last executing test programs: 4m50.07285965s ago: executing program 32 (id=1801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)=0xff) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0xe, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) sendmsg$inet(r0, 0x0, 0x8008181) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000006800080062167bc62bbd7000fcdbdf250208010002000000040000000000000000190d9afb357eff9ba00bd3e78f2e8a8d71b6af2f975ed763e084f8b9acdf56ab79b955ebeaf566c02d990fb7b3e157d63f1ca19f8fb92d20c0d17dd00ca67d1fc5b67b89ddc9bb159625495b970cae4867d8163c65f2dad65616b26dfacf21f2309ef283f1d0d3b6478b2644db64bc7c2b96aba630f4ab8efd19cb63c4bab7dd27e7e2cb7124d854b467721ca96bcfa67745ffbb6b49184bd4e50013abcfe22297fb7096fb072fe956b2eedecbd759c4fe5950e26cd4"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x7, 0xc}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000640)={@initdev}, &(0x7f0000000680)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f0000000740)=""/179, 0xb3, 0x0, &(0x7f0000000c00)=""/154, 0x9a}}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0x2}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0xc, &(0x7f0000000540)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0x7, 0x2, 0x3, 0xfffffffffffffff4}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0x0, 0xb, 0x2, 0xfffffffffffffffe, 0x10}], &(0x7f00000005c0)='syzkaller\x00', 0x4ec, 0x17, &(0x7f0000000600)=""/23, 0x41100, 0x2a, '\x00', r12, @fallback=0x28, r2, 0x8, &(0x7f00000006c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xd, 0x40, 0x5}, 0x10, r8, r4, 0x0, &(0x7f0000000940)=[r2], 0x0, 0x10, 0xe15}, 0x94) shutdown(r0, 0x1) 4m49.695529079s ago: executing program 33 (id=1803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x36) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000070a0500000000000000ff0302fbb305368905d2bd4fb6738fdb0000060900010073797a3000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40004900}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x27}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x30}}, 0x24000051) sendmsg$NFC_CMD_DISABLE_SE(r1, 0x0, 0x851) nanosleep(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r7, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000130000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r7, 0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x272b5c0fc5d95318, 0x11, r0, 0x9610c000) 2m30.799479681s ago: executing program 34 (id=3369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x6, 0x2}}, 0x14}}, 0x20000090) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="42c3a6a34ab0", 'geneve0\x00'}}, 0x1e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r1}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x10, 0x8000, 0xff, 0x5, {{0x21, 0x4, 0x0, 0x15, 0x84, 0x64, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, {[@end, @generic={0x7, 0x9, "c611758c289e00"}, @ssrr={0x89, 0x2b, 0xf2, [@loopback, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010100, @local, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_addr={0x44, 0x1c, 0xc4, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x7ff}, {@multicast2, 0x80}, {@remote, 0x3}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x8d, 0x0, 0x5, [0x5a2d, 0xf, 0x0, 0xfb06]}, @rr={0x7, 0x7, 0x19, [@local]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES16=r7, @ANYBLOB="00032bbd70a3030ddb784600fcdbdf2507000000300001800800030002000000000000000800030000000000080001006c4324e6bb6cae1a181b1631ec177a999f6ef0e698a752e08fe4b75c384188e04f9a9771dd5a62fe4b0900000000000000d00651232a4dff1d307e9d2b4c88f1c8bece2059e4428c2ede162f1480a694733cfbf3e30d00eb376049c282ab3c2273940d5b2dd199998cfb58685da3baf4103f1a39024694c5aad1e7be8b9d7c7200000000000000000000b91d0d81e0e2dae71c", @ANYRES32=r8, @ANYBLOB="280001801400020076657468305f746f5f6261746164760008000300020000000800030001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x14000000}, 0x24008040) r9 = accept$netrom(r6, 0x0, &(0x7f0000000240)) setsockopt$netrom_NETROM_T2(r9, 0x103, 0x2, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet_sctp(r6, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000000c0)="620bd8d18b0abc415b", 0x9}], 0x1}], 0x1, 0x2004c854) 2m20.341568562s ago: executing program 35 (id=3546): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@deltaction={0x40, 0x31, 0x0, 0x70bd29, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x40004) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8"], 0x100}, 0x20004094) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) (async) clock_gettime(0xfffffffffffffffd, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000040)=r4, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x4a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f00000005c0)='IPVS\x00', 0x5) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r7, @ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x4044090) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xc040ff0b, 0x2000000000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250600000005002f000100000005002d00010000000500330002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) 2m4.822768556s ago: executing program 36 (id=3756): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = accept(r0, &(0x7f00000002c0)=@can, &(0x7f0000000240)=0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5}, 0x94) syz_emit_ethernet(0xd2, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x9c, 0x3c, 0x0, @local, @private0, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e9", "4001d9e099f96e96b6fe33032ddc02272c1ea41f157a3dc5454ade0c416088f80a328a1a6dc9c6a843b8d6344cf5225f", "857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc0", {"7840a612fe1a814c065cd1094fa8ac89", "23a6cc482526163958fa4d52fc2d8623"}}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x82}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4051}, 0x8880) accept4(r0, &(0x7f00000000c0)=@l2, &(0x7f0000000140)=0x80, 0x40000) recvfrom$inet6(r2, &(0x7f0000000500)=""/108, 0x6c, 0x40000100, &(0x7f0000000480)={0xa, 0x4e24, 0x1aa3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m57.670857675s ago: executing program 8 (id=4002): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}}}, 0x3a) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000240), 0x4) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x5, 0x6, 0x8c0e4c7cef059c68, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x0, 0x3, {{0x16, 0x4, 0x0, 0x1f, 0x58, 0x67, 0x0, 0x40, 0x2f, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x24, 0x5d, 0x3, 0x7, [{@rand_addr=0x64010100, 0xffff7fff}, {@remote, 0xab8}, {@remote, 0x7}, {@broadcast, 0x6}]}, @rr={0x7, 0x7, 0x84, [@dev={0xac, 0x14, 0x14, 0x34}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xb3, 0x0, 0x3, [0x38, 0x2, 0x5, 0xe64]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x1, 0x1, 0x1, 0x3ff, {{0x6, 0x4, 0x1, 0x3f, 0x18, 0x68, 0x0, 0x80, 0x74a4609d4b40d992, 0x0, @multicast2, @empty, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x20, 0x80, 0x10000, 0x10, {{0xd, 0x4, 0x0, 0x7, 0x34, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0x9, [{@empty, 0x6}, {@local, 0x8001}, {@remote, 0x10000}]}, @end, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x0, 0x81, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x1, 0x69ab, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f00000007c0)={0x388, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_WANTED={0x26c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/-\'@t.$-\x1fX\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{+(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':)+\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "441f2cba896dd7a8ad2ac18aefbf181d60c9793f7ee67daa328c61bc7603a383b873dee133222cbec188bd58cc"}, @ETHTOOL_A_BITSET_VALUE={0x103, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x388}}, 0x0) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r14, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x104, r16, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @loopback, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x939}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8004}, 0x800) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ec0)={0x3, &(0x7f0000000e80)=[{0xc904, 0x5, 0x40, 0x7fff}, {0x8, 0x7, 0x3, 0x6}, {0x9, 0x7, 0x6, 0x80000000}]}, 0x10) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r17, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r19}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x21}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xfe00}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xf}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xe4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x40090) syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r17) 1m57.401835778s ago: executing program 8 (id=4004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x2, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x84, 0x80, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000fc0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4da, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5785}}], 0x18}}], 0x2, 0x4c040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m57.169308564s ago: executing program 8 (id=4011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000e90f001fff000000008000000000001c00", @ANYRES32=0x0, @ANYBLOB="00000000002f00002c0012800b00010067726574617000001c00028006000e00020000000800070064010101060010004e22000008000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x24000000) 1m56.845787819s ago: executing program 8 (id=4017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000000000)="dbc1d8f6f6c31022", 0x8, 0x20008001, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x42}, &(0x7f0000000100)=0x8) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={r5}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x98, &(0x7f0000000140)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x1, @empty, 0x3}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0xfffffffa, @remote, 0x7ff}]}, &(0x7f0000000280)=0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0) 1m56.629050124s ago: executing program 8 (id=4021): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x8}, {0xe8f}}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}}, 0xe8) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x9c, 0x3c, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e9", "4001d9e099f96e96b6fe33032ddc02272c1ea41f157a3dc5454ade0c416088f80a328a1a6dc9c6a843b8d6344cf5225f", "857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc0", {"7840a612fe1a814c065cd1094fa8ac89", "23a6cc482526163958fa4d52fc2d8623"}}}}}}}}, 0x0) (async) syz_emit_ethernet(0xd2, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x9c, 0x3c, 0x0, @local, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "abf9a9b08b40a1dc367c4dc078e27c26e9e42239289acc5aad0c6189fcc415e9", "4001d9e099f96e96b6fe33032ddc02272c1ea41f157a3dc5454ade0c416088f80a328a1a6dc9c6a843b8d6344cf5225f", "857c00661436f168db59cbbb93c5ba7cd13875e36fa3c3b8976b9dc0", {"7840a612fe1a814c065cd1094fa8ac89", "23a6cc482526163958fa4d52fc2d8623"}}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x0, 0x9aa, 0x100}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x0, 0x9aa, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="5fedea2eecfe388eb0f2510a496d7f13bc210000003ebb14516feae2d19b5100000000005cce4258461d59adc9c2ae2badb90d3b12d3f14952cc13e058b87e183462341f5b1fbe5beabaa053286d0c5a612cfb12ac7fb3316666e9211eb707abf40ba68eb20de0c6d0b21cbd2284aab1b6ecb11c580945629c37ee1047eda94111fcaa8ef424e2276a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="5fedea2eecfe388eb0f2510a496d7f13bc210000003ebb14516feae2d19b5100000000005cce4258461d59adc9c2ae2badb90d3b12d3f14952cc13e058b87e183462341f5b1fbe5beabaa053286d0c5a612cfb12ac7fb3316666e9211eb707abf40ba68eb20de0c6d0b21cbd2284aab1b6ecb11c580945629c37ee1047eda94111fcaa8ef424e2276a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000d30fe7af00240012800b0001006d616373656300001400028005000c000b"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000000008000540000002"], 0x94}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m56.237840356s ago: executing program 8 (id=4026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 1m54.913346707s ago: executing program 9 (id=4049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xa, 0x8, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000141000000180017"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x40, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x40}}, 0x2004c080) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x3, 0x2) getsockname(r8, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@delneigh={0x44, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, r14, 0x80, 0x60, 0x2}, [@NDA_PROBES={0x8, 0x4, 0xfffffffc}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4004000) recvfrom$l2tp6(r8, &(0x7f00000007c0)=""/248, 0xf8, 0x40002001, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r12, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000000) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) 1m54.791528961s ago: executing program 9 (id=4051): sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="a1bf579c686ac72c78c842da487c", 0xe, 0x20000001, &(0x7f0000000040)={0xa, 0x0, 0xab, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xf, 0x2}, 0x20) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x6, 0x1, {{0x28, 0x4, 0x0, 0x38, 0xa0, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@generic={0x86, 0xf, "e98bc79f7b2b315eb8bd8d5bfa"}, @end, @noop, @generic={0x16, 0xd, "f0a86c9465f1cb4a6eb0d0"}, @timestamp_addr={0x44, 0x34, 0xe1, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2e}}, {@remote, 0xf}, {@rand_addr=0x64010100, 0x7ff}, {@local, 0x1a}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7b24}, {@local, 0x3}]}, @ssrr={0x89, 0x1f, 0x40, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x19}, @empty, @multicast1, @rand_addr=0x64010101]}, @timestamp={0x44, 0xc, 0x78, 0x0, 0x3, [0x9, 0x1]}, @generic={0x86, 0xf, "9d7ce9a4b7dd5ab32f0ea598e8"}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@mcast1, 0x58, r3}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) 1m54.592991805s ago: executing program 9 (id=4054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0xf5}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x30}}, 0x0) 1m54.401840817s ago: executing program 9 (id=4058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000280)=""/247, 0xf7}, 0x41) 1m54.294860022s ago: executing program 9 (id=4060): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) (async) r5 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 1m54.143888515s ago: executing program 9 (id=4063): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socketpair(0x1f, 0x80000, 0x4, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x528, 0x1a8, 0x2c8, 0x110, 0x0, 0x110, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@set4={{0x50}, {{0x1, 0x2, 0x4}, {{0xfff}}, {{0x1b0c}, 0x7}, 0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x34, 0x3}}}, {{@ip={@private=0xa010102, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg2\x00', {0xff}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x7, 0x1}}}, {{@ip={@remote, @private=0xa010101, 0xffffff00, 0xffffffff, '\x00', 'netpci0\x00', {}, {0xff}, 0x75, 0x1, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x6, 0x5, 0x7, 0x3, 0x6], 0x2, 0x1}, {0x3, [0x1, 0x5, 0x3, 0x5, 0x7, 0x3], 0x2, 0x3}}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@icmp={{0x28}, {0x12, '\r\a', 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) socketpair(0x1f, 0x80000, 0x4, &(0x7f00000000c0)) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x528, 0x1a8, 0x2c8, 0x110, 0x0, 0x110, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@set4={{0x50}, {{0x1, 0x2, 0x4}, {{0xfff}}, {{0x1b0c}, 0x7}, 0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x34, 0x3}}}, {{@ip={@private=0xa010102, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg2\x00', {0xff}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x7, 0x1}}}, {{@ip={@remote, @private=0xa010101, 0xffffff00, 0xffffffff, '\x00', 'netpci0\x00', {}, {0xff}, 0x75, 0x1, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x6, 0x5, 0x7, 0x3, 0x6], 0x2, 0x1}, {0x3, [0x1, 0x5, 0x3, 0x5, 0x7, 0x3], 0x2, 0x3}}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@icmp={{0x28}, {0x12, '\r\a', 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) (async) 1m41.21260946s ago: executing program 37 (id=4026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) recvmmsg(r2, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) 1m39.081512312s ago: executing program 38 (id=4063): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socketpair(0x1f, 0x80000, 0x4, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x528, 0x1a8, 0x2c8, 0x110, 0x0, 0x110, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@set4={{0x50}, {{0x1, 0x2, 0x4}, {{0xfff}}, {{0x1b0c}, 0x7}, 0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x34, 0x3}}}, {{@ip={@private=0xa010102, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg2\x00', {0xff}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x7, 0x1}}}, {{@ip={@remote, @private=0xa010101, 0xffffff00, 0xffffffff, '\x00', 'netpci0\x00', {}, {0xff}, 0x75, 0x1, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x6, 0x5, 0x7, 0x3, 0x6], 0x2, 0x1}, {0x3, [0x1, 0x5, 0x3, 0x5, 0x7, 0x3], 0x2, 0x3}}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@icmp={{0x28}, {0x12, '\r\a', 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) socketpair(0x1f, 0x80000, 0x4, &(0x7f00000000c0)) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x528, 0x1a8, 0x2c8, 0x110, 0x0, 0x110, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@set4={{0x50}, {{0x1, 0x2, 0x4}, {{0xfff}}, {{0x1b0c}, 0x7}, 0x6}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x34, 0x3}}}, {{@ip={@private=0xa010102, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg2\x00', {0xff}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x7, 0x1}}}, {{@ip={@remote, @private=0xa010101, 0xffffff00, 0xffffffff, '\x00', 'netpci0\x00', {}, {0xff}, 0x75, 0x1, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x6, 0x5, 0x7, 0x3, 0x6], 0x2, 0x1}, {0x3, [0x1, 0x5, 0x3, 0x5, 0x7, 0x3], 0x2, 0x3}}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@icmp={{0x28}, {0x12, '\r\a', 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) (async) 1m34.909496494s ago: executing program 4 (id=4292): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x18, @local, @mcast2={0xff, 0x3}, 0x1, 0x80, 0xfffffffe, 0x80}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 1m34.665657347s ago: executing program 4 (id=4295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) r1 = socket(0x848000000015, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) 1m34.457535247s ago: executing program 4 (id=4298): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x10, 0x0, 0x25dfdbfe}, 0x18}}, 0x4000000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r4}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1m34.267136745s ago: executing program 4 (id=4300): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r3, @ANYBLOB="8bafea1f010804001000128008000100677265000400028008000400730000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1m33.953548422s ago: executing program 4 (id=4305): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) socket$packet(0x11, 0x1, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x7, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x28000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "176b4953f22181bff0a69f6632c67e0a6623ffb8ec4fbd32debfae5bc5913ccbc44aa4"}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20044800}, 0x46) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)={0x7f, {{0xa, 0x4e23, 0x21f, @loopback, 0x8}}, 0x1, 0x8, [{{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {{0xa, 0x4e22, 0x80000, @loopback, 0x1ff}}, {{0xa, 0x4e22, 0xe, @mcast2, 0x4}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0xb8}, 0x1}}, {{0xa, 0x4e24, 0x0, @mcast1, 0x8}}, {{0xa, 0x4e22, 0xba, @dev={0xfe, 0x80, '\x00', 0xb}, 0x874}}, {{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e22, 0xffffdcda, @remote, 0xfffffe01}}]}, 0x490) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_netdev_private(r3, 0x89f6, &(0x7f0000000700)="6c459c243239c8d540426fb9e690b9a26eec4d78d57a907887e8ef706226a19e62fd56822d90e032e775f8bf3b984d3c1e3c215e3a506456f577348951cde7cd611d2f5b32b76e639b5fee3ffbef4a771935e3380fa947b7342046d95c7e5f349ddcd717b4f2c642871280c8fe2b34da577b494fbc5a9c97d8c81a799cc1420bd2aae7bc81ccf5fc1c156592834c2db4f2c6fa8d7be2a14a23622200a5ccbe8ef9895ade72173d7918ef4722ac2d8428f5b99a36d0393055cf31181f2d834929f23b2f4a9016f3744b4394193036c6564646e6322fa7ada317bd4ce5") ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r7, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfa}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x26702edb63235f46}, 0x8000) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000dc0), r6) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r9, 0x210, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r3) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r11, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x20040050) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x50, r11, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x48000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x75}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_SET_DEST(r10, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x130, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x180}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x56c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x252}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20004800}, 0x40010) socket$kcm(0x29, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc0}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "53366e105ccce3f763f181843ec8096114a19a1f69572de99475d3c2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4884) accept4$alg(r5, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000015c0), &(0x7f0000001600)=0x4) getsockname$packet(r1, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001680)=0x14) 1m33.457758821s ago: executing program 4 (id=4308): r0 = socket(0x28, 0xa, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc, 0x2}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x8, 'syz1\x00', @bcast, 0x5, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e25bd7000000000002a0000000c0005000200aaaaaaaaaaaa08000200", @ANYRES32=r5, @ANYBLOB="08002f008100000007ef705181a0174c9d4ff0e37f8a17036d4afd38909d3f8f5d11e9"], 0x30}, 0x4, 0x700000000000000, 0x0, 0x20048050}, 0x40) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) bind$netrom(r0, &(0x7f00000004c0)={{0x3, @bcast, 0x4}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x4, {{0xa, 0x4e24, 0x100, @loopback, 0x15e2cb84}}}, 0x88) r6 = socket(0x8000000010, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004044}, 0x0) getsockname$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000080)=0x6e) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001200010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00001700000000000000000000000000ffbc17236970e2501765644531917c199951be1ecac32786ca0b7ee742bf785e9856ed9926482e3d88612b72f3cba9ab20746975f77d377d39217153fe04d6484112ed2e4fccc7e5873dc1a2a54d5d347769c79756da35d7033b2a"], 0x28}}, 0x90) write(r6, &(0x7f00000002c0)="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", 