: entered promiscuous mode [ 1590.075223][T30481] syzkaller0: entered allmulticast mode [ 1590.196666][T30490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14522'. [ 1590.413905][T30492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14523'. [ 1590.436727][T30492] syzkaller1: entered promiscuous mode [ 1590.462147][T30492] syzkaller1: entered allmulticast mode [ 1590.690112][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14526'. [ 1590.708167][T30499] gre1: entered allmulticast mode [ 1590.727148][T30500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1590.734412][T30500] IPv6: NLM_F_CREATE should be set when creating new route [ 1590.750457][T30499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1590.757759][T30499] IPv6: NLM_F_CREATE should be set when creating new route [ 1590.954293][T30506] netlink: 'syz.2.14527': attribute type 8 has an invalid length. [ 1590.976865][T30506] netlink: 'syz.2.14527': attribute type 21 has an invalid length. [ 1590.985684][T30506] netlink: 'syz.2.14527': attribute type 11 has an invalid length. [ 1591.197593][T30523] xt_hashlimit: size too large, truncated to 1048576 [ 1591.205693][T30523] xt_hashlimit: max too large, truncated to 1048576 [ 1591.267082][T30529] __nla_validate_parse: 2 callbacks suppressed [ 1591.267100][T30529] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14534'. [ 1591.305070][T30529] syzkaller0: entered promiscuous mode [ 1591.310579][T30529] syzkaller0: entered allmulticast mode [ 1591.326080][T30529] tcf_pedit_act: 7 callbacks suppressed [ 1591.326096][T30529] tc action pedit offset must be on 32 bit boundaries [ 1591.368230][T30531] lo speed is unknown, defaulting to 1000 [ 1591.376510][T30531] gre0 speed is unknown, defaulting to 1000 [ 1591.403232][T11434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.543672][T30502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1591.560482][T30510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.884520][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.893759][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.019252][T30559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14543'. [ 1592.048530][T30559] netlink: 'syz.0.14543': attribute type 13 has an invalid length. [ 1592.057278][T30559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14543'. [ 1592.090439][T30559] ip6gre2: left promiscuous mode [ 1592.095718][T30559] geneve2: left promiscuous mode [ 1592.301688][T30569] syzkaller0: entered promiscuous mode [ 1592.336503][T30569] syzkaller0: entered allmulticast mode [ 1592.350457][T30573] x_tables: unsorted entry at hook 2 [ 1592.370262][T30572] netlink: 'syz.0.14548': attribute type 29 has an invalid length. [ 1592.417069][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14548'. [ 1592.446627][T11434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.696972][T30590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.035772][T30587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.043068][T30587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.050477][T30587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.057637][T30587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.097239][T30607] netlink: 'syz.1.14554': attribute type 3 has an invalid length. [ 1593.113159][T30607] netlink: 'syz.1.14554': attribute type 3 has an invalid length. [ 1593.303755][T30621] netlink: 'syz.5.14559': attribute type 1 has an invalid length. [ 1593.320610][T30621] netlink: 'syz.5.14559': attribute type 2 has an invalid length. [ 1593.368570][T30617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14558'. [ 1593.421187][T30621] bond6: Removing last arp target with arp_interval on [ 1593.447671][T30617] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14558'. [ 1593.471103][T30624] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14558'. [ 1593.493195][T11435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.557430][T30624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.583999][T30624] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1593.608014][T30624] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1593.618749][T30624] bond0 (unregistering): Released all slaves [ 1593.628544][T30642] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14562'. [ 1593.916569][T30657] netlink: 220 bytes leftover after parsing attributes in process `syz.2.14566'. [ 1593.963813][T30661] delete_channel: no stack [ 1593.985595][T30657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14566'. [ 1594.059645][T30662] xt_hashlimit: size too large, truncated to 1048576 [ 1594.117203][T30664] team0: Device vxcan1 is of different type [ 1594.180743][T30672] syz_tun: entered promiscuous mode [ 1594.203049][T30669] syz_tun: left promiscuous mode [ 1594.207277][T30657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.248877][T30670] lo speed is unknown, defaulting to 1000 [ 1594.287837][T30670] gre0 speed is unknown, defaulting to 1000 [ 1594.316516][T30661] delete_channel: no stack [ 1594.524293][T11435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.553061][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.805471][T30691] validate_nla: 2 callbacks suppressed [ 1594.805490][T30691] netlink: 'syz.5.14573': attribute type 39 has an invalid length. [ 1594.924509][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.213853][T30716] netlink: 'syz.5.14579': attribute type 1 has an invalid length. [ 1595.746742][T30746] netlink: 'syz.6.14589': attribute type 1 has an invalid length. [ 1595.869340][T30746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1595.918606][T30749] bond1: (slave ip6gretap0): making interface the new active one [ 1595.928549][T30749] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1596.329260][T30771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.480672][T30782] __nla_validate_parse: 4 callbacks suppressed [ 1596.480689][T30782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14600'. [ 1596.607907][T11435] net_ratelimit: 7 callbacks suppressed [ 1596.607925][T11435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.667669][T30786] lo speed is unknown, defaulting to 1000 [ 1596.698245][T30786] gre0 speed is unknown, defaulting to 1000 [ 1596.741470][T30791] syzkaller0: entered promiscuous mode [ 1596.765088][T30791] syzkaller0: entered allmulticast mode [ 1596.977995][T30796] Cannot find set identified by id 0 to match [ 1597.005858][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.101792][T30798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14607'. [ 1597.197666][T30808] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14611'. [ 1597.209473][T30808] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14611'. [ 1597.244582][T30798] bond7: entered promiscuous mode [ 1597.268704][T30798] bond7: entered allmulticast mode [ 1597.299097][T30811] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14612'. [ 1597.305216][T30812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14612'. [ 1597.405649][T30815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14614'. [ 1597.570869][T30819] syzkaller0: entered promiscuous mode [ 1597.583680][T30819] syzkaller0: entered allmulticast mode [ 1597.649088][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.845417][T30835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14619'. [ 1597.930801][T30841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14618'. [ 1599.031076][T30866] tap0: tun_chr_ioctl cmd 1074025681 [ 1599.156438][T30869] syzkaller0: entered promiscuous mode [ 1599.176107][T30869] syzkaller0: entered allmulticast mode [ 1599.310498][T30888] Cannot find set identified by id 0 to match [ 1599.360384][T30888] syzkaller0: entered promiscuous mode [ 1599.370333][T30888] syzkaller0: entered allmulticast mode [ 1599.431726][T30890] tap0: tun_chr_ioctl cmd 1074025676 [ 1599.438528][T30890] tap0: owner set to 0 [ 1599.475480][T30890] syzkaller0: entered promiscuous mode [ 1599.495758][T30890] syzkaller0: entered allmulticast mode [ 1599.621407][T30904] netlink: 'syz.5.14638': attribute type 10 has an invalid length. [ 1599.655784][T30898] bond2: option downdelay: invalid value (18446744073709551371) [ 1599.663855][T30898] bond2: option downdelay: allowed values 0 - 2147483647 [ 1599.674547][T30898] bond2 (unregistering): Released all slaves [ 1599.768040][T30904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.866420][T30906] lo speed is unknown, defaulting to 1000 [ 1599.906044][T30906] gre0 speed is unknown, defaulting to 1000 [ 1599.985473][T30913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14640'. [ 1600.044525][T30916] netlink: 'syz.2.14640': attribute type 1 has an invalid length. [ 1600.202822][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.456457][T30932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.784752][T30949] batadv_slave_0: entered promiscuous mode [ 1600.860512][T30948] batadv_slave_0: left promiscuous mode [ 1601.101696][T30960] netlink: 'syz.5.14653': attribute type 11 has an invalid length. [ 1601.261851][T30967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1601.541066][T30978] syzkaller0: entered promiscuous mode [ 1601.546738][T30978] syzkaller0: entered allmulticast mode [ 1601.556568][T30978] tcf_pedit_act: 7 callbacks suppressed [ 1601.556585][T30978] tc action pedit offset 64 out of bounds [ 1601.570247][T30978] tc action pedit offset 64 out of bounds [ 1601.576020][T30978] tc action pedit offset 64 out of bounds [ 1601.581760][T30978] tc action pedit offset 64 out of bounds [ 1601.587544][T30978] tc action pedit offset 64 out of bounds [ 1601.593314][T30978] tc action pedit offset 64 out of bounds [ 1601.599043][T30978] tc action pedit offset 64 out of bounds [ 1601.604820][T30978] tc action pedit offset 64 out of bounds [ 1601.610577][T30978] tc action pedit offset 64 out of bounds [ 1601.616364][T30978] tc action pedit offset 64 out of bounds [ 1601.622133][T30978] 0: reclassify loop, rule prio 0, protocol 800 [ 1601.870447][T30984] syzkaller0: entered promiscuous mode [ 1601.895432][T30984] syzkaller0: entered allmulticast mode [ 1602.018473][T30990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.432782][T31020] __nla_validate_parse: 2 callbacks suppressed [ 1602.432801][T31020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14671'. [ 1602.453908][T31004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14667'. [ 1602.563254][T31027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14671'. [ 1602.661039][T31022] lo speed is unknown, defaulting to 1000 [ 1602.683261][T31022] gre0 speed is unknown, defaulting to 1000 [ 1602.763789][ T1839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.772590][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.173536][T31037] ip6tnl0: entered promiscuous mode [ 1603.191599][T31037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14672'. [ 1603.402955][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.549015][T31059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14676'. [ 1603.679570][T31062] netlink: 3 bytes leftover after parsing attributes in process `syz.6.14678'. [ 1603.725053][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14678'. [ 1604.097489][T31072] syzkaller0: entered promiscuous mode [ 1604.109079][T31072] syzkaller0: entered allmulticast mode [ 1604.189945][T31076] sctp: [Deprecated]: syz.5.14682 (pid 31076) Use of int in max_burst socket option. [ 1604.189945][T31076] Use struct sctp_assoc_value instead [ 1605.981582][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.251848][ T1316] lec:lec_start_xmit: lec0:No lecd attached [ 1607.258136][ T1316] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1607.265106][ T1316] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1607.425759][T31112] netlink: 'syz.2.14687': attribute type 1 has an invalid length. [ 1607.502754][T31116] xt_hashlimit: size too large, truncated to 1048576 [ 1607.568230][T31112] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1607.785588][T31125] syzkaller0: entered promiscuous mode [ 1607.801906][T31125] syzkaller0: entered allmulticast mode [ 1607.883903][ T1839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.529475][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.768602][T31144] lo speed is unknown, defaulting to 1000 [ 1608.783170][T31139] lo speed is unknown, defaulting to 1000 [ 1608.784524][T31144] gre0 speed is unknown, defaulting to 1000 [ 1608.819726][T31154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14700'. [ 1608.835496][T31155] tipc: Enabling of bearer rejected, already enabled [ 1609.100706][T31139] gre0 speed is unknown, defaulting to 1000 [ 1609.162815][ T8370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.901151][T31187] netlink: 'syz.5.14710': attribute type 11 has an invalid length. [ 1609.932332][T31187] netlink: 145448 bytes leftover after parsing attributes in process `syz.5.14710'. [ 1610.099618][T29886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1610.123042][T29886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1610.133486][T29886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1610.144197][T29886] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1610.156028][T29886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1610.405918][T31198] netlink: 100 bytes leftover after parsing attributes in process `syz.0.14713'. [ 1610.449168][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14713'. [ 1610.572915][T31202] netlink: 168 bytes leftover after parsing attributes in process `syz.5.14715'. [ 