last executing test programs: 3m24.271134054s ago: executing program 1 (id=2453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a6726faccf8e8a43c6ea00b6138badcbec600e6f1eb6b8a14c597fbe161471c5f36741114965e16f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5384b9927ce1a186, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) listen(r4, 0x6) accept4(r4, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="0100000000000000000044000000080003", @ANYRES32], 0x4c}}, 0x4000804) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001900010000000000fe0300010000000000000000000020002b8b4dcb329509ed3c5ff5f999afdd4824ab41f0ca699a68b7e4e3956761402ba8247e43359e307043ce1890d1dffa5b5931ec372c69da5ab4f0a3acfab6ade5d98672db9a9558e64221e3a3947a3aeb2c224e325ded721127df63a86afdd566ccecb7f92d4d55b62b71061926cc244e0fc8b43d2099e98ce73ff029a236e7b4d5c802b92e011f0733b915e0a2841e57fc7f302e302e5914ca018c8d71d805351e8e84309d996bdc97ce3a30f3b35540565edf"], 0x1c}}, 0x0) socket(0xa, 0x2, 0x3a) 3m23.296067283s ago: executing program 1 (id=2463): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000900ff0008000000eb"], 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b68", 0x2}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 3m22.371276787s ago: executing program 1 (id=2465): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x2b}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000180), r1, 0x0, 0x2000000000004, 0xa) 3m22.235980744s ago: executing program 1 (id=2466): socket(0x10, 0x803, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000001340)='~', 0x0}, 0x15) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) close(0x4) 3m22.142656293s ago: executing program 1 (id=2467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x1a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000008000000000000000100008500000097000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x6}, {0x8100, 0x0, 0x0, 0xffe}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x1d, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1c, 0x1, 0x1, 0x2, 0x1, 0xd4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x2, {0xc9, 0x200, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}}, 0x6e) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="650a0000000000006111440000000000180000000000000000000000000000009500000000000000ec93b8f651fa9734ad95e77ae61f1424dd0aa2928a91a410b07f211ba8c74affa4c3403b82abe37270120c9abd5c6ac35914227e07fd46abb73d0cd54f0ac7ca19bedb0d6b07d1cb0bc5214d712d1ea230cb54f39b0b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m21.811632973s ago: executing program 1 (id=2469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ff0f00850000001500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0xe0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r4, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m6.742852065s ago: executing program 32 (id=2469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0x3, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ff0f00850000001500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0xe0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r4, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m27.506093276s ago: executing program 4 (id=2988): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x2, 0x4) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/213, 0xd5}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000280)=""/71, 0x47}], 0x4, &(0x7f0000000340)=""/19, 0x13}, 0x101) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/213, 0xd5}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000280)=""/71, 0x47}], 0x4, &(0x7f0000000340)=""/19, 0x13}, 0x101) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x3, 0x1, 0x101, 0x0, 0x0, {0x8, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8ef}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x12}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb88}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, 0x3, 0x1, 0x101, 0x0, 0x0, {0x8, 0x0, 0x6}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8ef}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x12}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb88}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) accept4$unix(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x80000) (async) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x80000) recvmsg$unix(r2, &(0x7f0000002a00)={&(0x7f0000000640), 0x6e, &(0x7f0000002940)=[{&(0x7f00000006c0)=""/204, 0xcc}, {&(0x7f00000007c0)=""/32, 0x20}, {&(0x7f0000000800)=""/149, 0x95}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/79, 0x4f}], 0x6, &(0x7f00000029c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r5 = socket$netlink(0x10, 0x3, 0x12) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000002b40)={'tunl0\x00', &(0x7f0000002ac0)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x3, 0xfffffff7, {{0xb, 0x4, 0x2, 0x27, 0x2c, 0x64, 0x8000, 0x9, 0x6, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x13, 0xd1, [@private=0xa010102, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002b80)=@base={0x12, 0x4, 0x7, 0x3, 0x0, r3, 0x1, '\x00', r7, r3, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000002c00)='pim6reg\x00') mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x50, r8, 0x219aa000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002c40)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_ro(r3, &(0x7f0000002c80)='blkio.bfq.time\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002d00)) (async) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) ppoll(&(0x7f0000002cc0)=[{r5, 0xa4}, {r9, 0x4}, {r1, 0x8408}], 0x3, &(0x7f0000002d40)={r10, r11+10000000}, &(0x7f0000002d80)={[0x7]}, 0x8) getsockopt$nfc_llcp(r9, 0x118, 0x0, &(0x7f0000002dc0)=""/238, 0xee) (async) getsockopt$nfc_llcp(r9, 0x118, 0x0, &(0x7f0000002dc0)=""/238, 0xee) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000002f00)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0xf8, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f0000002ec0), {[{{@ip={@private=0xa010101, @empty, 0xff, 0xff000000, 'tunl0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x8d, 0x1, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0xe18, 0x8, [0x3b, 0x37, 0x26, 0x31, 0x27, 0x38, 0x2d, 0x2f, 0x40, 0x36, 0x40, 0x2, 0x1, 0x2e, 0x21, 0x1a], 0x0, 0xec, 0x1}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth0_to_hsr\x00', 'team_slave_1\x00', {}, {}, 0x2, 0x3, 0x12}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0xc0, 0x104, 0x1}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x1f, 0x1000}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, 0xffffffff, 0xc8c917eb75443b48, '\x00', 'veth0\x00', {}, {}, 0x67, 0x1, 0x27}, 0x0, 0x110, 0x170, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x4, 0x7, [0x1e, 0x2e, 0x14, 0x20, 0x7, 0x1e, 0xe, 0x16, 0x38, 0x21, 0x22, 0x1, 0x24, 0x15, 0x26, 0x3d], 0x0, 0x4, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000003380)={0x0, 0x9, 0x99, 0x9}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000033c0)={r8, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000004480)={r13, &(0x7f0000003400)="a1ca9295b67e08abfff46b8cacb34e07dae9282046176cf669607e2753e4439c0c10a70447590d793730c48995a8b1795453d05ae882685a2c27db6d488f4018ef6a1cf51d4cedb6a667", &(0x7f0000003480)=""/4096, 0x4}, 0x20) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000044c0)=0x1) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000044c0)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000004500), &(0x7f0000004540)=0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000004500), &(0x7f0000004540)=0x4) ioctl$FITHAW(r8, 0xc0045878) (async) ioctl$FITHAW(r8, 0xc0045878) accept4$bt_l2cap(r9, &(0x7f0000004580)={0x1f, 0x0, @fixed}, &(0x7f00000045c0)=0xe, 0x0) 2m27.311250591s ago: executing program 4 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8=r1], 0x5c}}, 0x0) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e17dffff0300ffffff0200fec000000000008006000000008879e66485201a0023ca83747357a52759000400000000f2e0fc370000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x1, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000007c0)={0x88, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x3, 0xa, 0x9, 0x100, [0x8, 0x400, 0x3, 0xffff, 0x4]}}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0xe8}, @pad1]}, 0x58) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000010002001c001280090001007866726d00"], 0x50}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000001c0)={0xd2c, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @broadcast}}]}, 0x210) 2m26.682407204s ago: executing program 4 (id=2995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) ppoll(0x0, 0x0, 0x0, &(0x7f0000000380)={[0x2]}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010105}]}]}, 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x55}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) socketpair(0x3, 0x6, 0x4c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2b8, 0x30, 0x300, 0x70bd27, 0x25dfdbfd, {0x2}, [@generic="4a3152351a43347c2f607f5f71b67f6588f3e4bde69b0148ed1377a20bca12779fc7e6d6634a0a16f2c4bb4807c879ebd512cf5d8d2263f35f9eb845a8e99e21e0625a834b7cc59f61876286362783122e13ddcda4001c0091f19cf5937265ed6e4788137ce98fb8fe3fde100a460bac9a80a8a8", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@mcast2}, @generic="a6c4c9f0692b286b72b92d58558eccbf906894e9701625449e56c0d6c68c6ac0139cd167284bf1a856bd40d1d2e45343166db29e687400582f85fc23e7928aa55caf2868da563a9ba2b015ed06504bf139ed4144e8a4f5657c59607c334c6cd92865320d9a2e7d1ff4d09de37b88225deae22ccc", @typed={0x8, 0x10b, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x148, 0x0, 0x0, @fd=r1}, @generic="83103a0a20304dd4844d4c63c1431102932879897eef1548ba49e9c6f38243badb9f22bab31d2e7e0a783f7f4eeb756ef120e4bfc297736222d34b57b4b4bab18027d8084156a9326ce382883af0e30eb4a67ede87d4c4cd29847e9fe63bae17a64cfe5a33b41dad89b9e502e6da6eaab82913d18304c7c36e66b2f2acc9d6837de78f76aa44e6a3fcf623824a4915b4303e2a9c74aec9a4afce720b612969cff0ad0e034cba6cc8a4058d0e74dfacbf28788fbb584e97c66ec14ebdb9d517993506b51e957c21518b30372e54db5187bbbcaf78196f0815", @generic="51fbc61964fbf3401ba9977fd37261541b7a7f2fb34a97b6af66963f8b62c88db5b8a2693b23dfa864d3f92f659ee85f2f21639735", @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="7fa367ddf7a6bc4dbc18bf8cbc6b2dafc2a8cd04b47b41d788877c331b67378a3a49d41a66905171809a0fbcf48a7c0d3d8f0249edebf05b40b8c9091ec7f7aa70a369f2174522dc76d0de034d0d46205e1f6f34f7e70de4305778112f8927c96bab65a781540fd348a547883aa6c03c25bd38b6cf713ba284bd454c5043acbe8d2d"]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4040840}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 2m25.626768551s ago: executing program 4 (id=3002): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000001200080008"], 0x110}, 0x1, 0x7}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae000000000000000023"], 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x7}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa0100fd}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'wlan0\x00'}}, 0x1e) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000001200080008"], 0x110}, 0x1, 0x7}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae000000000000000023"], 0x1c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x7}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa0100fd}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x4e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'wlan0\x00'}}, 0x1e) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) 2m24.971747278s ago: executing program 4 (id=3010): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x2, 0xfffd, 0xaaa1}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x8000, 0x0, 0x8000, 0x40980, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x2108, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000200)=@req={0x4, 0x992, 0xc3, 0x80000000}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_pressure(r4, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_pressure(r6, &(0x7f0000000180)={'full', 0x20, 0x2ebf39e1, 0x20, 0x3}, 0x2f) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4000800) 2m24.45986147s ago: executing program 4 (id=3013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x6, 0xb, 0x3, 0x40, 0x10}, @alu={0x7, 0x0, 0x1, 0x6, 0xb, 0xfffffffffffffffc}, @map_fd], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xfc, &(0x7f00000003c0)=""/252, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[{0x1, 0x1, 0x5, 0x1}, {0x2, 0x3, 0xc, 0x2}, {0x4, 0x3, 0x8, 0xea55d02d337b1fa8}], 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000ca85000000ae000000850000005000000095", @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000008c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000002500010324bd7012fddbdf25010000003cc98b780a85d0aad44df9c2ff27fa3557ae7e17d4e440b14d313eda917658669b69c264bcc7d55bc4ca55d61e7602ad28866a8a85f1d807ab90f5ac3695e50467e7831f6aef1b8167829c72e182fae23ddc64ee695e608712794d2f66fef3f4e7a9d064b2e5219374fc98f51b6f3175333d3498bf0ab2b0de9c02922f90a0e7c7415250de"], 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0xfffffffffffffd5d, &(0x7f00000009c0)="0000ffffff8d00f03f0100000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r4, 0x5421, &(0x7f0000000800)=0x8000000000000001) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0xd, 0x9, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x68, 0x0, 0x4a, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, {[@generic={0x88, 0xa, "4c81f6081e2d28c0"}, @timestamp={0x44, 0x1c, 0x55, 0x0, 0x4, [0x8, 0x20000000, 0x2, 0xffffffff, 0x5, 0x5]}, @cipso={0x86, 0x4a, 0x0, [{0x0, 0x4, '@c'}, {0x1, 0x3, '6'}, {0x6, 0xa, "fdf06fc1c15862ef"}, {0x5, 0xc, "a73ede4597a9ac3e5fd9"}, {0x7, 0xb, "25551b8755b53bd0f0"}, {0x6, 0xc, "a31d6cda7d91ab62bd82"}, {0x7, 0x10, "ad0c51c030174c4008db6a5d3b64"}]}, @ssrr={0x89, 0x2b, 0xfc, [@empty, @multicast1, @empty, @multicast2, @local, @broadcast, @local, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x8, "930487a505bf"}, {0x1, 0xf, "e028222a44b342daf9e13bdff3"}, {0x5, 0x7, "e6a2be5202"}]}]}}}}}) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x200280, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x400}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x2000c010) 2m9.422918765s ago: executing program 33 (id=3013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x6, 0xb, 0x3, 0x40, 0x10}, @alu={0x7, 0x0, 0x1, 0x6, 0xb, 0xfffffffffffffffc}, @map_fd], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xfc, &(0x7f00000003c0)=""/252, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x10, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[{0x1, 0x1, 0x5, 0x1}, {0x2, 0x3, 0xc, 0x2}, {0x4, 0x3, 0x8, 0xea55d02d337b1fa8}], 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000ca85000000ae000000850000005000000095", @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000008c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000002500010324bd7012fddbdf25010000003cc98b780a85d0aad44df9c2ff27fa3557ae7e17d4e440b14d313eda917658669b69c264bcc7d55bc4ca55d61e7602ad28866a8a85f1d807ab90f5ac3695e50467e7831f6aef1b8167829c72e182fae23ddc64ee695e608712794d2f66fef3f4e7a9d064b2e5219374fc98f51b6f3175333d3498bf0ab2b0de9c02922f90a0e7c7415250de"], 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0xfffffffffffffd5d, &(0x7f00000009c0)="0000ffffff8d00f03f0100000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r4, 0x5421, &(0x7f0000000800)=0x8000000000000001) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0xd, 0x9, {{0x35, 0x4, 0x0, 0x6, 0xd4, 0x68, 0x0, 0x4a, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, {[@generic={0x88, 0xa, "4c81f6081e2d28c0"}, @timestamp={0x44, 0x1c, 0x55, 0x0, 0x4, [0x8, 0x20000000, 0x2, 0xffffffff, 0x5, 0x5]}, @cipso={0x86, 0x4a, 0x0, [{0x0, 0x4, '@c'}, {0x1, 0x3, '6'}, {0x6, 0xa, "fdf06fc1c15862ef"}, {0x5, 0xc, "a73ede4597a9ac3e5fd9"}, {0x7, 0xb, "25551b8755b53bd0f0"}, {0x6, 0xc, "a31d6cda7d91ab62bd82"}, {0x7, 0x10, "ad0c51c030174c4008db6a5d3b64"}]}, @ssrr={0x89, 0x2b, 0xfc, [@empty, @multicast1, @empty, @multicast2, @local, @broadcast, @local, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x24, 0x1, [{0x2, 0x8, "930487a505bf"}, {0x1, 0xf, "e028222a44b342daf9e13bdff3"}, {0x5, 0x7, "e6a2be5202"}]}]}}}}}) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x200280, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x400}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x2000c010) 1m45.225190533s ago: executing program 0 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x2, 'wg1\x00', {0x3}, 0x8}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x8cbb93ee9869b66}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x20000000}], 0x1, 0xc050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000001c0)={'team_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000200010000002c0012800e2001006970366772651800028014000700fc01000000000000000000000000000008001f0008000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 1m44.77409336s ago: executing program 0 (id=3285): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203010100000000000000000a0000030000053ffffff32a100b23a98acfc0e65d2ac910f1ac44b32061e7a0d34bd1cd131437ef22eb4ed071fe05f16ae5f574807d473a670e73512cf1bb4d24"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4c010) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x3}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x10001}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0xf, [{0x8, 0x3, 0x3}, {0x7, 0x2}, {0x1, 0x1, 0xb8}, {0x8, 0x3, 0x6}, {0xc, 0x1, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/217, 0xcd, 0xd9, 0x0, 0x81, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2ecc, 0x9, 0xe, 0x100, 0xffffffffffffffff, 0x3, '\x00', r3, r0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000), 0x20008, r4}, 0x38) 1m26.363586215s ago: executing program 0 (id=3285): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203010100000000000000000a0000030000053ffffff32a100b23a98acfc0e65d2ac910f1ac44b32061e7a0d34bd1cd131437ef22eb4ed071fe05f16ae5f574807d473a670e73512cf1bb4d24"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4c010) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x3}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x10001}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0xf, [{0x8, 0x3, 0x3}, {0x7, 0x2}, {0x1, 0x1, 0xb8}, {0x8, 0x3, 0x6}, {0xc, 0x1, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/217, 0xcd, 0xd9, 0x0, 0x81, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2ecc, 0x9, 0xe, 0x100, 0xffffffffffffffff, 0x3, '\x00', r3, r0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000), 0x20008, r4}, 0x38) 1m12.368944946s ago: executing program 0 (id=3285): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203010100000000000000000a0000030000053ffffff32a100b23a98acfc0e65d2ac910f1ac44b32061e7a0d34bd1cd131437ef22eb4ed071fe05f16ae5f574807d473a670e73512cf1bb4d24"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4c010) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x3}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x10001}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0xf, [{0x8, 0x3, 0x3}, {0x7, 0x2}, {0x1, 0x1, 0xb8}, {0x8, 0x3, 0x6}, {0xc, 0x1, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/217, 0xcd, 0xd9, 0x0, 0x81, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2ecc, 0x9, 0xe, 0x100, 0xffffffffffffffff, 0x3, '\x00', r3, r0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000), 0x20008, r4}, 0x38) 58.264524824s ago: executing program 0 (id=3285): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203010100000000000000000a0000030000053ffffff32a100b23a98acfc0e65d2ac910f1ac44b32061e7a0d34bd1cd131437ef22eb4ed071fe05f16ae5f574807d473a670e73512cf1bb4d24"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4c010) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x3}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x10001}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0xf, [{0x8, 0x3, 0x3}, {0x7, 0x2}, {0x1, 0x1, 0xb8}, {0x8, 0x3, 0x6}, {0xc, 0x1, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/217, 0xcd, 0xd9, 0x0, 0x81, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2ecc, 0x9, 0xe, 0x100, 0xffffffffffffffff, 0x3, '\x00', r3, r0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000), 0x20008, r4}, 0x38) 44.490718237s ago: executing program 0 (id=3285): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000203010100000000000000000a0000030000053ffffff32a100b23a98acfc0e65d2ac910f1ac44b32061e7a0d34bd1cd131437ef22eb4ed071fe05f16ae5f574807d473a670e73512cf1bb4d24"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4c010) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x3}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x10001}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x10}, @union={0xc, 0x5, 0x0, 0x5, 0x0, 0xf, [{0x8, 0x3, 0x3}, {0x7, 0x2}, {0x1, 0x1, 0xb8}, {0x8, 0x3, 0x6}, {0xc, 0x1, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x30, 0x2e, 0x5f, 0x0]}}, &(0x7f00000003c0)=""/217, 0xcd, 0xd9, 0x0, 0x81, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2ecc, 0x9, 0xe, 0x100, 0xffffffffffffffff, 0x3, '\x00', r3, r0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000), 0x20008, r4}, 0x38) 5.928898628s ago: executing program 6 (id=4072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0xa, 0xfe, 0x4, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x9}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) shutdown(r1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1.860651212s ago: executing program 3 (id=4094): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2b2871004bd1ab44}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xbd, 0x28, &(0x7f00000001c0)=""/40, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x6, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x1, 0x6, 0x6}, {0x2, 0x5, 0x2, 0x4}, {0x4, 0x5, 0xa, 0x5}, {0x0, 0x2, 0x10, 0x9}, {0x1, 0x2, 0xe, 0x7}, {0x1, 0x1, 0xe, 0x3}, {0x0, 0x2, 0xd, 0x2}, {0x3, 0x2, 0xc, 0x3}, {0x2, 0x3, 0xd, 0x4}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0xe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000080), &(0x7f00000004c0)=r2}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0xb, 0x1, 0x80000001}, @multicast1, @remote, 0x9e72cbfcba546172, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.668891198s ago: executing program 3 (id=4096): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xa1a37c156e3a0e90}, 0x4000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c021}, 0x40814) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0}}], 0x2, 0x0) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r14, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r14, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) 1.601538363s ago: executing program 5 (id=4097): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x4, 0x0, 0x4}, 0x7, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) (async) socket$inet6(0xa, 0x3, 0x84) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x4, 0x0, 0x4}, 0x7, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) (async) 1.343336105s ago: executing program 5 (id=4098): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071126f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000001300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x783a0ef, [0x9d82, 0x800]}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendto$inet6(r1, &(0x7f0000000100)="b9cea36b9e16b2fed20cc27d65a3e547f9bec249779718568cd4ba6899b08080d46802ac1d97aab5230138f2a4f57077092f01b1cc94b51eea29cd1d76f0b55e163e319d785cd9615efd6273030b9f263e241e04b42b61fae3a9688d89aac2a8254b14852e44e2e30c12ba6ab70d69eedc7c6574a2aef8563fdfa64a", 