0xfc) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000040)=0x8, 0x4) 1m18.430157885s ago: executing program 39 (id=4308): r0 = socket(0x28, 0xa, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc, 0x2}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x8, 'syz1\x00', @bcast, 0x5, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e25bd7000000000002a0000000c0005000200aaaaaaaaaaaa08000200", @ANYRES32=r5, @ANYBLOB="08002f008100000007ef705181a0174c9d4ff0e37f8a17036d4afd38909d3f8f5d11e9"], 0x30}, 0x4, 0x700000000000000, 0x0, 0x20048050}, 0x40) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) bind$netrom(r0, &(0x7f00000004c0)={{0x3, @bcast, 0x4}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x4, {{0xa, 0x4e24, 0x100, @loopback, 0x15e2cb84}}}, 0x88) r6 = socket(0x8000000010, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004044}, 0x0) getsockname$unix(r0, &(0x7f0000000240)=@abs, &(0x7f0000000080)=0x6e) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001200010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00001700000000000000000000000000ffbc17236970e2501765644531917c199951be1ecac32786ca0b7ee742bf785e9856ed9926482e3d88612b72f3cba9ab20746975f77d377d39217153fe04d6484112ed2e4fccc7e5873dc1a2a54d5d347769c79756da35d7033b2a"], 0x28}}, 0x90) write(r6, &(0x7f00000002c0)="fc0000001c000720ab5b2509b868030002ab087a0100000002481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000040)=0x8, 0x4) 44.197932894s ago: executing program 0 (id=4896): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa0c4516aa09853f0e00e4fd238bf0a8c76219d9fdac05748bba67aa0180c20e00000800450000f856dc00000000000000030048841f7a69e7706fd1f5afaffe057800000000000000"], 0x0) 44.152414583s ago: executing program 0 (id=4897): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x2f}) 44.001600794s ago: executing program 0 (id=4900): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@delqdisc={0xc0, 0x25, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6, 0x6}, {0x4, 0xb}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x94, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x96, '\x00', 0xfaa, 0x31ec870, 0x9, 0x1000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x10000, 0x0, 0x4, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5b, '\x00', 0x144e555, 0x10001, 0xfffffffd, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ff, 0x2, 0x7fff, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x9, 0x7, 0x1, 0xc30}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x998, 0x1ff, 0x9}}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4080}, 0x24008001) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000700", @ANYRES32=r4, @ANYBLOB="08003200000400000800390009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0xfffffffffffffdb8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 43.461907737s ago: executing program 0 (id=4902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000240)="3a3f0835de1a4256376005477ac31f9d1fb838fd8fe75c4e8e1a743e72688286b568e0bfd721c97dcb8220bac55f171b7716c8d153", &(0x7f0000000280)=""/241, 0x4}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x24008010) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 43.285283474s ago: executing program 0 (id=4906): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="61202a0f0000007700"], 0x9) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r5}, 0x8) sendmsg(r3, &(0x7f0000003040)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) 43.085756908s ago: executing program 0 (id=4909): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"903228732a5747d94e297d80c51d6c8f", 0x0, 0x0, {0x5, 0x1}, {0x7, 0xfffffffd}, 0x9, [0x0, 0x2, 0x135, 0x40, 0x100000001, 0xffffffff00000001, 0x2, 0x1, 0xffff, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2, 0x4]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000004c0)={"fc9f79becfbc6dae1c44350ce9944343", r4, r5, {0x60fe, 0x8a3}, {0xf281, 0x3}, 0x20000, [0x8, 0x101, 0x6, 0x1, 0x3ff, 0x81, 0xb3, 0xf7, 0x7, 0x0, 0x100000000, 0x6, 0x0, 0x7fffffff, 0x4e8, 0x4]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 29.691634444s ago: executing program 5 (id=5100): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r2, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0x12) socket$kcm(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001000)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001040)={@mcast1, @mcast1, @loopback, 0x0, 0x2, 0x0, 0x100, 0x2, 0x100092, r4}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote, r4}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, &(0x7f0000000140)}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) 28.593473781s ago: executing program 5 (id=5103): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x8}, 0x94) 28.586992675s ago: executing program 5 (id=5105): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)={0x670, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "18523de200f5baeb91"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5e8, 0x3, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb44}, @NFTA_SET_ELEM_KEY_END={0x254, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "c847bb06827631a2b01f711c7300eb8e00cd1dae64a42fe94975094aac0a00a6ff56f306c0109e1479a058c5a233d5d0ad6f9ca8cb69e8a9159905461641cd0c084905b236b9e43c25a6fd68337a4cd362ae96429efad3d1f9b321bb6de6878ca7ef3a169bb4ac5390"}, @NFTA_DATA_VALUE={0x3d, 0x1, "75f1d0128b3f49554400bf815d6fd4dd87e1ff24e9b7b6af0b9a2b76051d309fb8c3d6ab8b166a78b141fbd8dcc3ba740d47e7910e07c43d7c"}, @NFTA_DATA_VALUE={0xf4, 0x1, "8e2844599fab1e591d53e8005913cdcbc9cc3afb74e5a39fb6080573856a74ed658d8eb08c05de8c742a1fb53aef8f9382e46ae192c20c328d188cae2791c233b532b9aafa2ccaaddbe2501841c86b81063f64d0c8df21502656566d743224c0fe06566afbe2745ab916928d5b888f0af561ebe76997a14781a4331edd29f0910646b10a34a739fd3bb532406532f5cfd4bd7201c99c1a9d96d97ae50bdb0c8f17f29657cf95338b5a02456946f12c65330bc5e447fe9c29632d61ca4e283d5a0f978680529cab92d1a7cd61b6e6ce95944596f39371f714e8cf603c64c4d17677c9777f31b985db5ecb26e880aa38e7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x218, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x208, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BITWISE_XOR={0x1f8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "35329923100b8cd8063e2a5d2258287f79d8cc3d982db5bb2ee06c509b9be05118066b6ea10cc26eee71bc51f3563f83ba1454570be706366d27f9bc66699937c92dfce9f5348bfebe08bd9b77c2e79eb5a077d47cbcbb25c264a8d8e7f69d38caa4e385ca8555fa63818e8af933357889127f3d12c3083849919052a00f3b3a4eb825188d7e63b3414589ec9c31a72152da001d23c44a0bbb6ad785d43ed718f14a41181139b41516bcd24196aa45d71263ab650b2b0ed103146b6bcc82393c55b68fc93579a2481d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "0507867cdea8e48e10306bcaed5c07df0084ff67bb116f9323965e12100efe43ffb7fcbb4deb4ea19fd9cd00091b3df972cef31688ca9be6a34b726c29e0b0303d50a02e0e4260ad136109eba5818d8434bdb429da589b8d953b610bf710ff8f6e758def1862657b4af3dbfa981647a2cfb2a2e4ed4e4d93e8cf78ae01f958bdb9253c4bf1da858c44cdb060730f598cf4bf56ae6b3df1870ba590760184b8389a2f7fe69eb9cf93eb3542f3d908df2d7ec737ec8f14b3131a793e46910a235866b067eac307e0a35bdb6fd5a045f663e9c19ed0813befc6e0df2ce9bcadf1"}]}]}}}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x37, 0x1, "e4e42aa52794003dd65ab061ecabe9c456cf6e2d4e78cdd479744afeb099b26d82e1067a05579523124abab930f9c7ebbb401d"}, @NFTA_DATA_VALUE={0x1c, 0x1, "a02e6b349ae419969f253de7509516fc5149428edf2350e4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x89ad46fbdc2b527c}, @NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x670}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd3334c4}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7a06784e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d89a1c7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x98e1f93}]}]}], {0x14}}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="cfd09e2e0404bd4ef84572b66d5a21c56b04bebb585d21a4cce368e3532e0915d6071db2bd5d6f291987a3a482b397045ffa28bba69c7ccd8de48b6be9c63f8255c03b1d135c12e1983749a6eb", 0x4d, 0x4000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0), 0x0, 0x4004754) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x4) 28.586273737s ago: executing program 5 (id=5106): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, 'bond_slave_0\x00'}}) (async) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'dvmrp0\x00'}}, 0x1e) socket$phonet_pipe(0x23, 0x5, 0x2) (async) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'nicvf0\x00'}}, 0x1e) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 28.582053546s ago: executing program 5 (id=5109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$sock(r2, 0xfffffffffffffffe, 0x8080) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) close(0x3) 28.237798816s ago: executing program 5 (id=5116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r4, 0x0, 0xfb3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r4, 0x0, 0xfb3}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 27.981317128s ago: executing program 40 (id=4909): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"903228732a5747d94e297d80c51d6c8f", 0x0, 0x0, {0x5, 0x1}, {0x7, 0xfffffffd}, 0x9, [0x0, 0x2, 0x135, 0x40, 0x100000001, 0xffffffff00000001, 0x2, 0x1, 0xffff, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2, 0x4]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000004c0)={"fc9f79becfbc6dae1c44350ce9944343", r4, r5, {0x60fe, 0x8a3}, {0xf281, 0x3}, 0x20000, [0x8, 0x101, 0x6, 0x1, 0x3ff, 0x81, 0xb3, 0xf7, 0x7, 0x0, 0x100000000, 0x6, 0x0, 0x7fffffff, 0x4e8, 0x4]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 16.000986736s ago: executing program 6 (id=5206): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}, 0x4e500000}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) unshare(0x20000400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 15.822424705s ago: executing program 6 (id=5208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x90, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff3a1c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfff}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 15.736180291s ago: executing program 6 (id=5210): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="3867c600000000000000000000000000000000004b00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet(0x2, 0xa, 0x4) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x200}]}}}]}, 0x40}}, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0xb}}}, 0x24}}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r9, 0x25, 0x0, @void}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f0000000100)=0x7fffffff, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x105040, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'veth1_vlan\x00', 0x2}) 15.249790487s ago: executing program 6 (id=5212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8902}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@delnexthop={0x48, 0x69, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}]}, 0x48}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x328}}, 0x84) 15.137509678s ago: executing program 6 (id=5215): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) (async) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000200)={@val={0xa, 0x8847}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "101b01", 0x4e, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x4e, 0x0, @opaque="715c6fd5536167bd2835968cfc5459d390a1100e5e7f05d6f78837aeb82a0892bff5e386f53be56bafb92450766efd32b1d27c9a5eaf2eb626c5b5e665d620571de75141fd1b"}}}}}}}, 0x88) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2}, 0x1c) 14.76576329s ago: executing program 6 (id=5221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 13.20786092s ago: executing program 41 (id=5116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r4, 0x0, 0xfb3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r4, 0x0, 0xfb3}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 9.366080413s ago: executing program 3 (id=5273): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084) socket$kcm(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 9.209278005s ago: executing program 3 (id=5275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}}, 0x40890) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e000100000000000026b82bd90000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$rds(r3, 0x0, 0x40800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x5411, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) close(r4) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008200), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x80adf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r8 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x0, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 9.085597217s ago: executing program 3 (id=5278): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdc6e}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000cc0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x38, r5, 0x1, 0x70bd2d, 0xa2, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}}, 0x8804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008007d146a381d369ce0e51cc0ebe6f36a250f79714096de40d7f35abe305629885d925f453cf8a9636328ebecfe71e3c1e4a48b16283e7b43d743662b937bc81bd90bf76892a1ba323f944ca614", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) 8.924235292s ago: executing program 3 (id=5280): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="daaf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="daaf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0x10}, {0x1}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}}, 0x40) (async) 8.695836601s ago: executing program 3 (id=5283): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/ipc\x00') ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r4, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2000009}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) (async) syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/ipc\x00') (async) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r4, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2000009}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) 8.539841388s ago: executing program 3 (id=5286): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000a00000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000020000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000d000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032cbd7000fedbdf935d73800b340192186b3ee4ef250000000014000200776731000000000000000000000000009fff2270cb13c0f506be0d1e1ead82cd6817850e4f594b973b74c2ebeb739fccb37df0ae556d12cbb212e7469b7e43a47161d5b5f9d7803dfccc"], 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20040090) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="100200001a0007000000000000000000fe80000000000000000000000000001bff010000000000000000000000000001ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000020000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bbe4000600ac14141c000000000000000000000000640101020000000000000000000000004e20fffe4e20000b020080203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000004d43c0000000000000000000000000000000000000008000000000000000300000000000000020000000000000002000000000000000000010000000000a501000000000000008100000000000001000000000000008a0000000000000002000000000000000700000000000300000000000000000008000000c40d0000fdffffff29bd700007350000020004f5c8000000000000000c000f000f000000000000001c00040000004e244e210000fe88000000000000000000000000000100000000"], 0x210}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) recvmmsg(r1, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000180)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='svc_unregister\x00', r11, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmmsg$inet6(r9, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r12, 0x401054d6, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"903228732a5747d94e297d80c51d6c8f", 0x0, 0x0, {0x5, 0x1}, {0x7, 0xfffffffd}, 0x9, [0x0, 0x2, 0x135, 0x40, 0x100000001, 0xffffffff00000001, 0x2, 0x1, 0xffff, 0x0, 0x6, 0x0, 0x5, 0x0, 0x2, 0x4]}) 2.141774362s ago: executing program 7 (id=5324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x4, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(0x3) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1, 0x0, 0x593) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b060101000000000000000000000000100007800c00018008000140e0000002050001"], 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) write(r2, &(0x7f0000000140)="b8ea1705e4b00dbb0473e012a2537fe70cb02d0d226ac17c83885aa175", 0x1d) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1.965331763s ago: executing program 7 (id=5327): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x134, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@generic="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"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r5}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) (async) shutdown(r3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 1.469581907s ago: executing program 1 (id=5332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {0x0, 0x0, 0xff}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {0xd}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x7fff, 0x4) sendto$inet(r3, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x15, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) recvmmsg(r3, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10064, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000004000150003006e657464657673696d3000000000000000000000000007800c000900030000000d000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={0x24, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x4010) 1.334983935s ago: executing program 1 (id=5334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000400)={0x4, 0x10, '\x00', 0x1, &(0x7f00000003c0)=[0x0, 0x0]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000300)='[', 0x1, 0x4090, &(0x7f0000000000)={0xa, 0x0, 0x8a3, @loopback, 0xb}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="a9", 0x1}], 0x1}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f0000000240)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40000}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xe1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1.157742122s ago: executing program 1 (id=5335): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r2, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r2, 0x3, 0xeb}, 0xc) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0x10) connect$phonet_pipe(r4, &(0x7f0000000200)={0x23, 0x22, 0x16}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000007f3010000001000095000000000000002290015c67f3b5dfbe41d901e24c30e6aa7cba03bb7aa64d2cbac1540a7e23f0a2618d90fb57b7145b88f0fd0f596941ec79afe226b61a417df4180dd06c0fa2a2cbfa04b6"], &(0x7f0000000040)='GPL\x00', 0x8}, 0x94) 1.139909126s ago: executing program 1 (id=5336): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @private1, 0x7fff}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 1.07282251s ago: executing program 7 (id=5337): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000040)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x3, 0x2, 0x1, 0x7, 0xc, 0xfffffffffffffff8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 973.695387ms ago: executing program 1 (id=5338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001d00)=[{{&(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3}]}) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r5 = socket(0x2a, 0x2, 0xfd) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4820) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@delchain={0x24, 0x65, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x0, 0x4}, {0x0, 0xc}}}, 0x24}}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1000000, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYRESDEC=r4], 0x38}, 0x1, 0x0, 0x0, 0x400a8c0}, 0x4004000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'bridge_slave_1\x00', @broadcast}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30200000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="014f000000f9fedbdf25200000000c4f7999009b4000002c256add236883740000"], 0x20}, 0x1, 0x0, 0x0, 0x20014000}, 0x4008040) 788.324788ms ago: executing program 7 (id=5339): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}, 0x1, 0x0, 0x0, 0x48001}, 0x4040804) shutdown(r4, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}], 0x1, 0x8000) recvmsg(r5, 0x0, 0x0) poll(&(0x7f0000000040)=[{r5, 0x10}], 0x1, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000600)=0x1b, 0x54) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 750.477949ms ago: executing program 1 (id=5340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xb}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', r6, 0x2f, 0xa2, 0xfd, 0x400, 0x29, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8, 0x700, 0x7ff, 0xffffffff}}) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x248, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x35c1933d}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x28d}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ':*$@}\x1b .