1610.594043][T31206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14716'. [ 1610.731085][T31191] lo speed is unknown, defaulting to 1000 [ 1610.732157][T31206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14716'. [ 1610.795904][T31191] gre0 speed is unknown, defaulting to 1000 [ 1610.837321][T31206] syz.0.14716: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1610.884244][T31206] CPU: 0 UID: 0 PID: 31206 Comm: syz.0.14716 Not tainted syzkaller #0 PREEMPT(full) [ 1610.884298][T31206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1610.884326][T31206] Call Trace: [ 1610.884334][T31206] [ 1610.884344][T31206] dump_stack_lvl+0xe8/0x150 [ 1610.884385][T31206] warn_alloc+0x249/0x340 [ 1610.884413][T31206] ? stack_trace_save+0xa9/0x100 [ 1610.884445][T31206] ? __pfx_warn_alloc+0x10/0x10 [ 1610.884488][T31206] ? kasan_save_track+0x4f/0x80 [ 1610.884511][T31206] ? kasan_save_track+0x3e/0x80 [ 1610.884533][T31206] ? __kasan_kmalloc+0x93/0xb0 [ 1610.884558][T31206] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1610.884583][T31206] ? xskq_create+0x56/0x170 [ 1610.884607][T31206] ? xsk_setsockopt+0x54c/0x990 [ 1610.884629][T31206] ? do_sock_setsockopt+0x17c/0x1b0 [ 1610.884650][T31206] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1610.884670][T31206] ? do_syscall_64+0x15f/0xf80 [ 1610.884703][T31206] __vmalloc_node_range_noprof+0x132/0x1750 [ 1610.884761][T31206] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1610.884793][T31206] ? __kasan_kmalloc+0x93/0xb0 [ 1610.884825][T31206] vmalloc_user_noprof+0xad/0xe0 [ 1610.884850][T31206] ? xskq_create+0xbf/0x170 [ 1610.884877][T31206] xskq_create+0xbf/0x170 [ 1610.884904][T31206] xsk_init_queue+0x8a/0xe0 [ 1610.884935][T31206] xsk_setsockopt+0x54c/0x990 [ 1610.884962][T31206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1610.884986][T31206] ? __pfx_aa_sk_perm+0x10/0x10 [ 1610.885024][T31206] ? aa_sock_opt_perm+0xff/0x1a0 [ 1610.885049][T31206] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1610.885073][T31206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1610.885098][T31206] do_sock_setsockopt+0x17c/0x1b0 [ 1610.885126][T31206] __x64_sys_setsockopt+0x13d/0x1b0 [ 1610.885150][T31206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.885173][T31206] do_syscall_64+0x15f/0xf80 [ 1610.885200][T31206] ? trace_irq_disable+0x3b/0x140 [ 1610.885228][T31206] ? clear_bhb_loop+0x40/0x90 [ 1610.885253][T31206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.885274][T31206] RIP: 0033:0x7f1414b9cdd9 [ 1610.885294][T31206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.885311][T31206] RSP: 002b:00007f1415b2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1610.885333][T31206] RAX: ffffffffffffffda RBX: 00007f1414e15fa0 RCX: 00007f1414b9cdd9 [ 1610.885348][T31206] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 1610.885362][T31206] RBP: 00007f1414c32d69 R08: 0000000000000004 R09: 0000000000000000 [ 1610.885375][T31206] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.885389][T31206] R13: 00007f1414e16038 R14: 00007f1414e15fa0 R15: 00007ffddb1893c8 [ 1610.885424][T31206] [ 1610.886637][T31206] Mem-Info: [ 1611.257297][T31206] active_anon:9700 inactive_anon:6 isolated_anon:0 [ 1611.257297][T31206] active_file:2994 inactive_file:41275 isolated_file:0 [ 1611.257297][T31206] unevictable:768 dirty:72 writeback:0 [ 1611.257297][T31206] slab_reclaimable:15395 slab_unreclaimable:261175 [ 1611.257297][T31206] mapped:47464 shmem:1450 pagetables:3983 [ 1611.257297][T31206] sec_pagetables:0 bounce:0 [ 1611.257297][T31206] kernel_misc_reclaimable:0 [ 1611.257297][T31206] free:1084536 free_pcp:25527 free_cma:0 [ 1611.320315][T31206] Node 0 active_anon:38800kB inactive_anon:24kB active_file:11976kB inactive_file:164900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:21920kB dirty:284kB writeback:0kB shmem:4264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18048kB pagetables:15792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1611.390906][T31226] netlink: 'syz.5.14719': attribute type 21 has an invalid length. [ 1611.399100][T31206] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167936kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1611.473752][T31206] Node 0 DMA free:11224kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:32kB free_cma:0kB [ 1611.505096][T31206] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 1611.510913][T31206] Node 0 DMA32 free:1166592kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38600kB inactive_anon:24kB active_file:11976kB inactive_file:164900kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:41200kB local_pcp:20372kB free_cma:0kB [ 1611.553339][T31206] lowmem_reserve[]: 0 0 0 0 0 [ 1611.558120][T31206] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1611.591055][T31206] lowmem_reserve[]: 0 0 0 0 0 [ 1611.596075][T31206] Node 1 Normal free:3160012kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61260kB local_pcp:31384kB free_cma:0kB [ 1611.628976][T31206] lowmem_reserve[]: 0 0 0 0 0 [ 1611.635061][T31206] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11224kB [ 1611.670877][T31206] Node 0 DMA32: 8034*4kB (UME) 11082*8kB (UME) 7871*16kB (UME) 304*32kB (UME) 29*64kB (UME) 942*128kB (UME) 1094*256kB (UME) 484*512kB (UM) 151*1024kB (UE) 51*2048kB (UM) 0*4096kB = 1165832kB [ 1611.691503][T31206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1611.712585][T31206] Node 1 Normal: 9*4kB (U) 13*8kB (UM) 24*16kB (UM) 10*32kB (UM) 14*64kB (UM) 12*128kB (UM) 15*256kB (UM) 14*512kB (UM) 12*1024kB (UM) 14*2048kB (U) 758*4096kB (UM) = 3160012kB [ 1611.733233][ T1839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.749166][T31219] lo speed is unknown, defaulting to 1000 [ 1611.761812][T31206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1611.787259][T31206] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1611.807179][T31206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1611.829791][T31206] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1611.853753][T31206] 45716 total pagecache pages [ 1611.863920][T31206] 0 pages in swap cache [ 1611.869740][T31219] gre0 speed is unknown, defaulting to 1000 [ 1611.883001][T31206] Free swap = 124996kB [ 1611.887219][T31206] Total swap = 124996kB [ 1611.891895][T31206] 2097051 pages RAM [ 1611.918662][T31206] 0 pages HighMem/MovableOnly [ 1611.932991][T31206] 427573 pages reserved [ 1611.943342][T31206] 0 pages cma reserved [ 1612.282508][T13336] Bluetooth: hci7: command tx timeout [ 1612.502311][T31191] chnl_net:caif_netlink_parms(): no params data found [ 1612.556278][T31250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14723'. [ 1612.682007][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1612.690078][ C1] lec:lec_tx_timeout: lec0 [ 1612.852700][T31191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.876224][T31191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.900179][T31191] bridge_slave_0: entered allmulticast mode [ 1612.928405][T31191] bridge_slave_0: entered promiscuous mode [ 1612.942978][T31191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.950241][T31191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.958724][T31191] bridge_slave_1: entered allmulticast mode [ 1612.999995][T31191] bridge_slave_1: entered promiscuous mode [ 1613.013171][ T1836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.091771][T31274] netlink: 'syz.0.14729': attribute type 1 has an invalid length. [ 1613.118222][T31274] netlink: 'syz.0.14729': attribute type 2 has an invalid length. [ 1613.140214][T31191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1613.155125][T31274] netlink: 'syz.0.14729': attribute type 1 has an invalid length. [ 1613.169133][T31274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14729'. [ 1613.191645][T31191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1613.206610][T31274] netlink: 'syz.0.14729': attribute type 16 has an invalid length. [ 1613.224388][T31279] netlink: 'syz.6.14731': attribute type 11 has an invalid length. [ 1613.235027][T31274] netlink: 63478 bytes leftover after parsing attributes in process `syz.0.14729'. [ 1613.348449][T31191] team0: Port device team_slave_0 added [ 1613.371517][T31191] team0: Port device team_slave_1 added [ 1613.531753][T31289] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1613.617155][T31191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.651751][T31191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.734283][T31191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.786440][T31191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.821441][T31191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.860873][T31299] __nla_validate_parse: 3 callbacks suppressed [ 1613.860891][T31299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14735'. [ 1613.897195][T31191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.059067][T31304] netlink: 'syz.0.14738': attribute type 1 has an invalid length. [ 1614.077909][T31304] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.14738'. [ 1614.111300][T31191] hsr_slave_0: entered promiscuous mode [ 1614.123256][T31191] hsr_slave_1: entered promiscuous mode [ 1614.142288][T31191] debugfs: 'hsr0' already exists in 'hsr' [ 1614.150284][T31191] Cannot create hsr debugfs directory [ 1614.154463][T31306] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14736'. [ 1614.289952][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.344329][T31308] bond0: left promiscuous mode [ 1614.362252][T13336] Bluetooth: hci7: command tx timeout [ 1614.385367][T31313] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14740'. [ 1614.667452][T31317] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1614.707758][T31317] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1614.747554][T31317] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1614.876592][T31326] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14745'. [ 1614.928988][ T1836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.999402][T31191] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1615.017022][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1615.033321][T31191] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1615.051653][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1615.061782][T31340] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14748'. [ 1615.072742][T31340] netlink: 116 bytes leftover after parsing attributes in process `syz.2.14748'. [ 1615.083727][T31340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14748'. [ 1615.099964][T31328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14747'. [ 1615.116722][T31191] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1615.127922][T31341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14747'. [ 1615.153140][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1615.189779][T31191] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1615.216995][T31191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1615.569431][T31364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1615.667800][T31191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.742183][T31191] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.780673][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.787857][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.853284][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.860476][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.948449][T31391] xt_hashlimit: size too large, truncated to 1048576 [ 1616.245593][T31405] netlink: 'syz.0.14765': attribute type 11 has an invalid length. [ 1616.442445][T13336] Bluetooth: hci7: command tx timeout [ 1616.486908][T31191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.690773][T31421] lo speed is unknown, defaulting to 1000 [ 1616.698303][T31414] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1616.728353][T31419] lo speed is unknown, defaulting to 1000 [ 1616.769067][T31421] gre0 speed is unknown, defaulting to 1000 [ 1616.823691][T31427] bond0: (slave wlan1): Releasing backup interface [ 1616.941634][T31429] lo speed is unknown, defaulting to 1000 [ 1617.159162][T31191] veth0_vlan: entered promiscuous mode [ 1617.201687][T31191] veth1_vlan: entered promiscuous mode [ 1617.270621][T31191] veth0_macvtap: entered promiscuous mode [ 1617.296252][T31191] veth1_macvtap: entered promiscuous mode [ 1617.351403][T31449] tipc: Enabled bearer , priority 0 [ 1617.420045][T31449] syzkaller0: entered promiscuous mode [ 1617.426908][T31449] syzkaller0: entered allmulticast mode [ 1617.438298][T31449] tipc: Resetting bearer [ 1617.445819][T31419] gre0 speed is unknown, defaulting to 1000 [ 1617.461031][T31191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.498997][T31448] tipc: Resetting bearer [ 1618.530478][T13336] Bluetooth: hci7: command tx timeout [ 1620.559720][T31448] tipc: Disabling bearer [ 1620.584365][T31429] gre0 speed is unknown, defaulting to 1000 [ 1620.600183][T31191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1620.659047][ T9384] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.728771][ T9384] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.767059][ T9384] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.869375][ T9384] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.915903][T31463] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1621.227620][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.249813][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1621.582703][ T8380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.601805][ T8380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1621.830602][T31481] __nla_validate_parse: 