0x7c, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7d, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7d, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000018000000bca3000000000000240300f840feffff720af0ff0000000071a4f1ff000000001f030000000000002e0a0200000000002600030008ff000e61148300000000001d430000000000007a0a00fe00581c1f6114500000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.083974345s ago: executing program 2 (id=4099): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000780)={'syztnl1\x00', r1, 0xb6f5dd94b748627, 0x700, 0x6, 0x68, {{0x19, 0x4, 0x0, 0x1, 0x64, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xc6, 0x0, 0x0, [0x200, 0x844, 0x5, 0x6, 0x3, 0x2]}, @timestamp_prespec={0x44, 0x2c, 0xc4, 0x3, 0x7, [{@loopback, 0x993b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0x1}, {@local, 0x7}, {@broadcast, 0x8}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001900b59500000000000000000a400000", @ANYRES32=r4], 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x60, r6, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c083}, 0x972611ee1f7f1758) 1.056659238s ago: executing program 5 (id=4100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8}}}}, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xaf, &(0x7f00000002c0)=""/175, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x10, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x3, 0x3, 0x2}, {0x0, 0x4, 0x8, 0x13}, {0x3, 0x3, 0xd, 0x1}, {0x3, 0x4, 0xe, 0x1}, {0x0, 0x4, 0xe, 0x4}, {0x2, 0x4, 0x9, 0x4}, {0x0, 0x5, 0xc, 0x2}, {0x1, 0x3, 0x5, 0x1}, {0x2, 0x4, 0xf, 0xa}], 0x10, 0xb723, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='iocost_iocg_forgive_debt\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2c, r5, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xffffffffffffff14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4804) 941.880816ms ago: executing program 2 (id=4101): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x5, 0x18}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 853.894194ms ago: executing program 6 (id=4102): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r1, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x22}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e0600000000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000340012800b000100677265746170000024000280050009000b00000006000e000000000006000e0001000000080007006401010108000a00", @ANYRES32=r3, @ANYBLOB="eb682c25974238a5229429ed58e206ad18eeca360000000000001000ac5b604d61aca25549b71e5bca0129f126a64ea994b3c0576f0c0f3fc44225522e9bed9edde12681be78d6a112307bab7d88faa4cae08ec55571226f25f3e0cccdf70c828c6c3c5033099311eae4645a22f01b67c88dd6d12d8e191dbd55caf5f1f7e1"], 0x5c}}, 0x0) 852.966577ms ago: executing program 2 (id=4103): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200000028000480240001800b0001007470726f78790000140002800800034000000011080001400000000a0900010073797a3000000073797a3200000000140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x2, 0x8, 0xfa, 0x0, 0xa, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0xff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e23, 0x180, @private1, 0x7c6}}]}, 0x50}}, 0x24000800) bind$unix(r5, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x7, 0x2, 0x1, 0x7, 0x0, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) bind$unix(r5, &(0x7f0000003000)=@abs={0x1}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r11, &(0x7f00000003c0)={0xa, 0x4e24, 0x20f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}, 0x1c) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="020025bd7000fcdbdf251b0000000600210062000000080001006c000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fa8ff9f6adcd615ace2203371851cd0d316a970d0f887a36720a9032f7354baca51d17d7c1c2f4db34c13075cf82c186c6c331d216a1a6e38c8727cc642e8b0f255c869c696ba0028b896a98b248ef31d82432d90d02e4f21b0c39d7121a18ed45293a3d3fc050c74080aeacc2d0aea4e3269c3f2487486d", 0x78}, {&(0x7f0000000580)="768bf5ceb06d76a11b88201a979f26c5337669f7fe1ac2635e140f39e2baff53788d52f25685daf138f08faaafccb88a29", 0x31}, {&(0x7f00000006c0)="04f0ef4f2faa78087d4fb8f0afd90dba29b830fe5ebfdb2c9ea6ab42983ef1d2125dbf78496cf68d961774a55110acff672952c78759780b14b39119f3319f6b7f6be9cfdb9ff2d7c3a9791eb597cdd43cb80330274db00ee1bcf2926921532c4f42f61d0e1ea43f4b32933d000a5c3c8270ab24bb666f3cf91384d080f3908883e0142db5abaadde589aac3c84c3aa751fd2d9375186ecfc948f2773b773433a76ca6bddc09a49bfc6dac308daf866b331e72f13f8c36293b3c27b72deef1b32a02b8", 0xc3}, {&(0x7f00000007c0)="59428f1edfe6bca6d67be8550010fc648ae83c8bf2f6575169725dc5cf8ba99651078ac99d159b2681972f6ab89faf4c0744897d02ff6eb938e8a00098e447648c9bf5aa544b08d29a7761b3718bc62aac3620376ba608b17e10e55156cd79f8081f5a2da0e0df98e7c5a10cf21cc0d1545b9e3e7e43a001a7a9987ce2aecddd0e18683b127c37bb1b43287c6778687acf2e6928d4b556c493f6144dd1ac2afad67db5e5a16a8a8c13e054e410309fb4d45c4f7c69d2414b49e29faa11c26961c0d86fe64ca6ac28c10993910ce8", 0xce}], 0x4, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x80, 0x10}, 0x20000011) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r12, r3, 0x0, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0x1, 0x7e, {0xe, @sctp_ip4_spec={@rand_addr=0x64010101, @multicast1, 0x4e22, 0x4e21, 0x4}, {0x0, @broadcast, 0x4, 0x1, [0x6, 0xb4c]}, @esp_ip4_spec={@private=0xa010102, @multicast1, 0x7, 0x7}, {0x0, @multicast, 0x0, 0xfff, [0x80000050, 0xb]}, 0x1, 0x16}, 0x3, [0x4, 0x2, 0x4]}}) 779.22726ms ago: executing program 5 (id=4104): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0xb, 0x407, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004e00008a8cbe8d838698ce3bd04455feb81a46000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 714.009059ms ago: executing program 3 (id=4105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffe, 0x200000000, 0x40000000007, 0x20000a0e0, 0x140000000000004, 0x6, 0x20000000b, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@mcast1, 0x0, 0x6c}, 0xa, @in6=@private0, 0x3502, 0x4, 0x8, 0x0, 0x9075}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) socket(0x10, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001671114200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 635.847824ms ago: executing program 6 (id=4106): mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x13, 0xffffffffffffffff, 0x180000000) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x9}}]}}}]}, 0x60}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) socket$alg(0x26, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x13, 0xffffffffffffffff, 0x180000000) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x9}}]}}}]}, 0x60}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) 635.072162ms ago: executing program 5 (id=4107): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf250800010000000000080007"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4040050) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r4, @ANYRES16=r5, @ANYRES64=r1, @ANYRES32=r6, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d30000008008c0002000000080001007063690011000200303030303a30303a31302e300000000008008a00"/72, @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r1, @ANYBLOB="080001007063690011000200303030303a30303a31302e100000000008008a00", @ANYRES32=r6, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYBLOB="1c8d8142f6559c966286a2f180ea71c6410b696f3b37a71de0116575d4a56c8395b06f6c3546d87c776946a7b8af82620f91cbaff4f2a358df793cd05e57a407739c0135dc76e05e4d41375b33ac2bd0e9b9ac7efaf69187b0762a008166d0cb33fa65efba60a373ce8d3d2ab300c113b8b4a383bf91d2f2ac1e4188dbff6f7664c24751c2c845d0277bcff6bc3336e70bbafd4b22caa1a3a9a7a21804c8570a4bc2eb813297f864bd2b840d73bd89ca81d916db4991aef8ea266c7fcfd6580955248696911e380f40579e45f71973c373e28c3f9f093a142b58dca4", @ANYRES32=0x0, @ANYRESHEX=r2], 0x16c}}, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000140)) accept$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000073c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x81, 0x4e22, 0xac16, 0x0, 0xc0, 0xe0, 0x3a, 0x0, r8}, {0x1200, 0x2, 0xd961, 0x6, 0x7, 0x8, 0x407, 0xffffffffffff8001}, {0x4, 0x6, 0xfffffffffffffff9, 0x5}, 0x5, 0x6e6bb4, 0x1, 0x1, 0x34cafd5c6e8e44f4, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d5, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x3, 0x1, 0xe, 0x3, 0x8001, 0x40}}, 0xe8) (async) sendmsg$nl_netfilter(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)={0x1268, 0x4, 0x4, 0x301, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x7}, [@typed={0xc, 0xa8, 0x0, 0x0, @u64=0x40}, @typed={0x8, 0xe8, 0x0, 0x0, @fd=r4}, @nested={0x123d, 0x80, 0x0, 0x1, [@generic="a79f0184094882058e6a7d5a9c6c1dff67a2d17756f733abb61cbc37a8293bc14d5d994afe6e773e145122d73d6621ba3274e30e86a24b90c62be41bf2920b2ed1f5be910464adaf5edce63d652319e4879dae45035003fae2d4524f30f6ddb6d41f614ab80b51b35c4f4930cf3bfddb68742fd5e9b559", @typed={0x8, 0xbf, 0x0, 0x0, @uid}, @typed={0x8, 0x30, 0x0, 0x0, @uid=r8}, @nested={0x4, 0xfe}, @generic="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", @generic="0ced60a006f4dae22efc2148c19bb832f172a151bd22bbe1cd59f2be8a9856b5b82254b9fa2d25d49d51cf613b7b344ece36906d0c7416c4a7681c6fc4224f478685e3c09d91bfa807fe27c7abfe12eac9e8a7bfe00effbb3bf7d4a2632d620622dcee74b00e2f61428f77c2bfa3c8aa074390d0be35ad758dc221f884c9df3cd68b893c06ab486b98feef2422ddaf727b6375e32002b46c772039e34a89852746db87cdaa3534cfb99ebe8aa252876cf3f2c952d385ff64a4eb3b22649fcd8b2b71e1ca1e", @generic="6ea965e771771d5adbecd4391485ce89119f889764435be97f3a9c22d76c964e5a231e92cd3809e6253c1144ae88b552564db3ac0ba698c1728db746241155452002da23c93d830ba81da6c35528a06827526e826caabf495d120ce56af2eed22f9e11362e3d51f6c84811ea8a8ad7c6ad9860a0c5fd24e4fbf1da7696442b2f5216bc906fa42a87ad7295f44c0a5e821a5e120956522a10d07fc14ae00988bff2e733cc0d89ff874fd1bbab3aedcc129431a872698633130551795f9e10139a9f", @generic="21d62b0a3cdbd59b629a9299789437c698b46a6caaaebad5a217bd7d1b703827d80f2eb01522c050"]}]}, 0x1268}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r8, r9}, 0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r11 = socket$inet(0x2, 0x3, 0xffffffff) (async) r12 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000200)={0x60, 0x2c, 0x800, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x12, 0x0, 0x0, @u64=0x40}, @nested={0x43, 0x59, 0x0, 0x1, [@generic="235900bca4ca", @typed={0x5, 0xcd, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="5e5705b33318726a9ab6a14d4097c928a35508b035bcc26ede1e332ad96b85a544", @typed={0x8, 0x148, 0x0, 0x0, @fd}]}]}, 0x60}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}, @rights={{0x1c, 0x1, 0x1, [r11, 0xffffffffffffffff, r12]}}], 0xc0, 0x20000000}, 0x20000006) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) (async) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r14, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0xc}}, 0x0, 0x8}, 0x90) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 471.430831ms ago: executing program 3 (id=4108): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x70bd25, 0x25dfdbfb, {}, [@IFAL_LABEL={0x59, 0x2, 0x4}]}, 0x24}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x48}}, 0x4000010) (async) unshare(0x20040600) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r3, 0x200, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008040}, 0x20040000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0x25, 0x148, 0x368, 0x60, 0x490, 0x2a8, 0x2a8, 0x490, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, "f2f7b9f28413d9d8ad470ad2b60c4509000000000000002ff8a9304d9d655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d00000000f300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@length={{0x28}}, @common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x588) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) 453.146765ms ago: executing program 5 (id=4109): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x30}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00'], 0x4c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r5, 0x2f, 0x14, 0x4, @void, @value=r5}, 0x20) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x12c, 0x7, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x44}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x64, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='xen_mc_callback\x00', r5, 0x0, 0x4}, 0x18) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 375.636266ms ago: executing program 2 (id=4110): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r2, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0303000000000a0000000c000000070003"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x7208c8ea57975ff7}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r7, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2de8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x7208c8ea57975ff7}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r7, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2de8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x80000000, 0x13, 0x65, 0x2000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0xe, @void, @value, @void, @value}, 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x5, 0x8}, 0xc) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x5, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1b, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, @alu={0x7, 0x1, 0xd, 0x8, 0x2, 0x2, 0x18}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x90793c578d7a52b, 0x7, 0xa, 0x2, 0x50, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x47, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r9, r10, r11, 0xffffffffffffffff, r12], 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1b, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, @alu={0x7, 0x1, 0xd, 0x8, 0x2, 0x2, 0x18}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x90793c578d7a52b, 0x7, 0xa, 0x2, 0x50, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x47, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r9, r10, r11, 0xffffffffffffffff, r12], 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$caif_stream(0x25, 0x1, 0x4) (async) r13 = socket$caif_stream(0x25, 0x1, 0x4) accept4(r13, &(0x7f0000000140)=@xdp, &(0x7f0000000040)=0x80, 0x800) (async) accept4(r13, &(0x7f0000000140)=@xdp, &(0x7f0000000040)=0x80, 0x800) 372.930714ms ago: executing program 6 (id=4111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) 256.323839ms ago: executing program 3 (id=4112): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0), 0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x7c, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x60, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0d874db3819620c4755da98a08e16ebe"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "61efc7c995eb4d73d79803961ffddaf080a69da7b5646fa198cb3088568dd576"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, 0x2800, 0xe9000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x2}, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/16, &(0x7f0000000240)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 239.290303ms ago: executing program 2 (id=4113): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x40, 0x6}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x7, 0x1, 0x3, 0x5, 0x8001]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2e0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2e2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f0000000200)={0x1334, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x1f8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6a}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "03a9f24b561f9317b514969a1ad4df283c8cd9a581e9bad93d679dce6f78a6863e1d54a7d753a048623c558e0782eb5b5a5108ef6d097b99e9d0cd6a807660c4570b9f3ffe3fe6f5223e80be034f30a3af387ed56babceff8230907c887e08be50d6ca203d7ee882100d992b83ade360d00d856936695d2c7a3f24f87011112b6e59a2ec3a91a79acd7b63d4073aa46db4088a7bc8207428607074c7d4982567f81d0e05a442491ed252eb1db81f694c101c4e7b2d15060d4961519aaca67e3727a8ac25ad58da320bc8c1525457718f7e5c86c7b01d16779fef04"}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "75fd26da7a2fab60d0ddef76aeed0fddd74ff0d3eaf2b5a631d14e51030e1a42a6bd69354b2d7c73e5e1a57599fb3cdd7c5d556b803b037ad6d4ae13c5a01c5d00c8dfccc81a5a6ba3c0196d3a5d431edb2a0277adec91cf2cc170af89b9a0c64a82bedbffb9023f4d9303b0dd2de65d3fe71ac1649305be2b99ab9b20413e9527287cfdc13cc7db653aeb02073069ffc44f7d6383087d3f6caa52754750dfd4b709b6ca8c9118f74f481c506432dfa1b79c5a632549b86a9bdfaabc6ce7c76c4e1e1ccf4f1ccd83b50c2c5af1e3fe279ed8374a430dd044e381c8576dc6d2096b9f2f28472f0a3e61fa92715a"}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x10a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "5f362ff8ca22576c03b2a8df962fe53f21290aa59a6d57daf29ff42d20253ea016b4a5b9994d48756a232725e2ecf9bc4e8bff52a2f0b8ec0fe24c2e82ab0eba73b108b8308f508a3d39557b491a54c6b47f7a487dcb6eccaa66b89b7a2f7934aa64a98e6f86546c27d103cc6ab995"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa55}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x18, 0x3, "4492fca2de778c361bc31c90c69d9f9cdc062a43"}, @ETHTOOL_A_WOL_MODES={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(\xd6#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1334}, 0x1, 0x0, 0x0, 0x4000}, 0x804) syz_genetlink_get_family_id$smc(&(0x7f00000015c0), r0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=@newspdinfo={0x64, 0x24, 0x300, 0x70bd28, 0x25dfdbfc, 0x7f, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x64}}, 0x44004) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001900)={r6}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001940)={0x0, 0x6ba, 0x3, 0xfff}, &(0x7f0000001980)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001a40)={r8, 0x80, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in6={0xa, 0x4e24, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}}, @in6={0xa, 0x4e22, 0x81, @local, 0x7}, @in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2e1ffec4}]}, &(0x7f0000001a80)=0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48010}, 0x1) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000003680)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003640)={&(0x7f0000001cc0)={0x1968, r11, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x214, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x68}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x4, 0x9, 0x3, 0x355, 0x3dcd, 0x6, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x1800, 0x3, 0x5, 0x6a, 0x8, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0xa}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1b}, {0x6, 0x3}, {0x1, 0xa}, {0x3, 0x1}, {0x2, 0x8}, {0x7}, {0x4, 0x6}, {}, {0x2, 0xa}, {0x3, 0x1d}, {0x3, 0x7}, {0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x5, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x6, 0x2}, {0x6}, {0x7, 0x6}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xac9, 0x2147, 0xc, 0x6e5, 0x7, 0x0, 0xf801]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x6, 0x3}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa5, 0x5c45, 0x9, 0x800, 0x3, 0x8, 0x6, 0x8bcd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x2, 0x9}, {0x7, 0x7}, {0x7, 0x8}, {0x7, 0x8}, {0x1, 0x7}, {0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x6}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x5, 0x9}, {0x5, 0x9}, {0x7, 0x6}, {0x5, 0x9}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x2}, {0x6, 0x9}, {0x7, 0x4}, {0x2, 0x8}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x7ff, 0x7, 0x8, 0x522, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}]}]}, @NL80211_ATTR_TID_CONFIG={0x370, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x240, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x210, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x16, 0x6c, 0x17]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x895, 0x8, 0x3, 0x7, 0x9, 0x2507, 0x3, 0x1]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x9}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x7, 0x1}, {0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x8}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x9}, {0x3, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x3}, {0x2}, {0x6, 0x3}, {0x2, 0x4}, {0x4, 0x7}, {0x7, 0x3}, {0x3, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x8}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x3, 0x4, 0x101, 0x1, 0x5619, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x1, 0x60, 0x18, 0x60, 0x1, 0x5, 0x1ff1a7a2f8252d80, 0x9, 0x18, 0x36, 0x15, 0x3, 0x24, 0x1, 0xc, 0xb, 0x3, 0xc, 0x4, 0x9, 0xb, 0xb, 0x36, 0x5, 0x24, 0x9, 0x0, 0x18, 0x4, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8001, 0x9, 0xf, 0x6, 0x2, 0x3ee4, 0x6]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x8}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x7}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x3}, {0x6}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x6}, {0x4}, {0x4, 0x6}, {0x3, 0xa}, {0x7, 0x2}, {}, {0x6, 0x1}, {0x4, 0x8}, {0x1, 0x3}, {}, {0x0, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x5}, {0x2}, {0x6}, {0x1, 0x1}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x8}, {0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x1, 0x9}, {0x2}, {0x0, 0xa}, {0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0xa}, {0x7}, {0x0, 0x7}, {0x1}, {0x7, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x1, 0x1000, 0x8, 0xd, 0x200, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x63e, 0x5, 0x7, 0xfff, 0xf, 0x5]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x3}, {0x2, 0x8}, {0x1}, {0x2, 0x8}, {0x6, 0x5}, {0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x4}, {0x4, 0xa}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x8}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x6}, {}, {0x7, 0x6}, {0x4, 0x4}, {0x1}, {0x6, 0x6}, {0x2, 0x5}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x4, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x2}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x8}, {0x5}, {0x5, 0x6}, {}, {0x0, 0x1}, {0x7, 0x9}, {0x6, 0x6}, {0x3, 0x1}, {0x1}, {0x3, 0x6}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x4}, {0x2, 0x6}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x4, 0xa}, {0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x5}, {0x2}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0x6}, {0x1, 0x3}, {0x7, 0x9}, {0x2, 0x4}, {0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x4}, {0x0, 0xa}, {0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x1, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x55}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0xfe00, 0x6, 0x14, 0x7, 0x40, 0x3]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x6}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0xa}, {0x7, 0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x9}, {0x2, 0x9}, {0x2, 0xa}, {0x6, 0x8}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x5}, {0x5, 0xa}, {0x2, 0x2}, {}, {0x0, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {}, {0x5}, {0x0, 0x5}, {0x2}, {0x6, 0x6}, {0x1, 0x9}, {0x3, 0x5}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x6}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x8}, {0x7, 0x9}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe881, 0x7, 0xe, 0x9, 0xc, 0x4, 0x2, 0x96f2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x48, 0x1b, 0xc, 0x23, 0x24, 0x12, 0x6, 0x8, 0x12, 0x6, 0x1, 0x2, 0xb, 0x36, 0x18, 0x63, 0x6f, 0x9, 0x1b, 0x2, 0x6]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffe, 0x6, 0x6, 0x1, 0x8, 