}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xb2\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'target\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'R@]x\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb9b}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/\'#*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'TEE\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "a0445f487ecbf37e4c567952e459d20884926c2d572523a51e5d85ecfb1950ac1e80c4494b8a6a53e4dd3cf59b8e41cbffbe70e44c04b28e811d050ac9b2955b8fb6e9e6a38af78898ab7704f96dde7c2ac1a148b405eecfbeef2a68e08a3b107a39938f821778b5ff6db4fa9a914ebee526846477"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8001}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000800}, 0x4840) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 609.286644ms ago: executing program 7 (id=5342): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) (async) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) 557.475972ms ago: executing program 7 (id=5343): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x180, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb0f}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x2000c000) r2 = accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x190, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xad}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5c2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc948}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_SOCK={0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x400c002}, 0x40880) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x130, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "7c788b2bce9676882df2904cb2a62f0cba53c299be2264e4efe60c2e0348528ab1e2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x539}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x200040c0}, 0x801) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000840)={0x0, 'hsr0\x00', {0x4}, 0x4000}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x290, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff00000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @remote, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2b6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8428}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x62}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6619cabb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x33e9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x75}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe169}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3b8c557a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bind$llc(r0, &(0x7f0000000c00)={0x1a, 0x110, 0x2, 0x3, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000c40)={'IDLETIMER\x00'}, &(0x7f0000000c80)=0x1e) sendmsg$nl_generic(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x7c, 0x3a, 0x800, 0x70bd29, 0x25dfdbfc, {0x10}, [@typed={0x66, 0x4b, 0x0, 0x0, @binary="9bdee2e63b5d049148d4c0cc07b4c59afddf673427acd87258b770bc9692bebc378a0ee8c84dc19098790374af1de3b7a135f9f18a9135c6b44009fe1bbd75b65c141a26d2ea3b62edce589df2868b893a9f48d0d1ff8f449e1f8efec5f49c46fd46"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000e00)=r0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040410}, 0x20000000) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000f80)={'tunl0\x00', {0x2, 0x0, @local}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001ec0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001040)={0xe34, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3c8, 0x11d, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x8}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x2}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x6, 0x1}, {0x6, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x6, 0x7}, {}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {}, {0x4, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x5, 0x5}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x6}, {0x4, 0x5}, {0x1, 0x2}, {}, {0x3, 0x7}, {0x6, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x1}, {0x6, 0x9}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x3}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7}, {0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x4}, {0x3, 0x9}, {0x4, 0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x3}, {0x6, 0xa}, {0x3, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0xfff, 0x200, 0xf801, 0xb, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x12, 0x16, 0x30, 0x16, 0x12, 0x0, 0x1, 0x0, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x75, 0x10, 0x4, 0x4, 0x2, 0x80, 0xfffb, 0xffff]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x7}, {0x1, 0x4}, {0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x7, 0x1}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x5}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x6}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x4, 0x2}, {0x6, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x8347, 0x1000, 0x7, 0x7, 0x2, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x4}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0x9}, {0x5, 0x9}, {0x2, 0x8}, {0x7}, {0x6, 0x3}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0x2}, {0x6, 0x8}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x7}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x9}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x1}, {0x5, 0x8}, {0x5, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x5}, {0x5, 0x2}, {0x2, 0x7}, {0x1}, {0x3, 0x4}, {0x1, 0x4}, {0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x3}, {0x3, 0x8}, {0x1}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x0, 0x8}, {0x7, 0xa}, {0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x5, 0x1}, {0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x5, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x4}, {0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x3}, {0x0, 0xa}, {0x4, 0x6}, {0x7}, {0x4, 0x3}, {0x1}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0x8}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x5}, {0x3, 0x7}, {0x5, 0x8}, {0x7, 0x5}, {0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x7}, {0x2}, {0x4, 0x7}, {0x2, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x6, 0x9, 0x9, 0x1, 0x7, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x9, 0x2, 0x8, 0xa, 0x101, 0x9]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x12, 0x60, 0x60, 0x48, 0x24, 0x36, 0xc, 0x60, 0xb, 0x30, 0x24, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb, 0x9a88, 0x1800, 0x14, 0x2, 0x5, 0xa65b]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe7, 0x7, 0x9, 0x81, 0x7, 0x7, 0x7]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x50}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x63}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2d}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x1, 0x7ff, 0x800, 0xb0, 0x2, 0xd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0xb, 0x24]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x6}, {0x5, 0x9}, {0x4, 0x8}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0x3}, {0x0, 0x8}, {0x7}, {0x6, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x6, 0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0x2}, {0x4, 0x8}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x75}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x158, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x6, 0xc, 0x3, 0x18, 0x12, 0x12, 0x60, 0xc, 0x46, 0x2, 0x0, 0x24, 0x2, 0x2c, 0x60, 0x5, 0x5, 0x24, 0xd, 0x1, 0xc, 0x36, 0x2, 0x24, 0xc, 0x30, 0x12, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0xfffe, 0xd4, 0x8, 0x2, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x6c, 0x5, 0x9, 0xc, 0x9, 0x0, 0xb, 0x6, 0x18, 0x4, 0x30, 0xc, 0x2, 0x30, 0x5, 0xb, 0x18, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbfcb}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x630, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x57}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}]}, {0x598, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x408, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1000, 0x834a, 0x7, 0x0, 0x4, 0xf5bd, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0xadd, 0x5, 0x4, 0xdbb9, 0x7ff, 0x3, 0x7]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x1}, {0x6, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x6, 0x5}, {0x3, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x5, 0x4}, {0x6, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x8}, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x6}, {0x5, 0x3}, {0x7, 0x3}, {0x4, 0x4}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x6, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x2, 0x9}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x4, 0x8}, {0x4, 0x4}, {0x5}, {0x3, 0x6}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0xa}, {0x6, 0x1}, {0x3, 0x1}, {}, {0x5, 0xa}, {0x7, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1d, 0x3, 0x59, 0x5, 0x80, 0x9, 0x1604, 0xdb4c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {}, {0x6, 0xa}, {0x3}, {0x2}, {0x4, 0x8}, {0x3, 0x7}, {0x4, 0x1}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x6}, {0x7, 0x3}, {0x4, 0xa}, {0x4, 0xa}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x8, 0x6, 0x8, 0x3e, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1}, {0x2, 0x2}, {0x6}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0x3}, {0x3, 0x6}, {0x3, 0x8}, {0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x8}, {0x4, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x4}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0x9}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x1}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x5}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x2}, {0x6, 0xa}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x8}, {0x7, 0x1}, {0x7}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x4}, {0x6}, {0x0, 0x4}, {0x3, 0x7}, {0x3, 0x8}, {0x4, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x3, 0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x9, 0x12, 0x9, 0xb, 0xb, 0x4]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x6, 0x12, 0x60, 0x4, 0x18, 0x9, 0x5, 0xc, 0x0, 0x48, 0xb, 0x6c, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a8, 0x64c2, 0x5, 0x3, 0x4, 0xddba, 0x1, 0x7]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x7}, {0x4, 0x2}, {0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x6}, {0x7, 0x3}, {0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x8}, {0x1}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x3}, {0x2, 0x4}, {0x3, 0x8}, {0x3}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x4, 0x2}, {0x4, 0x4}, {0x5, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc876, 0x3, 0x8, 0x35, 0xa34a, 0xda9a, 0x3, 0x1f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x6}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x2, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x11}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x24, 0x1, 0x4, 0x5, 0x4, 0xff, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0xc, 0x1b, 0x4, 0x48, 0x6, 0x30, 0x6c, 0x16, 0x1b, 0x60, 0x9, 0xc, 0x6, 0x3, 0x24, 0x6c, 0x3, 0x16, 0x6c, 0x1b, 0xb, 0x16, 0xb, 0x0, 0x2, 0x12, 0x1b, 0x30, 0x60]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x60, 0x70, 0x60, 0x24, 0x18, 0x5, 0x18, 0x18, 0x30, 0x30, 0x24, 0x65, 0x17, 0x18]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x1b, 0x12, 0x16, 0x2, 0x60, 0x9, 0x1b, 0x4, 0xb, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x3, 0x2, 0x5, 0x6, 0xc, 0x6]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x2}, {0x5, 0x7}, {0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x3}, {0x2, 0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x1}, {0x2}, {0x6, 0x2}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x6}, {0x1, 0xa}, {0x7}, {0x0, 0x4}, {0x3}, {0x1, 0x9}, {}, {0x0, 0x6}, {0x2, 0x1}, {0x7, 0x3}, {0x7}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x3}, {0x4, 0x2}, {0x7}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x6, 0x8000, 0x8, 0x6, 0xff, 0x8a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x29, 0x5, 0x30, 0x48, 0x4, 0x2, 0x4, 0x36, 0x48, 0x48, 0x3, 0x2, 0xa, 0x5, 0x3, 0x48, 0x6c, 0x6c, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xee89, 0x35, 0x2, 0x7, 0xf, 0x8000, 0x7519]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x4}, {0x3, 0x5}, {0x6, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x2}, {0x7}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x1}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x4}, {0x2}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x1}, {0x7}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x3}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x6, 0x400, 0x6, 0x81, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x16, 0x3, 0xa00, 0x772, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x8001, 0x7, 0x3, 0x6, 0x54, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff19, 0x3815, 0x8, 0x86, 0xe26, 0x189, 0x40, 0xe]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x15c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x0, 0x36, 0x48, 0x36, 0x6, 0xb, 0x16, 0x48]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x12, 0xb, 0x60, 0x6, 0x1, 0x24, 0x24, 0x16, 0x36, 0x1, 0x4, 0x6c, 0x6, 0x2, 0x18, 0x18, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x7ff, 0x2, 0x8, 0x1, 0xcd, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x16, 0x16, 0x18, 0x6, 0x5, 0x36, 0x1, 0x2, 0x6, 0x6d, 0x2, 0x6, 0x5, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xdf, 0x8, 0x9, 0x7, 0x800, 0xa, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xed74, 0x80, 0x3, 0x401, 0xf, 0x400, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x6c, 0x1, 0xb, 0x18, 0x1, 0x6c, 0x3, 0x2, 0x16, 0xc, 0x60, 0x24, 0x1, 0x36, 0x9, 0x16, 0xc, 0x3, 0x12, 0x2, 0x36, 0x17, 0x9, 0x3]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x24, 0x6, 0x12, 0x3, 0x16, 0x9, 0x18, 0xd42b53aca78dfeb2, 0x6, 0x18, 0x4, 0xc, 0x4, 0x2, 0x16, 0xc, 0x36, 0xc, 0x4, 0x30, 0x4, 0x1, 0x6, 0x41, 0x36, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x12, 0x48, 0x1b, 0x27, 0x12, 0x6c, 0x12, 0x4, 0x1, 0x6c, 0x1b, 0x9, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf, 0x1, 0x4, 0x3, 0x200, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x1, 0x8, 0x2, 0xb54a, 0x8, 0x7f]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x600000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x124, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x278f8949}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc06d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x7, 0x8}, {0x1}, {0x7, 0xa}, {0x7}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x3, 0x4}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x3}, {0x4}, {}, {0x4}, {}, {0x1, 0x1}, {0x7, 0x1}, {0x7}, {0x6, 0x9}, {0x6, 0x7}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x1b, 0x67, 0x48, 0x1b, 0x12, 0x1, 0x18, 0x15, 0x0]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x63b, 0x1, 0xd, 0x3, 0x2, 0x0, 0x0, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x6}, {0x0, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x664, 0x2, 0x9, 0x1ff, 0xe, 0x4fde]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xa0, 0x11d, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xec}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf, 0x7, 0x5911, 0xc, 0x5, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffb8, 0xfffd, 0xffff, 0x0, 0x3, 0xfff7, 0x1, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xe34}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001f00)={{{@in=@initdev, @in6=@private0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000002000)=0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x101000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000020c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) recvmmsg(r4, &(0x7f0000002580)=[{{&(0x7f00000021c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002240)=""/29, 0x1d}, {&(0x7f0000002280)=""/103, 0x67}, {&(0x7f0000002300)=""/94, 0x5e}, {&(0x7f0000002380)=""/153, 0x99}], 0x4, &(0x7f0000002480)=""/207, 0xcf}, 0x8}], 0x1, 0x4000, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000002900)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002600)={0x2ac, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x258, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x7, 0x8, 0x6, 0x100, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x2, 0x7, 0x7, 0x401, 0x8, 0xfffd, 0x7]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1}, {0x7, 0x7}, {0x6, 0x1}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {}, {0x3, 0x4}, {0x4, 0xa}, {0x1, 0x2}, {0x4, 0xa}, {0x4, 0x3}, {0x5, 0x5}, {0x3, 0x7}, {0x5, 0x7}, {0x0, 0xa}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x3}, {}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x6}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0xa}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x1}, {0x5, 0x5}, {0x5, 0x2}, {0x7}, {0x4, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x71, 0x24, 0x24, 0x36, 0xd, 0x3, 0x4, 0xc, 0x3d, 0x18, 0xb, 0x18, 0x0, 0x2, 0x75, 0x6, 0x48, 0x4, 0x4, 0xb, 0x1b, 0x12, 0x3, 0x60, 0x1, 0x0, 0x36, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff7, 0x8000, 0x292f, 0x2, 0x80, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x854, 0x8, 0x3, 0x3, 0x6, 0x0, 0xff00]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf71, 0x7ff, 0x7, 0x1ff, 0x4319, 0x5, 0x5, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3, 0x6, 0x3, 0xfe, 0x7f, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5e00, 0x3, 0x1800, 0x0, 0x6, 0x81, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x9, 0x6c, 0x18, 0x6c, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xad, 0x1, 0xbdf, 0x9, 0x1, 0xde, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x1, 0x7, 0xab4, 0xb53, 0xd612, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x7}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x3, 0x8}, {}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x1, 0xc, 0x60, 0x30, 0xc, 0x3, 0x12, 0xc, 0x12, 0x6c, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x9, 0x1, 0x60, 0x3, 0xc, 0x1, 0x18, 0x2, 0x6, 0x3, 0x0, 0x60, 0x2, 0x24, 0x4, 0x48, 0x16, 0x12, 0x60, 0x16, 0x3, 0x0]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8000, 0x3, 0x6, 0x6, 0x3, 0x3, 0x4]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x1ff, 0x1, 0x6, 0x40, 0xffff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x300, 0x2, 0x0, 0x9, 0x7, 0x6, 0x7, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x7, 0xb05b, 0x0, 0x467c, 0x8000, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xe5, 0xfff7, 0xca, 0x8, 0x7, 0x3, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x5, 0x0, 0x2, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x3, 0x48, 0x1]}]}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002980)={0x148, 0x14, 0x800, 0x70bd2c, 0x25dfdbff, {0x9, 0xc5}, [@INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "d55beef129b2bd387d49eb1564b62e27bff3d793dbcd73"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "fa3eae536a1adbf96e98aff1c5bb3d5f1700db9436db7ddc61a769b8ccad5723e4dc61ee0ab75077cb4195e8a9bfe772119cfe0784e05a03fb0730134d5b723396aea537f1d5c00b9360f6ae04b6b67f88d1f27d516aaab291ddf5efdf27c2832b0d22ea9f2027325b161eff4ddfdffa70340b56c7a07c51873876ffd7c50d296383ce7775d83e17349cc34054e3982d56432b762adbe4a56070f8bbbe3d67c3d6e471ced2485687f75995824563b32a2305aa73b940befd4a2164c751b310158f7261ee6a886daea9dec926b6a41de1e8"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "92f75d7d182cfb6d01032e30972e0185"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "2820d0868a69d099470c28c0a0dff353138ff0d1e2181bcbcc909b7c36c59e668658f1aaaa740934"}]}, 0x148}, 0x1, 0x0, 0x0, 0x840}, 0x0) recvfrom(r4, &(0x7f0000002b80)=""/96, 0x60, 0x3, &(0x7f0000002c00)=@xdp={0x2c, 0x1, r3, 0x2d}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x34, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x42000000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x84, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x81}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x75c0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x377e884f, 0x3, 0x6, 0x4, 0x2, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x8, 0x3, 0x51d6]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x40) 297.84647ms ago: executing program 2 (id=5345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) accept4(r3, 0x0, 0x0, 0x80000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[], 0x54}}, 0x800) 294.02133ms ago: executing program 2 (id=5346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) unshare(0x22020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0xad7f585b85390de9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r0}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='page_pool_state_hold\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x39, &(0x7f0000000040)="4ac0f0eb", &(0x7f0000000080)=""/57, 0x16dc0000, 0x0, 0xbd, 0x31, &(0x7f00000004c0)="4f0239061cda166ac22f03658f8519ff44ccec14ceed677f3f2e3c99f656ea178fc3be6ee043769221a09898c19c9622b37372c1c6522599bfb1eb03e4df6178290d0349e3a72b3ea7692f5648d657bcb7ed05646b46e8f9b26b090c64148d37e6f11d556f14dea91e916514326739f3da28c1df368e9c5a5c774fa193666992282c786fa879f8b27b98a7dbd666a0da7e1c492453e09fabb8fadc3c32e09243bf8189c93eb8ad7ae3900bd2e559346a06dc00ee3902f2c583e4ade3e9", &(0x7f00000000c0)="9a4ef9dcb9683c66adc3be3585f71fde3d57eff7be5a04e5448ccc1a2bf66a3bed02be012f338ae20c38a3e439ac6c53e7", 0x2, 0x0, 0xf11}, 0x50) 232.234927ms ago: executing program 2 (id=5347): r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x80, 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x232}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048801}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "f8"}]}}, &(0x7f0000000300)=""/2, 0x2a, 0x2, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', 0x102e}) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x80, 0x80800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x232}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048801}, 0x40000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "f8"}]}}, &(0x7f0000000300)=""/2, 0x2a, 0x2, 0x1}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'virt_wifi0\x00', 0x102e}) (async) 133.801235ms ago: executing program 2 (id=5348): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x10, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async) r0 = socket$netlink(0x10, 0x3, 0x2) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x1, 0x6, {{0x25, 0x4, 0x2, 0x0, 0x94, 0x64, 0x0, 0x9a, 0x29, 0x0, @rand_addr=0xffffff81, @private=0xa010101, {[@end, @timestamp={0x44, 0xc, 0x55, 0x0, 0x2, [0xff, 0x4]}, @lsrr={0x83, 0x7, 0x4b, [@dev={0xac, 0x14, 0x14, 0xb}]}, @generic={0x88, 0x9, "bb18b2ad2ceb81"}, @lsrr={0x83, 0x1b, 0x7d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x2c, 0x88, 0x0, 0x9, [0x2, 0x3, 0x0, 0x3, 0x7, 0x3, 0x0, 0x7, 0x2, 0x6]}, @timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x1, [{@rand_addr=0x64010100, 0x9}]}, @rr={0x7, 0xf, 0x29, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1]}]}}}}}) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$tipc(0x1e, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0x34}}, 0x84) 51.215397ms ago: executing program 2 (id=5349): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 0s ago: executing program 2 (id=5350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x120, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x54}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc890}, 0x8000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x81, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x800) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000300)=0xffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000380)={@remote, @remote, @mcast2, 0x80, 0x5, 0xf3, 0x100, 0xfffffffffffffff8, 0x2000040, r5}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000400), &(0x7f0000000440)=0x8) recvmmsg(r2, &(0x7f0000002580)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000600)=""/14, 0xe}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000000780)=""/129, 0x81}], 0x5, &(0x7f00000008c0)=""/5, 0x5}, 0xffff}, {{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000980)=""/184, 0xb8}, {&(0x7f0000000a40)=""/200, 0xc8}, {&(0x7f0000000b40)=""/76, 0x4c}, {&(0x7f0000000bc0)=""/163, 0xa3}, {&(0x7f0000000c80)=""/169, 0xa9}, {&(0x7f0000000d40)=""/53, 0x35}], 0x6, &(0x7f0000000e00)=""/4096, 0x1000}, 0xc9}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e00)=""/161, 0xa1}, {&(0x7f0000001ec0)}], 0x2}, 0xd7ba}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001fc0)=""/66, 0x42}, {&(0x7f0000002040)=""/206, 0xce}, {&(0x7f0000002140)=""/51, 0x33}, {&(0x7f0000002180)=""/40, 0x28}, {&(0x7f00000021c0)=""/56, 0x38}], 0x5, &(0x7f0000002280)=""/68, 0x44}, 0xffff}, {{&(0x7f0000002300)=@ieee802154, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/185, 0xb9}], 0x1, &(0x7f0000002480)=""/220, 0xdc}}], 0x5, 0x10000, &(0x7f00000026c0)={0x0, 0x3938700}) r7 = accept4$inet(r2, &(0x7f0000002700), &(0x7f0000002740)=0x10, 0x80000) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000002780)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002900)={&(0x7f0000002840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@const={0x6, 0x0, 0x0, 0xa, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x30, 0x0]}}, &(0x7f0000002880)=""/74, 0x35, 0x4a, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000029c0), &(0x7f0000002a00)='%-5lx \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=@bloom_filter={0x1e, 0x60000000, 0x5, 0xc, 0x200, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0xb}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x18, 