8 callbacks suppressed [ 1621.830621][T31481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14709'. [ 1621.958436][T31488] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14778'. [ 1622.038716][T31492] sctp: [Deprecated]: syz.7.14779 (pid 31492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1622.038716][T31492] Use struct sctp_sack_info instead [ 1622.060481][T31491] sctp: [Deprecated]: syz.7.14779 (pid 31491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1622.060481][T31491] Use struct sctp_sack_info instead [ 1622.184146][T11437] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1622.752801][T11437] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1623.753752][T31527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14785'. [ 1623.858347][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14787'. [ 1623.908943][T31529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14787'. [ 1623.945068][T31529] netlink: 'syz.6.14787': attribute type 1 has an invalid length. [ 1623.976258][T31529] netlink: 'syz.6.14787': attribute type 39 has an invalid length. [ 1624.047272][T31526] netlink: 144 bytes leftover after parsing attributes in process `syz.6.14787'. [ 1624.161210][T31538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14790'. [ 1624.819622][T31547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14793'. [ 1624.850224][T31547] erspan1: entered promiscuous mode [ 1624.867667][T31547] erspan1: entered allmulticast mode [ 1624.891879][T31546] lec:lec_atm_close: lec0: Shut down! [ 1625.144289][T31565] bond2 (unregistering): Released all slaves [ 1625.557724][T31580] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14800'. [ 1625.595964][T31580] netlink: 'syz.6.14800': attribute type 1 has an invalid length. [ 1625.644531][T31588] veth19: entered allmulticast mode [ 1625.661693][T31591] netlink: 52 bytes leftover after parsing attributes in process `syz.6.14800'. [ 1625.787304][T31589] batman_adv: batadv0: Adding interface: gretap4 [ 1625.825163][T31589] batman_adv: batadv0: The MTU of interface gretap4 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.881786][T31589] batman_adv: batadv0: Interface activated: gretap4 [ 1626.142848][T31612] netlink: 'syz.5.14809': attribute type 1 has an invalid length. [ 1626.170218][T31612] netlink: 'syz.5.14809': attribute type 9 has an invalid length. [ 1626.193974][T31612] netlink: 'syz.5.14809': attribute type 7 has an invalid length. [ 1626.223202][T31612] netlink: 'syz.5.14809': attribute type 8 has an invalid length. [ 1626.372923][T31621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1626.423944][T31624] xt_cgroup: xt_cgroup: no path or classid specified [ 1627.125079][T29886] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1627.140706][T29886] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1627.159151][T29886] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1627.178158][T29886] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1627.190719][T29886] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1627.350232][ T1109] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.383110][T31662] IPv6: addrconf: prefix option has invalid lifetime [ 1627.393508][ T1109] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.420517][ T1109] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.468564][T11435] IPVS: starting estimator thread 0... [ 1627.470143][ T1109] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1627.497414][T31653] lo speed is unknown, defaulting to 1000 [ 1627.507015][T31653] gre0 speed is unknown, defaulting to 1000 [ 1627.602184][T31674] IPVS: using max 30 ests per chain, 72000 per kthread [ 1628.225863][T31698] __nla_validate_parse: 2 callbacks suppressed [ 1628.225883][T31698] netlink: 41 bytes leftover after parsing attributes in process `syz.0.14828'. [ 1628.305095][T31698] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14828'. [ 1628.426660][T31698] netlink: 41 bytes leftover after parsing attributes in process `syz.0.14828'. [ 1628.708304][ T5921] IPVS: starting estimator thread 0... [ 1628.755869][T31723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14833'. [ 1628.813185][T31716] IPVS: using max 30 ests per chain, 72000 per kthread [ 1629.116095][T31729] syzkaller0: entered promiscuous mode [ 1629.123278][T31729] syzkaller0: entered allmulticast mode [ 1629.130488][T31736] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14837'. [ 1629.242226][T29886] Bluetooth: hci8: command tx timeout [ 1629.340523][T31729] lo speed is unknown, defaulting to 1000 [ 1629.430062][T31729] gre0 speed is unknown, defaulting to 1000 [ 1629.892704][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1629.900790][ C1] lec:lec_tx_timeout: lec0 [ 1629.923332][T31653] chnl_net:caif_netlink_parms(): no params data found [ 1629.935284][T31769] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14846'. [ 1629.960596][T31769] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14846'. [ 1630.062547][T31774] netlink: 'syz.0.14847': attribute type 11 has an invalid length. [ 1630.067912][T31772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14845'. [ 1630.100755][T31770] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14845'. [ 1630.206356][T31769] lo speed is unknown, defaulting to 1000 [ 1630.285793][T31653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.302716][T31653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.310081][T31653] bridge_slave_0: entered allmulticast mode [ 1630.322643][T31653] bridge_slave_0: entered promiscuous mode [ 1630.338229][T31769] gre0 speed is unknown, defaulting to 1000 [ 1630.339248][T31653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.351862][T31653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.368652][T31653] bridge_slave_1: entered allmulticast mode [ 1630.376964][T31653] bridge_slave_1: entered promiscuous mode [ 1630.530081][T31653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.561023][T31788] vlan0: entered allmulticast mode [ 1630.573402][T31788] veth0_vlan: entered allmulticast mode [ 1630.649098][T31653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.829175][T31653] team0: Port device team_slave_0 added [ 1630.860730][T31653] team0: Port device team_slave_1 added [ 1630.969348][T31653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.993687][T31653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.062993][T31653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.178270][T31653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.200403][T31653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.261560][T31653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.306066][T31815] netlink: 'syz.7.14852': attribute type 1 has an invalid length. [ 1631.323032][T29886] Bluetooth: hci8: command tx timeout [ 1631.409800][T31815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.417500][T31815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.519016][T31815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1631.534830][T31815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.546668][T31821] netlink: 14 bytes leftover after parsing attributes in process `syz.7.14852'. [ 1631.656610][T31805] lo speed is unknown, defaulting to 1000 [ 1631.705140][ T8380] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.714594][ T8380] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.725968][ T8380] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.735596][ T8380] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.767398][ T8380] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.776568][ T8380] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.786157][ T8380] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.795602][ T8380] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.805803][T31805] gre0 speed is unknown, defaulting to 1000 [ 1631.812199][T31653] hsr_slave_0: entered promiscuous mode [ 1631.819129][T31653] hsr_slave_1: entered promiscuous mode [ 1631.826481][T31653] debugfs: 'hsr0' already exists in 'hsr' [ 1631.832492][T31653] Cannot create hsr debugfs directory [ 1632.154660][T31653] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.170120][T31653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.309275][T31653] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.319734][T31653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.470050][T31653] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.495986][T31653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.589677][T31653] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.599997][T31653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.291528][T31653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1633.341012][T31653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1633.356148][T31653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1633.394652][T31653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1633.405323][T29886] Bluetooth: hci8: command tx timeout [ 1633.430681][T31653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1633.455466][T31653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1633.484725][T31653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1633.529971][T31653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1633.738963][T31653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.760405][T31653] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.774657][T31846] netlink: 'syz.7.14857': attribute type 1 has an invalid length. [ 1633.790720][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.797945][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.846454][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.853671][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.898617][T31849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14858'. [ 1633.929233][T31849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14858'. [ 1634.390547][T31861] geneve2: entered promiscuous mode [ 1634.406248][ T1160] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.438246][T31865] netlink: 'syz.7.14860': attribute type 1 has an invalid length. [ 1634.468124][T31865] netlink: 244 bytes leftover after parsing attributes in process `syz.7.14860'. [ 1634.477219][T31868] netlink: 'syz.0.14862': attribute type 1 has an invalid length. [ 1634.495966][ T1109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.653969][T31877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14862'. [ 1634.680986][ T1109] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.691825][ T1109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.719890][T31877] bond0: (slave bridge0): making interface the new active one [ 1634.798984][T31877] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1634.883150][T31868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14862'. [ 1634.960472][T31886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14866'. [ 1634.979796][T31653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.103456][T31889] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14867'. [ 1635.129056][T31653] veth0_vlan: entered promiscuous mode [ 1635.145138][T31653] veth1_vlan: entered promiscuous mode [ 1635.391493][T31653] veth0_macvtap: entered promiscuous mode [ 1635.431940][T31653] veth1_macvtap: entered promiscuous mode [ 1635.483695][T29886] Bluetooth: hci8: command tx timeout [ 1635.549473][T31907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1635.558812][T31907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1635.650864][T31653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.711642][T31653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.774536][ T1839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.796246][ T1839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.820774][ T1839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.825839][T31923] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14880'. [ 1635.857965][ T1839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.030036][T31929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14883'. [ 1636.085785][T31927] batman_adv: batadv0: Adding interface: vlan2 [ 1636.132789][T31927] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.160753][T31927] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1636.288266][ T1839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.326643][ T1839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.337418][T31941] netlink: zone id is out of range [ 1636.459272][ T8370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.496866][ T8370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.628580][T31951] netlink: 'syz.6.14891': attribute type 1 has an invalid length. [ 1636.660254][T31951] netlink: 224 bytes leftover after parsing attributes in process `syz.6.14891'. [ 1636.960826][T31982] netlink: 'syz.0.14898': attribute type 13 has an invalid length. [ 1637.009467][T31982] gretap0: refused to change device tx_queue_len [ 1637.033053][T31982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1637.530756][T32023] tipc: Started in network mode [ 1637.547850][T32023] tipc: Node identity 5640e7d0ded4, cluster identity 4711 [ 1637.556751][T32023] tipc: Enabled bearer , priority 0 [ 1637.577815][T32026] syzkaller0: entered promiscuous mode [ 1637.588150][T32026] syzkaller0: entered allmulticast mode [ 1637.777380][T32023] syzkaller0: entered promiscuous mode [ 1637.798203][T32023] syzkaller0: entered allmulticast mode [ 1637.808374][T32023] tipc: Resetting bearer [ 1638.034799][ T30] audit: type=1804 audit(1777057549.177:36): pid=32053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.14916" name="/newroot/503/cgroup.controllers" dev="tmpfs" ino=2596 res=1 errno=0 [ 1638.057885][ T30] audit: type=1800 audit(1777057549.177:37): pid=32053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14916" name="cgroup.controllers" dev="tmpfs" ino=2596 res=0 errno=0 [ 1638.097527][ T30] audit: type=1800 audit(1777057549.177:38): pid=32053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14916" name="cgroup.controllers" dev="tmpfs" ino=2596 res=0 errno=0 [ 1641.177921][T32046] __nla_validate_parse: 5 callbacks suppressed [ 1641.177940][T32046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14909'. [ 1641.237508][T32023] tipc: Resetting bearer [ 1641.280217][T32021] tipc: Resetting bearer [ 1641.308576][T32021] tipc: Disabling bearer [ 1641.324602][T30308] tipc: Node number set to 2291460048 [ 1641.439895][T32095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1641.624377][T32090] rdma_op ffff8880691a89f0 conn xmit_rdma 0000000000000000 [ 1641.726716][T32091] Cannot find add_set index 0 as target [ 1641.862901][T32118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1642.199117][T32145] syzkaller0: entered promiscuous mode [ 1642.212523][T32145] syzkaller0: entered allmulticast mode [ 1642.417853][T32158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14938'. [ 1642.458211][T32157] netlink: 'syz.0.14939': attribute type 1 has an invalid length. [ 1642.540492][T32156] team0: entered promiscuous mode [ 1642.550014][T32156] team_slave_0: entered promiscuous mode [ 1642.568500][T32156] team_slave_1: entered promiscuous mode [ 1642.576834][T32164] netlink: 168 bytes leftover after parsing attributes in process `syz.6.14940'. [ 1642.588297][T32156] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1642.612512][T32152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14938'. [ 1642.777825][T32167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14940'. [ 1643.020022][T32167] `: Port device team_slave_0 removed [ 1643.093763][T32179] netlink: 'syz.2.14942': attribute type 12 has an invalid length. [ 1643.311601][T32174] syzkaller0: entered promiscuous mode [ 1643.323209][T32174] syzkaller0: entered allmulticast mode [ 1644.532593][T29886] Bluetooth: hci8: command tx timeout [ 1646.888007][T32224] syzkaller0: entered promiscuous mode [ 1646.927504][T32224] syzkaller0: entered allmulticast mode [ 1647.114502][T32239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14955'. [ 1647.260010][T32251] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14958'. [ 1647.595350][T24544] lec:lec_start_xmit: lec0:No lecd attached [ 1647.666082][T32261] syzkaller0: entered promiscuous mode [ 1647.692561][T32261] syzkaller0: entered allmulticast mode [ 1647.712648][T32266] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14960'. [ 1648.151450][T32285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14967'. [ 1648.538686][T32307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14972'. [ 1648.618303][T32310] syzkaller0: entered promiscuous mode [ 1648.624131][T32310] syzkaller0: entered allmulticast mode [ 1649.134328][T32330] veth1_to_bond: entered promiscuous mode [ 1649.160765][T32330] veth1_to_bond: entered allmulticast mode [ 1649.178100][T32327] lo speed is unknown, defaulting to 1000 [ 1649.185461][T32330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14977'. [ 1649.228255][T32335] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14974'. [ 1649.231269][T32330] veth1_to_bond (unregistering): left promiscuous mode [ 1649.281351][T32330] veth1_to_bond (unregistering): left allmulticast mode [ 1649.305114][T32339] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14974'. [ 1649.346291][T32330] bond0: (slave bond_slave_1): Releasing backup interface [ 1649.375352][ T30] audit: type=1107 audit(1777057560.537:39): pid=32340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='[e±9ÑÎè3hÄuncñ+P' [ 1649.555475][T32327] gre0 speed is unknown, defaulting to 1000 [ 1649.612707][T32344] netlink: 'syz.2.14981': attribute type 1 has an invalid length. [ 1649.647741][T32344] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14981'. [ 1650.494626][T32374] netlink: 'syz.2.14987': attribute type 13 has an invalid length. [ 1650.509339][T32374] netlink: 'syz.2.14987': attribute type 17 has an invalid length. [ 1650.671784][T32371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.679494][T32371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.039846][T32371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.056842][T32371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.316111][T32374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.335189][T32374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.351082][T32374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1651.395954][ T8370] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.407680][ T8370] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.433326][ T8370] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.450545][ T8370] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.699756][T32421] netlink: 340 bytes leftover after parsing attributes in process `syz.2.14999'. [ 1651.904823][T32431] netlink: 'syz.0.15003': attribute type 1 has an invalid length. [ 1651.999923][T32433] macsec1: entered promiscuous mode [ 1652.005415][T32433] bridge0: entered promiscuous mode [ 1652.676283][T32448] bond2 (unregistering): Released all slaves [ 1652.683025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1652.683052][ C1] lec:lec_tx_timeout: lec0 [ 1653.404556][T32488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15017'. [ 1653.663214][T32497] lo speed is unknown, defaulting to 1000 [ 1653.669270][T32504] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1653.685448][T32497] gre0 speed is unknown, defaulting to 1000 [ 1653.702682][T32505] netlink: 'syz.6.15021': attribute type 1 has an invalid length. [ 1653.745086][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15022'. [ 1653.761008][T32510] syz_tun: entered allmulticast mode [ 1653.821822][T32510] syz_tun (unregistering): left allmulticast mode [ 1654.135460][T32519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15026'. [ 1654.739400][T32525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15028'. [ 1654.763614][T32525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15028'. [ 1656.348118][T32483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1656.618411][T32540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15032'. [ 1657.220634][T32576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1657.263452][T32576] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15042'. [ 1657.571435][T32582] tipc: Started in network mode [ 1657.597832][T32582] tipc: Node identity 5e2ad4e5e7f4, cluster identity 4711 [ 1657.634497][T32582] tipc: Enabled bearer , priority 0 [ 1657.775370][T13336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1657.789485][T13336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1657.806256][T13336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1657.815057][T13336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1657.825447][T13336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1657.888501][T32590] syzkaller0: entered promiscuous mode [ 1657.898993][T32590] syzkaller0: entered allmulticast mode [ 1657.906528][T32590] tipc: Resetting bearer [ 1657.948947][T32599] bond2: option fail_over_mac: invalid value (127) [ 1657.969184][T32599] bond2 (unregistering): Released all slaves [ 1658.039059][T32595] tipc: Resetting bearer [ 1658.057673][T32581] tipc: Resetting bearer [ 1658.442405][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1658.599468][T32618] openvswitch: netlink: IPv4 tun info is not correct [ 1658.732287][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15052'. [ 1659.890772][T29886] Bluetooth: hci5: command tx timeout [ 1660.952363][T32581] tipc: Disabling bearer [ 1660.983198][ T29] tipc: Node number set to 3118388453 [ 1661.028115][T32595] lo speed is unknown, defaulting to 1000 [ 1661.099907][T32595] gre0 speed is unknown, defaulting to 1000 [ 1661.165870][T32632] netlink: 'syz.6.15054': attribute type 1 has an invalid length. [ 1661.205626][T32636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15055'. [ 1661.220876][T32632] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1661.266545][T32640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15056'. [ 1661.523794][T32656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15060'. [ 1661.560644][T32656] netlink: 104 bytes leftover after parsing attributes in process `syz.7.15060'. [ 1661.660928][T32663] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1661.719343][T32656] lo speed is unknown, defaulting to 1000 [ 1661.827656][T32656] gre0 speed is unknown, defaulting to 1000 [ 1661.944101][T32669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15061'. [ 1661.964355][T29886] Bluetooth: hci5: command tx timeout [ 1662.104182][T32669] team1: entered promiscuous mode [ 1662.109480][T32669] team1: entered allmulticast mode [ 1662.117866][T32669] 8021q: adding VLAN 0 to HW filter on device team1 [ 1662.251388][T32683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15064'. [ 1662.585035][T32694] netlink: 'syz.2.15067': attribute type 1 has an invalid length. [ 1662.638580][T32699] netlink: 'syz.5.15068': attribute type 30 has an invalid length. [ 1662.668434][T32701] netlink: 'syz.2.15067': attribute type 4 has an invalid length. [ 1662.703878][T32694] bond1: entered promiscuous mode [ 1662.733363][T32701] netlink: 185912 bytes leftover after parsing attributes in process `syz.2.15067'. [ 1662.739662][T32694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1663.014044][T32694] bond1: (slave veth3): making interface the new active one [ 1663.027301][T32694] veth3: entered promiscuous mode [ 1663.041524][T32694] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1663.085181][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15070'. [ 1663.127455][T32710] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15070'. [ 1663.566180][T32595] chnl_net:caif_netlink_parms(): no params data found [ 1663.969029][T32759] syzkaller1: entered promiscuous mode [ 1663.974818][T32759] syzkaller1: entered allmulticast mode [ 1663.980739][T32760] __nla_validate_parse: 2 callbacks suppressed [ 1663.980755][T32760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15079'. [ 1664.042185][T29886] Bluetooth: hci5: command tx timeout [ 1664.104283][T32595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.134616][T32595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.153364][T32595] bridge_slave_0: entered allmulticast mode [ 1664.166573][T32595] bridge_slave_0: entered promiscuous mode [ 1664.197827][T32595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.206556][T32595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.215344][T32595] bridge_slave_1: entered allmulticast mode [ 1664.224650][T32595] bridge_slave_1: entered promiscuous mode [ 1664.328149][T32595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.380203][T32595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.406103][ T302] netlink: 1 bytes leftover after parsing attributes in process `syz.5.15082'. [ 1664.413661][ T307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.448478][ T300] lo speed is unknown, defaulting to 1000 [ 1664.458767][T32595] team0: Port device team_slave_0 added [ 1664.469715][T32766] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15081'. [ 1664.472956][T32595] team0: Port device team_slave_1 added [ 1664.479647][T32766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15081'. [ 1664.485153][ T300] gre0 speed is unknown, defaulting to 1000 [ 1664.556016][T32595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.571807][T32595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.609649][T32595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.656095][T32595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.676778][T32595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.711767][T32595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.827826][T32595] hsr_slave_0: entered promiscuous mode [ 1664.838902][T32595] hsr_slave_1: entered promiscuous mode [ 1664.874075][T32595] debugfs: 'hsr0' already exists in 'hsr' [ 1664.887448][T32595] Cannot create hsr debugfs directory [ 1665.024667][ T320] lo speed is unknown, defaulting to 1000 [ 1665.026742][ T322] syzkaller0: entered promiscuous mode [ 1665.053663][ T322] syzkaller0: entered allmulticast mode [ 1665.077035][ T324] netlink: 'syz.6.15088': attribute type 4 has an invalid length. [ 1665.128714][ T320] gre0 speed is unknown, defaulting to 1000 [ 1665.128853][ T326] netlink: 'syz.6.15088': attribute type 4 has an invalid length. [ 1665.707145][ T333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15090'. [ 1665.864313][ T337] netlink: 'syz.5.15091': attribute type 16 has an invalid length. [ 1665.891806][ T337] netlink: 'syz.5.15091': attribute type 3 has an invalid length. [ 1665.913551][ T337] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.15091'. [ 1666.122251][T29886] Bluetooth: hci5: command tx timeout [ 1666.325568][ T348] Can't find ip_set type hash:ip,por [ 1666.454678][ T355] netlink: 'syz.5.15094': attribute type 1 has an invalid length. [ 1666.599004][ T346] netlink: 14 bytes leftover after parsing attributes in process `syz.5.15094'. [ 1666.730299][ T355] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1666.757082][ T357] bond8: (slave veth13): Enslaving as an active interface with a down link [ 1666.939274][ T362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1666.954888][T32595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1666.969631][T32595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1666.982124][T32595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1666.998677][T32595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1667.007448][T32595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1667.025105][T32595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1667.045491][T32595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1667.060229][T32595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1667.234202][T32595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.279317][ T370] syzkaller0: entered promiscuous mode [ 1667.287571][ T372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15099'. [ 1667.299005][ T370] syzkaller0: entered allmulticast mode [ 1667.396882][T32595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.453359][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.460556][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.507254][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.514476][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1667.684449][ T383] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1667.749485][ T392] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1667.767770][ T385] lo speed is unknown, defaulting to 1000 [ 1667.807421][ T385] gre0 speed is unknown, defaulting to 1000 [ 1667.884572][ T390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15104'. [ 1667.902268][ T390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15104'. [ 1667.951145][ T394] lo speed is unknown, defaulting to 1000 [ 1668.049436][ T1839] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.084620][ T1839] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.121017][ T1839] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.157573][ T1839] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1668.296586][T32595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1668.373171][ T394] gre0 speed is unknown, defaulting to 1000 [ 1668.424087][T32595] veth0_vlan: entered promiscuous mode [ 1668.467030][T32595] veth1_vlan: entered promiscuous mode [ 1668.583920][T32595] veth0_macvtap: entered promiscuous mode [ 1668.623366][T32595] veth1_macvtap: entered promiscuous mode [ 1668.696635][ T1316] lec:lec_start_xmit: lec0:No lecd attached [ 1668.703288][ T1316] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1668.709711][ T1316] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1668.727254][T32595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1668.751392][T32595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1668.785537][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.823692][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.877394][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.906249][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.195051][ T432] __nla_validate_parse: 4 callbacks suppressed [ 1669.195071][ T432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15111'. [ 1669.196063][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.244311][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.255281][ T432] xfrm2: entered promiscuous mode [ 1669.264325][ T432] xfrm2: entered allmulticast mode [ 1669.509563][ T438] syzkaller0: entered promiscuous mode [ 1669.517763][ T438] syzkaller0: entered allmulticast mode [ 1669.535583][ T440] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15113'. [ 1669.583268][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.592974][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.628292][ T440] syzkaller0: entered promiscuous mode [ 1669.640924][ T440] syzkaller0: entered allmulticast mode [ 1669.948459][ T445] tipc: Enabled bearer , priority 14 [ 1670.030236][ T451] IPVS: length: 28 != 8 [ 1670.448947][ T456] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.467953][ T472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15116'. [ 1670.513202][ T473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15119'. [ 1670.750784][ T456] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.948915][ T456] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.996477][ T484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15123'. [ 1671.015486][ T484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15123'. [ 1671.120005][ T486] netlink: 'syz.6.15124': attribute type 10 has an invalid length. [ 1671.231005][ T484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.298590][ T456] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.353382][ T486] `: Port device dummy0 added [ 1671.414177][ T484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.517063][ T1839] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.590023][ T484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.631392][ T1839] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.671805][ T1839] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.766534][ T484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.836097][ T1109] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.987457][ T503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1672.030882][ T503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1672.050536][ T9384] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.063660][ T503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1672.084043][ T509] sctp: [Deprecated]: syz.7.15130 (pid 509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1672.084043][ T509] Use struct sctp_sack_info instead [ 1672.164084][ T8370] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.251066][ T8370] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.314227][ T1160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.506604][ T536] netlink: 104 bytes leftover after parsing attributes in process `syz.6.15137'. [ 1672.533577][ T536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15137'. [ 1672.718246][ T536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15137'. [ 1672.727580][ T536] openvswitch: netlink: Flow actions attr not present in new flow. [ 1672.829384][ T550] netlink: 62967 bytes leftover after parsing attributes in process `syz.6.15141'. [ 1673.020675][ T562] wg2: entered allmulticast mode [ 1673.211308][ T568] netlink: 'syz.2.15147': attribute type 1 has an invalid length. [ 1673.302758][ T568] bond2: entered promiscuous mode [ 1673.320940][ T568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1673.409329][ T582] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1673.722005][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1673.739170][ C1] lec:lec_tx_timeout: lec0 [ 1673.754937][ T605] gretap0: entered promiscuous mode [ 1673.853546][ T605] bond_slave_0: mtu greater than device maximum [ 1673.948241][ T622] netlink: 'syz.7.15163': attribute type 4 has an invalid length. [ 1674.150411][ T641] netlink: 'syz.7.15163': attribute type 21 has an invalid length. [ 1674.153850][ T642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1674.207323][ T643] __nla_validate_parse: 11 callbacks suppressed [ 1674.207343][ T643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15167'. [ 1674.519564][ T630] ip6gretap0: entered promiscuous mode [ 1674.531017][ T641] netlink: 'syz.7.15163': attribute type 1 has an invalid length. [ 1674.539605][ T641] netlink: 132 bytes leftover after parsing attributes in process `syz.7.15163'. [ 1674.549420][ T647] 8021q: VLANs not supported on syzkaller0 [ 1674.745156][ T623] ip6gretap0: left promiscuous mode [ 1674.945208][ T660] syzkaller0: entered promiscuous mode [ 1674.957510][ T660] syzkaller0: entered allmulticast mode [ 1674.978571][ T662] netlink: 'syz.2.15174': attribute type 1 has an invalid length. [ 1674.988475][ T663] netlink: 'syz.7.15172': attribute type 11 has an invalid length. [ 1675.191314][ T676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15175'. [ 1675.380296][ T671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15175'. [ 1675.403240][ T676] : entered promiscuous mode [ 1675.828473][ T686] dvmrp0: left allmulticast mode [ 1675.837593][ T692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.095438][ T702] lo speed is unknown, defaulting to 1000 [ 1676.105137][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.118670][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.125590][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.132435][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.139256][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.146129][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.152964][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.154948][ T702] gre0 speed is unknown, defaulting to 1000 [ 1676.159758][ T706] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1676.469187][ T721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15190'. [ 1676.863802][ T721] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1676.891467][ T721] bond3 (unregistering): Released all slaves [ 1677.199260][ T730] netlink: 'syz.2.15193': attribute type 13 has an invalid length. [ 1677.246315][ T8370] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.263584][ T8370] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.274264][ T8370] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.303169][ T8370] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.336009][ T736] mac80211_hwsim hwsim180 syzkaller0: entered promiscuous mode [ 1677.358506][ T736] mac80211_hwsim hwsim180 syzkaller0: entered allmulticast mode [ 1677.661387][ T755] netlink: 68 bytes leftover after parsing attributes in process `syz.6.15199'. [ 1677.818070][ T756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15199'. [ 1677.917192][ T757] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15199'. [ 1678.765661][ T8380] wlan0: Trigger new scan to find an IBSS to join [ 1678.900840][ T786] lo speed is unknown, defaulting to 1000 [ 1678.922134][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1678.942618][ T786] gre0 speed is unknown, defaulting to 1000 [ 1679.010186][ T796] syzkaller0: entered promiscuous mode [ 1679.029827][ T796] syzkaller0: entered allmulticast mode [ 1679.351301][ T812] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1679.388416][ T816] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1679.423171][ T816] net_ratelimit: 3322 callbacks suppressed [ 1679.423191][ T816] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1679.635342][ T826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15215'. [ 1679.868318][ T833] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15218'. [ 1680.986009][ T872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15229'. [ 1681.045204][ T872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15229'. [ 1681.170468][ T880] openvswitch: netlink: Flow key attr not present in new flow. [ 1681.340789][ T879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1681.422781][ T879] bond3 (unregistering): Released all slaves [ 1681.609331][ T880] lo speed is unknown, defaulting to 1000 [ 1681.659388][ T880] gre0 speed is unknown, defaulting to 1000 [ 1681.724242][ T9384] wlan0: Trigger new scan to find an IBSS to join [ 1681.844299][ T893] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15233'. [ 1682.079866][ T901] syzkaller0: entered promiscuous mode [ 1682.094610][ T901] syzkaller0: entered allmulticast mode [ 1682.701805][ T931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15244'. [ 1682.720099][ T931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15244'. [ 1682.740888][ T926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15243'. [ 1682.817729][ T926] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15243'. [ 1682.899179][ T931] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.126259][ T931] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.230529][ T956] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15249'. [ 1683.395627][ T931] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.579196][ T931] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.623087][ T972] tipc: Started in network mode [ 1683.628645][ T972] tipc: Node identity 080211000001, cluster identity 4711 [ 1683.638454][ T972] tipc: Enabled bearer , priority 0 [ 1683.664281][ T972] tipc: Resetting bearer [ 1683.695246][ T972] mac80211_hwsim hwsim180 syzkaller0: left promiscuous mode [ 1683.729784][ T972] tipc: Resetting bearer [ 1683.836152][ T9384] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.928577][ T8370] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.955630][ T978] syzkaller0: entered promiscuous mode [ 1683.965671][ T978] syzkaller0: entered allmulticast mode [ 1684.004645][ T8370] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.120735][ T980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 1684.219018][ T1160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.683561][ T9384] wlan0: Trigger new scan to find an IBSS to join [ 1684.722391][T11462] tipc: Node number set to 134418688 [ 1684.816514][ T1003] bond3: entered allmulticast mode [ 1684.860252][ T1011] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1685.092407][ T1023] netlink: 'syz.0.15270': attribute type 13 has an invalid length. [ 1685.177636][ T1029] __nla_validate_parse: 1 callbacks suppressed [ 1685.177655][ T1029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15271'. [ 