0x0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x4}, {0x4, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x4}, {0x3, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0x18}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x7}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}]}]}, @NL80211_ATTR_TID_CONFIG={0xf0, 0x11d, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd8d, 0x7, 0x4, 0x3ff, 0x7, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0xf2e812e5103a50fb, 0x45e9fa9e7d264472, 0x1b, 0x1, 0x20, 0x5, 0x2, 0xc, 0x36, 0x4, 0x9, 0x24, 0x60, 0x1, 0x12, 0x1b, 0x4, 0x3, 0x36, 0x1b, 0x3, 0x5, 0x1b, 0x1b, 0x4]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x6c, 0x4, 0x33, 0x48, 0x16, 0x36, 0xb, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x2, 0x9dc8, 0x1, 0x2a11, 0x8945, 0x4]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x18, 0x2, 0x4, 0x2, 0x12, 0x1b, 0x1b, 0x60, 0x30]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x2, 0x30, 0x60, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x18, 0xb, 0x6, 0x1, 0x4]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0xb, 0x1, 0x4, 0x48, 0x31, 0x1b, 0x60, 0x12, 0x6, 0x4, 0x48, 0x60, 0x2, 0x16, 0xc, 0x1, 0x3, 0x2, 0x3, 0x6, 0x1b, 0x6, 0x1b, 0x18, 0x366e0471019f691f]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x44, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x51}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x764, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdc}]}, {0x49c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x47c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x4, 0x16, 0x1, 0x60, 0x2, 0x4b]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0xc, 0xd, 0x5, 0x18, 0x3, 0x30, 0xc, 0x6, 0x6c, 0x4, 0x60, 0x16, 0x36, 0x48, 0x18, 0x4, 0x1, 0x4, 0x1, 0xc, 0xc, 0x12]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x12, 0x9, 0x16, 0x48, 0x1, 0x60, 0x2e, 0x84, 0xc, 0x5, 0x6, 0x9, 0x36, 0x2, 0x6, 0x5, 0x60, 0x60, 0xc, 0x4, 0xc, 0x48, 0xb, 0x18, 0x1d, 0x6, 0x6c, 0xc, 0x12]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x3}, {0x4, 0xa}, {0x6, 0xa}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x5}, {}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x7}, {0x6}, {0x1, 0x6}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x9}, {}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0xa}, {0x5, 0x9}, {0x0, 0xa}, {0x4, 0x6}, {0x2}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf420, 0x3, 0x9, 0xff, 0x4, 0x5, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0xc, 0x4, 0x30, 0xb, 0x48, 0x48, 0x60, 0x0, 0xc, 0x6, 0xb, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x6, 0x1ff, 0x2, 0xf537, 0x1, 0x0, 0x8]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x4}, {}, {0x0, 0xa}, {0x6, 0x6}, {0x2}, {0x2, 0x4}, {0x3, 0x9}, {0x0, 0x3}, {0x6, 0x8}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x4, 0x5}, {0x3}, {0x6}, {0x2, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x4}, {0x5, 0x8}, {0x2}, {0x2, 0x2}, {0x7, 0x7}, {0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x5, 0x6}, {}, {}, {0x6, 0x4}, {0x2}, {0x6, 0x7}, {0x3, 0x5}, {0x6, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x6}, {0x2, 0x8}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x3}, {0x3, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9c4c, 0x2, 0x6, 0xd, 0x7f, 0x2, 0x3, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xb7, 0x2, 0x33, 0xe, 0x4, 0x9, 0x60]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x4}, {0x0, 0x4}, {0x6}, {0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x5}, {0x7}, {0x6, 0x5}, {0x4, 0x5}, {0x0, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x3}, {0x3, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x6}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x2}, {0x6, 0xa}, {0x2, 0x3}, {0x4, 0x8}, {0x1}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0xa}, {0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x9}, {0x7, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x6}, {}, {0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0xa}, {0x4, 0x2}, {0x1, 0x8}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x1b, 0x2, 0x2]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x8}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x4, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x1, 0x8}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x1, 0x60, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x101, 0x6, 0x0, 0xe, 0x200, 0x40, 0xf]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x867d, 0x5, 0xf4c8, 0x3df6, 0xfffd, 0x8000, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x1a1, 0xff, 0xc8d8, 0x7, 0x8, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x5, 0x5}, {0x7, 0xa}, {0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x9}, {0x4, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x1}, {0x5}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x12, 0x8, 0xc00, 0x7, 0xaa, 0x0, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc, 0x1, 0x5, 0x5, 0x101, 0x2, 0x1, 0xa]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xfff7, 0x9, 0xfff4, 0x1000, 0xb, 0x22bd, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x2, 0x31, 0x91, 0x8, 0x9, 0x1f49]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x9, 0xfffb, 0x865, 0xd, 0xd, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0xa}, {0x1}, {0x1, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0xa}, {0x4, 0x4}, {0x3, 0x1}, {0x2, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0x4}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x7}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x6, 0x5}, {0x7, 0x9}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x5}, {0x4, 0x4}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0xa}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x2}, {0x7, 0x1}, {0x1}, {0x5, 0xa}, {0x4, 0x7}, {0x3}, {0x7, 0x7}, {0x1, 0x6}, {0x3, 0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0x3}, {0x7}, {0x7, 0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x7, 0x3}, {0x2, 0x2}, {0x5, 0xa}, {0x3, 0x7}, {0x0, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x7, 0xa}, {0x1, 0x9}, {}, {0x7, 0x6}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0xb, 0x4, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x81, 0x3, 0x4, 0x4, 0x367, 0xffff, 0xf001]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0xc, 0x1b, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x4}, {0x1}, {0x3, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {}, {0x2, 0x2}, {0x4, 0x7}, {0x5, 0x4}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x6, 0x8001, 0x8, 0xfff, 0x8, 0x100]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x1}, {0x2, 0x2}, {0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x3}, {0x2, 0x6}, {0x2, 0x4}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xad7c, 0xe, 0xe0, 0x10, 0x8, 0x5, 0x3, 0x393a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x271e, 0x9, 0x7, 0x5, 0x3, 0xe, 0xe]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xad}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x200, 0x1, 0x8001, 0x5, 0x4, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x3, 0x60, 0x16, 0xb, 0x6c, 0x2b, 0x18, 0x6d, 0x1, 0x9, 0x24, 0x2, 0x2, 0x16, 0x36, 0x48, 0x60, 0x30, 0x60, 0x12, 0x36, 0x3, 0x1, 0x1b, 0xb, 0xc, 0x60, 0x24, 0x3b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x18, 0x9, 0x1b, 0x1b, 0x7f]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0xffff, 0x2, 0xfb9a, 0x8, 0x6, 0x40, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x9, 0x16, 0x9, 0x3, 0x30, 0x60, 0x36, 0x1b, 0xb, 0x18, 0x48, 0x5, 0x6, 0x18, 0x60, 0x24, 0x30, 0x24, 0x1b, 0x18, 0x6c]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x8}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x5}, {0x2, 0x7}, {0x4, 0x8}, {0x2, 0x3}, {0x4, 0x5}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x4}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x2, 0x9}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x9}, {0x2, 0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x7, 0x1}, {0x7, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x3, 0x5}, {0x1, 0x7}, {0x2}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x6}, {0x4, 0x6}, {0x3, 0x3}, {}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x5, 0x1}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x3, 0x5}, {0x4, 0x6}, {0x3}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x2, 0x1}, {0x6, 0x2}, {0x0, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x5, 0xfff7, 0x5, 0x0, 0x1ff, 0xfff7, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x100, 0x7, 0xd71, 0x8, 0x73, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x5}, {}, {0x4, 0x8}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0x9}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x9}, {0x2, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x58, 0x3, 0x9, 0x2, 0x7, 0x3, 0xfff9, 0x32e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x6, 0x1b, 0xc, 0x12, 0x1b, 0x6, 0xc, 0x34]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x2}, {0x3, 0x8}, {0x6, 0x5}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0xa}, {}, {0x2, 0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0x1c}, {0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0x7}, {0x0, 0xa}, {}, {0x3, 0x9}, {0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x7, 0x4}, {0x3, 0x9}, {0x4}, {0x7}, {0x4, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x7, 0xa}, {0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0x4}, {0x5, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x3}, {0x3, 0x3}, {0x2, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe542}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6f}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x13}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6b46ecf8}]}]}, @NL80211_ATTR_TID_CONFIG={0x704, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffe, 0x6, 0x1, 0x1000, 0x4, 0x2, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x8, 0x5, 0x4, 0xe00, 0xfff8, 0x5]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x8}, {0x3, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x6, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8, 0x9, 0x9c0, 0x7, 0xf, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0xae, 0x6, 0x1, 0x8, 0x7fe0, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0x5}, {0x2, 0x2}, {0x5, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x48, 0x4, 0x60, 0x36, 0x2, 0x36, 0x16, 0xc, 0x24, 0x1b, 0x30, 0x6c, 0x4, 0x4, 0xb, 0x16, 0xb, 0x1b, 0x5, 0x3, 0x60, 0x5, 0x2, 0x6, 0x30]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x6, 0x9, 0x12, 0x12, 0x0, 0x12, 0x30, 0x12, 0x0, 0xb, 0x48, 0x6c, 0x36]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x2}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x3}, {0x7, 0x5}, {0x5}, {0x2, 0x6}, {0x5}, {}, {0x1, 0x8}, {0x2, 0x3}, {0x4, 0x6}, {0x7, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0x8}, {0x2, 0x2}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4c, 0x40, 0x3, 0x1, 0xe, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb506, 0x8, 0x800, 0x7f, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x1, 0x8000, 0x9, 0xfffb, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x95, 0x8001, 0xa, 0x1, 0x1000, 0x10, 0x4, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x10, 0x9, 0x3, 0x2, 0x2, 0x3, 0x81]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x9431, 0xf, 0x0, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x10, 0x4e5, 0xff81, 0xd, 0xfffa, 0xe909]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x0, 0x7, 0x5, 0x1, 0xe, 0x56de]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x43c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x418, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x5}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x6}, {0x5, 0x3}, {}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0xa}, {0x2, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x3}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x7}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x48, 0x60, 0x9, 0x18, 0x30, 0xb, 0x2, 0xc, 0x0, 0x24, 0x48, 0x1, 0x9d790255a0445555, 0x36]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5764178997a521cc, 0x16, 0x0, 0x18, 0x48, 0x3, 0x6, 0xb, 0x60, 0x3, 0x48, 0x24, 0xb, 0x24, 0x1, 0x7a, 0x48, 0x5, 0x4, 0x30, 0x9, 0x60, 0xb, 0x60, 0xc, 0x6, 0x36, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0x7, 0x2, 0xf3, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x108, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0xa}, {0x5, 0x3}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x5}, {0x2, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x1}, {0x1, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x9}, {0x2}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x4}, {0x4, 0xa}, {0x1}, {0x7, 0x7}, {0x5, 0xa}, {0x1, 0x6}, {0x6, 0x6}, {0x4, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x3}, {0x1, 0x9}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x9}, {0x0, 0x3}, {0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x6}, {}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x30, 0x12, 0x16, 0x5, 0xb, 0x4, 0x3, 0x3, 0x48, 0x16, 0x2, 0xc, 0x48, 0x30, 0x1a, 0x9, 0x9, 0x6, 0x9, 0x36, 0x0, 0x48, 0x24, 0x1, 0x9, 0x24, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0xa}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x6, 0x2}, {0x5, 0x7}, {0x6, 0x4}, {}, {0x5, 0x3}, {0x5, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x5, 0x2}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x7}, {0x6, 0x5}, {0x3, 0x7}, {0x4, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x1, 0x1}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x1}, {0x3, 0x9}, {0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x3}, {0x7, 0x4}, {0x0, 0x5}, {0x7, 0x8}, {0x3}, {0x7, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x5}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x6}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x5, 0x5}, {0x6, 0x8}, {0x1, 0x6}, {0x7}, {0x2, 0x7}, {0x3, 0x7}, {0x3}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x5}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf, 0x0, 0xafa, 0x2, 0xffff, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x4}, {0x6, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x16, 0x12, 0x24, 0x16, 0x9, 0x4, 0xb, 0x24, 0xc, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x7}, {0x7}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x6, 0x7}, {0x6, 0x1}, {0x2, 0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0xa}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x8}, {0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x8}, {0x7}, {0x3, 0x8}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x5}, {0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x9}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x7, 0x4}, {0x6, 0x9}, {0x5, 0x4}, {0x2, 0x5}, {0x3, 0x4}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6000, 0x9, 0x9, 0x1, 0x8000, 0x2, 0xc03]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x5}, {0x1, 0x6}, {0x5, 0x4}, {0x7}, {0x3, 0x7}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x6}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x7, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x6, 0x5}, {0x1, 0x7}, {0x1}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x3}, {0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x5}, {0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x200, 0x1ff, 0x4, 0x8001, 0x2, 0x7]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x9}, {0x6, 0xa}, {0x3, 0x7}, {0x7, 0xa}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x5}, {}, {0x7, 0x3}, {0x6, 0x3}, {0x3, 0x1}, {0x6, 0x1e}, {0x2, 0x8}, {0x1, 0x4}, {0x6, 0x9}, {0x6}, {0x7, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x1}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x6, 0x3}, {0x5, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x6, 0x8}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x6}, {0x3}, {0x4, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {}, {0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {0x2}, {0x6, 0xa}, {0x7, 0x7}, {0x7, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x1}, {0x7}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x3}, {0x6, 0x7}, {0x1}, {0x3}, {0x5, 0x7}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x4}, {0x3, 0x1}, {}, {0x4, 0x7}, {0x7, 0x8}, {}, {0x2, 0x4}, {0x5, 0x9}, {0x5, 0x7}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x3, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0x3}, {0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x8}, {0x4, 0x2}, {0x7, 0x1}, {0x6, 0x9}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9627, 0x7f, 0xc539, 0x400, 0x7, 0xa, 0x3ff, 0xfffc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x6, 0x18, 0x1b, 0x12, 0x1b, 0x4, 0x18, 0x1, 0x5, 0x1, 0x9, 0x24, 0x12, 0xb]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0xfffd, 0x7a9, 0x7, 0x6a6, 0x100, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6c, 0x0, 0xc, 0x4]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x2}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0x3}, {0x7, 0x5}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0xc, 0x12, 0x48, 0x6c, 0x1, 0x4, 0x1b, 0x30, 0x48, 0x6, 0x6, 0x18, 0xc, 0xb, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10001}]}]}, @NL80211_ATTR_TID_CONFIG={0x9c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf33a}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x300, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x5}, {0x1, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x2}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x4, 0x1}, {0x2, 0xa}, {0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x1}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x2}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x1}, {}, {0x0, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x6}, {0x5, 0x3}, {0x2, 0xa}, {0x3, 0x5}, {0x1, 0x1}, {0x7, 0x5}, {0x7}, {0x6, 0x3}, {0x7, 0x4}, {0x3, 0xa}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x9}, {0x4, 0x4}, {0x2, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{}, {}, {0x1, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x7, 0x1}, {0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x5}, {0x3, 0x9}, {0x6, 0x4}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x5, 0x8}, {0x4}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x2, 0x3}, {0x2, 0xa}, {0x6, 0xa}, {0x6, 0x5}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x6, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xfffe, 0x6, 0x0, 0x5, 0x1, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6d79, 0x1, 0x3e98, 0x10, 0x677, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x800, 0x101, 0x4, 0x0, 0x9, 0x3, 0x8]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x100, 0x3, 0x0, 0x0, 0x9, 0x200, 0xfffa]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x1c}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0x2}, {0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x3, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0x5}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0x6}, {0x4, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0x5}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x4}, {0x2, 0x3}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x7a, 0xb, 0x12, 0x6, 0xb, 0x12, 0x3, 0x48, 0x24, 0x24, 0xb, 0x9, 0x4, 0x16, 0x12, 0x1, 0x3a38ba2db9e0bf51, 0xc, 0x26, 0x30, 0x12, 0x573a5523971bf335, 0x0, 0x6, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x4, 0x3, 0x8, 0x2, 0x9, 0xd, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4bb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x8000, 0x6, 0x8, 0x7fff, 0xffff, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x3, 0xc, 0x9, 0x2, 0x60, 0x2, 0x12, 0x1, 0x60, 0x0, 0x2, 0x6c, 0x30, 0x2, 0x3, 0x12, 0x18, 0x4, 0x5, 0x1, 0x5, 0x16, 0x12, 0x5, 0x18, 0x12, 0x4, 0x16, 0x5, 0x0]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x16, 0x30, 0x1, 0xc, 0x3, 0x30, 0x1, 0x3, 0x6c, 0x60, 0x1, 0x12, 0x1, 0x6, 0x0, 0x5, 0x6c, 0x12, 0x16, 0x2, 0x24, 0x6, 0xb, 0x0, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x1968}, 0x1, 0x0, 0x0, 0x4044084}, 0x4000) (async) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003700), r0) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x3c, r12, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x80]}]}, 0x3c}}, 0x4000000) (async) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpid() (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r14, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x2c, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x800) (async) syz_genetlink_get_family_id$smc(&(0x7f0000003900), r10) (async) r15 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003940)='syz0\x00', 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f0000003980)='memory.numa_stat\x00', 0x0, 0x0) sendfile(r13, r16, &(0x7f00000039c0)=0xfffffffffffffffb, 0xdaf) 159.933935ms ago: executing program 6 (id=4114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f0000000b00)="e19dae4a1fd37ae984efabb688a8", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x26020480) unshare(0x8000280) 60.680935ms ago: executing program 2 (id=4115): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'pimreg\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, r2, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = accept4$rose(r3, &(0x7f00000001c0)=@full={0xb, @dev, @rose, 0x0, [@null, @remote, @bcast, @netrom, @netrom, @bcast]}, &(0x7f0000000200)=0x40, 0x80000) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000240)=0x7f1) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000002c0)="dff742f0c60f05444bd53f745528ae6c", 0x10) r8 = socket(0x6, 0x5, 0x0) write$bt_hci(r8, &(0x7f0000000300)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xb) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x81, 0x6, 0x7, 0x7fffffff}, {0x0, 0x7, 0x1e}, {0xffff, 0x81, 0x40, 0x7}, {0x7, 0x0, 0xf8, 0x7}, {0x7, 0x6, 0x5, 0x3c70}, {0x3, 0x2, 0x0, 0x7}]}, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f00000004c0)={0x3, 0x0, 0xd4, &(0x7f00000003c0)=""/212}) shutdown(r0, 0x1) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000500), &(0x7f0000000540)=0x4) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000580)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3404}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20004004) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r8) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x31}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x4c001) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000800), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x1ff, 0x0, 0x4, 0x88, r1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xc, @void, @value, @void, @value}, 0x50) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f00000008c0)=0x200, 0x4) socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000940)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000980)) 46.303191ms ago: executing program 6 (id=4116): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x338, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2a0, 0x1f0, 0x1f0, 0x2a0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x7, 0x100, 0x20, 0x11, 0x3, 0x4, 0x1, 0x20, 0x18}, {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffffffffff36, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}, 0xfffffffffffffe84}}, 0x2a10b9125debad17) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x9, 0x10}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x9, 0x10}, 0xc) 0s ago: executing program 3 (id=4117): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r1}, &(0x7f0000001040), &(0x7f0000001080)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000101010101010000080026006c090000200051"], 0x54}}, 0x40080) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(r0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) kernel console output (not intermixed with test programs): [T17294] sctp: [Deprecated]: syz.2.3176 (pid 17294) Use of int in max_burst socket option. [ 456.791964][T17294] Use struct sctp_assoc_value instead [ 456.808642][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 456.817759][T17297] tipc: Enabling of bearer rejected, media not registered [ 456.895506][T17298] netlink: 'syz.2.3176': attribute type 13 has an invalid length. [ 456.967710][T17301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3178'. [ 457.192112][T17308] FAULT_INJECTION: forcing a failure. [ 457.192112][T17308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.226535][T17308] CPU: 1 UID: 0 PID: 17308 Comm: syz.6.3180 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 457.226564][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.226576][T17308] Call Trace: [ 457.226584][T17308] [ 457.226593][T17308] dump_stack_lvl+0x189/0x250 [ 457.226629][T17308] ? __pfx____ratelimit+0x10/0x10 [ 457.226657][T17308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.226688][T17308] ? __pfx__printk+0x10/0x10 [ 457.226710][T17308] ? __might_fault+0xb0/0x130 [ 457.226743][T17308] should_fail_ex+0x414/0x560 [ 457.226776][T17308] _copy_from_iter+0x1db/0x16f0 [ 457.226812][T17308] ? rcu_is_watching+0x15/0xb0 [ 457.226833][T17308] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 457.226868][T17308] ? __pfx__copy_from_iter+0x10/0x10 [ 457.226897][T17308] ? __build_skb_around+0x257/0x3e0 [ 457.226930][T17308] ? netlink_sendmsg+0x642/0xb30 [ 457.226946][T17308] ? skb_put+0x11b/0x210 [ 457.226965][T17308] netlink_sendmsg+0x6b2/0xb30 [ 457.226991][T17308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.227011][T17308] ? aa_sock_msg_perm+0x94/0x160 [ 457.227035][T17308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.227057][T17308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.227074][T17308] __sock_sendmsg+0x219/0x270 [ 457.227100][T17308] ____sys_sendmsg+0x505/0x830 [ 457.227123][T17308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.227150][T17308] ? import_iovec+0x74/0xa0 [ 457.227171][T17308] ___sys_sendmsg+0x21f/0x2a0 [ 457.227188][T17308] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.227234][T17308] ? __fget_files+0x2a/0x420 [ 457.227250][T17308] ? __fget_files+0x3a0/0x420 [ 457.227275][T17308] __x64_sys_sendmsg+0x19b/0x260 [ 457.227301][T17308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.227326][T17308] ? __pfx_ksys_write+0x10/0x10 [ 457.227339][T17308] ? rcu_is_watching+0x15/0xb0 [ 457.227357][T17308] ? do_syscall_64+0xbe/0x3b0 [ 457.227381][T17308] do_syscall_64+0xfa/0x3b0 [ 457.227399][T17308] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.227417][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.227432][T17308] ? clear_bhb_loop+0x60/0xb0 [ 457.227450][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.227464][T17308] RIP: 0033:0x7fc9d2b8e929 [ 457.227478][T17308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.227491][T17308] RSP: 002b:00007fc9d09f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.227524][T17308] RAX: ffffffffffffffda RBX: 00007fc9d2db5fa0 RCX: 00007fc9d2b8e929 [ 457.227536][T17308] RDX: 0000000000000040 RSI: 0000200000000500 RDI: 0000000000000003 [ 457.227546][T17308] RBP: 00007fc9d09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.227556][T17308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.227565][T17308] R13: 0000000000000000 R14: 00007fc9d2db5fa0 R15: 00007fffef3b28b8 [ 457.227590][T17308] [ 457.636417][T17304] wg1 speed is unknown, defaulting to 1000 [ 457.645066][T17304] dummy0 speed is unknown, defaulting to 1000 [ 457.664034][T17304] lo speed is unknown, defaulting to 1000 [ 457.860685][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 457.920828][T17321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3183'. [ 457.998112][T17319] bond1: entered promiscuous mode [ 458.037728][T17319] bond1: entered allmulticast mode [ 458.061812][T17321] bond1: left promiscuous mode [ 458.071724][T17321] bond1: left allmulticast mode [ 458.078288][T17321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.204139][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 458.359353][T17337] wg1 speed is unknown, defaulting to 1000 [ 458.373536][T17337] dummy0 speed is unknown, defaulting to 1000 [ 458.381264][T17337] lo speed is unknown, defaulting to 1000 [ 459.117472][T17367] tun0: tun_chr_ioctl cmd 1074025675 [ 459.151757][T17367] tun0: persist enabled [ 459.227818][T17367] tun0: tun_chr_ioctl cmd 1074025675 [ 459.237657][T17367] tun0: persist disabled [ 459.239320][T17377] netlink: 'syz.0.3198': attribute type 1 has an invalid length. [ 459.293660][T17380] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3198'. [ 459.504811][T17377] bond2: entered promiscuous mode [ 459.560268][T17377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.583355][T17388] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3198'. [ 459.613619][T17380] batadv1: entered promiscuous mode [ 459.618877][T17380] batadv1: entered allmulticast mode [ 459.754161][T17380] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 459.768520][T17380] bond2: (slave batadv1): making interface the new active one [ 459.777413][T17380] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 459.798790][T17392] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 460.040955][T17375] wg1 speed is unknown, defaulting to 1000 [ 460.068884][T17372] wg1 speed is unknown, defaulting to 1000 [ 460.087704][T17375] dummy0 speed is unknown, defaulting to 1000 [ 460.122893][T17372] dummy0 speed is unknown, defaulting to 1000 [ 460.143607][T17372] lo speed is unknown, defaulting to 1000 [ 460.200100][T17375] lo speed is unknown, defaulting to 1000 [ 460.310765][T17410] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3205'. [ 460.382566][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3205'. [ 460.485183][ T9] IPVS: starting estimator thread 0... [ 460.621821][T17415] IPVS: using max 26 ests per chain, 62400 per kthread [ 460.654060][T17423] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3208'. [ 460.796808][T17428] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3211'. [ 460.902957][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3211'. [ 462.140420][T17464] netlink: 'syz.6.3220': attribute type 11 has an invalid length. [ 462.203198][T17466] netlink: 'syz.6.3220': attribute type 1 has an invalid length. [ 462.416853][T17470] wg1 speed is unknown, defaulting to 1000 [ 462.419043][T17471] netlink: 'syz.6.3221': attribute type 2 has an invalid length. [ 462.460573][T17471] geneve2: entered allmulticast mode [ 462.480512][ C1] net_ratelimit: 13 callbacks suppressed [ 462.480529][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 462.500683][T17470] dummy0 speed is unknown, defaulting to 1000 [ 462.553294][T17470] lo speed is unknown, defaulting to 1000 [ 462.898703][T17482] FAULT_INJECTION: forcing a failure. [ 462.898703][T17482] name failslab, interval 1, probability 0, space 0, times 0 [ 462.923524][T17482] CPU: 0 UID: 0 PID: 17482 Comm: syz.3.3225 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 462.923552][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.923565][T17482] Call Trace: [ 462.923573][T17482] [ 462.923582][T17482] dump_stack_lvl+0x189/0x250 [ 462.923617][T17482] ? __pfx____ratelimit+0x10/0x10 [ 462.923644][T17482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.923675][T17482] ? __pfx__printk+0x10/0x10 [ 462.923703][T17482] ? __pfx___might_resched+0x10/0x10 [ 462.923722][T17482] ? fs_reclaim_acquire+0x7d/0x100 [ 462.923751][T17482] should_fail_ex+0x414/0x560 [ 462.923783][T17482] should_failslab+0xa8/0x100 [ 462.923808][T17482] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 462.923830][T17482] ? __alloc_skb+0x112/0x2d0 [ 462.923854][T17482] __alloc_skb+0x112/0x2d0 [ 462.923878][T17482] netlink_ack+0x146/0xa50 [ 462.923894][T17482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.923917][T17482] ? ref_tracker_free+0x63a/0x7d0 [ 462.923948][T17482] ? __pfx_ref_tracker_free+0x10/0x10 [ 462.923988][T17482] netlink_rcv_skb+0x28c/0x470 [ 462.924009][T17482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.924036][T17482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.924083][T17482] ? down_read+0x1ad/0x2e0 [ 462.924125][T17482] genl_rcv+0x28/0x40 [ 462.924164][T17482] netlink_unicast+0x758/0x8d0 [ 462.924207][T17482] netlink_sendmsg+0x805/0xb30 [ 462.924238][T17482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.924262][T17482] ? aa_sock_msg_perm+0x94/0x160 [ 462.924291][T17482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.924317][T17482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.924339][T17482] __sock_sendmsg+0x219/0x270 [ 462.924369][T17482] ____sys_sendmsg+0x505/0x830 [ 462.924398][T17482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.924432][T17482] ? import_iovec+0x74/0xa0 [ 462.924457][T17482] ___sys_sendmsg+0x21f/0x2a0 [ 462.924483][T17482] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.924547][T17482] ? __fget_files+0x2a/0x420 [ 462.924569][T17482] ? __fget_files+0x3a0/0x420 [ 462.924604][T17482] __x64_sys_sendmsg+0x19b/0x260 [ 462.924630][T17482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.924664][T17482] ? __pfx_ksys_write+0x10/0x10 [ 462.924681][T17482] ? rcu_is_watching+0x15/0xb0 [ 462.924707][T17482] ? do_syscall_64+0xbe/0x3b0 [ 462.924739][T17482] do_syscall_64+0xfa/0x3b0 [ 462.924764][T17482] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.924809][T17482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.924831][T17482] ? clear_bhb_loop+0x60/0xb0 [ 462.924876][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.924896][T17482] RIP: 0033:0x7f2d1418e929 [ 462.924915][T17482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.924933][T17482] RSP: 002b:00007f2d15018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.924954][T17482] RAX: ffffffffffffffda RBX: 00007f2d143b5fa0 RCX: 00007f2d1418e929 [ 462.924970][T17482] RDX: 0000000000000040 RSI: 0000200000000500 RDI: 0000000000000003 [ 462.924983][T17482] RBP: 00007f2d15018090 R08: 0000000000000000 R09: 0000000000000000 [ 462.924995][T17482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.925007][T17482] R13: 0000000000000000 R14: 00007f2d143b5fa0 R15: 00007ffe0abf99f8 [ 462.925041][T17482] [ 463.272208][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 463.379847][T17484] netlink: 'syz.5.3226': attribute type 4 has an invalid length. [ 463.513698][ T5155] block nbd0: Receive control failed (result -32) [ 463.774365][T17498] netlink: 'syz.2.3231': attribute type 23 has an invalid length. [ 464.483904][T17532] TCP: TCP_TX_DELAY enabled [ 465.008165][T17543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.031939][T17543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.044262][T17546] __nla_validate_parse: 5 callbacks suppressed [ 465.044277][T17546] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3247'. [ 465.086463][T17543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.114911][T17543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.122655][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3247'. [ 465.157978][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3247'. [ 465.340393][T17551] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 465.378206][T17561] openvswitch: netlink: Multiple metadata blocks provided [ 465.379920][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3250'. [ 465.918359][T17586] IPVS: persistence engine module ip_vs_pe_ not found [ 466.052230][T17590] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 466.058394][T17590] syzkaller1: linktype set to 776 [ 466.111312][T17600] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3262'. [ 466.137018][T17600] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3262'. [ 466.166410][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 466.384112][T17617] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 466.464307][T17618] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 466.920255][T17630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.952468][T17626] wg1 speed is unknown, defaulting to 1000 [ 466.960256][T17626] dummy0 speed is unknown, defaulting to 1000 [ 466.983233][T17626] lo speed is unknown, defaulting to 1000 [ 467.391792][T17643] netlink: 'syz.0.3274': attribute type 5 has an invalid length. [ 467.401114][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3274'. [ 467.514295][T17642] wg1 speed is unknown, defaulting to 1000 [ 467.523385][T17644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3276'. [ 467.861699][T17642] dummy0 speed is unknown, defaulting to 1000 [ 467.975791][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'. [ 468.036196][T17666] netlink: 'syz.3.3282': attribute type 11 has an invalid length. [ 468.041926][T17642] lo speed is unknown, defaulting to 1000 [ 468.052653][ T6432] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 468.686771][ T5920] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 468.817123][ T6661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.904743][ T5920] hid (null): global environment stack underflow [ 469.110634][ T6661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.413060][ T6661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.573420][T17699] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 469.733880][ T6661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.797871][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.812520][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.820314][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.820360][T17697] wg1 speed is unknown, defaulting to 1000 [ 469.835885][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.862788][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.129993][T17697] dummy0 speed is unknown, defaulting to 1000 [ 470.142967][T17706] wg1 speed is unknown, defaulting to 1000 [ 470.224575][T17719] macvtap1: entered promiscuous mode [ 470.229970][T17706] dummy0 speed is unknown, defaulting to 1000 [ 470.250738][T17719] vlan0: entered promiscuous mode [ 470.263689][T17719] macvtap1: entered allmulticast mode [ 470.269179][T17719] vlan0: entered allmulticast mode [ 470.275267][T17719] veth0_vlan: entered allmulticast mode [ 470.288545][T17719] vlan0: left allmulticast mode [ 470.293569][T17719] veth0_vlan: left allmulticast mode [ 470.298941][T17719] vlan0: left promiscuous mode [ 470.365654][T17697] lo speed is unknown, defaulting to 1000 [ 470.426839][T17706] lo speed is unknown, defaulting to 1000 [ 470.549290][ T6661] bridge_slave_1: left allmulticast mode [ 470.591763][ T6661] bridge_slave_1: left promiscuous mode [ 470.625945][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.801294][ T30] audit: type=1800 audit(1749344173.065:9): pid=17740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3303" name="f" dev="tmpfs" ino=214 res=0 errno=0 [ 471.006067][ T6661] bridge_slave_0: left allmulticast mode [ 471.036866][ T6661] bridge_slave_0: left promiscuous mode [ 471.071927][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.216457][ T5920] hid-generic 0005:0B57:9C16.0002: unknown main item tag 0x6 [ 471.234488][ T5920] hid-generic 0005:0B57:9C16.0002: global environment stack underflow [ 471.250607][ T5920] hid-generic 0005:0B57:9C16.0002: item 0 4 1 11 parsing failed [ 471.274633][ T5920] hid-generic 0005:0B57:9C16.0002: probe with driver hid-generic failed with error -22 [ 471.961821][ T5846] Bluetooth: hci0: command tx timeout [ 473.813043][ T6661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.826798][ T6661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.837386][ T6661] bond0 (unregistering): Released all slaves [ 473.855099][ T6661] bond1 (unregistering): Released all slaves [ 473.965136][ T6661] bond2 (unregistering): (slave batadv1): Releasing active interface [ 473.979160][ T6661] bond2 (unregistering): Released all slaves [ 474.000987][T17739] macvlan3: entered promiscuous mode [ 474.006760][T17739] macvlan3: entered allmulticast mode [ 474.042060][ T5846] Bluetooth: hci0: command tx timeout [ 474.185282][ T6661] tipc: Left network mode [ 474.765360][T17771] __nla_validate_parse: 3 callbacks suppressed [ 474.765379][T17771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3313'. [ 475.122105][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'. [ 475.176194][T17789] bond0: entered promiscuous mode [ 475.200857][T17789] bond_slave_0: entered promiscuous mode [ 475.218249][T17789] bond_slave_1: entered promiscuous mode [ 475.290531][T17789] batadv_slave_0: entered promiscuous mode [ 475.324012][T17789] hsr1: entered promiscuous mode [ 475.434195][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3317'. [ 475.728564][ T6655] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 475.978132][ T6661] hsr_slave_0: left promiscuous mode [ 476.022285][ T6661] 0·: left promiscuous mode [ 476.027701][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.042977][ T6661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.059484][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.080670][ T6661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.122217][ T5846] Bluetooth: hci0: command tx timeout [ 476.138395][ T6661] veth1_macvtap: left promiscuous mode [ 476.156368][ T6661] veth0_macvtap: left promiscuous mode [ 476.169173][ T6661] veth1_vlan: left promiscuous mode [ 476.187016][ T6661] veth0_vlan: left promiscuous mode [ 476.487450][T17830] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 476.634520][T17835] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3329'. [ 476.646304][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 476.661464][T17835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3329'. [ 476.923224][ T6661] team0 (unregistering): Port device team_slave_1 removed [ 476.976045][ T6661] team0 (unregistering): Port device team_slave_0 removed [ 477.416280][T17804] wg1 speed is unknown, defaulting to 1000 [ 477.428206][T17706] chnl_net:caif_netlink_parms(): no params data found [ 477.542063][T17804] dummy0 speed is unknown, defaulting to 1000 [ 477.580890][T17804] lo speed is unknown, defaulting to 1000 [ 477.764897][T17850] netlink: 'syz.6.3331': attribute type 303 has an invalid length. [ 477.883613][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3331'. [ 477.943667][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.960848][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.993327][T17706] bridge_slave_0: entered allmulticast mode [ 478.016001][T17706] bridge_slave_0: entered promiscuous mode [ 478.049062][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.069404][T17706] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.112919][T17706] bridge_slave_1: entered allmulticast mode [ 478.146403][T17706] bridge_slave_1: entered promiscuous mode [ 478.203118][ T5846] Bluetooth: hci0: command tx timeout [ 478.424515][T17706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.485566][T17706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.499421][ T6661] IPVS: stop unused estimator thread 0... [ 478.544243][T17865] netlink: 'syz.3.3337': attribute type 3 has an invalid length. [ 478.637700][T17706] team0: Port device team_slave_0 added [ 478.660261][T17877] Cannot find del_set index 0 as target [ 478.677232][T17706] team0: Port device team_slave_1 added [ 478.872424][T17706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.879439][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.927815][T17706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.019645][T17889] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3344'. [ 479.151278][T17706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.170661][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.207991][T17706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.504859][T17706] hsr_slave_0: entered promiscuous mode [ 479.522901][T17706] hsr_slave_1: entered promiscuous mode [ 479.547662][T17706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.578996][T17706] Cannot create hsr debugfs directory [ 480.355423][T17918] wg1 speed is unknown, defaulting to 1000 [ 480.400301][T17918] dummy0 speed is unknown, defaulting to 1000 [ 480.418754][T17918] lo speed is unknown, defaulting to 1000 [ 480.586516][T17930] netlink: 'syz.3.3357': attribute type 10 has an invalid length. [ 480.677402][T17706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 480.707619][T17706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 480.741071][T17706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 480.764897][T17706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.844227][ T6661] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 480.956436][T17944] netlink: 'syz.6.3359': attribute type 1 has an invalid length. [ 480.964597][T17944] netlink: 'syz.6.3359': attribute type 2 has an invalid length. [ 480.978572][T17944] netlink: 'syz.6.3359': attribute type 2 has an invalid length. [ 480.991820][T17944] netlink: 'syz.6.3359': attribute type 1 has an invalid length. [ 480.999629][T17944] netlink: 'syz.6.3359': attribute type 1 has an invalid length. [ 481.022493][T17944] netlink: 'syz.6.3359': attribute type 1 has an invalid length. [ 481.030425][T17944] netlink: 'syz.6.3359': attribute type 2 has an invalid length. [ 481.040081][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3359'. [ 481.075807][T17706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.235328][T17706] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.261293][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.268551][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.358927][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.366171][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.495237][T17964] ipt_ECN: cannot use operation on non-tcp rule [ 481.677963][ T6432] IPVS: starting estimator thread 0... [ 481.771912][T17969] IPVS: using max 32 ests per chain, 76800 per kthread [ 481.882884][T17974] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.902714][ T6432] IPVS: starting estimator thread 0... [ 481.963841][T17967] syzkaller0: entered promiscuous mode [ 481.981936][T17967] syzkaller0: entered allmulticast mode [ 481.992268][T17980] IPVS: using max 32 ests per chain, 76800 per kthread [ 482.164572][T17986] x_tables: unsorted underflow at hook 2 [ 483.407797][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 484.045284][ T6432] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 484.156408][T17706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.306918][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3374'. [ 484.416176][T17706] veth0_vlan: entered promiscuous mode [ 484.435922][T17706] veth1_vlan: entered promiscuous mode [ 484.517258][T18009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3376'. [ 484.531155][T17706] veth0_macvtap: entered promiscuous mode [ 484.548491][T18010] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3378'. [ 484.587653][T17706] veth1_macvtap: entered promiscuous mode [ 484.666149][T17706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.692728][ T5920] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 