0x7, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query]}, &(0x7f0000002800)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x41100, 0x2, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000002940)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000002980)={0x2, 0x8, 0x6, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000002b00)=[r9, 0xffffffffffffffff, r10], &(0x7f0000002b40)=[{0x0, 0x4, 0x7, 0xa}, {0x4, 0x5, 0x10, 0x5}, {0x0, 0x4, 0x2, 0x8}, {0x5, 0x5, 0x3, 0x2}, {0x3, 0x3, 0xf, 0x2}, {0x4, 0x5, 0xc, 0x8}, {0x5, 0x4, 0x9}, {0x2, 0x3, 0xf, 0x1f}, {0x2, 0x5, 0x10, 0x6}, {0x1, 0x2, 0x7, 0x2}], 0x10, 0x2}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002e80)={0x8, 0x0}, 0x8) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x14, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_val={0x18, 0xcc713b61f4b0523c, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, @generic={0x3a, 0x2, 0x9, 0x8, 0x960}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002f80)='syzkaller\x00', 0xffffff81, 0x0, 0x0, 0x0, 0x54, '\x00', r6, 0x25, r8, 0x8, &(0x7f0000002fc0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003000)=[r9, r10, r9, r9, r10, r10, r9, r10], &(0x7f0000003040)=[{0x2, 0x2, 0x2, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003140)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x14, 0x6, &(0x7f0000002cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x200}, @alu={0x4, 0x0, 0x5, 0x3, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}]}, &(0x7f0000002d00)='GPL\x00', 0xa01a, 0xac, &(0x7f0000002d40)=""/172, 0x40f00, 0x2, '\x00', r5, @fallback=0x32, r8, 0x8, &(0x7f0000002e00)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000002e40)={0x3, 0xa, 0x0, 0x6}, 0x10, r12, r13, 0x2, &(0x7f0000003180)=[r10, r9, r14, r9, r10, r10, r4], &(0x7f00000031c0)=[{0x0, 0x3, 0x0, 0x1}, {0x3, 0x5, 0x9, 0xb}]}, 0x94) r15 = accept4$packet(0xffffffffffffffff, &(0x7f00000032c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003300)=0x14, 0x80800) setsockopt$packet_rx_ring(r15, 0x107, 0x5, &(0x7f0000003340)=@req={0x10001, 0xc, 0x4, 0x80000001}, 0x10) r16 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r16, 0x29, 0x1c, &(0x7f0000003380)={@loopback}, &(0x7f00000033c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000035c0)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003740)={0xc, 0x19, &(0x7f0000003400)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x6, 0x4, 0x50, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x2, 0x2, 0x5, 0x1, 0x2, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xec5}}], &(0x7f0000003500)='GPL\x00', 0x800, 0x25, &(0x7f0000003540)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003580)={0x4, 0x1, 0x49c40000, 0x9}, 0x10, r17, r11, 0x4, &(0x7f00000036c0)=[0xffffffffffffffff, r14, r14, r10, r9, r9], &(0x7f0000003700)=[{0x5, 0x4, 0x8, 0x7}, {0x4, 0x3, 0x8}, {0x2, 0x1, 0x6, 0xa}, {0x1, 0x5, 0x9, 0x3}], 0x10, 0x5}, 0x94) kernel console output (not intermixed with test programs): 0, 0] type 1 family 0 port 8472 - 0 [ 399.248948][ T8618] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.289190][ T8618] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 399.310297][T19693] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3924'. [ 399.320454][T19693] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3924'. [ 399.687110][T19705] syzkaller0: entered promiscuous mode [ 399.692745][T19705] syzkaller0: entered allmulticast mode [ 399.821701][T19710] bond9 (unregistering): Released all slaves [ 399.958777][T19724] netlink: 'syz.3.3931': attribute type 17 has an invalid length. [ 399.968698][ T5879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.979548][ T5879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.990727][ T5879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.999077][ T5879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 400.010940][ T5879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 400.113721][T19722] lo speed is unknown, defaulting to 1000 [ 400.185005][T19729] netlink: 'syz.8.3933': attribute type 1 has an invalid length. [ 400.321176][T19741] netlink: 'syz.8.3933': attribute type 11 has an invalid length. [ 400.368035][T19729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.528769][T19722] chnl_net:caif_netlink_parms(): no params data found [ 400.584172][T19754] FAULT_INJECTION: forcing a failure. [ 400.584172][T19754] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 400.623884][T19754] CPU: 0 UID: 0 PID: 19754 Comm: syz.8.3938 Not tainted syzkaller #0 PREEMPT(full) [ 400.623913][T19754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.623933][T19754] Call Trace: [ 400.623941][T19754] [ 400.623951][T19754] dump_stack_lvl+0x189/0x250 [ 400.623980][T19754] ? __pfx____ratelimit+0x10/0x10 [ 400.624002][T19754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.624025][T19754] ? __pfx__printk+0x10/0x10 [ 400.624066][T19754] should_fail_ex+0x414/0x560 [ 400.624101][T19754] _copy_to_user+0x31/0xb0 [ 400.624129][T19754] simple_read_from_buffer+0xe1/0x170 [ 400.624164][T19754] proc_fail_nth_read+0x1b3/0x220 [ 400.624190][T19754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.624216][T19754] ? rw_verify_area+0x2a6/0x4d0 [ 400.624240][T19754] ? __lock_acquire+0xab9/0xd20 [ 400.624267][T19754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.624291][T19754] vfs_read+0x1fd/0xa30 [ 400.624315][T19754] ? fdget_pos+0x247/0x320 [ 400.624338][T19754] ? __pfx___mutex_lock+0x10/0x10 [ 400.624362][T19754] ? __pfx_vfs_read+0x10/0x10 [ 400.624395][T19754] ? __fget_files+0x2a/0x420 [ 400.624418][T19754] ? __fget_files+0x3a0/0x420 [ 400.624434][T19754] ? __fget_files+0x2a/0x420 [ 400.624462][T19754] ksys_read+0x145/0x250 [ 400.624491][T19754] ? __pfx_ksys_read+0x10/0x10 [ 400.624517][T19754] ? rcu_is_watching+0x15/0xb0 [ 400.624538][T19754] ? do_syscall_64+0xbe/0x3b0 [ 400.624562][T19754] do_syscall_64+0xfa/0x3b0 [ 400.624583][T19754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.624599][T19754] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.624616][T19754] ? clear_bhb_loop+0x60/0xb0 [ 400.624638][T19754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.624660][T19754] RIP: 0033:0x7f127cf8d8dc [ 400.624677][T19754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 400.624694][T19754] RSP: 002b:00007f127de66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.624717][T19754] RAX: ffffffffffffffda RBX: 00007f127d1e5fa0 RCX: 00007f127cf8d8dc [ 400.624731][T19754] RDX: 000000000000000f RSI: 00007f127de660a0 RDI: 0000000000000004 [ 400.624741][T19754] RBP: 00007f127de66090 R08: 0000000000000000 R09: 0000000000000000 [ 400.624752][T19754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.624763][T19754] R13: 00007f127d1e6038 R14: 00007f127d1e5fa0 R15: 00007ffc07c0fd48 [ 400.624791][T19754] [ 401.286723][T19775] nbd: couldn't find a device at index 0 [ 401.332035][T19722] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.367569][T19722] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.396800][T19722] bridge_slave_0: entered allmulticast mode [ 401.418782][T19722] bridge_slave_0: entered promiscuous mode [ 401.485996][T19722] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.493636][T19722] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.512114][T19722] bridge_slave_1: entered allmulticast mode [ 401.526703][T19722] bridge_slave_1: entered promiscuous mode [ 401.628520][T19722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.668709][T19722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.682954][T19786] openvswitch: netlink: IPv6 tunnel dst address is zero [ 401.731127][T19789] netlink: 'syz.5.3947': attribute type 10 has an invalid length. [ 401.754444][T19786] tipc: Started in network mode [ 401.761176][T19786] tipc: Node identity 361ce212fefa, cluster identity 4711 [ 401.797195][T19786] tipc: Enabled bearer , priority 0 [ 401.809758][T19789] team0: Port device dummy0 added [ 401.845194][T19722] team0: Port device team_slave_0 added [ 401.852289][T19786] syzkaller0: entered promiscuous mode [ 401.862375][T19786] syzkaller0: entered allmulticast mode [ 401.876211][T19722] team0: Port device team_slave_1 added [ 401.887884][T19786] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 401.912934][T19786] tipc: Resetting bearer [ 401.971204][T19784] tipc: Resetting bearer [ 401.989662][T19784] tipc: Disabling bearer [ 402.014281][T19805] sctp: [Deprecated]: syz.3.3953 (pid 19805) Use of int in max_burst socket option. [ 402.014281][T19805] Use struct sctp_assoc_value instead [ 402.035931][ T5879] Bluetooth: hci7: command tx timeout [ 402.076938][T19722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.097486][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.127696][T19722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.152339][T19809] __nla_validate_parse: 8 callbacks suppressed [ 402.152358][T19809] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3954'. [ 402.325303][T19722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.340887][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.387729][T19809] netlink: 211884 bytes leftover after parsing attributes in process `syz.8.3954'. [ 402.417653][T19722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.450287][T19809] netlink: 'syz.8.3954': attribute type 1 has an invalid length. [ 402.519807][T19825] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3958'. [ 402.529915][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3958'. [ 402.539700][T19825] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3958'. [ 402.548926][T19825] netlink: 'syz.4.3958': attribute type 2 has an invalid length. [ 402.558882][T19825] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3958'. [ 402.618117][T19722] hsr_slave_0: entered promiscuous mode [ 402.627020][T19722] hsr_slave_1: entered promiscuous mode [ 402.634151][T19722] debugfs: 'hsr0' already exists in 'hsr' [ 402.664831][T19722] Cannot create hsr debugfs directory [ 402.731384][T19833] netlink: 'syz.5.3959': attribute type 2 has an invalid length. [ 403.009885][T19722] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 403.031423][T19722] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 403.055819][T19722] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 403.068176][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3963'. [ 403.068277][T19722] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 403.078192][T19842] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3963'. [ 403.108273][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3963'. [ 403.117813][T19842] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3963'. [ 403.128045][ T3503] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.142110][ T3503] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.165895][ T3503] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.182922][ T3503] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.354086][T19722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.413292][T19722] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.439196][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.446405][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.470470][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.477720][ T8611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.095692][T19879] netlink: 'syz.8.3974': attribute type 3 has an invalid length. [ 404.126925][ T5879] Bluetooth: hci7: command tx timeout [ 404.240875][T19722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.361828][T19886] dvmrp0: left allmulticast mode [ 404.733792][T19911] syzkaller1: entered promiscuous mode [ 404.752897][T19911] syzkaller1: entered allmulticast mode [ 404.870005][T19922] siw: device registration error -23 [ 405.213544][T19933] hsr_slave_0 (unregistering): left promiscuous mode [ 405.240339][T19722] veth0_vlan: entered promiscuous mode [ 405.266350][T19722] veth1_vlan: entered promiscuous mode [ 405.370870][T19722] veth0_macvtap: entered promiscuous mode [ 405.407002][T19722] veth1_macvtap: entered promiscuous mode [ 405.482611][T19722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.504253][T19722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.553945][ T8615] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.577304][ T8615] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.625341][ T8615] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.635735][ T8615] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.781135][T19959] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 405.977719][T19965] bond9: Unable to set down delay as MII monitoring is disabled [ 405.993128][T19965] bond9 (unregistering): Released all slaves [ 406.054060][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.076732][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.195294][ T5879] Bluetooth: hci7: command tx timeout [ 406.222199][ T8620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.240760][ T8620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.376616][T19988] netlink: 'syz.5.4003': attribute type 10 has an invalid length. [ 406.672063][T20009] netlink: 'syz.4.4010': attribute type 17 has an invalid length. [ 406.785126][T20014] netlink: 'syz.8.4011': attribute type 1 has an invalid length. [ 406.932258][T20012] syzkaller0: entered promiscuous mode [ 406.944576][T20012] syzkaller0: entered allmulticast mode [ 407.015707][T20026] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 407.030486][T20026] bond9 (unregistering): Released all slaves [ 407.239411][T20038] __nla_validate_parse: 8 callbacks suppressed [ 407.239429][T20038] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4020'. [ 407.287901][T20039] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4020'. [ 407.322511][T20042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.337759][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4021'. [ 407.433761][T20041] netlink: 'syz.8.4021': attribute type 29 has an invalid length. [ 407.470923][T20044] netlink: 'syz.8.4021': attribute type 29 has an invalid length. [ 407.486121][T20045] netlink: 'syz.8.4021': attribute type 29 has an invalid length. [ 407.664459][T20061] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4027'. [ 407.758361][T20068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4029'. [ 407.832124][T20068] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4029'. [ 407.951689][T20081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4034'. [ 408.012324][T20082] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4032'. [ 408.022996][T20082] netlink: 'syz.9.4032': attribute type 1 has an invalid length. [ 408.039601][T20082] netlink: 'syz.9.4032': attribute type 1 has an invalid length. [ 408.066444][T20082] netlink: 'syz.9.4032': attribute type 2 has an invalid length. [ 408.086789][T20082] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4032'. [ 408.096372][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4036'. [ 408.219675][T20093] veth0_virt_wifi: renamed from dummy0 (while UP) [ 408.277611][ T5879] Bluetooth: hci7: command tx timeout [ 408.509241][T20109] syzkaller1: entered promiscuous mode [ 408.533058][T20109] syzkaller1: entered allmulticast mode [ 408.762527][T20120] IPVS: length: 8 != 1152 [ 409.025205][T20130] nbd: device at index 9 is going down [ 409.239722][T20138] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 409.281008][T20144] netlink: 'syz.5.4052': attribute type 8 has an invalid length. [ 409.965996][T19681] IPVS: starting estimator thread 0... [ 410.075967][T20190] IPVS: using max 30 ests per chain, 72000 per kthread [ 411.092867][T20246] lo speed is unknown, defaulting to 1000 [ 412.277865][ T30] audit: type=1107 audit(1759402617.054:5): pid=20276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ŸÙ(W“C9ï‚ñr¼hê¸w8Áq—'x  ÿ;¥wõíåmŠFxB›‰ Vy^·—á*õÉWB•b°ið”8V¹ç‘ô¤mn‘©-y+:bDþ?”xb\ó€õðëmmþ“$Ôjw’,ú÷áÏO|f«Á€”„Jœ/OBæ ï°‡Àóª*Ë¿pºbãY²e­ÒÛn€ùñ¶©ØÁZ€JWˆÑDèËû, priority 0 [ 422.044317][T20701] syzkaller0: entered promiscuous mode [ 422.051717][T20701] syzkaller0: entered allmulticast mode [ 422.069462][T20701] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 422.125268][T20701] tipc: Resetting bearer [ 422.135108][T20700] tipc: Resetting bearer [ 422.164242][T20700] tipc: Disabling bearer [ 422.192879][T20711] erspan0: entered allmulticast mode [ 422.379585][T20714] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 422.448179][T20718] netlink: 'syz.3.4229': attribute type 1 has an invalid length. [ 422.486564][T20722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.561602][T20726] 8021q: VLANs not supported on tunl0 [ 422.882044][T20734] veth0: entered promiscuous mode [ 422.888407][T20734] __nla_validate_parse: 6 callbacks suppressed [ 422.888425][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4235'. [ 422.922639][T20734] veth0 (unregistering): left promiscuous mode [ 423.178624][ T5864] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 423.192261][ T5864] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 423.205054][ T5864] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 423.217142][ T5864] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 423.225249][ T5864] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 423.274409][T20737] lo speed is unknown, defaulting to 1000 [ 423.486089][T20748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4239'. [ 423.496944][T20749] netlink: 'syz.3.4238': attribute type 10 has an invalid length. [ 423.522435][T20749] veth1_macvtap: left promiscuous mode [ 423.610372][T20737] chnl_net:caif_netlink_parms(): no params data found [ 423.805602][T20768] netlink: 'syz.3.4244': attribute type 4 has an invalid length. [ 423.809248][T20766] netlink: 'syz.5.4243': attribute type 1 has an invalid length. [ 423.858420][T20737] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.878980][T20737] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.894343][T20737] bridge_slave_0: entered allmulticast mode [ 423.912021][T20737] bridge_slave_0: entered promiscuous mode [ 423.926035][T20737] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.933338][T20737] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.941165][T20737] bridge_slave_1: entered allmulticast mode [ 423.949643][T20737] bridge_slave_1: entered promiscuous mode [ 424.022400][T20737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.036918][T20737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.100691][T20774] netlink: 'syz.5.4246': attribute type 1 has an invalid length. [ 424.141975][T20774] 8021q: adding VLAN 0 to HW filter on device bond12 [ 424.151779][T20737] team0: Port device team_slave_0 added [ 424.161242][T20737] team0: Port device team_slave_1 added [ 424.178756][T20774] bond12: (slave geneve3): making interface the new active one [ 424.187608][T20774] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 424.259563][ T3503] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.271279][ T3503] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.289989][T20737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.297184][T20737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.323541][T20737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.339602][ T3503] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.361830][ T3503] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.382014][T20737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.391233][T20737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.439893][T20737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.496211][T20781] xt_policy: too many policy elements [ 424.574116][T20737] hsr_slave_0: entered promiscuous mode [ 424.589707][T20737] hsr_slave_1: entered promiscuous mode [ 424.605011][T20737] debugfs: 'hsr0' already exists in 'hsr' [ 424.610983][T20737] Cannot create hsr debugfs directory [ 424.842894][T20795] bond0: entered promiscuous mode [ 425.098615][T20806] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4255'. [ 425.130194][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4256'. [ 425.317653][ T5867] Bluetooth: hci8: command tx timeout [ 425.317934][ T5864] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 425.336286][ T5864] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.347739][ T5864] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.360825][ T5864] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.370711][ T5864] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.465306][T20823] tipc: New replicast peer: 0.0.0.0 [ 425.470856][T20823] tipc: Enabled bearer , priority 10 [ 425.499308][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4260'. [ 425.511948][T20823] tipc: New replicast peer: 255.255.255.255 [ 425.558490][T20827] netlink: 'syz.5.4260': attribute type 6 has an invalid length. [ 425.580527][T20827] netlink: 'syz.5.4260': attribute type 1 has an invalid length. [ 425.588560][T20827] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.4260'. [ 425.637756][T20818] lo speed is unknown, defaulting to 1000 [ 425.931508][T20737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.946749][T20737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.961684][T20737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.989549][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 426.009678][T20737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.058505][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4267'. [ 426.105231][T20844] bond4: Invalid ad_actor_system MAC address. [ 426.111348][T20844] bond4: option ad_actor_system: invalid value (1) [ 426.139297][T20844] bond4 (unregistering): Released all slaves [ 426.441947][T20818] chnl_net:caif_netlink_parms(): no params data found [ 426.463425][T20737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.744482][T20737] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.854181][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.861437][ T8618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.893014][T20818] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.900706][T20818] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.909395][T20818] bridge_slave_0: entered allmulticast mode [ 426.928308][T20818] bridge_slave_0: entered promiscuous mode [ 426.948844][T20873] syz.3.4272: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 426.973691][T20818] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.981748][T20818] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.991321][T20873] CPU: 0 UID: 0 PID: 20873 Comm: syz.3.4272 Not tainted syzkaller #0 PREEMPT(full) [ 426.991348][T20873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 426.991361][T20873] Call Trace: [ 426.991369][T20873] [ 426.991377][T20873] dump_stack_lvl+0x189/0x250 [ 426.991407][T20873] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 426.991436][T20873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.991459][T20873] ? __pfx__printk+0x10/0x10 [ 426.991487][T20873] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 426.991511][T20873] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 426.991543][T20873] warn_alloc+0x214/0x310 [ 426.991580][T20873] ? __pfx_warn_alloc+0x10/0x10 [ 426.991618][T20873] ? __get_vm_area_node+0x28f/0x300 [ 426.991647][T20873] ? nf_tables_newset+0x132b/0x2530 [ 426.991681][T20873] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 426.991743][T20873] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 426.991778][T20873] ? rcu_is_watching+0x15/0xb0 [ 426.991799][T20873] ? nf_tables_newset+0x132b/0x2530 [ 426.991823][T20873] ? nf_tables_newset+0x132b/0x2530 [ 