1685.321259][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.328929][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.491551][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1685.509013][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1685.622226][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.647662][ T1160] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.672532][ T1160] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.712754][ T1160] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.739194][ T1160] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.846089][ T1062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15278'. [ 1685.856564][ T1062] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1686.181539][ T1079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15282'. [ 1686.798792][ T1103] netlink: 'syz.2.15285': attribute type 4 has an invalid length. [ 1686.896275][ T1103] Cannot find add_set index 2 as target [ 1687.030265][ T1114] can: request_module (can-proto-0) failed. [ 1687.078875][ T1120] netlink: 'syz.6.15291': attribute type 1 has an invalid length. [ 1687.379027][ T1136] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1687.389364][ T1136] team0: Port device bond4 added [ 1687.972495][ T1177] bridge2: entered promiscuous mode [ 1687.977920][ T1177] bridge2: entered allmulticast mode [ 1687.999465][ T1179] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15304'. [ 1688.057554][ T1177] bond1: (slave ip6gretap0): Releasing active interface [ 1688.114919][ T1177] `: Port device dummy0 removed [ 1688.149770][ T1177] bridge_slave_0: left allmulticast mode [ 1688.156865][ T1177] bridge_slave_0: left promiscuous mode [ 1688.163423][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.176238][ T1177] bridge_slave_1: left allmulticast mode [ 1688.185466][ T1177] bridge_slave_1: left promiscuous mode [ 1688.191238][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.211541][ T1177] bond0: (slave bond_slave_0): Releasing backup interface [ 1688.248490][ T1177] bond0: (slave bond_slave_1): Releasing backup interface [ 1688.283194][ T1177] `: Port device team_slave_1 removed [ 1688.295643][ T1177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1688.313922][ T1193] netlink: 'syz.2.15306': attribute type 27 has an invalid length. [ 1688.345752][ T1195] netlink: 75 bytes leftover after parsing attributes in process `syz.7.15305'. [ 1688.405090][ T1193] macsec1: left promiscuous mode [ 1688.410866][ T1193] team1: left promiscuous mode [ 1688.416447][ T1193] team1: left allmulticast mode [ 1688.424551][ T1193] bond1: left promiscuous mode [ 1688.429352][ T1193] veth3: left promiscuous mode [ 1688.449300][ T1193] bond2: left promiscuous mode [ 1688.451749][ T1199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15306'. [ 1688.474186][ T1193] bond3: left allmulticast mode [ 1688.491346][ T1189] netlink: 'syz.7.15305': attribute type 2 has an invalid length. [ 1688.500416][ T1189] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15305'. [ 1688.539258][ T1197] bridge0: left promiscuous mode [ 1688.546553][ T1197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.554534][ T1197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1688.569691][ T1197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1688.588423][ T1160] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.613543][ T1160] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.631149][ T1199] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1688.650137][ T1160] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.670904][ T1160] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.753971][ T1207] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1688.816571][ T1212] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1688.828122][ T1212] syzkaller1: linktype set to 270 [ 1688.841100][ T1212] bridge0: port 1(erspan0) entered blocking state [ 1688.852916][ T1212] bridge0: port 1(erspan0) entered disabled state [ 1688.874266][ T1212] erspan0: entered allmulticast mode [ 1688.890225][ T1212] erspan0: entered promiscuous mode [ 1688.908976][ T1219] erspan0: left allmulticast mode [ 1688.930127][ T1219] erspan0: left promiscuous mode [ 1688.948861][ T1219] bridge0: port 1(erspan0) entered disabled state [ 1688.954850][ T1208] delete_channel: no stack [ 1689.119006][ T1227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1689.331616][ T1242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15318'. [ 1689.413302][ T1242] bond5: option packets_per_slave: invalid value (1048582) [ 1689.444735][ T1242] bond5: option packets_per_slave: allowed values 0 - 65535 [ 1689.488121][ T1242] bond5 (unregistering): Released all slaves [ 1690.299267][ T1275] bond4: option all_slaves_active: invalid value (5) [ 1690.333515][ T1275] bond4 (unregistering): Released all slaves [ 1690.425806][ T1278] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1690.578274][ T1280] syzkaller0: entered promiscuous mode [ 1690.592178][ T1280] syzkaller0: entered allmulticast mode [ 1690.990218][T13336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1691.008121][T13336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1691.018134][T13336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1691.026435][T13336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1691.036177][T13336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1691.113907][ T1296] lo speed is unknown, defaulting to 1000 [ 1691.143129][ T1296] gre0 speed is unknown, defaulting to 1000 [ 1691.377852][ T1311] lo speed is unknown, defaulting to 1000 [ 1691.686319][ T1311] gre0 speed is unknown, defaulting to 1000 [ 1691.739048][ T1325] bridge_slave_1: left allmulticast mode [ 1691.775350][ T1325] bridge_slave_1: left promiscuous mode [ 1691.794684][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.835476][ T1325] bridge_slave_0: left allmulticast mode [ 1691.841716][ T1325] bridge_slave_0: left promiscuous mode [ 1691.848054][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.194781][ T1328] FAULT_INJECTION: forcing a failure. [ 1692.194781][ T1328] name failslab, interval 1, probability 0, space 0, times 0 [ 1692.251059][ T1328] CPU: 0 UID: 0 PID: 1328 Comm: syz.2.15340 Not tainted syzkaller #0 PREEMPT(full) [ 1692.251085][ T1328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1692.251096][ T1328] Call Trace: [ 1692.251104][ T1328] [ 1692.251112][ T1328] dump_stack_lvl+0xe8/0x150 [ 1692.251145][ T1328] should_fail_ex+0x412/0x560 [ 1692.251179][ T1328] should_failslab+0xa8/0x100 [ 1692.251202][ T1328] __kmalloc_noprof+0xe8/0x760 [ 1692.251224][ T1328] ? ethnl_default_notify+0x1b2/0xbe0 [ 1692.251251][ T1328] ethnl_default_notify+0x1b2/0xbe0 [ 1692.251270][ T1328] ? kasan_save_track+0x4f/0x80 [ 1692.251288][ T1328] ? kasan_save_track+0x3e/0x80 [ 1692.251314][ T1328] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1692.251332][ T1328] ? __might_fault+0xaf/0x130 [ 1692.251366][ T1328] ? mutex_is_locked+0x17/0x50 [ 1692.251383][ T1328] ? rtnl_is_locked+0x15/0x20 [ 1692.251406][ T1328] ethtool_set_coalesce+0x5a6/0x650 [ 1692.251433][ T1328] ? __pfx_ethtool_set_coalesce+0x10/0x10 [ 1692.251458][ T1328] ? do_raw_spin_lock+0x12b/0x2f0 [ 1692.251490][ T1328] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1692.251513][ T1328] ? lockdep_hardirqs_on+0x7a/0x110 [ 1692.251545][ T1328] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1692.251570][ T1328] dev_ethtool+0x966/0x1ae0 [ 1692.251605][ T1328] ? __pfx_dev_ethtool+0x10/0x10 [ 1692.251625][ T1328] ? dev_load+0x21/0x1f0 [ 1692.251667][ T1328] ? dev_load+0x21/0x1f0 [ 1692.251694][ T1328] dev_ioctl+0x392/0x1150 [ 1692.251722][ T1328] sock_do_ioctl+0x23e/0x320 [ 1692.251750][ T1328] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1692.251770][ T1328] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1692.251809][ T1328] sock_ioctl+0x5c6/0x7f0 [ 1692.251833][ T1328] ? __pfx_sock_ioctl+0x10/0x10 [ 1692.251856][ T1328] ? __fget_files+0x2a/0x420 [ 1692.251873][ T1328] ? __fget_files+0x3a0/0x420 [ 1692.251894][ T1328] ? __fget_files+0x2a/0x420 [ 1692.251914][ T1328] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1692.251937][ T1328] ? __pfx_sock_ioctl+0x10/0x10 [ 1692.251958][ T1328] __se_sys_ioctl+0xfc/0x170 [ 1692.251981][ T1328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.252001][ T1328] do_syscall_64+0x15f/0xf80 [ 1692.252023][ T1328] ? trace_irq_disable+0x3b/0x140 [ 1692.252045][ T1328] ? clear_bhb_loop+0x40/0x90 [ 1692.252067][ T1328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.252084][ T1328] RIP: 0033:0x7f002e39cdd9 [ 1692.252102][ T1328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.252115][ T1328] RSP: 002b:00007f002c5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1692.252133][ T1328] RAX: ffffffffffffffda RBX: 00007f002e615fa0 RCX: 00007f002e39cdd9 [ 1692.252146][ T1328] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003 [ 1692.252156][ T1328] RBP: 00007f002c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1692.252166][ T1328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1692.252175][ T1328] R13: 00007f002e616038 R14: 00007f002e615fa0 R15: 00007ffccc2cdad8 [ 1692.252202][ T1328] [ 1692.650797][ T1330] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15342'. [ 1692.709932][ T1331] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15342'. [ 1692.888645][ T1336] lo speed is unknown, defaulting to 1000 [ 1692.910282][ T1334] syzkaller0: entered allmulticast mode [ 1692.944433][ T1336] gre0 speed is unknown, defaulting to 1000 [ 1693.082659][T13336] Bluetooth: hci4: command tx timeout [ 1693.216837][ T1350] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15345'. [ 1693.352946][ T1296] chnl_net:caif_netlink_parms(): no params data found [ 1693.686032][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.693518][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.701331][ T1296] bridge_slave_0: entered allmulticast mode [ 1693.716165][ T1296] bridge_slave_0: entered promiscuous mode [ 1693.739905][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.783538][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.810775][ T1296] bridge_slave_1: entered allmulticast mode [ 1693.833990][ T1296] bridge_slave_1: entered promiscuous mode [ 1693.956858][ T1296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1693.992630][ T1296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.105269][ T1296] team0: Port device team_slave_0 added [ 1694.124747][ T1296] team0: Port device team_slave_1 added [ 1694.197055][ T1359] lo speed is unknown, defaulting to 1000 [ 1694.217297][ T1367] netlink: 52 bytes leftover after parsing attributes in process `syz.7.15349'. [ 1694.322389][ T1359] gre0 speed is unknown, defaulting to 1000 [ 1694.353208][ T1296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.371017][ T1296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.425910][ T1296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.486385][ T1296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.505681][ T1296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.570811][ T1296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.883151][ T1296] hsr_slave_0: entered promiscuous mode [ 1694.899900][ T1296] hsr_slave_1: entered promiscuous mode [ 1694.913120][ T1296] debugfs: 'hsr0' already exists in 'hsr' [ 1694.929643][ T1296] Cannot create hsr debugfs directory [ 1694.984269][ T1376] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15351'. [ 1695.095954][ T1380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1695.120586][ T1376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1695.164782][T13336] Bluetooth: hci4: command tx timeout [ 1695.328975][ T1383] FAULT_INJECTION: forcing a failure. [ 1695.328975][ T1383] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.352268][ T1383] CPU: 1 UID: 0 PID: 1383 Comm: syz.0.15352 Not tainted syzkaller #0 PREEMPT(full) [ 1695.352294][ T1383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1695.352305][ T1383] Call Trace: [ 1695.352321][ T1383] [ 1695.352329][ T1383] dump_stack_lvl+0xe8/0x150 [ 1695.352363][ T1383] should_fail_ex+0x412/0x560 [ 1695.352395][ T1383] should_failslab+0xa8/0x100 [ 1695.352421][ T1383] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1695.352443][ T1383] ? __kasan_kmalloc+0x93/0xb0 [ 1695.352464][ T1383] ? __request_module+0x2ec/0x630 [ 1695.352480][ T1383] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1695.352503][ T1383] kstrdup+0x42/0x100 [ 1695.352530][ T1383] __request_module+0x2ec/0x630 [ 1695.352548][ T1383] ? __pfx___request_module+0x10/0x10 [ 1695.352564][ T1383] ? kasan_quarantine_put+0xbb/0x1f0 [ 1695.352587][ T1383] ? __pfx___request_module+0x10/0x10 [ 1695.352610][ T1383] ? apparmor_capable+0x126/0x170 [ 1695.352643][ T1383] ? dev_load+0x21/0x1f0 [ 1695.352675][ T1383] dev_ioctl+0x384/0x1150 [ 1695.352705][ T1383] sock_do_ioctl+0x23e/0x320 [ 1695.352732][ T1383] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1695.352753][ T1383] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1695.352792][ T1383] sock_ioctl+0x5c6/0x7f0 [ 1695.352815][ T1383] ? __pfx_sock_ioctl+0x10/0x10 [ 1695.352837][ T1383] ? __fget_files+0x2a/0x420 [ 1695.352854][ T1383] ? __fget_files+0x3a0/0x420 [ 1695.352870][ T1383] ? __fget_files+0x2a/0x420 [ 1695.352892][ T1383] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1695.352913][ T1383] ? __pfx_sock_ioctl+0x10/0x10 [ 1695.352934][ T1383] __se_sys_ioctl+0xfc/0x170 [ 1695.352955][ T1383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.352974][ T1383] do_syscall_64+0x15f/0xf80 [ 1695.352995][ T1383] ? trace_irq_disable+0x3b/0x140 [ 1695.353018][ T1383] ? clear_bhb_loop+0x40/0x90 [ 1695.353039][ T1383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.353056][ T1383] RIP: 0033:0x7fcdff59cdd9 [ 1695.353074][ T1383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.353090][ T1383] RSP: 002b:00007fce0046d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1695.353109][ T1383] RAX: ffffffffffffffda RBX: 00007fcdff815fa0 RCX: 00007fcdff59cdd9 [ 1695.353122][ T1383] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003 [ 1695.353134][ T1383] RBP: 00007fce0046d090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.353146][ T1383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.353157][ T1383] R13: 00007fcdff816038 R14: 00007fcdff815fa0 R15: 00007ffdf4a44db8 [ 1695.353188][ T1383] [ 1695.795783][ T1388] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15354'. [ 1696.110523][ T1399] tipc: Started in network mode [ 1696.119765][ T1399] tipc: Node identity 010000000000000002, cluster identity 4711 [ 1696.359842][ T1296] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.379801][T13336] Bluetooth: hci6: command 0x0406 tx timeout [ 1696.427275][ T1411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15360'. [ 1696.439141][ T1409] sctp: [Deprecated]: syz.7.15359 (pid 1409) Use of int in max_burst socket option. [ 1696.439141][ T1409] Use struct sctp_assoc_value instead [ 1696.565711][ T1412] gretap1: entered allmulticast mode [ 1696.714470][ T1296] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.981283][ T1296] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.985333][ T1425] netlink: 60 bytes leftover after parsing attributes in process `syz.7.15364'. [ 1697.075744][ T1296] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.111287][ T1428] geneve0: entered promiscuous mode [ 1697.117661][ T1428] geneve0: entered allmulticast mode [ 1697.130278][ T1428] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15365'. [ 1697.160758][ T1430] netlink: 60 bytes leftover after parsing attributes in process `syz.7.15366'. [ 1697.256179][T29886] Bluetooth: hci4: command tx timeout [ 1697.512182][ T1296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1697.546517][ T1296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1697.576023][ T1296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1697.600087][ T1296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1697.617216][ T1296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1697.637315][ T1296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1697.652787][ T1446] lo speed is unknown, defaulting to 1000 [ 1697.659215][ T1296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1697.684103][ T1296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1697.791439][ T1446] gre0 speed is unknown, defaulting to 1000 [ 1698.022160][ T1452] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 1698.047569][ T1452] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1698.159208][ T1296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1698.249571][ T1296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1698.291337][ T1839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.298584][ T1839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.359838][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.367052][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.725470][ T1501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15378'. [ 1699.148826][ T1296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.322788][T29886] Bluetooth: hci4: command tx timeout [ 1699.899082][ T1296] veth0_vlan: entered promiscuous mode [ 1699.969368][ T1296] veth1_vlan: entered promiscuous mode [ 1700.165518][ T1296] veth0_macvtap: entered promiscuous mode [ 1700.217340][ T1296] veth1_macvtap: entered promiscuous mode [ 1700.294228][ T1296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.382298][ T1296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.432756][ T1570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15389'. [ 1700.473794][ T1839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.626461][ T1839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.649852][ T1839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.695337][ T1569] lo speed is unknown, defaulting to 1000 [ 1700.695358][ T1839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.816471][ T1569] gre0 speed is unknown, defaulting to 1000 [ 1700.964272][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.986012][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.996071][ T1576] netlink: 'syz.0.15391': attribute type 1 has an invalid length. [ 1701.026826][ T1576] netlink: 244 bytes leftover after parsing attributes in process `syz.0.15391'. [ 1701.202638][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.219310][ T1580] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1701.220028][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.249806][ T1580] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1701.260529][ T1580] netlink: 13 bytes leftover after parsing attributes in process `syz.2.15392'. [ 1701.269853][ T1580] netlink: 13 bytes leftover after parsing attributes in process `syz.2.15392'. [ 1701.476670][ T1583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15394'. [ 1701.567058][ T1587] syzkaller0: entered promiscuous mode [ 1701.567890][ T1588] netlink: 'syz.0.15395': attribute type 1 has an invalid length. [ 1701.582471][ T1587] syzkaller0: entered allmulticast mode [ 1701.767412][ T1590] pim6reg: entered allmulticast mode [ 1701.988842][ T1603] netlink: 60 bytes leftover after parsing attributes in process `syz.5.15399'. [ 1702.202369][ T1615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15402'. [ 1702.215284][ T1617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15403'. [ 1702.224965][ T1617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15403'. [ 1702.913081][ T1637] syzkaller0: entered promiscuous mode [ 1702.918785][ T1637] syzkaller0: entered allmulticast mode [ 1703.037472][ T1646] FAULT_INJECTION: forcing a failure. [ 1703.037472][ T1646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.081708][ T1646] CPU: 0 UID: 0 PID: 1646 Comm: syz.6.15409 Not tainted syzkaller #0 PREEMPT(full) [ 1703.081750][ T1646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.081762][ T1646] Call Trace: [ 1703.081770][ T1646] [ 1703.081778][ T1646] dump_stack_lvl+0xe8/0x150 [ 1703.081813][ T1646] should_fail_ex+0x412/0x560 [ 1703.081846][ T1646] _copy_from_iter+0x1d3/0x1670 [ 1703.081870][ T1646] ? sock_alloc_send_pskb+0x896/0x990 [ 1703.081899][ T1646] ? __pfx__copy_from_iter+0x10/0x10 [ 1703.081924][ T1646] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1703.081947][ T1646] skb_copy_datagram_from_iter+0xf5/0x710 [ 1703.081972][ T1646] ? dev_get_by_index+0x22/0x2e0 [ 1703.081998][ T1646] ? skb_put+0x11b/0x210 [ 1703.082018][ T1646] packet_sendmsg+0x35b1/0x4fb0 [ 1703.082065][ T1646] ? unwind_next_frame+0xa6/0x2550 [ 1703.082104][ T1646] ? __pfx_packet_sendmsg+0x10/0x10 [ 1703.082125][ T1646] ? aa_sk_perm+0x6d5/0x900 [ 1703.082159][ T1646] ? __pfx_aa_sk_perm+0x10/0x10 [ 1703.082182][ T1646] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1703.082209][ T1646] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1703.082230][ T1646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1703.082255][ T1646] ____sys_sendmsg+0x972/0x9f0 [ 1703.082285][ T1646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.082315][ T1646] ? import_iovec+0x73/0xa0 [ 1703.082338][ T1646] ___sys_sendmsg+0x2a5/0x360 [ 1703.082357][ T1646] ? __lock_acquire+0x6b5/0x2cf0 [ 1703.082388][ T1646] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.082443][ T1646] ? __fget_files+0x2a/0x420 [ 1703.082461][ T1646] ? __fget_files+0x3a0/0x420 [ 1703.082486][ T1646] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1703.082509][ T1646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.082536][ T1646] ? __pfx_ksys_write+0x10/0x10 [ 1703.082565][ T1646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.082584][ T1646] do_syscall_64+0x15f/0xf80 [ 1703.082607][ T1646] ? trace_irq_disable+0x3b/0x140 [ 1703.082630][ T1646] ? clear_bhb_loop+0x40/0x90 [ 1703.082652][ T1646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.082670][ T1646] RIP: 0033:0x7f739bd9cdd9 [ 1703.082687][ T1646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.082702][ T1646] RSP: 002b:00007f739cca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.082721][ T1646] RAX: ffffffffffffffda RBX: 00007f739c016180 RCX: 00007f739bd9cdd9 [ 1703.082735][ T1646] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1703.082746][ T1646] RBP: 00007f739cca0090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.082757][ T1646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.082768][ T1646] R13: 00007f739c016218 R14: 00007f739c016180 R15: 00007fff7212a728 [ 1703.082797][ T1646] [ 1705.991475][ T1645] lo speed is unknown, defaulting to 1000 [ 1706.007219][ T1645] gre0 speed is unknown, defaulting to 1000 [ 1706.024549][ T1664] __nla_validate_parse: 1 callbacks suppressed [ 1706.024566][ T1664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15412'. [ 1706.201639][ T1673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15414'. [ 1706.426064][ T1676] lo speed is unknown, defaulting to 1000 [ 1706.562715][ T1676] gre0 speed is unknown, defaulting to 1000 [ 1706.720004][ T1700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15420'. [ 1706.780632][ T1700] ip6gre2: entered promiscuous mode [ 1706.792359][ T1700] ip6gre2: entered allmulticast mode [ 1707.559019][ T1713] tls_set_device_offload: netdev not found [ 1707.630528][ T1716] IPv6: sit1: Disabled Multicast RS [ 1707.948165][ T1730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.066006][ T1732] netlink: 220 bytes leftover after parsing attributes in process `syz.5.15428'. [ 1708.078913][ T1732] tc_dump_action: action bad kind [ 1708.451038][ T1738] lo speed is unknown, defaulting to 1000 [ 1708.501393][ T1738] gre0 speed is unknown, defaulting to 1000 [ 1708.592623][ T1751] syzkaller1: entered promiscuous mode [ 1708.598208][ T1751] syzkaller1: entered allmulticast mode [ 1709.011330][ T1763] xt_TCPMSS: Only works on TCP SYN packets [ 1709.128665][ T1768] x_tables: duplicate underflow at hook 2 [ 1709.643596][ T31] INFO: task syz.4.14249:29368 blocked for more than 143 seconds. [ 1709.667058][ T31] Not tainted syzkaller #0 [ 1709.685192][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1709.706178][ T31] task:syz.4.14249 state:D stack:21528 pid:29368 tgid:29367 ppid:21775 task_flags:0x440140 flags:0x00080000 [ 1709.726869][ T31] Call Trace: [ 1709.730254][ T31] [ 1709.734401][ T31] __schedule+0x17b4/0x5680 [ 1709.739001][ T31] ? __pfx___schedule+0x10/0x10 [ 1709.744501][ T31] ? schedule+0x90/0x360 [ 1709.748777][ T31] ? schedule+0x90/0x360 [ 1709.753226][ T31] schedule+0x164/0x360 [ 1709.757479][ T31] rpc_wait_bit_killable+0x18/0x150 [ 1709.763599][ T31] __wait_on_bit+0xb9/0x310 [ 1709.768356][ T31] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 1709.774387][ T31] out_of_line_wait_on_bit+0x13b/0x190 [ 1709.779892][ T31] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 1709.785944][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1709.792167][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1709.797426][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 1709.803148][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1709.808310][ T31] __rpc_execute+0x712/0x12a0 [ 1709.813269][ T31] ? __pfx___rpc_execute+0x10/0x10 [ 1709.818616][ T31] ? rpc_task_get_xprt+0x26/0x250 [ 1709.823752][ T31] ? rpc_make_runnable+0xae/0x1c0 [ 1709.828792][ T31] rpc_execute+0x1c1/0x390 [ 1709.834089][ T31] rpc_run_task+0x4f5/0x690 [ 1709.838790][ T31] rpc_call_sync+0x10f/0x200 [ 1709.843835][ T31] ? __pfx_rpc_call_sync+0x10/0x10 [ 1709.849015][ T31] ? net_generic+0x1e/0x240 [ 1709.853944][ T31] ? net_generic+0x1e/0x240 [ 1709.858484][ T31] rpcb_register+0x2d0/0x530 [ 1709.863147][ T31] ? __pfx_rpcb_register+0x10/0x10 [ 1709.868275][ T31] ? net_generic+0x1e/0x240 [ 1709.873139][ T31] ? rpcb_create_local+0x4ee/0x670 [ 1709.878300][ T31] ? __pfx_rpcb_create_local+0x10/0x10 [ 1709.884411][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1709.890281][ T31] svc_unregister+0x229/0x760 [ 1709.895313][ T31] svc_bind+0x1e9/0x230 [ 1709.899509][ T31] nfsd_create_serv+0x585/0x850 [ 1709.904425][ T31] ? __pfx_nfsd_create_serv+0x10/0x10 [ 1709.909813][ T31] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 1709.915948][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1709.921286][ T31] ? __asan_memset+0x22/0x50 [ 1709.926363][ T31] ? __nla_validate_parse+0x2480/0x2dc0 [ 1709.932131][ T31] nfsd_nl_listener_set_doit+0x149/0x1670 [ 1709.937880][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1709.943704][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1709.949878][ T31] ? __nla_parse+0x40/0x60 [ 1709.954632][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1709.961002][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1709.967600][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1709.973275][ T31] ? __asan_memcpy+0x40/0x70 [ 1709.977876][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1709.984264][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1709.988950][ T31] ? security_capable+0x7e/0x2c0 [ 