484.712227][T17706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.752157][T17706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.763127][T17706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.789334][T17706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.802182][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'. [ 484.821483][T17706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.830400][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3383'. [ 484.856834][T18022] netlink: 'syz.2.3383': attribute type 20 has an invalid length. [ 485.080908][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.113320][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.175758][T18034] netlink: zone id is out of range [ 485.215081][T18034] netlink: zone id is out of range [ 485.232778][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.243100][T18034] netlink: zone id is out of range [ 485.270754][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.274510][T18034] netlink: zone id is out of range [ 485.310674][T18034] netlink: zone id is out of range [ 485.772844][T18042] wg1 speed is unknown, defaulting to 1000 [ 485.805469][T18042] dummy0 speed is unknown, defaulting to 1000 [ 485.859908][T18042] lo speed is unknown, defaulting to 1000 [ 485.965992][ T1091] net_ratelimit: 4 callbacks suppressed [ 485.966012][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 485.975825][T18050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3389'. [ 486.041126][T18050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3389'. [ 486.070820][T18050] netlink: 'syz.5.3389': attribute type 4 has an invalid length. [ 486.377853][T18055] xt_CT: No such helper "snmp" [ 486.839689][ T3513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.913104][T18071] netlink: 'syz.6.3394': attribute type 3 has an invalid length. [ 487.133565][ T3513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.186247][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'. [ 487.201766][T18077] bridge_slave_1: left allmulticast mode [ 487.215600][T18077] bridge_slave_1: left promiscuous mode [ 487.225971][T18077] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.246522][T18077] bridge_slave_0: left allmulticast mode [ 487.251071][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3397'. [ 487.259623][T18077] bridge_slave_0: left promiscuous mode [ 487.275228][T18077] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.292090][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3397'. [ 487.404431][T18080] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.413353][T18080] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.423583][T18080] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.432503][T18080] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.512744][ T3513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.529954][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.544137][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.553367][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.562053][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.569736][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.624232][T18084] wg1 speed is unknown, defaulting to 1000 [ 487.684330][ T3513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.707354][T18084] dummy0 speed is unknown, defaulting to 1000 [ 487.729038][T18084] lo speed is unknown, defaulting to 1000 [ 487.919174][ T3513] bridge_slave_1: left allmulticast mode [ 487.936664][ T3513] bridge_slave_1: left promiscuous mode [ 487.950548][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.978168][ T3513] bridge_slave_0: left allmulticast mode [ 487.991771][ T3513] bridge_slave_0: left promiscuous mode [ 488.004733][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.096151][T18097] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3400'. [ 488.149251][T18097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3400'. [ 488.818221][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.845141][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.868359][ T3513] bond0 (unregistering): Released all slaves [ 489.177801][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 489.461180][T18132] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004 [ 489.520352][T18131] sctp: [Deprecated]: syz.5.3410 (pid 18131) Use of int in max_burst socket option deprecated. [ 489.520352][T18131] Use struct sctp_assoc_value instead [ 489.599051][T18137] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.651778][ T5846] Bluetooth: hci0: command tx timeout [ 489.850160][T18153] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3416'. [ 490.284596][T18084] chnl_net:caif_netlink_parms(): no params data found [ 490.445154][ T3513] hsr_slave_0: left promiscuous mode [ 490.455217][ T3513] hsr_slave_1: left promiscuous mode [ 490.466537][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.488014][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.508171][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.514065][T18183] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 490.518445][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.573034][ T3513] veth1_macvtap: left promiscuous mode [ 490.578705][ T3513] veth0_macvtap: left promiscuous mode [ 490.588080][ T3513] veth1_vlan: left promiscuous mode [ 490.593594][ T3513] veth0_vlan: left promiscuous mode [ 491.372797][T18203] sctp: [Deprecated]: syz.2.3430 (pid 18203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.372797][T18203] Use struct sctp_sack_info instead [ 491.400940][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 491.471310][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 491.722154][ T5846] Bluetooth: hci0: command tx timeout [ 491.728846][ T6685] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 492.269551][T18179] veth1_to_bond: entered allmulticast mode [ 492.559233][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3437'. [ 492.588232][T18084] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.598127][T18084] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.605507][T18084] bridge_slave_0: entered allmulticast mode [ 492.613389][T18084] bridge_slave_0: entered promiscuous mode [ 492.623169][T18242] tap0: tun_chr_ioctl cmd 1074025677 [ 492.628603][T18242] tap0: linktype set to 768 [ 492.682677][T18084] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.690647][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.700369][T18084] bridge_slave_1: entered allmulticast mode [ 492.722988][T18084] bridge_slave_1: entered promiscuous mode [ 492.847812][T18084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.941517][T18084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.957488][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3441'. [ 493.032694][T18258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3443'. [ 493.042443][T18258] netlink: 'syz.6.3443': attribute type 1 has an invalid length. [ 493.161258][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'. [ 493.273820][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3446'. [ 493.288657][T18084] team0: Port device team_slave_0 added [ 493.371300][T18254] wg1 speed is unknown, defaulting to 1000 [ 493.383084][T18084] team0: Port device team_slave_1 added [ 493.517074][T18254] dummy0 speed is unknown, defaulting to 1000 [ 493.558929][T18084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.576210][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.609460][T18291] x_tables: duplicate underflow at hook 1 [ 493.661835][T18084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.680134][T18254] lo speed is unknown, defaulting to 1000 [ 493.727064][T18084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.790901][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.801875][ T5846] Bluetooth: hci0: command tx timeout [ 493.849960][T18084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.299085][T18316] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3457'. [ 494.313925][T18316] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3457'. [ 494.337113][T18084] hsr_slave_0: entered promiscuous mode [ 494.365233][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3457'. [ 494.374621][T18084] hsr_slave_1: entered promiscuous mode [ 494.375486][T18084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.429180][T18084] Cannot create hsr debugfs directory [ 494.445980][T18314] netlink: 'syz.6.3458': attribute type 1 has an invalid length. [ 494.454507][T18314] netlink: 'syz.6.3458': attribute type 1 has an invalid length. [ 494.467060][T18314] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3458'. [ 494.476791][T18314] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.484402][T18314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.569420][T18317] wg1 speed is unknown, defaulting to 1000 [ 494.665020][T18317] dummy0 speed is unknown, defaulting to 1000 [ 494.808520][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3461'. [ 494.838190][T18317] lo speed is unknown, defaulting to 1000 [ 494.918644][T18328] veth0_to_bridge: entered promiscuous mode [ 494.932080][ T6655] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 495.429840][T18327] veth0_to_bridge: left promiscuous mode [ 495.677510][T18336] netlink: 'syz.6.3464': attribute type 5 has an invalid length. [ 495.881721][ T5846] Bluetooth: hci0: command tx timeout [ 496.556848][T18363] netlink: 'syz.2.3471': attribute type 21 has an invalid length. [ 496.614565][T18363] netlink: 'syz.2.3471': attribute type 4 has an invalid length. [ 496.766498][ T155] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 496.806330][T18084] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.848604][T18084] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.888438][T18084] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.944358][T18084] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.216295][T18388] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 497.295304][T18395] syz.3.3475 (18395) used obsolete PPPIOCDETACH ioctl [ 497.320427][T18391] x_tables: ip_tables: ah match: only valid for protocol 51 [ 497.336756][T18084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.415666][T18084] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.460166][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.467430][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.527332][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.534571][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.604773][T18402] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 497.710556][T18084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.727668][T18417] __nla_validate_parse: 5 callbacks suppressed [ 497.727686][T18417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'. [ 497.794968][T18417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'. [ 497.840307][T18418] xt_CT: No such helper "snmp" [ 498.239360][T18084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.426257][T18084] veth0_vlan: entered promiscuous mode [ 498.482312][T18455] netem: incorrect gi model size [ 498.500599][T18455] netem: change failed [ 498.537055][T18084] veth1_vlan: entered promiscuous mode [ 498.656901][T18084] veth0_macvtap: entered promiscuous mode [ 498.695746][T18084] veth1_macvtap: entered promiscuous mode [ 498.760865][T18084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.830859][T18084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.874492][T18084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.899459][T18084] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.919674][T18084] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.931158][T18084] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.044464][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'. [ 499.208458][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.242267][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.271660][T18490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.345022][T18478] wg1 speed is unknown, defaulting to 1000 [ 499.465803][T18491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.470732][T18498] netlink: 'syz.2.3502': attribute type 16 has an invalid length. [ 499.499749][T18498] netlink: 'syz.2.3502': attribute type 17 has an invalid length. [ 499.516771][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.535304][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.605021][T18478] dummy0 speed is unknown, defaulting to 1000 [ 499.694114][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3504'. [ 499.792826][T18491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.897457][T18478] lo speed is unknown, defaulting to 1000 [ 499.986955][T18492] wg1 speed is unknown, defaulting to 1000 [ 500.039390][T18491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.061361][T18492] dummy0 speed is unknown, defaulting to 1000 [ 500.075243][T18516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3507'. [ 500.121834][T18492] lo speed is unknown, defaulting to 1000 [ 500.215546][T18491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.426348][T18491] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.469319][T18491] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.647041][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.684806][ T155] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 500.735061][T18491] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.802782][T18491] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.964153][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.206120][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.262331][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3511'. [ 501.290509][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3513'. [ 501.311392][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3513'. [ 501.343179][T18540] netlink: 'syz.5.3513': attribute type 11 has an invalid length. [ 501.453773][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.739949][T18552] bridge0: port 3(veth0_to_bridge) entered blocking state [ 501.752371][T18552] bridge0: port 3(veth0_to_bridge) entered disabled state [ 501.759831][T18552] veth0_to_bridge: entered allmulticast mode [ 501.782053][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.790614][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.801181][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.815376][T18552] veth0_to_bridge: entered promiscuous mode [ 501.847906][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.866712][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.961991][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 502.192226][ T36] bridge_slave_1: left allmulticast mode [ 502.207883][ T36] bridge_slave_1: left promiscuous mode [ 502.231373][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.301523][ T36] bridge_slave_0: left allmulticast mode [ 502.313611][ T36] bridge_slave_0: left promiscuous mode [ 502.335748][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.921456][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.946150][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.958202][ T36] bond0 (unregistering): Released all slaves [ 502.981057][T18560] wg1 speed is unknown, defaulting to 1000 [ 503.010801][T18557] wg1 speed is unknown, defaulting to 1000 [ 503.021854][T18560] dummy0 speed is unknown, defaulting to 1000 [ 503.029587][T18560] lo speed is unknown, defaulting to 1000 [ 503.043407][T18557] dummy0 speed is unknown, defaulting to 1000 [ 503.068697][T18557] lo speed is unknown, defaulting to 1000 [ 503.231168][T18576] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3522'. [ 503.599449][T18593] Bluetooth: MGMT ver 1.23 [ 503.854892][T18601] sctp: [Deprecated]: syz.6.3528 (pid 18601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.854892][T18601] Use struct sctp_sack_info instead [ 503.909364][T18603] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3529'. [ 503.962774][ T5155] Bluetooth: hci0: command tx timeout [ 503.991548][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3530'. [ 504.665377][T18625] bridge_slave_0: left allmulticast mode [ 504.671212][T18625] bridge_slave_0: left promiscuous mode [ 504.701911][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.735859][T18625] bridge_slave_1: left allmulticast mode [ 504.760186][T18625] bridge_slave_1: left promiscuous mode [ 504.770383][T18625] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.790284][T18625] bond0: (slave bond_slave_0): Releasing backup interface [ 504.792957][T18631] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 504.844732][T18625] bond0: (slave bond_slave_1): Releasing backup interface [ 504.926466][T18633] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3537'. [ 504.945702][T18625] team0: Port device team_slave_0 removed [ 504.990084][T18625] team0: Port device team_slave_1 removed [ 505.076060][ T36] hsr_slave_0: left promiscuous mode [ 505.088543][ T36] hsr_slave_1: left promiscuous mode [ 505.114292][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.131285][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.155460][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.170984][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.230495][ T36] veth1_macvtap: left promiscuous mode [ 505.248575][ T36] veth0_macvtap: left promiscuous mode [ 505.257921][ T36] veth1_vlan: left promiscuous mode [ 505.264343][ T36] veth0_vlan: left promiscuous mode [ 505.911701][ T36] team0 (unregistering): Port device team_slave_1 removed [ 505.958274][ T36] team0 (unregistering): Port device team_slave_0 removed [ 506.045915][ T5846] Bluetooth: hci0: command tx timeout [ 506.393990][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 506.412614][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 506.426105][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 506.435289][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 506.444704][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 506.445416][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 506.460528][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 506.532997][T18631] wg1 speed is unknown, defaulting to 1000 [ 506.540377][T18631] dummy0 speed is unknown, defaulting to 1000 [ 506.594648][T18631] lo speed is unknown, defaulting to 1000 [ 506.647023][T18557] chnl_net:caif_netlink_parms(): no params data found [ 506.905980][T18660] No such timeout policy "syz0" [ 507.058921][T18664] siw: device registration error -23 [ 507.068539][T18557] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.083810][T18557] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.095497][T18557] bridge_slave_0: entered allmulticast mode [ 507.104152][T18557] bridge_slave_0: entered promiscuous mode [ 507.129220][T18557] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.147586][T18557] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.159977][T18557] bridge_slave_1: entered allmulticast mode [ 507.176534][T18557] bridge_slave_1: entered promiscuous mode [ 507.326665][T18557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.428226][T18557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.724042][ T1114] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 507.992155][T18557] team0: Port device team_slave_0 added [ 507.998598][T18670] tipc: Started in network mode [ 508.013877][T18670] tipc: Node identity , cluster identity 4711 [ 508.020018][T18670] tipc: Failed to set node id, please configure manually [ 508.065128][T18670] tipc: Enabling of bearer rejected, failed to enable media [ 508.127929][ T5846] Bluetooth: hci0: command 0x040f tx timeout [ 508.195382][T18557] team0: Port device team_slave_1 added [ 508.461923][T18557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.484660][T18691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.511607][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.536645][T18691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.579260][T18696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.641712][T18557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.677798][T18692] __nla_validate_parse: 45 callbacks suppressed [ 508.677818][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 508.679425][T18557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.781799][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.840621][T18557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.864343][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 508.918755][T18692] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.927475][T18692] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.936009][T18692] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.944383][T18692] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.966717][T18692] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.975728][T18692] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.984619][T18692] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.993226][T18692] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.075079][T18694] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.084283][T18694] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.093114][T18694] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.101322][T18694] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.150972][T18694] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.159820][T18694] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.168502][T18694] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.176949][T18694] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.462428][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 509.514418][T18719] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 509.571251][T18557] hsr_slave_0: entered promiscuous mode [ 509.596944][T18557] hsr_slave_1: entered promiscuous mode [ 509.613327][T18557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.620915][T18557] Cannot create hsr debugfs directory [ 509.855856][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.858485][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3564'. [ 509.879864][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.912899][T18741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.959763][T18741] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3562'. [ 510.254323][T18765] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3569'. [ 510.628540][T18776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3573'. [ 510.646399][T18776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3573'. [ 510.713915][T18557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 510.811992][T18557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 510.828467][T18557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 510.855592][T18557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 510.914598][T18781] syzkaller1: entered promiscuous mode [ 510.925301][T18781] syzkaller1: entered allmulticast mode [ 511.336473][T18796] x_tables: duplicate underflow at hook 3 [ 511.337249][T18557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.389200][T18557] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.432341][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.439514][ T6661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.462227][T18796] 8021q: VLANs not supported on ip6gre0 [ 511.507400][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.514575][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.614745][T18808] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3581'. [ 511.621352][T18557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.670149][T18812] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 512.205797][ T6655] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 