426.991846][T20873] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 426.991874][T20873] ? nf_tables_newset+0x132b/0x2530 [ 426.991900][T20873] ? nft_table_lookup+0x211/0x230 [ 426.991924][T20873] ? nft_set_lookup+0x128/0x150 [ 426.991951][T20873] ? nft_hash_privsize+0xdf/0xf0 [ 426.991975][T20873] nf_tables_newset+0x132b/0x2530 [ 426.992020][T20873] ? __pfx_nf_tables_newset+0x10/0x10 [ 426.992070][T20873] ? __nla_parse+0x40/0x60 [ 426.992097][T20873] nfnetlink_rcv+0x1132/0x2520 [ 426.992162][T20873] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 426.992210][T20873] ? ref_tracker_free+0x63a/0x7d0 [ 426.992261][T20873] ? __netlink_deliver_tap+0x807/0x850 [ 426.992282][T20873] ? netlink_deliver_tap+0x2e/0x1b0 [ 426.992323][T20873] netlink_unicast+0x82c/0x9e0 [ 426.992363][T20873] ? __pfx_netlink_unicast+0x10/0x10 [ 426.992396][T20873] ? netlink_sendmsg+0x642/0xb30 [ 426.992414][T20873] ? skb_put+0x11b/0x210 [ 426.992458][T20873] netlink_sendmsg+0x805/0xb30 [ 426.992490][T20873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.992516][T20873] ? aa_sock_msg_perm+0xf1/0x1d0 [ 426.992538][T20873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.992560][T20873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.992583][T20873] __sock_sendmsg+0x21c/0x270 [ 426.992617][T20873] ____sys_sendmsg+0x505/0x830 [ 426.992649][T20873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.992684][T20873] ? import_iovec+0x74/0xa0 [ 426.992714][T20873] ___sys_sendmsg+0x21f/0x2a0 [ 426.992741][T20873] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.992808][T20873] ? __fget_files+0x2a/0x420 [ 426.992824][T20873] ? __fget_files+0x3a0/0x420 [ 426.992854][T20873] __x64_sys_sendmsg+0x19b/0x260 [ 426.992884][T20873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.992921][T20873] ? rcu_is_watching+0x15/0xb0 [ 426.992947][T20873] ? do_syscall_64+0xbe/0x3b0 [ 426.992974][T20873] do_syscall_64+0xfa/0x3b0 [ 426.993000][T20873] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.993020][T20873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.993040][T20873] ? clear_bhb_loop+0x60/0xb0 [ 426.993064][T20873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.993083][T20873] RIP: 0033:0x7fb60f78eec9 [ 426.993101][T20873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.993119][T20873] RSP: 002b:00007fb610551038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.993140][T20873] RAX: ffffffffffffffda RBX: 00007fb60f9e5fa0 RCX: 00007fb60f78eec9 [ 426.993154][T20873] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 426.993167][T20873] RBP: 00007fb60f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 426.993179][T20873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.993191][T20873] R13: 00007fb60f9e6038 R14: 00007fb60f9e5fa0 R15: 00007ffd1a4196a8 [ 426.993225][T20873] [ 426.993629][T20818] bridge_slave_1: entered allmulticast mode [ 427.037863][T20873] Mem-Info: [ 427.044247][T20818] bridge_slave_1: entered promiscuous mode [ 427.109858][T20873] active_anon:8452 inactive_anon:0 isolated_anon:0 [ 427.109858][T20873] active_file:3078 inactive_file:40031 isolated_file:0 [ 427.109858][T20873] unevictable:768 dirty:62 writeback:0 [ 427.109858][T20873] slab_reclaimable:13289 slab_unreclaimable:129259 [ 427.109858][T20873] mapped:54645 shmem:1365 pagetables:1150 [ 427.109858][T20873] sec_pagetables:0 bounce:0 [ 427.109858][T20873] kernel_misc_reclaimable:0 [ 427.109858][T20873] free:1224547 free_pcp:17906 free_cma:0 [ 427.189585][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.215095][T20873] Node 0 active_anon:33808kB inactive_anon:0kB active_file:12312kB inactive_file:159924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:218580kB dirty:248kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16268kB pagetables:4464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.219529][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.223997][T20873] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.395458][ T5864] Bluetooth: hci8: command tx timeout [ 427.424590][T20873] Node 0 [ 427.495074][ T5864] Bluetooth: hci9: command tx timeout [ 427.542829][T20873] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.572487][T20873] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 427.578947][T20873] Node 0 DMA32 free:986368kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33960kB inactive_anon:0kB active_file:12312kB inactive_file:158348kB unevictable:1536kB writepending:244kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:53148kB local_pcp:21540kB free_cma:0kB [ 427.616733][T20873] lowmem_reserve[]: 0 0 1 1 1 [ 427.621495][T20873] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 427.651482][T20873] lowmem_reserve[]: 0 0 0 0 0 [ 427.656401][T20873] Node 1 Normal free:3895560kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17828kB local_pcp:7992kB free_cma:0kB [ 427.688823][T20873] lowmem_reserve[]: 0 0 0 0 0 [ 427.693580][T20873] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 427.719349][T20873] Node 0 DMA32: 186*4kB (UME) 113*8kB (ME) 4*16kB (M) 1*32kB (M) 53*64kB (ME) 28*128kB (M) 9*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (M) 236*4096kB (M) = 985360kB [ 427.788353][T20818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.789608][T20873] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 427.816410][T20873] Node 1 Normal: 3*4kB (UE) 26*8kB (UME) 20*16kB (UME) 93*32kB (UME) 28*64kB (UME) 5*128kB (UME) 4*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3895612kB [ 427.823244][T20818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.835490][T20873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.853537][T20873] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 427.870037][T20873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.882465][T20873] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.891970][T20873] 44473 total pagecache pages [ 427.898068][T20873] 0 pages in swap cache [ 427.902305][T20873] Free swap = 124996kB [ 427.911553][T20873] Total swap = 124996kB [ 427.916522][T20873] 2097051 pages RAM [ 427.920481][T20873] 0 pages HighMem/MovableOnly [ 427.925659][T20873] 425673 pages reserved [ 427.929853][T20873] 0 pages cma reserved [ 428.070312][T20904] netlink: 'syz.5.4278': attribute type 13 has an invalid length. [ 428.083767][T20818] team0: Port device team_slave_0 added [ 428.104060][T20904] macvtap0: entered allmulticast mode [ 428.125292][T20904] macvtap0: refused to change device tx_queue_len [ 428.137630][T20818] team0: Port device team_slave_1 added [ 428.291559][T20818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.304936][T20818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.379723][T20818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.447279][T20818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.454254][T20818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.486619][T20818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.550592][T20921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4283'. [ 428.737966][T20929] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4287'. [ 428.774109][T20818] hsr_slave_0: entered promiscuous mode [ 428.798963][T20818] hsr_slave_1: entered promiscuous mode [ 428.807979][T20818] debugfs: 'hsr0' already exists in 'hsr' [ 428.814901][T20818] Cannot create hsr debugfs directory [ 428.828124][T20737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.103272][T20737] veth0_vlan: entered promiscuous mode [ 429.218421][T20737] veth1_vlan: entered promiscuous mode [ 429.418089][T20737] veth0_macvtap: entered promiscuous mode [ 429.438522][T20737] veth1_macvtap: entered promiscuous mode [ 429.474802][ T5864] Bluetooth: hci8: command tx timeout [ 429.552365][T20968] sctp: [Deprecated]: syz.3.4299 (pid 20968) Use of int in max_burst socket option. [ 429.552365][T20968] Use struct sctp_assoc_value instead [ 429.555620][ T5864] Bluetooth: hci9: command tx timeout [ 429.610019][T20737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.693252][T20737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.743777][ T8611] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.755894][ T8611] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.769184][ T8611] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.793137][ T8611] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.093066][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.110025][T20987] netlink: 'syz.3.4306': attribute type 39 has an invalid length. [ 430.125227][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.323108][T20991] syzkaller1: entered promiscuous mode [ 430.329520][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.345398][T20991] syzkaller1: entered allmulticast mode [ 430.351080][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.449645][T20818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.479697][T20818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.571739][T20999] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4308'. [ 430.583775][T20999] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4308'. [ 430.594068][T20818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.637592][T20818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.675097][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4308'. [ 430.709933][T20999] netlink: 'syz.4.4308': attribute type 12 has an invalid length. [ 430.769341][T21019] netlink: 'syz.5.4312': attribute type 16 has an invalid length. [ 431.059586][T20818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.129396][T21034] syzkaller1: entered promiscuous mode [ 431.135552][T21034] syzkaller1: entered allmulticast mode [ 431.256604][T20818] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.305424][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.312665][ T8615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.421263][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.428502][ T8615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.511128][T21053] netlink: 'syz.1.4319': attribute type 4 has an invalid length. [ 431.556623][ T5864] Bluetooth: hci8: command tx timeout [ 431.565950][T21047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4319'. [ 431.586714][T21047] netlink: 'syz.1.4319': attribute type 7 has an invalid length. [ 431.594822][T21047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4319'. [ 431.635467][ T5864] Bluetooth: hci9: command tx timeout [ 431.902353][T21071] veth9: entered allmulticast mode [ 432.212957][T20818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.347665][T20818] veth0_vlan: entered promiscuous mode [ 432.371675][T20818] veth1_vlan: entered promiscuous mode [ 432.384941][T21090] netlink: 'syz.1.4331': attribute type 5 has an invalid length. [ 432.428143][T20818] veth0_macvtap: entered promiscuous mode [ 432.470603][T20818] veth1_macvtap: entered promiscuous mode [ 432.538065][T20818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.572610][T20818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.601089][ T8611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.645883][ T8611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.715770][ T5864] Bluetooth: hci9: command tx timeout [ 435.032404][ T8611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.089296][ T8611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.262145][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.271588][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.280875][T21109] tipc: Started in network mode [ 435.286057][T21109] tipc: Node identity c626750b335e, cluster identity 4711 [ 435.302061][T21109] tipc: Enabled bearer , priority 0 [ 435.323400][T21108] syzkaller0: entered promiscuous mode [ 435.332685][T21108] syzkaller0: entered allmulticast mode [ 435.344672][T21108] nft_compat: unsupported protocol 0 [ 435.389289][T21115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4339'. [ 435.401915][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.417203][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.420746][T21109] tipc: Resetting bearer [ 435.436412][T21106] tipc: Resetting bearer [ 435.453475][T21106] tipc: Disabling bearer [ 435.469350][T21115] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4339'. [ 435.629973][T21118] tipc: Started in network mode [ 435.636407][T21118] tipc: Node identity , cluster identity 4711 [ 435.652444][T21118] tipc: Failed to obtain node identity [ 435.669658][T21118] tipc: Enabling of bearer rejected, failed to enable media [ 435.693632][T21130] netlink: 'syz.5.4342': attribute type 11 has an invalid length. [ 435.706673][T21118] syzkaller0: entered promiscuous mode [ 435.712176][T21118] syzkaller0: entered allmulticast mode [ 435.823312][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4343'. [ 436.110420][T21146] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4347'. [ 436.517072][T21167] vlan2: entered allmulticast mode [ 436.535265][T21167] bridge_slave_0: entered allmulticast mode [ 436.573644][T21172] netlink: 'syz.0.4356': attribute type 9 has an invalid length. [ 436.773606][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4357'. [ 436.822830][T21180] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4357'. [ 436.854634][T21180] lo speed is unknown, defaulting to 1000 [ 436.874107][T21180] lo speed is unknown, defaulting to 1000 [ 436.893132][T21180] lo speed is unknown, defaulting to 1000 [ 436.921385][T21187] netlink: 'syz.5.4357': attribute type 9 has an invalid length. [ 436.931877][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4360'. [ 436.972002][T21187] netlink: 'syz.5.4357': attribute type 9 has an invalid length. [ 436.980373][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4360'. [ 436.993173][T21189] netlink: 'syz.1.4361': attribute type 1 has an invalid length. [ 437.030361][T21189] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4361'. [ 437.319667][T21201] syzkaller1: entered promiscuous mode [ 437.326688][T21201] syzkaller1: entered allmulticast mode [ 437.352776][T21205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4365'. [ 437.371704][T21180] infiniband syz0: set down [ 437.376637][T19681] lo speed is unknown, defaulting to 1000 [ 437.382880][T21180] infiniband syz0: added lo [ 437.431884][T21209] netlink: 'syz.3.4367': attribute type 2 has an invalid length. [ 437.455833][T21180] RDS/IB: syz0: added [ 437.459986][T21180] smc: adding ib device syz0 with port count 1 [ 437.466770][T21180] smc: ib device syz0 port 1 has pnetid [ 437.472826][T19681] lo speed is unknown, defaulting to 1000 [ 437.480176][T21209] netlink: 'syz.3.4367': attribute type 2 has an invalid length. [ 437.506993][T21180] lo speed is unknown, defaulting to 1000 [ 437.583489][T21211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.591109][T21213] netlink: 'syz.3.4369': attribute type 3 has an invalid length. [ 437.712523][T21211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.855770][T21211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.001317][T21211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.050350][T21223] netlink: 'syz.3.4371': attribute type 1 has an invalid length. [ 438.171336][T21180] lo speed is unknown, defaulting to 1000 [ 438.281407][ T3503] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.292374][ T3503] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.355133][ T3503] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.381117][ T3503] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.653080][T21180] lo speed is unknown, defaulting to 1000 [ 439.014314][T21257] vlan1: entered promiscuous mode [ 439.019944][T21257] vlan1: entered allmulticast mode [ 439.025221][T21257] hsr_slave_1: entered allmulticast mode [ 439.091707][T21180] lo speed is unknown, defaulting to 1000 [ 439.282106][T21262] Unsupported ieee802154 address type: 0 [ 439.296030][T21267] netlink: 'syz.3.4382': attribute type 29 has an invalid length. [ 439.532045][T21180] lo speed is unknown, defaulting to 1000 [ 439.638792][T21278] syzkaller0: entered promiscuous mode [ 439.646608][T21278] syzkaller0: entered allmulticast mode [ 439.810147][T21282] delete_channel: no stack [ 439.907937][T21180] lo speed is unknown, defaulting to 1000 [ 440.031206][T21286] delete_channel: no stack [ 440.041088][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.320019][T21298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.453480][T21180] lo speed is unknown, defaulting to 1000 [ 440.661751][T21320] __nla_validate_parse: 19 callbacks suppressed [ 440.661772][T21320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4397'. [ 440.710676][T21320] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 440.717316][T21320] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 440.999984][T21329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4401'. [ 441.012271][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4400'. [ 441.026576][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4400'. [ 441.140361][T21180] lo speed is unknown, defaulting to 1000 [ 441.175110][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4404'. [ 441.184242][T21338] openvswitch: netlink: Flow key attr not present in new flow. [ 441.335891][T21345] netlink: 'syz.1.4407': attribute type 30 has an invalid length. [ 441.617650][T21354] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 441.628561][T21354] netlink: 'syz.3.4409': attribute type 3 has an invalid length. [ 441.663815][T21354] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4409'. [ 441.691409][T21354] NCSI netlink: No device for ifindex 0 [ 441.723595][T21180] lo speed is unknown, defaulting to 1000 [ 441.855016][T21360] netlink: 'syz.1.4412': attribute type 16 has an invalid length. [ 441.863840][T21360] netlink: 'syz.1.4412': attribute type 17 has an invalid length. [ 441.984363][T21360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.115832][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 442.158409][T21369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4414'. [ 442.218190][T21373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4415'. [ 442.255122][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'. [ 442.264037][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4415'. [ 442.290543][T21180] lo speed is unknown, defaulting to 1000 [ 442.522676][T21383] netlink: 'syz.0.4420': attribute type 1 has an invalid length. [ 442.917721][T21180] lo speed is unknown, defaulting to 1000 [ 443.134186][T21407] : entered promiscuous mode [ 443.460138][T21180] lo speed is unknown, defaulting to 1000 [ 443.770735][T21431] tipc: Started in network mode [ 443.776138][T21431] tipc: Node identity a2dbf064974a, cluster identity 4711 [ 443.808249][T21431] tipc: Enabled bearer , priority 12 [ 444.346056][T21448] netlink: 'syz.1.4440': attribute type 3 has an invalid length. [ 444.934951][ T5950] tipc: Node number set to 898756708 [ 445.024064][T21473] syzkaller0: entered promiscuous mode [ 445.039696][T21473] syzkaller0: entered allmulticast mode [ 445.678895][T21500] __nla_validate_parse: 9 callbacks suppressed [ 445.678915][T21500] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4460'. [ 445.745563][T21503] netlink: 'syz.5.4462': attribute type 32 has an invalid length. [ 445.753424][T21503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4462'. [ 445.789007][T21508] netlink: 'syz.3.4461': attribute type 15 has an invalid length. [ 445.952712][T21503] bond13: option coupled_control: invalid value (3) [ 445.992386][T21503] bond13 (unregistering): Released all slaves [ 446.056750][ T5867] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 446.067455][ T5867] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 446.076081][ T5867] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 446.085286][ T5867] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 446.093240][ T5867] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 446.222978][T21517] lo speed is unknown, defaulting to 1000 [ 446.291161][T21517] lo speed is unknown, defaulting to 1000 [ 446.507188][T21536] netlink: 'syz.5.4469': attribute type 1 has an invalid length. [ 446.524699][T21536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4469'. [ 446.603358][T21543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4472'. [ 446.619678][T21543] openvswitch: netlink: Flow key attr not present in new flow. [ 446.919446][T21543] dvmrp0: entered allmulticast mode [ 446.976583][T21565] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4474'. [ 447.259543][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4476'. [ 447.618777][T21594] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 447.631807][T21595] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.761363][T21591] vlan2: entered allmulticast mode [ 447.767161][T21591] bond0: entered allmulticast mode [ 447.803386][T21600] bond1: Unable to set up delay as MII monitoring is disabled [ 447.817579][T21600] bond1 (unregistering): Released all slaves [ 447.989642][T21611] 8021q: VLANs not supported on ip6gre0 [ 448.016000][T21517] chnl_net:caif_netlink_parms(): no params data found [ 448.197868][ T5864] Bluetooth: hci10: command tx timeout [ 448.290137][T21629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4493'. [ 448.304213][T21517] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.312235][T21517] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.319774][T21517] bridge_slave_0: entered allmulticast mode [ 448.328278][T21517] bridge_slave_0: entered promiscuous mode [ 448.351039][T21517] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.374740][T21517] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.393132][T21517] bridge_slave_1: entered allmulticast mode [ 448.439342][T21517] bridge_slave_1: entered promiscuous mode [ 448.467230][T21632] team_slave_0: entered promiscuous mode [ 448.472942][T21632] team_slave_1: entered promiscuous mode [ 448.527430][T21632] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 448.631045][T21517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.715110][T21517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.870625][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4503'. [ 448.900208][T21517] team0: Port device team_slave_0 added [ 448.933844][T21659] : entered promiscuous mode [ 448.975735][T21517] team0: Port device team_slave_1 added [ 449.180008][T21517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.196781][T21517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.249354][T21517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.262835][T21517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.281286][T21517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.327605][T21517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.583910][T21517] hsr_slave_0: entered promiscuous mode [ 449.607222][T21517] hsr_slave_1: entered promiscuous mode [ 449.621288][T21517] debugfs: 'hsr0' already exists in 'hsr' [ 449.639957][T21517] Cannot create hsr debugfs directory [ 449.735099][T21694] netlink: 'syz.5.4514': attribute type 26 has an invalid length. [ 449.856746][T21699] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 449.879098][T21699] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 449.937776][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4518'. [ 449.970066][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4518'. [ 450.067050][T21517] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0 [ 450.090743][T21517] netdevsim netdevsim6 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 450.106518][T21517] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.145082][T21707] netlink: 