1709.994132][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1709.998681][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1710.004154][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1710.010367][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1710.015316][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1710.020383][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1710.026027][ T31] ? down_read+0x270/0x2e0 [ 1710.030463][ T31] ? genl_rcv+0xd/0x40 [ 1710.034800][ T31] genl_rcv+0x28/0x40 [ 1710.038820][ T31] netlink_unicast+0x75c/0x8e0 [ 1710.043917][ T31] netlink_sendmsg+0x813/0xb40 [ 1710.048727][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.054151][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1710.059128][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1710.064483][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1710.069263][ T31] ? __might_fault+0xaf/0x130 [ 1710.074170][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.079477][ T31] ? import_iovec+0x73/0xa0 [ 1710.084715][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1710.089445][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1710.094525][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.099782][ T31] ? futex_wait+0x2a2/0x390 [ 1710.104389][ T31] ? __fget_files+0x2a/0x420 [ 1710.108984][ T31] ? __fget_files+0x3a0/0x420 [ 1710.114068][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1710.119049][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1710.125656][ T31] ? rcu_is_watching+0x15/0xb0 [ 1710.130473][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.136720][ T31] do_syscall_64+0x15f/0xf80 [ 1710.141345][ T31] ? trace_irq_disable+0x3b/0x140 [ 1710.146422][ T31] ? clear_bhb_loop+0x40/0x90 [ 1710.151108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.157211][ T31] RIP: 0033:0x7f996df9cdd9 [ 1710.161644][ T31] RSP: 002b:00007f996ee35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.171206][ T31] RAX: ffffffffffffffda RBX: 00007f996e215fa0 RCX: 00007f996df9cdd9 [ 1710.179366][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1710.187421][ T31] RBP: 00007f996e032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1710.195573][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.203922][ T31] R13: 00007f996e216038 R14: 00007f996e215fa0 R15: 00007ffd9e34bfd8 [ 1710.212059][ T31] [ 1710.222156][ T31] [ 1710.222156][ T31] Showing all locks held in the system: [ 1710.246240][ T31] 1 lock held by khungtaskd/31: [ 1710.251668][ T31] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1710.262997][ T31] 2 locks held by klogd/5201: [ 1710.268512][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1710.279408][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1710.289619][ T31] 2 locks held by getty/5597: [ 1710.295524][ T31] #0: ffff8880372110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1710.305758][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1710.316425][ T31] 3 locks held by kworker/0:14/11437: [ 1710.322472][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1710.334214][ T31] #1: ffffc90004177c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1710.345434][ T31] #2: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1710.357026][ T31] 2 locks held by syz.4.14249/29368: [ 1710.365696][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.376505][ T31] #1: ffffffff8ec8a9e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1710.387627][ T31] 2 locks held by syz.1.14572/30689: [ 1710.393266][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.401607][ T31] #1: ffffffff8ec8a9e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1710.412766][ T31] 1 lock held by syz.5.15428/1723: [ 1710.421392][ T31] #0: ffff88802985a140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 1710.432275][ T31] 4 locks held by syz.5.15428/1724: [ 1710.437523][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.446961][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.456242][ T31] #2: ffff88802985a140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 1710.465128][ T31] #3: ffff888059c78348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 1710.474799][ T31] 2 locks held by syz.5.15428/1728: [ 1710.480000][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.488247][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.497560][ T31] 1 lock held by syz.7.15431/1736: [ 1710.503109][ T31] #0: ffff888031e6d460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 1710.512407][ T31] 1 lock held by syz.7.15431/1737: [ 1710.520975][ T31] #0: ffff888031e6d460 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x40/0x6b0 [ 1710.530893][ T31] 2 locks held by syz.6.15432/1741: [ 1710.536785][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.545522][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.554692][ T31] 2 locks held by syz.6.15432/1742: [ 1710.560032][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.568581][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.577760][ T31] 2 locks held by syz.6.15432/1749: [ 1710.583058][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.591338][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.600734][ T31] 2 locks held by syz.2.15437/1761: [ 1710.606546][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.614977][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.624374][ T31] 2 locks held by syz.2.15437/1764: [ 1710.629600][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.638529][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.647623][ T31] 2 locks held by syz.2.15437/1766: [ 1710.653310][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.661508][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.670605][ T31] 2 locks held by syz.0.15438/1763: [ 1710.676032][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1710.685428][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1710.694691][ T31] 1 lock held by dhcpcd/1771: [ 1710.699376][ T31] #0: ffff88807621a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1710.709157][ T31] [ 1710.711854][ T31] ============================================= [ 1710.711854][ T31] [ 1710.720843][ T31] NMI backtrace for cpu 1 [ 1710.720861][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1710.720878][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.720889][ T31] Call Trace: [ 1710.720897][ T31] [ 1710.720904][ T31] dump_stack_lvl+0xe8/0x150 [ 1710.720934][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1710.720954][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1710.720980][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1710.721000][ T31] sys_info+0x135/0x170 [ 1710.721014][ T31] watchdog+0xfd3/0x1030 [ 1710.721041][ T31] ? watchdog+0x1c9/0x1030 [ 1710.721066][ T31] kthread+0x388/0x470 [ 1710.721084][ T31] ? __pfx_watchdog+0x10/0x10 [ 1710.721102][ T31] ? __pfx_kthread+0x10/0x10 [ 1710.721120][ T31] ret_from_fork+0x514/0xb70 [ 1710.721146][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1710.721185][ T31] ? __switch_to+0xc79/0x1410 [ 1710.721209][ T31] ? __pfx_kthread+0x10/0x10 [ 1710.721227][ T31] ret_from_fork_asm+0x1a/0x30 [ 1710.721264][ T31] [ 1710.721271][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1710.812792][ T1724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1710.814799][ C0] NMI backtrace for cpu 0 [ 1710.814814][ C0] CPU: 0 UID: 0 PID: 1724 Comm: syz.5.15428 Not tainted syzkaller #0 PREEMPT(full) [ 1710.814832][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.814848][ C0] RIP: 0010:io_serial_out+0x7c/0xc0 [ 1710.814874][ C0] Code: 6a 81 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c a5 ec fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 57 6e 77 06 cc 44 89 f9 80 e1 07 38 c1 [ 1710.814887][ C0] RSP: 0018:ffffc900058ced90 EFLAGS: 00000002 [ 1710.814901][ C0] RAX: 0000000000000032 RBX: 0000000000000032 RCX: 0000000000000000 [ 1710.814912][ C0] RDX: 00000000000003f8 RSI: 000000000000f088 RDI: 000000000000f089 [ 1710.814922][ C0] RBP: 00000000000003f8 R08: ffff888141690237 R09: 1ffff110282d2046 [ 1710.814933][ C0] R10: dffffc0000000000 R11: ffffffff85446680 R12: dffffc0000000000 [ 1710.814945][ C0] R13: ffffffff9a5039a9 R14: ffffffff9a81c700 R15: 0000000000000000 [ 1710.814956][ C0] FS: 00007fa416af06c0(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 1710.814969][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1710.814980][ C0] CR2: 00007f729853b708 CR3: 00000000444aa000 CR4: 00000000003526f0 [ 1710.814994][ C0] Call Trace: [ 1710.815001][ C0] [ 1710.815010][ C0] serial8250_console_write+0x140c/0x1ba0 [ 1710.815039][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1710.815058][ C0] ? console_flush_all+0x123/0xb20 [ 1710.815081][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1710.815101][ C0] ? console_flush_all+0x123/0xb20 [ 1710.815119][ C0] console_flush_all+0x718/0xb20 [ 1710.815139][ C0] ? console_flush_all+0x123/0xb20 [ 1710.815159][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1710.815180][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1710.815202][ C0] console_unlock+0xd1/0x1c0 [ 1710.815235][ C0] ? vprintk_emit+0x2cf/0x560 [ 1710.815251][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1710.815267][ C0] ? vprintk_emit+0x2c0/0x560 [ 1710.815284][ C0] ? vprintk_emit+0x455/0x560 [ 1710.815300][ C0] ? vprintk_emit+0x2cf/0x560 [ 1710.815315][ C0] ? vprintk_emit+0x2cf/0x560 [ 1710.815332][ C0] vprintk_emit+0x485/0x560 [ 1710.815349][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1710.815364][ C0] ? __wait_for_common+0x5ae/0x690 [ 1710.815389][ C0] _printk+0xdd/0x130 [ 1710.815409][ C0] ? __pfx__printk+0x10/0x10 [ 1710.815427][ C0] ? nci_send_cmd+0x1e5/0x360 [ 1710.815444][ C0] nci_dev_up+0x593/0xdd0 [ 1710.815463][ C0] ? __pfx_nci_dev_up+0x10/0x10 [ 1710.815478][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1710.815498][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1710.815523][ C0] nfc_dev_up+0x16d/0x350 [ 1710.815544][ C0] nfc_genl_dev_up+0x89/0xe0 [ 1710.815566][ C0] genl_family_rcv_msg_doit+0x22a/0x330 [ 1710.815586][ C0] ? __asan_memcpy+0x40/0x70 [ 1710.815605][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1710.815630][ C0] ? bpf_lsm_capable+0x9/0x20 [ 1710.815650][ C0] ? security_capable+0x7e/0x2c0 [ 1710.815675][ C0] genl_rcv_msg+0x61c/0x7a0 [ 1710.815697][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1710.815715][ C0] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 1710.815743][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1710.815759][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1710.815778][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1710.815801][ C0] ? down_read+0x270/0x2e0 [ 1710.815820][ C0] ? genl_rcv+0xd/0x40 [ 1710.815838][ C0] genl_rcv+0x28/0x40 [ 1710.815855][ C0] netlink_unicast+0x75c/0x8e0 [ 1710.815882][ C0] netlink_sendmsg+0x813/0xb40 [ 1710.815902][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.815919][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1710.815936][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1710.815955][ C0] ____sys_sendmsg+0x972/0x9f0 [ 1710.815972][ C0] ? __might_fault+0xaf/0x130 [ 1710.815992][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.816012][ C0] ? import_iovec+0x73/0xa0 [ 1710.816031][ C0] ___sys_sendmsg+0x2a5/0x360 [ 1710.816046][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1710.816070][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.816089][ C0] ? futex_wake+0x4ac/0x580 [ 1710.816126][ C0] ? __fget_files+0x2a/0x420 [ 1710.816141][ C0] ? __fget_files+0x3a0/0x420 [ 1710.816162][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1710.816180][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1710.816201][ C0] ? rcu_is_watching+0x15/0xb0 [ 1710.816221][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.816237][ C0] do_syscall_64+0x15f/0xf80 [ 1710.816258][ C0] ? trace_irq_disable+0x3b/0x140 [ 1710.816278][ C0] ? clear_bhb_loop+0x40/0x90 [ 1710.816295][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.816310][ C0] RIP: 0033:0x7fa415b9cdd9 [ 1710.816324][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.816338][ C0] RSP: 002b:00007fa416af0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.816353][ C0] RAX: ffffffffffffffda RBX: 00007fa415e15fa0 RCX: 00007fa415b9cdd9 [ 1710.816364][ C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 1710.816375][ C0] RBP: 00007fa415c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1710.816385][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.816394][ C0] R13: 00007fa415e16038 R14: 00007fa415e15fa0 R15: 00007fff438d9398 [ 1710.816414][ C0] [ 1710.817386][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1710.817402][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1710.817423][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.817435][ T31] Call Trace: [ 1710.817443][ T31] [ 1710.817451][ T31] vpanic+0x56c/0xa60 [ 1710.817471][ T31] ? __pfx___schedule+0x10/0x10 [ 1710.817493][ T31] ? __pfx_vpanic+0x10/0x10 [ 1710.817519][ T31] panic+0xc5/0xd0 [ 1710.817536][ T31] ? __pfx_panic+0x10/0x10 [ 1710.817554][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1710.817582][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1710.817605][ T31] watchdog+0x102c/0x1030 [ 1710.817636][ T31] ? watchdog+0x1c9/0x1030 [ 1710.817663][ T31] kthread+0x388/0x470 [ 1710.817684][ T31] ? __pfx_watchdog+0x10/0x10 [ 1710.817704][ T31] ? __pfx_kthread+0x10/0x10 [ 1710.817725][ T31] ret_from_fork+0x514/0xb70 [ 1710.817754][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1710.817779][ T31] ? __switch_to+0xc79/0x1410 [ 1710.817804][ T31] ? __pfx_kthread+0x10/0x10 [ 1710.817825][ T31] ret_from_fork_asm+0x1a/0x30 [ 1710.817859][ T31] [ 1710.820922][ T31] Kernel Offset: disabled