512.235816][T18833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3588'. [ 512.288188][T18557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.474736][T18557] veth0_vlan: entered promiscuous mode [ 512.522908][T18557] veth1_vlan: entered promiscuous mode [ 512.609260][T18557] veth0_macvtap: entered promiscuous mode [ 512.637255][T18557] veth1_macvtap: entered promiscuous mode [ 512.674866][T18557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.688964][T18847] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 512.713251][T18557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.731900][T18557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.753765][T18557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.767561][T18557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.783552][T18557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.854037][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 512.863705][T18849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.036719][T18863] xt_limit: Overflow, try lower: 0/0 [ 513.048141][T18849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.213719][T18849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.302960][T18849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.461197][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.494424][ T6685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.518991][ T6685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.545530][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.661521][T18849] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.734897][T18849] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.801212][T18849] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.852118][T18876] wg1 speed is unknown, defaulting to 1000 [ 513.859917][T18876] dummy0 speed is unknown, defaulting to 1000 [ 513.868138][T18876] lo speed is unknown, defaulting to 1000 [ 513.898613][T18849] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.406319][T18889] xt_hashlimit: max too large, truncated to 1048576 [ 514.802498][T18909] nbd: socks must be embedded in a SOCK_ITEM attr [ 514.810416][T18909] block nbd1: shutting down sockets [ 515.049880][ T6655] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.379942][ T6655] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.532994][T18920] __nla_validate_parse: 1 callbacks suppressed [ 515.533012][T18920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3611'. [ 515.549290][T18918] netlink: 'syz.6.3613': attribute type 1 has an invalid length. [ 515.584041][ T6655] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.599693][T18921] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3613'. [ 515.701863][T18918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.878198][ T6655] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.930691][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 515.931336][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.954848][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.973956][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.998853][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.014865][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.182239][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3620'. [ 516.528760][T18941] wg1 speed is unknown, defaulting to 1000 [ 516.590964][T18941] dummy0 speed is unknown, defaulting to 1000 [ 516.619273][ T6655] bridge_slave_1: left allmulticast mode [ 516.658841][ T6655] bridge_slave_1: left promiscuous mode [ 516.669133][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.685300][ T6655] bridge_slave_0: left allmulticast mode [ 516.691233][ T6655] bridge_slave_0: left promiscuous mode [ 516.699411][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.702800][ T3405] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 517.289870][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 517.323647][ T3405] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 517.487681][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.500771][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.511376][ T6655] bond0 (unregistering): Released all slaves [ 517.527796][T18941] lo speed is unknown, defaulting to 1000 [ 517.705752][T18961] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.726653][T18961] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.979945][ T6685] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 517.991321][T18961] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.031645][T18961] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.132786][ T5155] Bluetooth: hci0: command tx timeout [ 518.219614][T19003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3634'. [ 518.243707][T18961] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.273226][T18961] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.477561][T18961] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.488192][T18961] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.604222][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 518.762092][ T5155] Bluetooth: hci5: command 0x0406 tx timeout [ 518.985121][ T6655] hsr_slave_0: left promiscuous mode [ 519.010631][ T6655] hsr_slave_1: left promiscuous mode [ 519.023238][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.040930][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.053249][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.060685][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.128677][ T6655] veth1_macvtap: left promiscuous mode [ 519.135103][T19027] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3641'. [ 519.138168][ T6655] veth0_macvtap: left promiscuous mode [ 519.159841][ T6655] veth1_vlan: left promiscuous mode [ 519.167559][ T6655] veth0_vlan: left promiscuous mode [ 519.748723][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 519.801164][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 520.205769][ T5846] Bluetooth: hci0: command tx timeout [ 520.316867][T18961] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.325327][T18961] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.389031][T18961] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.420231][T18961] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.452338][T19034] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 520.483006][T18961] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.491261][T18961] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.588422][T18961] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.601823][T18961] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.885597][T19035] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 520.982098][T19035] CPU: 1 UID: 0 PID: 19035 Comm: syz.5.3643 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 520.982127][T19035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.982139][T19035] Call Trace: [ 520.982147][T19035] [ 520.982156][T19035] dump_stack_lvl+0x189/0x250 [ 520.982194][T19035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.982225][T19035] ? __pfx__printk+0x10/0x10 [ 520.982245][T19035] ? kernfs_path_from_node+0x2c/0x260 [ 520.982269][T19035] ? kernfs_path_from_node+0x2c/0x260 [ 520.982291][T19035] ? kernfs_path_from_node+0x2c/0x260 [ 520.982316][T19035] ? kernfs_path_from_node+0x22c/0x260 [ 520.982337][T19035] ? kernfs_path_from_node+0x2c/0x260 [ 520.982364][T19035] sysfs_warn_dup+0x8e/0xa0 [ 520.982387][T19035] sysfs_do_create_link_sd+0xc0/0x110 [ 520.982413][T19035] device_add_class_symlinks+0x1cf/0x240 [ 520.982441][T19035] device_add+0x475/0xb50 [ 520.982472][T19035] wiphy_register+0x199a/0x26b0 [ 520.982520][T19035] ? __pfx_wiphy_register+0x10/0x10 [ 520.982558][T19035] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 520.982584][T19035] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 520.982625][T19035] ieee80211_register_hw+0x33e1/0x4120 [ 520.982667][T19035] ? ieee80211_register_hw+0x1471/0x4120 [ 520.982699][T19035] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 520.982727][T19035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 520.982769][T19035] ? __hrtimer_setup+0x187/0x210 [ 520.982802][T19035] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 520.982828][T19035] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 520.982879][T19035] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 520.982897][T19035] ? trace_kmalloc+0x1f/0xd0 [ 520.982912][T19035] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 520.982931][T19035] ? kstrndup+0xbf/0x160 [ 520.982964][T19035] hwsim_new_radio_nl+0xea4/0x1b10 [ 520.982987][T19035] ? __pfx___nla_validate_parse+0x10/0x10 [ 520.983030][T19035] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.983063][T19035] ? __nla_parse+0x40/0x60 [ 520.983094][T19035] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 520.983127][T19035] genl_family_rcv_msg_doit+0x215/0x300 [ 520.983159][T19035] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.983196][T19035] ? bpf_lsm_capable+0x9/0x20 [ 520.983213][T19035] ? security_capable+0x7e/0x2e0 [ 520.983244][T19035] genl_rcv_msg+0x60e/0x790 [ 520.983274][T19035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.983296][T19035] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 520.983331][T19035] netlink_rcv_skb+0x205/0x470 [ 520.983350][T19035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.983375][T19035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.983412][T19035] ? down_read+0x1ad/0x2e0 [ 520.983440][T19035] genl_rcv+0x28/0x40 [ 520.983460][T19035] netlink_unicast+0x758/0x8d0 [ 520.983515][T19035] netlink_sendmsg+0x805/0xb30 [ 520.983545][T19035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.983569][T19035] ? aa_sock_msg_perm+0x94/0x160 [ 520.983597][T19035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.983621][T19035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.983642][T19035] __sock_sendmsg+0x219/0x270 [ 520.983673][T19035] ____sys_sendmsg+0x505/0x830 [ 520.983701][T19035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.983733][T19035] ? import_iovec+0x74/0xa0 [ 520.983759][T19035] ___sys_sendmsg+0x21f/0x2a0 [ 520.983789][T19035] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.983853][T19035] ? __fget_files+0x2a/0x420 [ 520.983874][T19035] ? __fget_files+0x3a0/0x420 [ 520.983908][T19035] __x64_sys_sendmsg+0x19b/0x260 [ 520.983933][T19035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.983968][T19035] ? do_user_addr_fault+0xc8a/0x1390 [ 520.983999][T19035] ? do_syscall_64+0xbe/0x3b0 [ 520.984029][T19035] do_syscall_64+0xfa/0x3b0 [ 520.984053][T19035] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.984077][T19035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.984097][T19035] ? clear_bhb_loop+0x60/0xb0 [ 520.984120][T19035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.984139][T19035] RIP: 0033:0x7f2daef8e929 [ 520.984156][T19035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.984172][T19035] RSP: 002b:00007f2dafe03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.984192][T19035] RAX: ffffffffffffffda RBX: 00007f2daf1b6080 RCX: 00007f2daef8e929 [ 520.984205][T19035] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 520.984216][T19035] RBP: 00007f2daf010b39 R08: 0000000000000000 R09: 0000000000000000 [ 520.984228][T19035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.984238][T19035] R13: 0000000000000001 R14: 00007f2daf1b6080 R15: 00007ffe294027e8 [ 520.984269][T19035] [ 521.448328][T18941] chnl_net:caif_netlink_parms(): no params data found [ 521.875733][T18941] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.911769][T18941] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.930319][T18941] bridge_slave_0: entered allmulticast mode [ 521.938547][T18941] bridge_slave_0: entered promiscuous mode [ 521.950841][T18941] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.958288][T18941] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.966222][T18941] bridge_slave_1: entered allmulticast mode [ 521.974619][T18941] bridge_slave_1: entered promiscuous mode [ 522.141147][T18941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.188493][T19074] siw: device registration error -23 [ 522.199841][T18941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.214746][T19072] rdma_rxe: rxe_newlink: failed to add bridge0 [ 522.285650][ T5846] Bluetooth: hci0: command tx timeout [ 522.313017][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3653'. [ 522.355061][T18941] team0: Port device team_slave_0 added [ 522.396293][T18941] team0: Port device team_slave_1 added [ 522.487305][T18941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.520078][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.581075][T19090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3657'. [ 522.591326][T18941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.629278][T18941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.660206][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.741765][T18941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.890934][T18941] hsr_slave_0: entered promiscuous mode [ 522.910579][T18941] hsr_slave_1: entered promiscuous mode [ 522.928487][T18941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.949466][T18941] Cannot create hsr debugfs directory [ 523.013770][T19109] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3663'. [ 523.053115][T19109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3663'. [ 523.075081][T19109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 523.154166][T19109] ip6_vti0: entered promiscuous mode [ 523.361163][T19126] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3665'. [ 523.448125][T19126] dummy0: entered promiscuous mode [ 523.466837][T19126] dummy0: left promiscuous mode [ 523.734216][ T1114] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 523.837184][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3670'. [ 523.846345][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3670'. [ 523.862528][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 523.874403][T19143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3671'. [ 523.883289][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 524.115850][T19120] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 524.276292][T19160] netlink: 'syz.6.3675': attribute type 1 has an invalid length. [ 524.337634][T19160] bond2: entered promiscuous mode [ 524.344187][T19160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.360942][T19164] batadv0: entered promiscuous mode [ 524.363293][ T5155] Bluetooth: hci0: command tx timeout [ 524.374474][T19164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 524.388439][T19164] batadv0: left promiscuous mode [ 524.428919][T19162] batadv0: entered promiscuous mode [ 524.434359][T19162] batadv0: entered allmulticast mode [ 524.442448][T19162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.450896][T19162] bond2: (slave batadv0): making interface the new active one [ 524.468110][T19162] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 524.482406][T19166] batadv1: entered promiscuous mode [ 524.487632][T19166] batadv1: entered allmulticast mode [ 524.494677][T19166] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 524.503880][T19166] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 524.576586][T18941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.621066][T18941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.672479][T18941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.710507][T19180] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 524.721006][T18941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.996368][T18941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.057197][T18941] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.118097][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.125318][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.230839][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.238085][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.459462][T19220] wg1 speed is unknown, defaulting to 1000 [ 525.500151][T19220] dummy0 speed is unknown, defaulting to 1000 [ 525.528540][T19220] lo speed is unknown, defaulting to 1000 [ 526.098205][T19249] IPv6: addrconf: prefix option has invalid lifetime [ 526.122929][T18941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.242056][T19250] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 526.272340][T19250] syzkaller1: linktype set to 6 [ 526.358562][T18941] veth0_vlan: entered promiscuous mode [ 526.404594][T18941] veth1_vlan: entered promiscuous mode [ 526.494810][T18941] veth0_macvtap: entered promiscuous mode [ 526.519636][T18941] veth1_macvtap: entered promiscuous mode [ 526.623133][T18941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.679726][T18941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.708573][T18941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.723099][T18941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.763161][T18941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.791314][T18941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.104128][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.120718][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.258429][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.297457][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.322538][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 527.648497][T19289] sctp: [Deprecated]: syz.2.3708 (pid 19289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.648497][T19289] Use struct sctp_sack_info instead [ 527.665994][T19295] FAULT_INJECTION: forcing a failure. [ 527.665994][T19295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.707289][T19295] CPU: 1 UID: 0 PID: 19295 Comm: syz.3.3710 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 527.707314][T19295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.707326][T19295] Call Trace: [ 527.707333][T19295] [ 527.707341][T19295] dump_stack_lvl+0x189/0x250 [ 527.707373][T19295] ? __pfx____ratelimit+0x10/0x10 [ 527.707397][T19295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.707424][T19295] ? __pfx__printk+0x10/0x10 [ 527.707448][T19295] ? __might_fault+0xb0/0x130 [ 527.707477][T19295] should_fail_ex+0x414/0x560 [ 527.707505][T19295] _copy_from_iter+0x1db/0x16f0 [ 527.707537][T19295] ? rcu_is_watching+0x15/0xb0 [ 527.707555][T19295] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 527.707575][T19295] ? __pfx__copy_from_iter+0x10/0x10 [ 527.707603][T19295] ? __build_skb_around+0x257/0x3e0 [ 527.707624][T19295] ? netlink_sendmsg+0x642/0xb30 [ 527.707640][T19295] ? skb_put+0x11b/0x210 [ 527.707661][T19295] netlink_sendmsg+0x6b2/0xb30 [ 527.707688][T19295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.707709][T19295] ? aa_sock_msg_perm+0x94/0x160 [ 527.707735][T19295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.707757][T19295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.707776][T19295] __sock_sendmsg+0x219/0x270 [ 527.707803][T19295] ____sys_sendmsg+0x505/0x830 [ 527.707828][T19295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.707856][T19295] ? import_iovec+0x74/0xa0 [ 527.707877][T19295] ___sys_sendmsg+0x21f/0x2a0 [ 527.707898][T19295] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.707953][T19295] ? __fget_files+0x2a/0x420 [ 527.707972][T19295] ? __fget_files+0x3a0/0x420 [ 527.708002][T19295] __x64_sys_sendmsg+0x19b/0x260 [ 527.708024][T19295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.708053][T19295] ? __pfx_ksys_write+0x10/0x10 [ 527.708068][T19295] ? rcu_is_watching+0x15/0xb0 [ 527.708089][T19295] ? do_syscall_64+0xbe/0x3b0 [ 527.708116][T19295] do_syscall_64+0xfa/0x3b0 [ 527.708138][T19295] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.708160][T19295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.708178][T19295] ? clear_bhb_loop+0x60/0xb0 [ 527.708200][T19295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.708217][T19295] RIP: 0033:0x7f2d1418e929 [ 527.708232][T19295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.708247][T19295] RSP: 002b:00007f2d15018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.708266][T19295] RAX: ffffffffffffffda RBX: 00007f2d143b5fa0 RCX: 00007f2d1418e929 [ 527.708279][T19295] RDX: 0000000000000894 RSI: 000020000000de80 RDI: 0000000000000003 [ 527.708295][T19295] RBP: 00007f2d15018090 R08: 0000000000000000 R09: 0000000000000000 [ 527.708306][T19295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.708316][T19295] R13: 0000000000000000 R14: 00007f2d143b5fa0 R15: 00007ffe0abf99f8 [ 527.708344][T19295] [ 528.098061][T19299] openvswitch: netlink: Message has 4 unknown bytes. [ 528.122473][T19302] netlink: 'syz.6.3711': attribute type 4 has an invalid length. [ 528.185950][T19303] syzkaller0: entered promiscuous mode [ 528.191475][T19303] syzkaller0: entered allmulticast mode [ 529.482046][ T3513] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 529.686636][T19326] __nla_validate_parse: 11 callbacks suppressed [ 529.686658][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3719'. [ 529.906226][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 529.915786][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 529.937377][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 529.966072][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 529.991830][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 530.853243][ T6659] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.972878][ T6659] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.987088][T19336] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3721'. [ 531.180840][ T6659] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.254600][T19340] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3724'. [ 531.273221][T19333] wg1 speed is unknown, defaulting to 1000 [ 531.305186][T19350] Bluetooth: MGMT ver 1.23 [ 531.310846][T19338] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 531.314131][T19333] dummy0 speed is unknown, defaulting to 1000 [ 531.327641][T19333] lo speed is unknown, defaulting to 1000 [ 531.419072][T19338] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3722'. [ 531.453593][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 531.580006][ T6659] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.618706][T19361] netlink: 'syz.5.3727': attribute type 11 has an invalid length. [ 531.647298][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 531.728742][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3725'. [ 531.741797][T19362] netlink: 'syz.3.3725': attribute type 15 has an invalid length. [ 531.842356][T19368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.173055][ T6659] bridge_slave_1: left allmulticast mode [ 532.178766][ T6659] bridge_slave_1: left promiscuous mode [ 532.191891][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.216012][ T6659] bridge_slave_0: left allmulticast mode [ 532.231578][ T6659] bridge_slave_0: left promiscuous mode [ 532.237394][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.617078][ T6659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.628912][ T6659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.640359][ T6659] bond0 (unregistering): Released all slaves [ 532.908018][T19396] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 533.087472][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 533.124691][T19333] chnl_net:caif_netlink_parms(): no params data found [ 533.413373][ T5155] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 533.608814][T19432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3745'. [ 