'syz.3.4520': attribute type 1 has an invalid length. [ 450.186980][T21517] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0 [ 450.197198][T21517] netdevsim netdevsim6 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 450.207148][T21517] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.259589][T21707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 450.279228][ T5864] Bluetooth: hci10: command tx timeout [ 450.297972][T21709] netlink: 'syz.5.4519': attribute type 1 has an invalid length. [ 450.359930][T21707] bond5: (slave bond6): making interface the new active one [ 450.412465][T21707] bond5: (slave bond6): Enslaving as an active interface with an up link [ 450.501062][T21713] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 450.521063][T21713] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 450.954968][T21727] can: request_module (can-proto-0) failed. [ 451.069354][T21517] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0 [ 451.086036][T21517] netdevsim netdevsim6 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 451.096033][T21517] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.230300][T21517] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2048 - 0 [ 451.274598][T21517] netdevsim netdevsim6 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 451.296758][T21517] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.308337][T21737] netlink: 'syz.1.4529': attribute type 1 has an invalid length. [ 451.466905][T21737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.598788][T21752] bond1: (slave veth7): Enslaving as an active interface with a down link [ 451.654460][T21737] bond1: (slave veth0_to_bond): making interface the new active one [ 451.681375][T21737] veth0_to_bond: entered promiscuous mode [ 451.697629][T21737] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 451.758694][T21759] bond1: (slave veth9): Enslaving as an active interface with a down link [ 451.840789][T21770] netlink: 'syz.5.4538': attribute type 4 has an invalid length. [ 451.914006][T21775] netlink: 'syz.5.4538': attribute type 4 has an invalid length. [ 451.990234][T21769] syzkaller1: entered promiscuous mode [ 452.004761][T21769] syzkaller1: entered allmulticast mode [ 452.025509][T19641] lo speed is unknown, defaulting to 1000 [ 452.031299][T19641] syz0: Port: 1 Link ACTIVE [ 452.043776][ T5950] lo speed is unknown, defaulting to 1000 [ 452.052536][T21517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 452.110217][T21517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 452.151691][T21517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 452.211582][T21517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.267271][T21788] __nla_validate_parse: 2 callbacks suppressed [ 452.267291][T21788] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.4543'. [ 452.361096][ T5864] Bluetooth: hci10: command tx timeout [ 452.367711][ T5879] Bluetooth: hci4: command 0x0c1a tx timeout [ 452.466223][T21799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4545'. [ 452.557072][T21802] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 452.566477][T21803] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.4548'. [ 452.621057][T21803] openvswitch: netlink: Message has 5 unknown bytes. [ 452.779938][T21517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.850514][T21517] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.910619][T21818] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.917860][T21818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.963351][T21818] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.970583][T21818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.058527][T21841] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4554'. [ 453.063991][T21843] veth1_macvtap: left promiscuous mode [ 453.090195][T21843] macsec0: entered promiscuous mode [ 453.130910][T21843] macsec0: entered allmulticast mode [ 453.169717][T21843] veth1_macvtap: entered promiscuous mode [ 453.185629][T21843] veth1_macvtap: entered allmulticast mode [ 453.192739][T21843] macsec0: left promiscuous mode [ 453.199295][T21843] macsec0: left allmulticast mode [ 453.204354][T21843] veth1_macvtap: left allmulticast mode [ 453.430392][T21863] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci10/hci10:200/input6 [ 453.447164][T21862] xt_l2tp: invalid flags combination: 0 [ 453.505299][T21868] 8021q: VLANs not supported on wg0 [ 453.681070][T21517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.725499][T21881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4566'. [ 453.739314][T21882] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 453.793717][T21877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.939941][T21877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.129486][T21877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.344475][T21877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.352893][T21915] netlink: 'syz.3.4576': attribute type 1 has an invalid length. [ 454.440319][ T5867] Bluetooth: hci10: command tx timeout [ 454.448184][T21921] delete_channel: no stack [ 454.476432][T21915] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 454.575800][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4578'. [ 454.692190][T21830] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.749960][T21517] veth0_vlan: entered promiscuous mode [ 454.795138][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4580'. [ 454.830426][T21816] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.849302][T21816] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.879179][T21933] netlink: 'syz.1.4581': attribute type 10 has an invalid length. [ 454.967846][T21933] veth1_macvtap: left promiscuous mode [ 455.046594][T21816] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.071145][T21517] veth1_vlan: entered promiscuous mode [ 455.222229][T21517] veth0_macvtap: entered promiscuous mode [ 455.271560][T21949] tipc: Started in network mode [ 455.280555][T21949] tipc: Node identity 96d9aa53dfaa, cluster identity 4711 [ 455.291372][T21949] tipc: Enabled bearer , priority 0 [ 455.295276][T21951] netlink: 'syz.5.4588': attribute type 10 has an invalid length. [ 455.309300][T21517] veth1_macvtap: entered promiscuous mode [ 455.336994][T21949] syzkaller0: entered promiscuous mode [ 455.343383][T21949] syzkaller0: entered allmulticast mode [ 455.410224][T21949] tipc: Resetting bearer [ 455.423425][T21948] tipc: Resetting bearer [ 455.477522][T21948] tipc: Disabling bearer [ 455.502468][T21959] team0: Device wireguard0 is of different type [ 455.576999][T21517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.598274][T21517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.618655][T21962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4592'. [ 455.635641][T21817] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.636200][T21962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4592'. [ 455.644926][T21817] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.689969][T21817] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.712186][T21817] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.910880][T21967] bond1: Unable to set up delay as MII monitoring is disabled [ 455.922602][T21967] bond1 (unregistering): Released all slaves [ 455.991210][T21816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.001311][T21816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.093804][T21816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.104576][T21816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.127549][T21974] netlink: 'syz.0.4597': attribute type 12 has an invalid length. [ 456.140439][T21974] netlink: 'syz.0.4597': attribute type 29 has an invalid length. [ 456.162546][T21974] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4597'. [ 456.431820][T21993] netlink: 'syz.0.4601': attribute type 10 has an invalid length. [ 456.492240][T21993] veth1_macvtap: left promiscuous mode [ 456.681125][T22004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.746691][T22008] netlink: 'syz.1.4607': attribute type 4 has an invalid length. [ 456.992328][T22023] netlink: 'syz.6.4611': attribute type 1 has an invalid length. [ 457.330813][T22028] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.338631][T22028] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.755359][T22028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.833802][T22028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.866701][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.880120][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.889218][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.899023][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.911330][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.994091][T22043] __nla_validate_parse: 3 callbacks suppressed [ 457.994111][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 458.010470][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4617'. [ 458.205447][T21818] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.215128][T21829] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.243774][T21829] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.291798][T21829] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.343966][T22040] lo speed is unknown, defaulting to 1000 [ 458.379346][T22040] lo speed is unknown, defaulting to 1000 [ 458.552903][T22059] syzkaller0: entered promiscuous mode [ 458.572600][T22059] syzkaller0: entered allmulticast mode [ 458.620300][T22059] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 459.029084][T22084] netlink: 'syz.0.4631': attribute type 251 has an invalid length. [ 459.462757][T22040] chnl_net:caif_netlink_parms(): no params data found [ 459.489273][T22105] netlink: 'syz.3.4638': attribute type 1 has an invalid length. [ 459.568015][T22105] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 459.798945][T22040] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.823686][T22040] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.833283][T22040] bridge_slave_0: entered allmulticast mode [ 459.856799][T22040] bridge_slave_0: entered promiscuous mode [ 459.882371][T22040] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.894720][T22040] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.912347][T22040] bridge_slave_1: entered allmulticast mode [ 459.925750][T22040] bridge_slave_1: entered promiscuous mode [ 459.954991][ T5867] Bluetooth: hci0: command tx timeout [ 460.081185][T22040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.096764][T22040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.242454][T22040] team0: Port device team_slave_0 added [ 460.249147][T22136] Bluetooth: MGMT ver 1.23 [ 460.261009][T22136] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4646'. [ 460.317643][T22040] team0: Port device team_slave_1 added [ 460.371211][T22136] bond2 (unregistering): Released all slaves [ 460.460102][T22040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.471406][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.501500][T22040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.528751][T22040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.583591][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.591085][T22149] netlink: 'syz.6.4649': attribute type 13 has an invalid length. [ 460.642682][T22040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.842998][T22166] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4651'. [ 460.883164][T22149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.938001][T22162] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4651'. [ 461.101625][T22179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4657'. [ 461.127789][T22040] hsr_slave_0: entered promiscuous mode [ 461.136144][T22040] hsr_slave_1: entered promiscuous mode [ 461.142681][T22040] debugfs: 'hsr0' already exists in 'hsr' [ 461.148915][T22040] Cannot create hsr debugfs directory [ 461.176447][T22182] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4656'. [ 461.242008][T22179] pim6reg: entered allmulticast mode [ 461.254113][T22183] pim6reg: left allmulticast mode [ 461.402272][T22194] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4660'. [ 461.558762][T22040] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.664100][T22040] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.754755][T22040] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.788792][T22209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 461.829666][T22040] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.034751][ T5864] Bluetooth: hci0: command tx timeout [ 462.078124][T22220] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4667'. [ 462.113858][T22040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 462.275321][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 462.282860][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 462.448172][T22220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.460190][T22220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.470322][T22220] bond0 (unregistering): Released all slaves [ 462.492863][T22040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 462.525516][T22040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 462.580090][T22040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 463.061866][T22040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.110331][T21813] veth0_to_bond: left promiscuous mode [ 463.169573][T22040] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.203145][T22273] __nla_validate_parse: 1 callbacks suppressed [ 463.203164][T22273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4681'. [ 463.225477][T21816] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.232779][T21816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.245491][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'. [ 463.266354][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'. [ 463.266905][T21816] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.282469][T21816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.458563][T22284] netlink: 'syz.1.4684': attribute type 1 has an invalid length. [ 463.469898][T22284] netlink: 'syz.1.4684': attribute type 2 has an invalid length. [ 463.956533][T22312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 464.062751][T22316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4692'. [ 464.115513][ T5867] Bluetooth: hci0: command tx timeout [ 464.124140][T22040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.494751][T22344] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4698'. [ 464.495585][T22339] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4697'. [ 464.569696][T22343] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4698'. [ 464.608307][T22339] tipc: Enabled bearer , priority 0 [ 464.636216][T22356] syzkaller0: entered promiscuous mode [ 464.641759][T22356] syzkaller0: entered allmulticast mode [ 464.698440][T22339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 464.812570][T22339] tipc: Resetting bearer [ 464.849435][T22338] tipc: Resetting bearer [ 464.885622][T22338] tipc: Disabling bearer [ 464.922397][T22363] team0: Device vti0 is of different type [ 465.069367][T22368] netlink: 'syz.1.4703': attribute type 5 has an invalid length. [ 465.078247][T22366] netlink: 'syz.1.4703': attribute type 5 has an invalid length. [ 465.100005][T22374] tipc: Enabled bearer , priority 13 [ 465.252103][T22367] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.442707][T22367] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.628839][T22367] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.700475][T22040] veth0_vlan: entered promiscuous mode [ 465.753893][T22391] IPVS: Error joining to the multicast group [ 465.824429][T22367] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.830260][T22395] netlink: 'syz.3.4713': attribute type 4 has an invalid length. [ 465.895978][T22040] veth1_vlan: entered promiscuous mode [ 466.019365][T22040] veth0_macvtap: entered promiscuous mode [ 466.076527][T22404] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4715'. [ 466.096660][ T5941] tipc: Node number set to 1232317011 [ 466.113826][T22040] veth1_macvtap: entered promiscuous mode [ 466.195536][ T5867] Bluetooth: hci0: command tx timeout [ 466.232218][T22414] Bluetooth: MGMT ver 1.23 [ 466.247796][T21829] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.337971][T21813] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.386273][T22040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.429645][T21816] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.470372][T22040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.555123][T21816] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.631402][T21816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.655247][T21816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.664346][T21816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.703445][T21816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.959983][T21829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.979918][T21829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.023301][T22444] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4728'. [ 467.118725][T21818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.146933][T21818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.210406][T22455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.246055][T22455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4733'. [ 467.391256][T22463] netlink: 'syz.5.4614': attribute type 7 has an invalid length. [ 467.434671][T22463] netlink: 'syz.5.4614': attribute type 8 has an invalid length. [ 467.665980][T22472] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 467.741563][T22472] bond0 (unregistering): Released all slaves [ 467.752949][T22484] nbd: device at index 1 is going down [ 467.847639][T22484] lo: entered promiscuous mode [ 467.858445][T22484] tunl0: entered promiscuous mode [ 467.886632][T22484] gre0: entered promiscuous mode [ 467.921762][T22484] gretap0: entered promiscuous mode [ 467.987290][T22484] erspan0: entered promiscuous mode [ 468.006263][T22484] ip_vti0: entered promiscuous mode [ 468.350090][T22504] __nla_validate_parse: 4 callbacks suppressed [ 468.350109][T22504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4747'. [ 468.445605][T22513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.173739][T22521] netlink: 'syz.3.4755': attribute type 2 has an invalid length. [ 469.216798][T22523] tipc: Enabled bearer , priority 0 [ 469.225112][T22523] syzkaller0: entered promiscuous mode [ 469.230613][T22523] syzkaller0: entered allmulticast mode [ 469.343164][T22531] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4754'. [ 469.393358][T22523] tipc: Resetting bearer [ 469.435409][T22541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4759'. [ 469.458371][T22515] tipc: Resetting bearer [ 469.582787][T22553] netlink: 'syz.3.4763': attribute type 1 has an invalid length. [ 469.596904][T22553] netlink: 'syz.3.4763': attribute type 1 has an invalid length. [ 469.664263][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4763'. [ 469.788357][T22515] tipc: Disabling bearer [ 470.031133][T22564] syzkaller1: entered promiscuous mode [ 470.062675][T22572] openvswitch: netlink: Missing valid actions attribute. [ 470.076984][T22572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.084763][T22564] syzkaller1: entered allmulticast mode [ 470.224058][T22577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4768'. [ 470.261334][T22578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4768'. [ 470.282965][T22577] openvswitch: netlink: Flow key attr not present in new flow. [ 470.291993][T22578] openvswitch: netlink: Flow key attr not present in new flow. [ 470.399028][T22583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.609232][T22595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4775'. [ 470.826505][T22614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.954018][T22616] bridge_slave_0: left allmulticast mode [ 470.976834][T22616] bridge_slave_0: left promiscuous mode [ 470.997310][T22616] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.031057][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4781'. [ 471.109767][T22616] bridge_slave_1: left allmulticast mode [ 471.139639][T22616] bridge_slave_1: left promiscuous mode [ 471.159394][T22616] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.266931][T22616] bond0: (slave bond_slave_0): Releasing backup interface [ 471.374165][T22616] bond0: (slave bond_slave_1): Releasing backup interface [ 471.404727][T22635] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 471.489865][T22616] team0: Port device team_slave_0 removed [ 471.522673][T22616] team0: Port device team_slave_1 removed [ 471.551702][T22616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.571879][T22616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.597339][T22616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.608567][T22616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.689164][T22639] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4785'. [ 472.200795][T22665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.252309][T22671] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4800'. [ 472.366724][T22680] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 472.483275][T22687] netlink: 'syz.6.4806': attribute type 9 has an invalid length. [ 472.515521][T22689] netlink: 'syz.6.4806': attribute type 9 has an invalid length. [ 472.725682][T22697] lo speed is unknown, defaulting to 1000 [ 472.735499][T22694] Bluetooth: MGMT ver 1.23 [ 472.740703][T22697] lo speed is unknown, defaulting to 1000 [ 472.826074][T22701] netlink: 'syz.6.4810': attribute type 4 has an invalid length. [ 473.057723][T22673] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 473.185965][T22711] netlink: 'syz.0.4814': attribute type 10 has an invalid length. [ 473.310936][T22711] team0: Port device dummy0 added [ 473.335174][T22721] netlink: 'syz.0.4814': attribute type 10 has an invalid length. [ 473.512085][T22721] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 473.544757][T22727] netlink: 'syz.3.4818': attribute type 3 has an invalid length. [ 473.563944][T22721] team0: Failed to send options change via netlink (err -105) [ 473.577368][T22721] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 473.621420][T22721] team0: Port device dummy0 removed [ 473.928860][T22744] wg2: entered promiscuous mode [ 473.948709][T22744] wg2: entered allmulticast mode [ 474.237803][T22759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.274923][ T5867] Bluetooth: hci0: command 0x0c20 tx timeout [ 474.301292][T22761] netlink: 'syz.5.4830': attribute type 4 has an invalid length. [ 474.318358][T22762] netlink: 'syz.1.4829': attribute type 10 has an invalid length. [ 474.353194][T22763] netlink: 'syz.5.4830': attribute type 4 has an invalid length. [ 474.844356][T22768] netlink: 'syz.3.4831': attribute type 1 has an invalid length. [ 474.948839][T22762] dummy0: entered promiscuous mode [ 474.970666][T22762] team0: Port device dummy0 added [ 475.106402][T22768] 8021q: adding VLAN 0 to HW filter on device bond9 [ 475.173211][T22773] bond9: (slave veth0_to_bond): making interface the new active one [ 475.191246][T22784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.229512][T22773] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 475.472562][T22795] __nla_validate_parse: 1 callbacks suppressed [ 475.472580][T22795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4839'. [ 475.731626][T22807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4841'. [ 475.766957][T22809] tipc: Started in network mode [ 475.771859][T22809] tipc: Node identity , cluster identity 4711 [ 475.779071][T22809] tipc: Failed to obtain node identity [ 475.788969][T22809] tipc: Enabling of bearer rejected, failed to enable media [ 475.836220][T22809] netlink: 'syz.6.4842': attribute type 1 has an invalid length. [ 475.939556][T22822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.004014][T22821] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 476.007823][T22824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4847'. [ 476.034218][T22821] team0: Device macvtap1 is already an upper device of the team interface [ 476.215066][T22833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4850'. [ 476.357794][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4853'. [ 476.391903][T22840] openvswitch: netlink: IPv6 tunnel dst address is zero [ 476.513189][T22848] netlink: 'syz.1.4855': attribute type 2 has an invalid length. [ 476.588516][T22850] lo speed is unknown, defaulting to 1000 [ 476.598847][T22848] netlink: 'syz.1.4855': attribute type 10 has an invalid length. [ 476.608906][T22850] lo speed is unknown, defaulting to 1000 [ 476.614926][T22848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4855'. [ 476.661944][T22848] batadv0: entered promiscuous mode [ 476.692158][T22848] batadv0: entered allmulticast mode [ 476.730465][T22848] bridge0: port 3(batadv0) entered blocking state [ 476.740068][T22854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4857'. [ 476.743162][T22848] bridge0: port 3(batadv0) entered disabled state [ 476.806541][T22848] bridge0: port 3(batadv0) entered blocking state [ 476.813149][T22848] bridge0: port 3(batadv0) entered forwarding state [ 476.861787][T22856] 8021q: VLANs not supported on gre0 [ 476.994725][T22859] gtp0: entered promiscuous mode [ 476.999811][T22859] gtp0: entered allmulticast mode [ 477.187000][T21817] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 477.196347][T21817] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 477.314382][T22877] team0: Device wireguard0 is of different type [ 477.433797][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4865'. [ 477.556447][T22887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.616975][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4866'. [ 478.027275][T22912] netlink: 'syz.3.4872': attribute type 9 has an invalid length. [ 478.036340][T22914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4871'. [ 478.048479][T22915] veth0: entered promiscuous mode [ 478.054207][T22911] netlink: 'syz.1.4871': attribute type 4 has an invalid length. [ 478.071671][T22915] veth0: left promiscuous mode [ 478.110267][T22911] netlink: 'syz.1.4871': attribute type 4 has an invalid length. [ 478.691910][T22932] tipc: Enabled bearer , priority 0 [ 478.790506][T22940] tipc: Resetting bearer [ 479.057132][T22930] tipc: Disabling bearer [ 479.099049][T22950] bridge0: port 1(batadv1) entered blocking state [ 479.128587][T22950] bridge0: port 1(batadv1) entered disabled state [ 479.149189][T22950] batadv1: entered allmulticast mode [ 479.168289][T22950] batadv1: entered promiscuous mode [ 479.557317][T22970] xfrm1: entered promiscuous mode [ 479.562535][T22970] xfrm1: entered allmulticast mode [ 479.617908][T21813] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 479.627679][T21813] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 479.914037][T23005] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 479.925774][T22997] IPVS: length: 157 != 24 [ 480.505945][T23016] __nla_validate_parse: 2 callbacks suppressed [ 480.505966][T23016] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4904'. [ 480.567375][T23018] validate_nla: 3 callbacks suppressed [ 480.567394][T23018] netlink: 'syz.5.4903': attribute type 1 has an invalid length. [ 480.591045][T23018] netlink: 'syz.5.4903': attribute type 2 has an invalid length. [ 480.680931][T23009] tipc: Enabled bearer , priority 0 [ 480.688779][T23009] syzkaller0: entered promiscuous mode [ 480.694275][T23009] syzkaller0: entered allmulticast mode [ 480.743548][T23015] netlink: 'syz.5.4903': attribute type 10 has an invalid length. [ 480.758495][T23009] tipc: Resetting bearer [ 480.770480][T23015] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 480.780907][T23025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4908'. [ 480.814384][T23026] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4908'. [ 480.835712][T23007] tipc: Resetting bearer [ 480.915040][T23007] tipc: Disabling bearer [ 480.990067][T23034] delete_channel: no stack [ 481.136851][T23034] bond2: Unable to set down delay as MII monitoring is disabled [ 481.178808][T23034] bond2 (unregistering): Released all slaves [ 481.207785][T23049] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4912'. [ 481.244054][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4913'. [ 481.277150][T23036] bond0 (unregistering): Released all slaves [ 482.037108][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4925'. [ 482.092335][T23092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4925'. [ 482.158456][T23095] netlink: 'syz.6.4926': attribute type 23 has an invalid length. [ 482.384251][T23104] netlink: 'syz.3.4930': attribute type 2 has an invalid length. [ 483.042981][T23133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4934'. [ 483.076342][ T5864] Bluetooth: hci3: command 0x0405 tx timeout [ 483.602666][T23145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4940'. [ 483.896116][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4942'. [ 484.450908][T23172] tipc: Started in network mode [ 484.493566][T23172] tipc: Node identity 9ab20a1786f6, cluster identity 4711 [ 484.508063][T23172] tipc: Enabled bearer , priority 0 [ 484.530153][T23176] syzkaller0: entered promiscuous mode [ 484.550073][T23176] syzkaller0: entered allmulticast mode [ 484.568128][T23172] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 484.644930][T23170] tipc: Resetting bearer [ 484.686043][T23170] tipc: Disabling bearer [ 484.929631][T23195] tipc: Enabled bearer , priority 0 [ 485.027788][T23194] syzkaller0: entered promiscuous mode [ 485.033312][T23194] syzkaller0: entered allmulticast mode [ 485.092100][T23194] tipc: Resetting bearer [ 485.137669][T23194] tipc: Disabling bearer [ 485.191370][T23206] nbd: couldn't find a device at index 0 [ 485.489829][T23215] netlink: 'syz.3.4960': attribute type 39 has an invalid length. [ 485.650136][T23226] __nla_validate_parse: 3 callbacks suppressed [ 485.650137][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4963'. [ 485.650155][T23226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4963'. [ 485.789967][T23227] tipc: Started in network mode [ 485.796086][T23227] tipc: Node identity 2e6fa1db05b4, cluster identity 4711 [ 485.808565][T23227] tipc: Enabled bearer , priority 0 [ 485.836649][T23227] syzkaller0: entered promiscuous mode [ 485.842297][T23227] syzkaller0: entered allmulticast mode [ 485.891269][T23227] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 485.932539][T23227] tipc: Resetting bearer [ 485.969604][T23225] tipc: Resetting bearer [ 486.041328][T23225] tipc: Disabling bearer [ 486.052209][T23242] netlink: 'syz.1.4969': attribute type 1 has an invalid length. [ 486.060742][T23242] netlink: 'syz.1.4969': attribute type 3 has an invalid length. [ 486.069110][T23242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4969'. [ 486.079015][T23242] NCSI netlink: No device for ifindex 131080 [ 486.204209][T23245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4972'. [ 486.274865][T23245] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.296847][T23252] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4973'. [ 486.319653][T23252] 8021q: VLANs not supported on ip_vti0 [ 486.727603][T23282] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4981'. [ 486.768978][T23282] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4981'. [ 486.875008][T23282] nbd: device at index 5 is going down [ 487.097037][T21828] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.130866][T21828] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.151723][T21828] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.168927][T21828] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.191567][T23309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4988'. [ 487.279574][T23311] netlink: 'syz.6.4989': attribute type 23 has an invalid length. [ 487.453893][T23322] netlink: 'syz.5.4994': attribute type 1 has an invalid length. [ 487.516915][T23326] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 487.546676][T23322] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4994'. [ 487.579051][T23326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4994'. [ 488.149359][T23354] bridge1: port 1(veth3) entered blocking state [ 488.156321][T23354] bridge1: port 1(veth3) entered disabled state [ 488.163144][T23354] veth3: entered allmulticast mode [ 488.171973][T23354] veth3: entered promiscuous mode [ 488.199370][T23360] bridge1: port 2(veth5) entered blocking state [ 488.206106][T23360] bridge1: port 2(veth5) entered disabled state [ 488.212752][T23360] veth5: entered allmulticast mode [ 488.221237][T23360] veth5: entered promiscuous mode [ 488.306110][T23362] netlink: 'syz.1.5006': attribute type 11 has an invalid length. [ 488.338292][T23362] netlink: 'syz.1.5006': attribute type 11 has an invalid length. [ 488.338982][T21806] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.359043][T21806] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.370068][T21806] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.381502][T21806] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.583576][T23372] tipc: Enabling of bearer rejected, failed to enable media [ 489.094756][ T43] IPVS: starting estimator thread 0... [ 489.185366][T23395] IPVS: using max 28 ests per chain, 67200 per kthread [ 489.428708][T23413] netlink: 'syz.6.5026': attribute type 7 has an invalid length. [ 489.445464][T23413] netlink: 'syz.6.5026': attribute type 8 has an invalid length. [ 489.474395][T23413] netlink: 'syz.6.5026': attribute type 4 has an invalid length. [ 490.134709][T23456] tipc: Enabling of bearer rejected, failed to enable media [ 490.269452][T23461] netlink: 'syz.5.5043': attribute type 2 has an invalid length. [ 490.278856][T23461] nbd: must specify at least one socket [ 490.502369][T23473] tipc: New replicast peer: 255.255.255.255 [ 490.531083][T23473] tipc: Enabled bearer , priority 10 [ 490.613476][T23485] netlink: 'syz.6.5049': attribute type 11 has an invalid length. [ 490.713318][T23490] __nla_validate_parse: 19 callbacks suppressed [ 490.713339][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5052'. [ 490.742191][T23492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5053'. [ 490.764559][T23490] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5052'. [ 491.061210][T23512] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5060'. [ 491.243834][T23521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 491.256401][T23522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5064'. [ 491.269244][T23522] validate_nla: 2 callbacks suppressed [ 491.269264][T23522] netlink: 'syz.1.5064': attribute type 1 has an invalid length. [ 491.290609][T23522] netlink: 'syz.1.5064': attribute type 4 has an invalid length. [ 491.312723][T23522] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5064'. [ 491.455858][T23529] sctp: [Deprecated]: syz.3.5067 (pid 23529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.455858][T23529] Use struct sctp_sack_info instead [ 491.466452][T23531] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 491.494236][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5068'. [ 491.518306][T23533] netlink: 'syz.5.5069': attribute type 24 has an invalid length. [ 491.646102][T19681] tipc: Node number set to 474221079 [ 491.697833][T23547] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5071'. [ 491.783741][T23547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5071'. [ 491.800736][T23547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5071'. [ 492.053919][T23573] netlink: 'syz.5.5080': attribute type 33 has an invalid length. [ 492.104949][T23575] netlink: 'syz.1.5081': attribute type 1 has an invalid length. [ 492.117855][T23575] netlink: 'syz.1.5081': attribute type 2 has an invalid length. [ 492.135941][T23577] netlink: 'syz.1.5081': attribute type 1 has an invalid length. [ 492.153553][T23577] netlink: 'syz.1.5081': attribute type 2 has an invalid length. [ 493.140489][T23606] netlink: 'syz.5.5089': attribute type 4 has an invalid length. [ 494.196996][T23637] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 494.234794][T23638] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 495.654193][T23697] netlink: 'syz.1.5117': attribute type 1 has an invalid length. [ 495.748912][T23697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.058729][T23716] macvtap1: entered promiscuous mode [ 496.064074][T23716] vlan0: entered promiscuous mode [ 496.127671][T23716] macvtap1: entered allmulticast mode [ 496.133194][T23716] vlan0: entered allmulticast mode [ 496.176481][T23716] veth0_vlan: entered allmulticast mode [ 496.239667][T23718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.244916][T23719] macvtap2: entered promiscuous mode [ 496.265756][T23719] macvtap2: entered allmulticast mode [ 496.297454][T23726] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 496.481562][ T5879] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 496.512636][ T5879] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 496.522148][ T5879] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 496.534260][ T5879] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 496.543628][ T5879] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 496.740006][T23746] validate_nla: 1 callbacks suppressed [ 496.740024][T23746] netlink: 'syz.6.5127': attribute type 2 has an invalid length. [ 496.763674][T23746] __nla_validate_parse: 6 callbacks suppressed [ 496.763693][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5127'. [ 497.055384][ T8620] bond10 (unregistering): (slave gretap2): Releasing active interface [ 497.247314][ T8620] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 497.257394][ T8620] geneve1 (unregistering): left promiscuous mode [ 497.798706][ T8620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.808226][ T8620] bond_slave_0: left promiscuous mode [ 497.815225][ T8620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.825886][ T8620] bond_slave_1: left promiscuous mode [ 497.831841][ T8620] bond0 (unregistering): Released all slaves [ 497.846057][ T8620] bond1 (unregistering): Released all slaves [ 497.993166][ T8620] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 498.002938][ T8620] bond2 (unregistering): (slave veth9): Releasing backup interface [ 498.012757][ T8620] bond2 (unregistering): Released all slaves [ 498.029271][ T8620] bond3 (unregistering): Released all slaves [ 498.042952][ T8620] bond4 (unregistering): Released all slaves [ 498.190465][ T8620] bond5 (unregistering): Released all slaves [ 498.205916][ T8620] bond6 (unregistering): Released all slaves [ 498.347626][ T8620] bond7 (unregistering): Released all slaves [ 498.365481][ T8620] bond8 (unregistering): Released all slaves [ 498.437268][ T5879] Bluetooth: hci5: command 0x0406 tx timeout [ 498.519380][ T8620] bond9 (unregistering): Released all slaves [ 498.596185][ T5864] Bluetooth: hci11: command tx timeout [ 498.664400][ T8620] bond10 (unregistering): Released all slaves [ 498.688931][ T8620] bond11 (unregistering): Released all slaves [ 499.051664][T23757] macvlan0 (unregistering): left promiscuous mode [ 499.080799][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'. [ 499.182940][ T8620] tipc: Disabling bearer [ 499.192513][ T8620] tipc: Disabling bearer [ 499.199284][ T8620] tipc: Disabling bearer [ 499.208695][ T8620] tipc: Left network mode [ 499.274907][T23733] lo speed is unknown, defaulting to 1000 [ 499.293187][T23733] lo speed is unknown, defaulting to 1000 [ 499.585671][T23779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5135'. [ 500.038124][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 500.143094][T23801] gtp0: entered promiscuous mode [ 500.159455][T23801] gtp0: entered allmulticast mode [ 500.284593][ T8620] macvlan0: left promiscuous mode [ 500.302214][ T8620] batadv_slave_0: left promiscuous mode [ 500.341786][ T8620] hsr_slave_0: left promiscuous mode [ 500.349668][T23813] netlink: 'syz.1.5146': attribute type 10 has an invalid length. [ 500.359569][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.369095][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.410419][T23815] netlink: 'syz.1.5146': attribute type 10 has an invalid length. [ 500.522197][T23820] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 500.677242][ T5864] Bluetooth: hci11: command tx timeout [ 500.699860][ T8620] pim6reg (unregistering): left allmulticast mode [ 501.279759][ T8620] team0 (unregistering): Port device team_slave_1 removed [ 501.333438][ T8620] team0 (unregistering): Port device team_slave_0 removed [ 501.490071][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.892558][T23815] team0: Port device dummy0 removed [ 501.921979][T23815] dummy0: left promiscuous mode [ 501.931942][T23815] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 502.090736][T23825] netlink: 'syz.6.5148': attribute type 1 has an invalid length. [ 502.116308][T23833] netlink: 'syz.3.5150': attribute type 21 has an invalid length. [ 502.219153][T23833] bond10 (unregistering): Released all slaves [ 502.277595][T23733] chnl_net:caif_netlink_parms(): no params data found [ 502.442317][ T8620] IPVS: stop unused estimator thread 0... [ 502.678024][T23733] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.700238][T23733] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.707764][T23733] bridge_slave_0: entered allmulticast mode [ 502.716831][T23733] bridge_slave_0: entered promiscuous mode [ 502.735534][T23733] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.742712][T23733] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.754808][ T5864] Bluetooth: hci11: command tx timeout [ 502.773116][T23733] bridge_slave_1: entered allmulticast mode [ 502.796889][T23733] bridge_slave_1: entered promiscuous mode [ 502.967798][T23852] netlink: 'syz.1.5155': attribute type 2 has an invalid length. [ 503.000546][T23733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.016102][T23855] openvswitch: netlink: EtherType 50a is less than min 600 [ 503.038866][T23852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5155'. [ 503.051882][T23733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.194683][T23733] team0: Port device team_slave_0 added [ 503.208415][T23733] team0: Port device team_slave_1 added [ 503.287722][T23733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.301184][T23733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.378245][T23733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.461077][T23733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.472582][T23733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.534589][T23733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.683537][T23733] hsr_slave_0: entered promiscuous mode [ 503.708440][T23733] hsr_slave_1: entered promiscuous mode [ 503.721180][T23733] debugfs: 'hsr0' already exists in 'hsr' [ 503.727100][T23733] Cannot create hsr debugfs directory [ 503.745418][T23880] openvswitch: netlink: Flow actions attr not present in new flow. [ 503.851983][T23885] netlink: 'syz.3.5164': attribute type 1 has an invalid length. [ 503.875695][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5164'. [ 504.132046][T23898] netlink: 'syz.3.5166': attribute type 10 has an invalid length. [ 504.191748][T23898] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 504.215268][T23898] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 504.260251][T23733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.275804][T23733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.402079][T23733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.423829][T23733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.543140][T23733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.556339][T23733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.645842][T23733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.672064][T23733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.695324][T23911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5169'. [ 504.734088][T23910] syzkaller1: entered promiscuous mode [ 504.753868][T23910] syzkaller1: entered allmulticast mode [ 504.837914][ T5864] Bluetooth: hci11: command tx timeout [ 504.968324][T23733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.989170][T23733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 505.022571][T23733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 505.049032][T23733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 505.231399][T23733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.263607][T23733] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.287142][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.294320][ T8612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.374196][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.381422][ T8612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.555113][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5177'. [ 505.566746][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5177'. [ 505.967355][T23733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.078959][T23733] veth0_vlan: entered promiscuous mode [ 506.121583][T23733] veth1_vlan: entered promiscuous mode [ 506.215930][T23733] veth0_macvtap: entered promiscuous mode [ 506.239397][T23733] veth1_macvtap: entered promiscuous mode [ 506.248644][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5180'. [ 506.284283][T23957] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5180'. [ 506.340390][T23733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.377954][T23733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.436552][ T9244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.460027][T23963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.497622][ T9244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.521261][ T9244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.632375][ T9244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.843379][ T8612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.858801][ T8612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.879557][T23980] netlink: 'syz.1.5188': attribute type 7 has an invalid length. [ 506.942901][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.961675][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.160648][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5193'. [ 507.198618][T23996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5193'. [ 507.209125][T23998] syz_tun: entered allmulticast mode [ 507.231103][T24001] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5195'. [ 507.258084][T23998] syz_tun: left allmulticast mode [ 507.703573][T24026] netlink: 'syz.1.5202': attribute type 1 has an invalid length. [ 507.715246][T24026] netlink: 'syz.1.5202': attribute type 2 has an invalid length. [ 507.756885][T24026] netlink: 'syz.1.5202': attribute type 1 has an invalid length. [ 507.775210][T24026] netlink: 'syz.1.5202': attribute type 2 has an invalid length. [ 507.968047][T24040] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 508.265110][T24051] __nla_validate_parse: 4 callbacks suppressed [ 508.265130][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5210'. [ 508.677515][ T5879] Bluetooth: hci6: command 0x0406 tx timeout [ 508.752183][T24065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5217'. [ 508.816826][T24067] syzkaller1: entered promiscuous mode [ 508.830540][T24067] syzkaller1: entered allmulticast mode [ 508.847857][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5218'. [ 509.081016][T24071] lo speed is unknown, defaulting to 1000 [ 509.108994][T24071] lo speed is unknown, defaulting to 1000 [ 509.207298][T24085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5222'. [ 509.526537][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5225'. [ 510.326605][T24124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5235'. [ 510.358486][T24124] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5235'. [ 510.479062][T24132] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 510.509031][T24133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5238'. [ 510.724913][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5239'. [ 510.776692][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'. [ 511.181481][ T5879] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 511.191791][ T5879] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 511.200501][ T5879] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 511.208781][ T5879] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 511.217049][ T5879] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 511.416703][T24154] lo speed is unknown, defaulting to 1000 [ 511.445051][T24154] lo speed is unknown, defaulting to 1000 [ 512.465798][T24194] netlink: 'syz.2.5255': attribute type 10 has an invalid length. [ 512.572878][T24154] chnl_net:caif_netlink_parms(): no params data found [ 512.797442][T24202] sctp: [Deprecated]: syz.2.5257 (pid 24202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.797442][T24202] Use struct sctp_sack_info instead [ 512.902948][T24202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.946424][T24154] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.953668][T24154] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.973249][T24154] bridge_slave_0: entered allmulticast mode [ 512.985749][T24211] netlink: 'syz.3.5259': attribute type 1 has an invalid length. [ 513.005484][T24154] bridge_slave_0: entered promiscuous mode [ 513.043520][T24211] 8021q: adding VLAN 0 to HW filter on device bond10 [ 513.051739][T24154] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.059550][T24154] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.066962][T24154] bridge_slave_1: entered allmulticast mode [ 513.075308][T24154] bridge_slave_1: entered promiscuous mode [ 513.127854][T24154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.150140][T24154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.248816][T24154] team0: Port device team_slave_0 added [ 513.270982][T24154] team0: Port device team_slave_1 added [ 513.315071][ T5879] Bluetooth: hci12: command tx timeout [ 513.352407][T24154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.365894][T24154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.392704][T24154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.443850][T24154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.464439][T24154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.511310][T24154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.583512][T24233] __nla_validate_parse: 5 callbacks suppressed [ 513.583531][T24233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5264'. [ 513.590178][T24232] openvswitch: netlink: IPv6 tunnel dst address is zero [ 513.617468][T24154] hsr_slave_0: entered promiscuous mode [ 513.624290][T24154] hsr_slave_1: entered promiscuous mode [ 513.637576][T24154] debugfs: 'hsr0' already exists in 'hsr' [ 513.643585][T24154] Cannot create hsr debugfs directory [ 513.678841][T24232] macvlan4: entered promiscuous mode [ 513.684247][T24232] macvlan4: entered allmulticast mode [ 513.692168][T24232] bond3: (slave macvlan4): Opening slave failed [ 513.974451][T24154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.186371][T24154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.357910][T24154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.371930][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5271'. [ 514.510860][T24154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.800852][T24278] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5277'. [ 514.851610][T24278] 8021q: VLANs not supported on ip6_vti0 [ 514.959892][T24291] netlink: 'syz.1.5281': attribute type 1 has an invalid length. [ 514.982149][T24293] netlink: 'syz.3.5280': attribute type 83 has an invalid length. [ 514.992724][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5280'. [ 514.999845][T24154] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 515.052079][T24154] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 515.089664][T24293] netlink: 'syz.3.5280': attribute type 1 has an invalid length. [ 515.098562][T24154] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 515.115496][T24154] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 515.343889][T24314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5285'. [ 515.377457][ T8612] tipc: Subscription rejected, illegal request [ 515.385600][T24154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.390630][T24316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5286'. [ 515.395438][ T5879] Bluetooth: hci12: command tx timeout [ 515.439169][T24154] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.457936][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.465156][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.529275][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.536492][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.553637][T24321] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 515.659995][T24154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.057966][T24154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.667460][T24154] veth0_vlan: entered promiscuous mode [ 516.703359][T24154] veth1_vlan: entered promiscuous mode [ 516.747446][T24154] veth0_macvtap: entered promiscuous mode [ 516.796176][T24154] veth1_macvtap: entered promiscuous mode [ 516.878984][T24154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.924208][T24154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.966996][ T3563] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.986637][ T3563] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.009565][ T3563] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.048364][ T3563] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.305433][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.322303][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.390925][T24363] netlink: 'syz.1.5297': attribute type 7 has an invalid length. [ 517.404219][T21816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.416060][T21816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.443252][T24363] : entered promiscuous mode [ 517.478121][ T5879] Bluetooth: hci12: command tx timeout [ 517.685090][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5300'. [ 517.860682][T24386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5304'. [ 518.082137][T24389] syzkaller0: entered promiscuous mode [ 518.087752][T24389] syzkaller0: entered allmulticast mode [ 518.711396][T24394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'. [ 519.557478][ T5879] Bluetooth: hci12: command tx timeout [ 520.266270][T24395] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.5307'. [ 520.338835][T24396] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 520.367771][T24396] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 520.436709][T24403] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5310'. [ 520.542668][T24407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5313'. [ 520.552372][T24409] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5312'. [ 520.587711][T24409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5312'. [ 520.809460][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5318'. [ 521.694227][T24448] tipc: Started in network mode [ 521.713245][T24448] tipc: Node identity 0a4075d45a0a, cluster identity 4711 [ 521.724854][T24448] tipc: Enabled bearer , priority 0 [ 521.733723][T24448] syzkaller0: entered promiscuous mode [ 521.739622][T24448] syzkaller0: entered allmulticast mode [ 521.745999][T24450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5324'. [ 521.757758][T24450] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5324'. [ 521.768761][T24450] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5324'. [ 521.777803][T24450] netlink: 'syz.7.5324': attribute type 6 has an invalid length. [ 521.786441][T24450] netlink: 'syz.7.5324': attribute type 5 has an invalid length. [ 521.807327][T24448] tipc: Resetting bearer [ 521.836131][T24446] tipc: Resetting bearer [ 521.879914][T24446] tipc: Disabling bearer [ 521.917677][T24463] xfrm1: entered promiscuous mode [ 521.927262][T24463] xfrm1: entered allmulticast mode [ 522.412104][T24485] netlink: 'syz.2.5333': attribute type 11 has an invalid length. [ 522.458363][T24486] netlink: set zone limit has 8 unknown bytes [ 522.854396][T24495] vlan2: entered allmulticast mode [ 523.214445][T24508] !: renamed from dummy0 (while UP) [ 523.626408][T24529] net veth1_virt_wifi .: renamed from virt_wifi0 [ 523.862755][T24540] dvmrp1: entered allmulticast mode [ 523.875448][ T31] INFO: task syz.2.3546:18390 blocked for more than 143 seconds. [ 523.884229][ T31] Not tainted syzkaller #0 [ 523.893939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.908397][ T31] task:syz.2.3546 state:D stack:25808 pid:18390 tgid:18389 ppid:16736 task_flags:0x400040 flags:0x00004004 [ 523.921080][ T31] Call Trace: [ 523.926221][ T31] [ 523.929358][ T31] __schedule+0x1798/0x4cc0 [ 523.934359][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 523.941474][ T31] ? __lock_acquire+0xab9/0xd20 [ 523.946699][ T31] ? __pfx___schedule+0x10/0x10 [ 523.951752][ T31] ? schedule+0x91/0x360 [ 523.958781][ T31] schedule+0x165/0x360 [ 523.963127][ T31] schedule_preempt_disabled+0x13/0x30 [ 523.972375][ T31] __mutex_lock+0x7e6/0x1350 [ 523.978399][ T31] ? __mutex_lock+0x5bb/0x1350 [ 523.983503][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 523.990377][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 523.999616][ T31] ? stack_trace_save+0x9c/0xe0 [ 524.004721][ T31] ? stack_depot_save_flags+0x40/0x860 [ 524.010502][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 524.018471][ T31] nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 524.025235][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 524.031869][ T31] ? kmalloc_reserve+0x136/0x290 [ 524.038445][ T31] ? __alloc_skb+0x142/0x2d0 [ 524.043181][ T31] ? netlink_dump+0x1b7/0xe90 [ 524.048037][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 524.053509][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 524.059762][ T31] ? genl_rcv_msg+0x5da/0x790 [ 524.064494][ T31] ? netlink_rcv_skb+0x208/0x470 [ 524.069446][ T31] ? genl_rcv+0x28/0x40 [ 524.075168][ T31] ? netlink_unicast+0x82c/0x9e0 [ 524.080133][ T31] ? netlink_sendmsg+0x805/0xb30 [ 524.086254][ T31] ? __sock_sendmsg+0x21c/0x270 [ 524.091136][ T31] ? ____sys_sendmsg+0x505/0x830 [ 524.096179][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 524.101050][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 524.106282][ T31] ? do_syscall_64+0xfa/0x3b0 [ 524.110993][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.123614][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 524.132352][ T31] ? rcu_is_watching+0x15/0xb0 [ 524.137313][ T31] ? trace_kmalloc+0x1f/0xd0 [ 524.141927][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 524.148893][ T31] ? __build_skb_around+0x257/0x3e0 [ 524.154215][ T31] genl_dumpit+0x10b/0x1b0 [ 524.158771][ T31] netlink_dump+0x6e1/0xe90 [ 524.163324][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 524.168500][ T31] ? genl_start+0x499/0x6c0 [ 524.174348][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 524.179753][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 524.185559][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 524.191816][ T31] ? genl_get_cmd+0x496/0x910 [ 524.197318][ T31] ? __pfx_genl_start+0x10/0x10 [ 524.202304][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 524.207380][ T31] ? __pfx_genl_done+0x10/0x10 [ 524.212178][ T31] genl_rcv_msg+0x5da/0x790 [ 524.216802][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.221843][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 524.228420][ T31] ? __asan_memcpy+0x40/0x70 [ 524.233085][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 524.239554][ T31] netlink_rcv_skb+0x208/0x470 [ 524.244345][ T31] ? __lock_acquire+0xab9/0xd20 [ 524.249483][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.254773][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.260129][ T31] ? down_read+0x1ad/0x2e0 [ 524.264668][ T31] genl_rcv+0x28/0x40 [ 524.268669][ T31] netlink_unicast+0x82c/0x9e0 [ 524.273457][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 524.280723][ T31] ? netlink_sendmsg+0x642/0xb30 [ 524.285781][ T31] ? skb_put+0x11b/0x210 [ 524.290047][ T31] netlink_sendmsg+0x805/0xb30 [ 524.295286][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.300600][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 524.306889][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.312201][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.317619][ T31] __sock_sendmsg+0x21c/0x270 [ 524.322322][ T31] ____sys_sendmsg+0x505/0x830 [ 524.327201][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.332504][ T31] ? import_iovec+0x74/0xa0 [ 524.337138][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 524.341882][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.349613][ T31] ? __fget_files+0x2a/0x420 [ 524.354336][ T31] ? __fget_files+0x3a0/0x420 [ 524.359445][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 524.364414][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.370365][ T31] ? rcu_is_watching+0x15/0xb0 [ 524.375260][ T31] ? do_syscall_64+0xbe/0x3b0 [ 524.381482][ T31] do_syscall_64+0xfa/0x3b0 [ 524.386071][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.391311][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.397496][ T31] ? clear_bhb_loop+0x60/0xb0 [ 524.402194][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.408164][ T31] RIP: 0033:0x7f5dc8b8eec9 [ 524.412596][ T31] RSP: 002b:00007f5dc99e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.421210][ T31] RAX: ffffffffffffffda RBX: 00007f5dc8de5fa0 RCX: 00007f5dc8b8eec9 [ 524.430769][ T31] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000005 [ 524.439617][ T31] RBP: 00007f5dc8c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.447721][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.457167][ T31] R13: 00007f5dc8de6038 R14: 00007f5dc8de5fa0 R15: 00007ffc6250a4d8 [ 524.465250][ T31] [ 524.468451][ T31] [ 524.468451][ T31] Showing all locks held in the system: [ 524.477244][ T31] 1 lock held by khungtaskd/31: [ 524.483814][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 524.513411][ T31] 3 locks held by kworker/u8:6/1340: [ 524.530710][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 524.541567][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 524.550696][ T31] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0xd2/0x610 [ 524.560841][ T31] 2 locks held by getty/5625: [ 524.567192][ T31] #0: ffff88814caea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 524.577130][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 524.589130][ T31] 2 locks held by syz.6.3369/17809: [ 524.594422][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.603280][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 524.613739][ T31] 3 locks held by syz.2.3546/18390: [ 524.619050][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.627345][ T31] #1: ffff8880227bf6d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 524.637936][ T31] #2: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 524.649492][ T31] 2 locks held by syz.7.3756/19096: [ 524.654838][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.663073][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 524.673288][ T31] 2 locks held by syz.8.4026/20059: [ 524.680788][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.704581][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 524.714886][ T31] 2 locks held by syz.9.4063/20175: [ 524.720104][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.728406][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 524.738732][ T31] 3 locks held by syz.4.4308/20996: [ 524.743944][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.752233][ T31] #1: ffff8880760ac6d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 524.763747][ T31] #2: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290 [ 524.774500][ T31] 2 locks held by syz.0.4909/23033: [ 524.779709][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.792703][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 524.803748][ T31] 2 locks held by syz.5.5116/23698: [ 524.809195][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.817623][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 524.828246][ T31] 2 locks held by syz.6.5221/24082: [ 524.833451][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.842440][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 524.852802][ T31] 2 locks held by syz.3.5286/24319: [ 524.858706][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 524.868375][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 524.878962][ T31] [ 524.881296][ T31] ============================================= [ 524.881296][ T31] [ 524.902431][ T31] NMI backtrace for cpu 0 [ 524.902454][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 524.902477][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.902488][ T31] Call Trace: [ 524.902496][ T31] [ 524.902504][ T31] dump_stack_lvl+0x189/0x250 [ 524.902530][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.902549][ T31] ? __pfx__printk+0x10/0x10 [ 524.902582][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 524.902608][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 524.902634][ T31] ? __pfx__printk+0x10/0x10 [ 524.902659][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 524.902686][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 524.902713][ T31] watchdog+0xf93/0xfe0 [ 524.902739][ T31] ? watchdog+0x1de/0xfe0 [ 524.902765][ T31] kthread+0x70e/0x8a0 [ 524.902788][ T31] ? __pfx_watchdog+0x10/0x10 [ 524.902809][ T31] ? __pfx_kthread+0x10/0x10 [ 524.902830][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.902846][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.902861][ T31] ? __pfx_kthread+0x10/0x10 [ 524.902881][ T31] ret_from_fork+0x439/0x7d0 [ 524.902900][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 524.902921][ T31] ? __switch_to_asm+0x39/0x70 [ 524.902947][ T31] ? __switch_to_asm+0x33/0x70 [ 524.902966][ T31] ? __pfx_kthread+0x10/0x10 [ 524.902987][ T31] ret_from_fork_asm+0x1a/0x30 [ 524.903020][ T31] [ 524.903030][ T31] Sending NMI from CPU 0 to CPUs 1: [ 525.055612][ C1] NMI backtrace for cpu 1 [ 525.055628][ C1] CPU: 1 UID: 0 PID: 21816 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 525.055648][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.055659][ C1] Workqueue: bat_events batadv_nc_worker [ 525.055688][ C1] RIP: 0010:__lock_acquire+0x6c9/0xd20 [ 525.055715][ C1] Code: 08 00 00 00 e8 88 25 00 00 45 31 ff 85 c0 0f 84 f5 05 00 00 83 3d 06 ca 0e 18 00 75 13 48 63 44 24 20 48 0f a3 05 77 3a 0b 12 <0f> 83 15 05 00 00 31 ed 48 8b 3c 24 4c 8b bf e0 0a 00 00 48 83 7c [ 525.055729][ C1] RSP: 0018:ffffc9000b7478f0 EFLAGS: 00000047 [ 525.055743][ C1] RAX: 0000000000000007 RBX: 0000000000000002 RCX: ffffffff9349a888 [ 525.055754][ C1] RDX: 0000000000000008 RSI: ffff888042642940 RDI: ffff888042641e00 [ 525.055766][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b47f6a2 [ 525.055777][ C1] R10: dffffc0000000000 R11: ffffffff8b47f5d0 R12: 00000000ffffff05 [ 525.055789][ C1] R13: 0000000000000001 R14: ffff888042642940 R15: 0000000000000000 [ 525.055801][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 525.055814][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.055826][ C1] CR2: 00007ffda4a46b48 CR3: 0000000074dca000 CR4: 00000000003526f0 [ 525.055841][ C1] Call Trace: [ 525.055847][ C1] [ 525.055859][ C1] ? batadv_nc_worker+0xd2/0x610 [ 525.055883][ C1] lock_acquire+0x120/0x360 [ 525.055905][ C1] ? batadv_nc_worker+0xd2/0x610 [ 525.055931][ C1] ? batadv_nc_worker+0xd2/0x610 [ 525.055955][ C1] ? batadv_nc_worker+0xd2/0x610 [ 525.055978][ C1] batadv_nc_worker+0xef/0x610 [ 525.056000][ C1] ? batadv_nc_worker+0xd2/0x610 [ 525.056024][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 525.056042][ C1] process_scheduled_works+0xae1/0x17b0 [ 525.056071][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.056094][ C1] worker_thread+0x8a0/0xda0 [ 525.056122][ C1] kthread+0x70e/0x8a0 [ 525.056143][ C1] ? __pfx_worker_thread+0x10/0x10 [ 525.056159][ C1] ? __pfx_kthread+0x10/0x10 [ 525.056185][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 525.056201][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.056218][ C1] ? __pfx_kthread+0x10/0x10 [ 525.056237][ C1] ret_from_fork+0x439/0x7d0 [ 525.056255][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 525.056274][ C1] ? __switch_to_asm+0x39/0x70 [ 525.056294][ C1] ? __switch_to_asm+0x33/0x70 [ 525.056314][ C1] ? __pfx_kthread+0x10/0x10 [ 525.056334][ C1] ret_from_fork_asm+0x1a/0x30 [ 525.056362][ C1] [ 525.063723][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 525.315992][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 525.325079][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.335134][ T31] Call Trace: [ 525.338395][ T31] [ 525.341307][ T31] dump_stack_lvl+0x99/0x250 [ 525.345879][ T31] ? __asan_memcpy+0x40/0x70 [ 525.350450][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.355631][ T31] ? __pfx__printk+0x10/0x10 [ 525.360218][ T31] vpanic+0x281/0x750 [ 525.364179][ T31] ? __pfx_vpanic+0x10/0x10 [ 525.368665][ T31] ? preempt_schedule+0xae/0xc0 [ 525.373498][ T31] ? preempt_schedule_common+0x83/0xd0 [ 525.378936][ T31] panic+0xb9/0xc0 [ 525.382637][ T31] ? __pfx_panic+0x10/0x10 [ 525.387049][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 525.392408][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 525.398549][ T31] watchdog+0xfd2/0xfe0 [ 525.402705][ T31] ? watchdog+0x1de/0xfe0 [ 525.407051][ T31] kthread+0x70e/0x8a0 [ 525.411106][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.415766][ T31] ? __pfx_kthread+0x10/0x10 [ 525.420345][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 525.425526][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.430706][ T31] ? __pfx_kthread+0x10/0x10 [ 525.435282][ T31] ret_from_fork+0x439/0x7d0 [ 525.439867][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 525.444961][ T31] ? __switch_to_asm+0x39/0x70 [ 525.449704][ T31] ? __switch_to_asm+0x33/0x70 [ 525.454449][ T31] ? __pfx_kthread+0x10/0x10 [ 525.459032][ T31] ret_from_fork_asm+0x1a/0x30 [ 525.463801][ T31] [ 525.467126][ T31] Kernel Offset: disabled [ 525.471436][ T31] Rebooting in 86400 seconds..