533.749807][T19440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3746'. [ 533.928134][T19451] FAULT_INJECTION: forcing a failure. [ 533.928134][T19451] name failslab, interval 1, probability 0, space 0, times 0 [ 533.944843][T19451] CPU: 1 UID: 0 PID: 19451 Comm: syz.2.3750 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 533.944870][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.944882][T19451] Call Trace: [ 533.944890][T19451] [ 533.944898][T19451] dump_stack_lvl+0x189/0x250 [ 533.944932][T19451] ? __pfx____ratelimit+0x10/0x10 [ 533.944958][T19451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.944986][T19451] ? __pfx__printk+0x10/0x10 [ 533.945011][T19451] ? __pfx___might_resched+0x10/0x10 [ 533.945028][T19451] ? fs_reclaim_acquire+0x7d/0x100 [ 533.945056][T19451] should_fail_ex+0x414/0x560 [ 533.945084][T19451] should_failslab+0xa8/0x100 [ 533.945106][T19451] __kmalloc_cache_noprof+0x70/0x3d0 [ 533.945125][T19451] ? nfnetlink_rcv+0xeff/0x2520 [ 533.945154][T19451] nfnetlink_rcv+0xeff/0x2520 [ 533.945211][T19451] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 533.945251][T19451] ? ref_tracker_free+0x63a/0x7d0 [ 533.945309][T19451] ? __netlink_deliver_tap+0x807/0x850 [ 533.945354][T19451] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.945373][T19451] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.945398][T19451] netlink_unicast+0x758/0x8d0 [ 533.945439][T19451] netlink_sendmsg+0x805/0xb30 [ 533.945469][T19451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.945493][T19451] ? aa_sock_msg_perm+0x94/0x160 [ 533.945520][T19451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.945545][T19451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.945566][T19451] __sock_sendmsg+0x219/0x270 [ 533.945595][T19451] ____sys_sendmsg+0x505/0x830 [ 533.945622][T19451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.945662][T19451] ? import_iovec+0x74/0xa0 [ 533.945686][T19451] ___sys_sendmsg+0x21f/0x2a0 [ 533.945715][T19451] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.945797][T19451] ? __fget_files+0x2a/0x420 [ 533.945821][T19451] ? __fget_files+0x3a0/0x420 [ 533.945857][T19451] __x64_sys_sendmsg+0x19b/0x260 [ 533.945884][T19451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.945918][T19451] ? __pfx_ksys_write+0x10/0x10 [ 533.945936][T19451] ? rcu_is_watching+0x15/0xb0 [ 533.945960][T19451] ? do_syscall_64+0xbe/0x3b0 [ 533.945994][T19451] do_syscall_64+0xfa/0x3b0 [ 533.946020][T19451] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.946046][T19451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.946066][T19451] ? clear_bhb_loop+0x60/0xb0 [ 533.946091][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.946111][T19451] RIP: 0033:0x7fedbef8e929 [ 533.946130][T19451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.946147][T19451] RSP: 002b:00007fedbfe6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.946169][T19451] RAX: ffffffffffffffda RBX: 00007fedbf1b5fa0 RCX: 00007fedbef8e929 [ 533.946185][T19451] RDX: 0000000000000894 RSI: 000020000000de80 RDI: 0000000000000003 [ 533.946198][T19451] RBP: 00007fedbfe6f090 R08: 0000000000000000 R09: 0000000000000000 [ 533.946212][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.946224][T19451] R13: 0000000000000000 R14: 00007fedbf1b5fa0 R15: 00007ffd8fc146f8 [ 533.946259][T19451] [ 534.386382][ T6659] hsr_slave_0: left promiscuous mode [ 534.393010][ T6659] hsr_slave_1: left promiscuous mode [ 534.399195][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.406858][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.425201][ T6659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.433635][ T6659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.466658][ T6659] veth1_macvtap: left promiscuous mode [ 534.472313][ T6659] veth0_macvtap: left promiscuous mode [ 534.478433][ T6659] veth1_vlan: left promiscuous mode [ 534.483927][ T6659] veth0_vlan: left promiscuous mode [ 534.602314][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 535.029885][ T6659] team0 (unregistering): Port device team_slave_1 removed [ 535.089731][ T6659] team0 (unregistering): Port device team_slave_0 removed [ 535.332181][T19464] xt_limit: Overflow, try lower: 0/0 [ 535.515372][T19469] __nla_validate_parse: 2 callbacks suppressed [ 535.515391][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3755'. [ 535.530678][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3755'. [ 535.616729][T19333] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.624785][T19333] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.632233][T19333] bridge_slave_0: entered allmulticast mode [ 535.640299][T19333] bridge_slave_0: entered promiscuous mode [ 535.649031][T19437] wg1 speed is unknown, defaulting to 1000 [ 535.663535][T19333] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.688209][T19333] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.698669][T19333] bridge_slave_1: entered allmulticast mode [ 535.708591][T19333] bridge_slave_1: entered promiscuous mode [ 535.731415][T19469] ip6gretap0: entered promiscuous mode [ 535.758743][T19469] gretap0: entered promiscuous mode [ 535.787976][T19469] gretap0: left promiscuous mode [ 535.807439][T19469] ip6gretap0: left promiscuous mode [ 535.844985][T19437] dummy0 speed is unknown, defaulting to 1000 [ 535.853022][T19437] lo speed is unknown, defaulting to 1000 [ 536.068168][T19486] FAULT_INJECTION: forcing a failure. [ 536.068168][T19486] name failslab, interval 1, probability 0, space 0, times 0 [ 536.077922][T19484] netlink: 'syz.2.3760': attribute type 1 has an invalid length. [ 536.091142][T19486] CPU: 1 UID: 0 PID: 19486 Comm: syz.3.3761 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 536.091166][T19486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.091175][T19486] Call Trace: [ 536.091183][T19486] [ 536.091190][T19486] dump_stack_lvl+0x189/0x250 [ 536.091223][T19486] ? __pfx____ratelimit+0x10/0x10 [ 536.091247][T19486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.091276][T19486] ? __pfx__printk+0x10/0x10 [ 536.091302][T19486] ? __pfx___might_resched+0x10/0x10 [ 536.091319][T19486] ? fs_reclaim_acquire+0x7d/0x100 [ 536.091347][T19486] should_fail_ex+0x414/0x560 [ 536.091378][T19486] should_failslab+0xa8/0x100 [ 536.091400][T19486] __kmalloc_cache_noprof+0x70/0x3d0 [ 536.091418][T19486] ? nfnetlink_rcv+0xeff/0x2520 [ 536.091447][T19486] nfnetlink_rcv+0xeff/0x2520 [ 536.091503][T19486] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 536.091561][T19486] ? ref_tracker_free+0x63a/0x7d0 [ 536.091634][T19486] ? __netlink_deliver_tap+0x807/0x850 [ 536.091663][T19486] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.091681][T19486] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.091705][T19486] netlink_unicast+0x758/0x8d0 [ 536.091749][T19486] netlink_sendmsg+0x805/0xb30 [ 536.091778][T19486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.091798][T19486] ? aa_sock_msg_perm+0x94/0x160 [ 536.091824][T19486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.091849][T19486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.091879][T19486] __sock_sendmsg+0x219/0x270 [ 536.091907][T19486] ____sys_sendmsg+0x505/0x830 [ 536.091931][T19486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.091960][T19486] ? import_iovec+0x74/0xa0 [ 536.091999][T19486] ___sys_sendmsg+0x21f/0x2a0 [ 536.092022][T19486] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.092080][T19486] ? __fget_files+0x2a/0x420 [ 536.092100][T19486] ? __fget_files+0x3a0/0x420 [ 536.092133][T19486] __x64_sys_sendmsg+0x19b/0x260 [ 536.092166][T19486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.092213][T19486] ? __pfx_ksys_write+0x10/0x10 [ 536.092228][T19486] ? rcu_is_watching+0x15/0xb0 [ 536.092250][T19486] ? do_syscall_64+0xbe/0x3b0 [ 536.092281][T19486] do_syscall_64+0xfa/0x3b0 [ 536.092304][T19486] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.092327][T19486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.092345][T19486] ? clear_bhb_loop+0x60/0xb0 [ 536.092368][T19486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.092386][T19486] RIP: 0033:0x7f2d1418e929 [ 536.092403][T19486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.092419][T19486] RSP: 002b:00007f2d15018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.092440][T19486] RAX: ffffffffffffffda RBX: 00007f2d143b5fa0 RCX: 00007f2d1418e929 [ 536.092454][T19486] RDX: 0000000000000894 RSI: 000020000000de80 RDI: 0000000000000003 [ 536.092466][T19486] RBP: 00007f2d15018090 R08: 0000000000000000 R09: 0000000000000000 [ 536.092478][T19486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.092489][T19486] R13: 0000000000000000 R14: 00007f2d143b5fa0 R15: 00007ffe0abf99f8 [ 536.092520][T19486] [ 536.096926][T19333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.305784][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'. [ 536.311258][T19333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.987328][T19333] team0: Port device team_slave_0 added [ 537.000819][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 537.021465][T19333] team0: Port device team_slave_1 added [ 537.065717][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3765'. [ 537.102838][T19510] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3765'. [ 537.281322][T19333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.296321][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.327581][T19333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.407517][T19333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.423835][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.453128][T19333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.577201][T19333] hsr_slave_0: entered promiscuous mode [ 537.584645][T19333] hsr_slave_1: entered promiscuous mode [ 537.592560][T19333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.600619][T19333] Cannot create hsr debugfs directory [ 538.108813][T19539] ipvlan0: entered promiscuous mode [ 538.121155][T19539] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 538.142522][T19539] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 538.457773][T19553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 538.480534][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3775'. [ 538.778259][T19564] macsec1: entered promiscuous mode [ 538.811755][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 538.822361][T19564] macsec1: entered allmulticast mode [ 538.854568][T19333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 538.876171][T19333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 538.901063][T19333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 538.958069][T19333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 539.316720][T19333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.397169][T19333] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.464875][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.472142][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.533701][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.540904][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.879936][T19616] tipc: Started in network mode [ 539.904530][T19616] tipc: Node identity 0000000000000000000000625f953d01, cluster identity 4711 [ 539.923828][T19616] tipc: Enabling of bearer rejected, failed to enable media [ 540.170886][T19333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.192952][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3792'. [ 540.204330][T19624] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3792'. [ 540.365668][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 540.450724][T19333] veth0_vlan: entered promiscuous mode [ 540.482333][T19333] veth1_vlan: entered promiscuous mode [ 540.607806][T19333] veth0_macvtap: entered promiscuous mode [ 540.635572][T19333] veth1_macvtap: entered promiscuous mode [ 540.678038][T19333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.707164][T19333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.749788][T19333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.769061][T19333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.787953][T19333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.804009][T19333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.962988][T19653] __nla_validate_parse: 3 callbacks suppressed [ 540.963005][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 540.987166][T19654] tipc: Started in network mode [ 541.002784][T19654] tipc: Node identity 0000000000000000000000625f953d01, cluster identity 4711 [ 541.011839][T19654] tipc: Enabling of bearer rejected, failed to enable media [ 541.038895][T19653] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 541.076997][T19653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.100269][T19658] delete_channel: no stack [ 541.109594][ T6659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.142297][ T6659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.240988][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.283192][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.314511][T19665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3803'. [ 541.329846][T19665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3803'. [ 541.349312][T19669] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20004 [ 541.356788][T19669] siw: device registration error -23 [ 541.363727][T19670] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3806'. [ 541.612696][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.633894][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.756585][T19686] ip6gretap0: entered promiscuous mode [ 541.776292][T19686] ip6gretap0: left promiscuous mode [ 542.147144][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'. [ 542.181679][T19696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3811'. [ 542.217281][T19700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3813'. [ 542.229958][T19696] gretap1: entered promiscuous mode [ 542.235916][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 542.258857][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 542.272900][T19699] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 542.409502][T19702] vlan2: entered promiscuous mode [ 542.447739][T19708] netlink: 'syz.3.3814': attribute type 1 has an invalid length. [ 542.602736][T19714] Bluetooth: MGMT ver 1.23 [ 542.608832][T19710] tipc: Enabling of bearer rejected, failed to enable media [ 543.048936][T19724] IPVS: Scheduler module ip_vs_ not found [ 543.646049][T19742] netlink: 'syz.2.3822': attribute type 2 has an invalid length. [ 543.685904][T19743] netlink: 'syz.5.3823': attribute type 1 has an invalid length. [ 543.695158][T19743] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3823'. [ 543.809907][T19749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.751189][T19737] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.759811][T19737] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.769483][T19737] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.778123][T19737] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.792156][T19737] bridge0: left promiscuous mode [ 544.860297][T19748] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 545.034444][T19756] tipc: Enabling of bearer rejected, failed to enable media [ 545.448691][T19779] netlink: 'syz.6.3837': attribute type 1 has an invalid length. [ 545.740703][T19785] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.776778][T19785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.796130][T19789] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 545.923894][T19802] netlink: 'syz.2.3843': attribute type 21 has an invalid length. [ 546.008063][T19808] __nla_validate_parse: 3 callbacks suppressed [ 546.008080][T19808] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3845'. [ 546.066547][T19810] batman_adv: batadv0: Adding interface: ip6gretap1 [ 546.073725][T19810] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.089627][T19815] netlink: 47 bytes leftover after parsing attributes in process `syz.5.3848'. [ 546.121414][T19810] batman_adv: batadv0: Interface activated: ip6gretap1 [ 546.133559][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 546.420687][T19831] wg1 speed is unknown, defaulting to 1000 [ 546.452425][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 546.470093][T19826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.477790][T19826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.486364][T19826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.520426][T19826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.576128][T19831] dummy0 speed is unknown, defaulting to 1000 [ 546.618502][T19831] lo speed is unknown, defaulting to 1000 [ 546.732220][T19836] tipc: Enabled bearer , priority 10 [ 546.910201][T19836] tipc: Resetting bearer [ 547.021445][ T1091] tipc: Resetting bearer [ 547.030966][T19832] tipc: Resetting bearer [ 547.733060][ T6432] tipc: Node number set to 1603616099 [ 548.682202][T19832] tipc: Disabling bearer [ 548.695665][T19839] pim6reg1: entered allmulticast mode [ 548.990243][T19852] x_tables: duplicate underflow at hook 4 [ 548.996609][T19851] x_tables: duplicate underflow at hook 4 [ 549.112104][T19854] wg1 speed is unknown, defaulting to 1000 [ 549.133734][T19854] dummy0 speed is unknown, defaulting to 1000 [ 549.143412][T19854] lo speed is unknown, defaulting to 1000 [ 549.482989][T19846] Bluetooth: hci6: command 0x0406 tx timeout [ 549.904330][T19864] batadv_slave_1: entered promiscuous mode [ 549.911680][T19863] batadv_slave_1: left promiscuous mode [ 550.151908][T19869] tipc: Started in network mode [ 550.157023][T19869] tipc: Node identity 0000000000000000000000625f953d01, cluster identity 4711 [ 550.188935][T19869] tipc: Enabling of bearer rejected, failed to enable media [ 550.368926][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3864'. [ 550.583013][T19882] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3865'. [ 550.723224][T19886] erspan0: entered promiscuous mode [ 550.728889][T19886] macsec2: entered promiscuous mode [ 550.783718][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3866'. [ 550.798362][T19886] erspan0: left promiscuous mode [ 551.093719][T19907] sch_fq: defrate 0 ignored. [ 551.219794][T19915] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 551.260727][T19917] tipc: Enabling of bearer rejected, failed to enable media [ 551.450837][T19928] geneve3: entered allmulticast mode [ 551.547734][T19934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.883583][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 551.970083][T19955] veth0_to_bridge: entered promiscuous mode [ 551.984063][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 551.994875][T19956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 551.997137][T19954] veth0_to_bridge: left promiscuous mode [ 552.818809][T19968] FAULT_INJECTION: forcing a failure. [ 552.818809][T19968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.861639][T19968] CPU: 0 UID: 0 PID: 19968 Comm: syz.6.3892 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 552.861665][T19968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.861677][T19968] Call Trace: [ 552.861685][T19968] [ 552.861693][T19968] dump_stack_lvl+0x189/0x250 [ 552.861725][T19968] ? __pfx____ratelimit+0x10/0x10 [ 552.861750][T19968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.861777][T19968] ? __pfx__printk+0x10/0x10 [ 552.861810][T19968] should_fail_ex+0x414/0x560 [ 552.861839][T19968] _copy_to_user+0x31/0xb0 [ 552.861861][T19968] simple_read_from_buffer+0xe1/0x170 [ 552.861886][T19968] proc_fail_nth_read+0x1df/0x250 [ 552.861912][T19968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.861938][T19968] ? rw_verify_area+0x258/0x650 [ 552.861970][T19968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.861994][T19968] vfs_read+0x200/0x980 [ 552.862016][T19968] ? __pfx___mutex_lock+0x10/0x10 [ 552.862042][T19968] ? __pfx_vfs_read+0x10/0x10 [ 552.862061][T19968] ? __fget_files+0x2a/0x420 [ 552.862086][T19968] ? __fget_files+0x3a0/0x420 [ 552.862106][T19968] ? __fget_files+0x2a/0x420 [ 552.862135][T19968] ksys_read+0x145/0x250 [ 552.862156][T19968] ? __pfx_ksys_read+0x10/0x10 [ 552.862172][T19968] ? rcu_is_watching+0x15/0xb0 [ 552.862195][T19968] ? do_syscall_64+0xbe/0x3b0 [ 552.862223][T19968] do_syscall_64+0xfa/0x3b0 [ 552.862247][T19968] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.862275][T19968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.862294][T19968] ? clear_bhb_loop+0x60/0xb0 [ 552.862316][T19968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.862333][T19968] RIP: 0033:0x7fc9d2b8d33c [ 552.862349][T19968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 552.862365][T19968] RSP: 002b:00007fc9d09f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.862384][T19968] RAX: ffffffffffffffda RBX: 00007fc9d2db5fa0 RCX: 00007fc9d2b8d33c [ 552.862397][T19968] RDX: 000000000000000f RSI: 00007fc9d09f60a0 RDI: 0000000000000004 [ 552.862408][T19968] RBP: 00007fc9d09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.862419][T19968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.862429][T19968] R13: 0000000000000000 R14: 00007fc9d2db5fa0 R15: 00007fffef3b28b8 [ 552.862459][T19968] [ 553.242257][T19978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.375178][T19985] batadv_slave_0: left promiscuous mode [ 553.656003][T20004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3903'. [ 553.859559][T20008] wireguard0: entered promiscuous mode [ 553.869421][T20008] wireguard0: entered allmulticast mode [ 553.889829][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3905'. [ 554.078519][T20019] netlink: 'syz.6.3908': attribute type 2 has an invalid length. [ 554.179954][T20019] þ: entered promiscuous mode [ 554.279986][T20027] xt_hashlimit: size too large, truncated to 1048576 [ 554.330700][T20027] warn_alloc: 3 callbacks suppressed [ 554.330719][T20027] syz.3.3910: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 554.388030][T20027] CPU: 0 UID: 0 PID: 20027 Comm: syz.3.3910 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 554.388057][T20027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.388070][T20027] Call Trace: [ 554.388080][T20027] [ 554.388089][T20027] dump_stack_lvl+0x189/0x250 [ 554.388128][T20027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.388162][T20027] ? __pfx__printk+0x10/0x10 [ 554.388185][T20027] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 554.388209][T20027] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 554.388234][T20027] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 554.388261][T20027] warn_alloc+0x214/0x310 [ 554.388300][T20027] ? __pfx_warn_alloc+0x10/0x10 [ 554.388336][T20027] ? __get_vm_area_node+0x28f/0x300 [ 554.388360][T20027] ? htable_create+0xfc/0x7a0 [ 554.388391][T20027] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 554.388449][T20027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 554.388487][T20027] ? rcu_is_watching+0x15/0xb0 [ 554.388508][T20027] ? htable_create+0xfc/0x7a0 [ 554.388531][T20027] ? htable_create+0xfc/0x7a0 [ 554.388553][T20027] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 554.388577][T20027] ? htable_create+0xfc/0x7a0 [ 554.388599][T20027] ? hashlimit_pernet+0x23/0x240 [ 554.388638][T20027] htable_create+0xfc/0x7a0 [ 554.388672][T20027] hashlimit_mt_check_common+0x719/0xa10 [ 554.388709][T20027] hashlimit_mt_check_v1+0x221/0x360 [ 554.388738][T20027] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 554.388777][T20027] ? xt_find_match+0x1f7/0x250 [ 554.388808][T20027] xt_check_match+0x3ce/0xab0 [ 554.388832][T20027] ? __pfx___mutex_lock+0x10/0x10 [ 554.388865][T20027] ? __pfx_xt_check_match+0x10/0x10 [ 554.388892][T20027] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 554.388941][T20027] ? xt_find_match+0x1f7/0x250 [ 554.388972][T20027] translate_table+0x1553/0x2040 [ 554.389021][T20027] ? __pfx_translate_table+0x10/0x10 [ 554.389053][T20027] ? __might_fault+0xb0/0x130 [ 554.389096][T20027] ? _copy_from_user+0x94/0xb0 [ 554.389125][T20027] do_ip6t_set_ctl+0x970/0xce0 [ 554.389156][T20027] ? rcu_is_watching+0x15/0xb0 [ 554.389176][T20027] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 554.389231][T20027] ? __pfx___mutex_lock+0x10/0x10 [ 554.389260][T20027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.389297][T20027] ? __pfx_futex_wait+0x10/0x10 [ 554.389336][T20027] nf_setsockopt+0x26c/0x290 [ 554.389367][T20027] rawv6_setsockopt+0x23b/0x5b0 [ 554.389392][T20027] ? __lock_acquire+0xab9/0xd20 [ 554.389423][T20027] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 554.389455][T20027] ? aa_sock_opt_perm+0x74/0x110 [ 554.389483][T20027] ? sock_common_setsockopt+0x36/0xc0 [ 554.389512][T20027] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 554.389543][T20027] do_sock_setsockopt+0x25a/0x3e0 [ 554.389568][T20027] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 554.389601][T20027] ? __fget_files+0x2a/0x420 [ 554.389635][T20027] __x64_sys_setsockopt+0x18b/0x220 [ 554.389663][T20027] do_syscall_64+0xfa/0x3b0 [ 554.389688][T20027] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.389714][T20027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.389741][T20027] ? clear_bhb_loop+0x60/0xb0 [ 554.389766][T20027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.389786][T20027] RIP: 0033:0x7f2d1418e929 [ 554.389804][T20027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.389822][T20027] RSP: 002b:00007f2d14ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.389843][T20027] RAX: ffffffffffffffda RBX: 00007f2d143b6080 RCX: 00007f2d1418e929 [ 554.389859][T20027] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000018 [ 554.389871][T20027] RBP: 00007f2d14210b39 R08: 00000000000004c0 R09: 0000000000000000 [ 554.389891][T20027] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 554.389904][T20027] R13: 0000000000000000 R14: 00007f2d143b6080 R15: 00007ffe0abf99f8 [ 554.389944][T20027] [ 554.390129][T20027] Mem-Info: [ 554.793814][T20027] active_anon:8709 inactive_anon:0 isolated_anon:0 [ 554.793814][T20027] active_file:1939 inactive_file:40037 isolated_file:0 [ 554.793814][T20027] unevictable:768 dirty:203 writeback:0 [ 554.793814][T20027] slab_reclaimable:12045 slab_unreclaimable:165884 [ 554.793814][T20027] mapped:39646 shmem:1360 pagetables:1142 [ 554.793814][T20027] sec_pagetables:0 bounce:0 [ 554.793814][T20027] kernel_misc_reclaimable:0 [ 554.793814][T20027] free:1218083 free_pcp:24968 free_cma:0 [ 554.855918][T20042] netlink: 'syz.6.3917': attribute type 4 has an invalid length. [ 554.877721][T20027] Node 0 active_anon:34836kB inactive_anon:0kB active_file:7756kB inactive_file:159944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158584kB dirty:808kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14084kB pagetables:4132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 554.920338][T20027] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 554.956427][T20027] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 554.991596][T20027] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 555.000770][T20027] Node 0 DMA32 free:950324kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34892kB inactive_anon:0kB active_file:7756kB inactive_file:158120kB unevictable:1536kB writepending:804kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:84824kB local_pcp:56608kB free_cma:0kB [ 555.013461][T20042] bond0: entered promiscuous mode [ 555.034191][T20027] lowmem_reserve[]: 0 0 1 1 1 [ 555.046225][T20027] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 555.106719][T20027] lowmem_reserve[]: 0 0 0 0 0 [ 555.120428][T20027] Node 1 Normal free:3906932kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14784kB local_pcp:7488kB free_cma:0kB [ 555.155044][T20027] lowmem_reserve[]: 0 0 0 0 0 [ 555.161677][T20027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 555.174950][T20027] Node 0 DMA32: 2189*4kB (UM) 908*8kB (UME) 482*16kB (UME) 1201*32kB (UME) 397*64kB (UME) 82*128kB (UME) 65*256kB (UM) 23*512kB (UME) 9*1024kB (UME) 8*2048kB (UME) 195*4096kB (UM) = 950804kB [ 555.194216][T20027] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 555.207371][T20027] Node 1 Normal: 205*4kB (UME) 50*8kB (UME) 49*16kB (UME) 209*32kB (UME) 68*64kB (UME) 9*128kB (UM) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3906932kB [ 555.214229][T20042] bond0: left promiscuous mode [ 555.241862][T20027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.311850][T20027] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.332004][T20027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.354371][T20027] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.369987][T20027] 43333 total pagecache pages [ 555.376740][T20027] 0 pages in swap cache [ 555.381008][T20027] Free swap = 124996kB [ 555.386549][T20027] Total swap = 124996kB [ 555.390735][T20027] 2097051 pages RAM [ 555.396998][T20027] 0 pages HighMem/MovableOnly [ 555.407113][T20027] 424675 pages reserved [ 555.411291][T20027] 0 pages cma reserved [ 555.543313][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3922'. [ 555.566018][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3922'. [ 555.631267][T20064] netlink: 'syz.5.3924': attribute type 5 has an invalid length. [ 555.651382][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3924'. [ 555.652929][T20059] bond2: (slave batadv0): Releasing active interface [ 555.679576][T20059] bond2: (slave batadv0): the permanent HWaddr of slave - 12:0e:2b:4e:28:03 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 555.698237][T20059] bond2: (slave batadv1): making interface the new active one [ 555.762509][T20059] bond2: (slave batadv1): Releasing active interface [ 555.918676][T20082] erspan0: entered promiscuous mode [ 555.936917][T20082] batman_adv: batadv0: Adding interface: macvlan0 [ 555.972674][T20082] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.009593][T20081] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3928'. [ 556.054336][T20082] batman_adv: batadv0: Interface activated: macvlan0 [ 556.200539][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'. [ 556.340111][T20107] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20000 [ 556.368557][T20110] Cannot find del_set index 1 as target [ 556.603950][T20122] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3939'. [ 556.808503][T20134] netlink: 'syz.6.3946': attribute type 4 has an invalid length. [ 556.830775][T20136] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 556.855185][T20134] netlink: 'syz.6.3946': attribute type 4 has an invalid length. [ 557.144111][T20149] __nla_validate_parse: 3 callbacks suppressed [ 557.144158][T20149] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3950'. [ 557.542313][T20166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3955'. [ 557.648279][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 557.853845][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3960'. [ 557.924594][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3962'. [ 557.968406][T20187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3962'. [ 558.106401][T20199] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3965'. [ 558.119595][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'. [ 558.155533][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3966'. [ 558.170930][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3966'. [ 558.254331][T20208] netlink: 'syz.5.3967': attribute type 3 has an invalid length. [ 558.273520][T20208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3967'. [ 558.404188][T20211] wg1 speed is unknown, defaulting to 1000 [ 558.428573][T20211] dummy0 speed is unknown, defaulting to 1000 [ 558.467758][T20211] lo speed is unknown, defaulting to 1000 [ 558.513808][T20220] tipc: Enabling of bearer rejected, failed to enable media [ 558.657888][T20224] xt_connbytes: Forcing CT accounting to be enabled [ 558.677531][T20224] set match dimension is over the limit! [ 559.571286][T20255] wg1 speed is unknown, defaulting to 1000 [ 559.624127][T20255] dummy0 speed is unknown, defaulting to 1000 [ 559.790154][T20255] lo speed is unknown, defaulting to 1000 [ 559.801813][T20262] tun0: tun_chr_ioctl cmd 1074812118 [ 559.819110][T20262] No such timeout policy "syz1" [ 559.851924][T20265] veth0_vlan: entered allmulticast mode [ 560.050183][T20267] veth0_vlan: left promiscuous mode [ 560.075939][T20267] veth0_vlan: entered promiscuous mode [ 560.526318][T20285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.784540][ T30] audit: type=1800 audit(1749344263.055:10): pid=20276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3992" name="memory.events" dev="tmpfs" ino=1022 res=0 errno=0 [ 561.197800][ T5846] Bluetooth: hci3: link tx timeout [ 561.205531][ T5846] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 561.218911][ T5846] Bluetooth: hci3: link tx timeout [ 561.224500][ T5846] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 561.865245][T20339] macvtap1: entered promiscuous mode [ 561.870758][T20339] hsr0: entered promiscuous mode [ 561.876177][T20339] macvtap1: entered allmulticast mode [ 561.882128][T20339] hsr0: entered allmulticast mode [ 561.887370][T20339] hsr_slave_0: entered allmulticast mode [ 561.895267][T20339] hsr_slave_1: entered allmulticast mode [ 561.914932][T20339] hsr0: left allmulticast mode [ 561.920774][T20344] openvswitch: netlink: Flow key attr not present in new flow. [ 561.925527][T20339] hsr_slave_0: left allmulticast mode [ 561.947065][T20339] hsr_slave_1: left allmulticast mode [ 561.955859][T20339] hsr0: left promiscuous mode [ 561.990057][T20351] netlink: 'syz.5.4010': attribute type 15 has an invalid length. [ 561.998884][T20351] netlink: 'syz.5.4010': attribute type 3 has an invalid length. [ 562.167702][T20358] __nla_validate_parse: 13 callbacks suppressed [ 562.167716][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4012'. [ 562.774911][T20388] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4020'. [ 562.790640][T20387] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4019'. [ 562.921071][T20396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'. [ 562.950028][T20396] openvswitch: netlink: Missing key (keys=40, expected=80) [ 563.096179][T20408] hsr0: entered promiscuous mode [ 563.103881][T20408] macvtap1: entered promiscuous mode [ 563.109961][T20408] macvtap1: entered allmulticast mode [ 563.115717][T20408] hsr0: entered allmulticast mode [ 563.120880][T20408] hsr_slave_0: entered allmulticast mode [ 563.123769][T20413] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4028'. [ 563.130121][T20408] hsr_slave_1: entered allmulticast mode [ 563.141893][T20413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4028'. [ 563.156095][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4028'. [ 563.165433][T20413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4028'. [ 563.180456][T20408] hsr0: left allmulticast mode [ 563.198608][T20408] hsr_slave_0: left allmulticast mode [ 563.220332][T20408] hsr_slave_1: left allmulticast mode [ 563.256746][T20389] Bluetooth: hci3: command 0x0405 tx timeout [ 563.407169][T20416] wg1 speed is unknown, defaulting to 1000 [ 563.414007][ T1091] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 563.433598][T20416] dummy0 speed is unknown, defaulting to 1000 [ 563.583401][T20416] lo speed is unknown, defaulting to 1000 [ 564.744614][T20469] wg1 speed is unknown, defaulting to 1000 [ 564.835081][T20469] dummy0 speed is unknown, defaulting to 1000 [ 564.845976][T20389] Bluetooth: hci1: command 0x0406 tx timeout [ 564.862128][T20469] lo speed is unknown, defaulting to 1000 [ 564.943580][T20482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4044'. [ 565.209023][T20482] team0: Port device team_slave_0 removed [ 565.331048][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 565.365350][T20498] sctp: [Deprecated]: syz.3.4049 (pid 20498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.365350][T20498] Use struct sctp_sack_info instead [ 565.580219][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4052'. [ 566.006934][T20535] gretap2: entered allmulticast mode [ 566.150104][T20539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.862985][T20570] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 566.970864][T20570] wg1 speed is unknown, defaulting to 1000 [ 567.017709][T20570] dummy0 speed is unknown, defaulting to 1000 [ 567.041939][T20576] openvswitch: netlink: IP tunnel dst address not specified [ 567.074028][T20570] lo speed is unknown, defaulting to 1000 [ 567.114065][T20575] wg1 speed is unknown, defaulting to 1000 [ 567.195518][T20575] dummy0 speed is unknown, defaulting to 1000 [ 567.285382][T20575] lo speed is unknown, defaulting to 1000 [ 567.405903][T19846] Bluetooth: hci3: command 0x0405 tx timeout [ 569.163155][ T6655] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 569.783335][T20637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.832654][T20640] vxcan1: entered allmulticast mode [ 569.965593][T20644] wg1 speed is unknown, defaulting to 1000 [ 569.994497][T20644] dummy0 speed is unknown, defaulting to 1000 [ 570.003560][T20644] lo speed is unknown, defaulting to 1000 [ 570.154989][T20648] __nla_validate_parse: 2 callbacks suppressed [ 570.155008][T20648] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4088'. [ 570.694884][T20660] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 570.721915][T20660] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 570.825541][T20664] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.870780][T20669] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4090'. [ 570.929361][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4090'. [ 571.064641][T20664] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.090170][T20674] netlink: 'syz.5.4095': attribute type 6 has an invalid length. [ 571.098123][T20674] netlink: 'syz.5.4095': attribute type 7 has an invalid length. [ 571.110778][T20674] netlink: 'syz.5.4095': attribute type 7 has an invalid length. [ 571.131911][T20674] netlink: 12902 bytes leftover after parsing attributes in process `syz.5.4095'. [ 571.238789][T20664] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.298213][T20664] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.566991][T20664] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.617636][T20664] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.637791][T20664] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.658362][T20664] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.667403][T20693] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.4098'. [ 571.678765][T20695] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.4098'. [ 571.692970][T20693] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4098'. [ 571.838336][T20698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4099'. [ 571.922877][T20700] syzkaller1: entered promiscuous mode [ 571.928631][T20700] syzkaller1: entered allmulticast mode [ 572.074667][T20706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4103'. [ 572.257691][T20713] netlink: 'syz.6.4106': attribute type 14 has an invalid length. [ 572.296990][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4105'. [ 572.313114][T20718] netlink: 'syz.6.4106': attribute type 21 has an invalid length. [ 572.653753][T20736] sctp: [Deprecated]: syz.3.4112 (pid 20736) Use of int in maxseg socket option. [ 572.653753][T20736] Use struct sctp_assoc_value instead [ 572.906318][T20747] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 572.946779][T20750] gretap0: entered promiscuous mode [ 572.957905][T20750] 0ªX¹¦D: renamed from gretap0 [ 572.993777][T20750] 0ªX¹¦D: left promiscuous mode [ 573.000972][T20750] 0ªX¹¦D: entered allmulticast mode [ 573.006727][ T31] INFO: task syz.4.3013:16640 blocked for more than 143 seconds. [ 573.006751][ T31] Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 [ 573.006766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.006779][ T31] task:syz.4.3013 state:D stack:25560 pid:16640 tgid:16639 ppid:16130 task_flags:0x400140 flags:0x00004004 [ 573.006845][ T31] Call Trace: [ 573.006855][ T31] [ 573.006872][ T31] __schedule+0x16f5/0x4d00 [ 573.006930][ T31] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 573.006962][ T31] ? schedule+0x165/0x360 [ 573.007003][ T31] ? __pfx___schedule+0x10/0x10 [ 573.007059][ T31] ? schedule+0x91/0x360 [ 573.007088][ T31] schedule+0x165/0x360 [ 573.007115][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.007139][ T31] __mutex_lock+0x724/0xe80 [ 573.007168][ T31] ? __mutex_lock+0x51b/0xe80 [ 573.007202][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 573.007231][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.007273][ T31] ? stack_trace_save+0x9c/0xe0 [ 573.007300][ T31] nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 573.007330][ T31] ? kasan_save_track+0x4f/0x80 [ 573.007348][ T31] ? kasan_save_track+0x3e/0x80 [ 573.007365][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 573.007384][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 573.007405][ T31] ? kmalloc_reserve+0x136/0x290 [ 573.007424][ T31] ? __alloc_skb+0x142/0x2d0 [ 573.007441][ T31] ? netlink_dump+0x22b/0xe20 [ 573.007459][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 573.007482][ T31] ? genl_rcv_msg+0x5da/0x790 [ 573.007503][ T31] ? netlink_rcv_skb+0x205/0x470 [ 573.007530][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 573.007552][ T31] ? __sock_sendmsg+0x219/0x270 [ 573.007572][ T31] ? ____sys_sendmsg+0x505/0x830 [ 573.007588][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 573.007606][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 573.007624][ T31] ? do_syscall_64+0xfa/0x3b0 [ 573.007650][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.007713][ T31] ? rcu_is_watching+0x15/0xb0 [ 573.007734][ T31] ? trace_kmalloc+0x1f/0xd0 [ 573.007752][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 573.007782][ T31] ? __build_skb_around+0x257/0x3e0 [ 573.007809][ T31] genl_dumpit+0x108/0x1b0 [ 573.007840][ T31] netlink_dump+0x62a/0xe20 [ 573.007873][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 573.007908][ T31] ? genl_start+0x499/0x6c0 [ 573.007941][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 573.007983][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 573.008015][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 573.008041][ T31] ? genl_get_cmd+0x496/0x910 [ 573.008070][ T31] ? __pfx_genl_start+0x10/0x10 [ 573.008093][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 573.008117][ T31] ? __pfx_genl_done+0x10/0x10 [ 573.008159][ T31] genl_rcv_msg+0x5da/0x790 [ 573.008193][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.008217][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 573.008246][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 573.008270][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.008304][ T31] netlink_rcv_skb+0x205/0x470 [ 573.008323][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.008347][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.008379][ T31] ? down_read+0x1ad/0x2e0 [ 573.008406][ T31] genl_rcv+0x28/0x40 [ 573.008425][ T31] netlink_unicast+0x758/0x8d0 [ 573.008459][ T31] netlink_sendmsg+0x805/0xb30 [ 573.008485][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.008506][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 573.008538][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.008560][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.008579][ T31] __sock_sendmsg+0x219/0x270 [ 573.008607][ T31] ____sys_sendmsg+0x505/0x830 [ 573.008636][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.008668][ T31] ? import_iovec+0x74/0xa0 [ 573.008694][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 573.008719][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.008774][ T31] ? __fget_files+0x2a/0x420 [ 573.008793][ T31] ? __fget_files+0x3a0/0x420 [ 573.008819][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 573.008840][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.008866][ T31] ? rcu_is_watching+0x15/0xb0 [ 573.008886][ T31] ? do_syscall_64+0xbe/0x3b0 [ 573.008912][ T31] do_syscall_64+0xfa/0x3b0 [ 573.008932][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.008953][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.008969][ T31] ? clear_bhb_loop+0x60/0xb0 [ 573.008989][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.009005][ T31] RIP: 0033:0x7f90b3d8e929 [ 573.009020][ T31] RSP: 002b:00007f90b4b56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.009040][ T31] RAX: ffffffffffffffda RBX: 00007f90b3fb5fa0 RCX: 00007f90b3d8e929 [ 573.009052][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 573.009064][ T31] RBP: 00007f90b3e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 573.009075][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.009085][ T31] R13: 0000000000000000 R14: 00007f90b3fb5fa0 R15: 00007ffc8a667078 [ 573.009112][ T31] [ 573.009149][ T31] [ 573.009149][ T31] Showing all locks held in the system: [ 573.009159][ T31] 3 locks held by kworker/1:0/24: [ 573.009169][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.009222][ T31] #1: ffffc900001e7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.009273][ T31] #2: ffff8880681e3240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 573.009321][ T31] 1 lock held by khungtaskd/31: [ 573.009331][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 573.009381][ T31] 2 locks held by kworker/u8:7/1114: [ 573.009391][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.009440][ T31] #1: ffffc90003d2fbc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.009502][ T31] 3 locks held by kworker/u9:1/5155: [ 573.009512][ T31] #0: ffff88807c281148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.009684][ T31] #1: ffffc9000fa27bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.009735][ T31] #2: ffff8880237a8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 573.009784][ T31] 2 locks held by getty/5595: [ 573.009794][ T31] #0: ffff88814c7bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 573.009836][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 573.009902][ T31] 2 locks held by syz.1.2469/14640: [ 573.009911][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.009973][ T31] #1: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 573.010022][ T31] 3 locks held by syz.4.3013/16640: [ 573.010031][ T31] #0: ffffffff8f5757b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.010075][ T31] #1: ffff88802af9b6d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 573.010125][ T31] #2: ffffffff8e41d3a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 573.010175][ T31] 3 locks held by kworker/u9:0/19846: [ 573.010185][ T31] #0: ffff888028718948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.010233][ T31] #1: ffffc90003a1fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.010288][ T31] #2: ffff888054918d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 573.010343][ T31] 1 lock held by syz.5.4109/20723: [ 573.010356][ T31] 1 lock held by syz.6.4116/20745: [ 573.010369][ T31] 5 locks held by syz.3.4117/20750: [ 573.010382][ T31] 1 lock held by modprobe/20752: [ 573.010394][ T31] [ 573.010400][ T31] ============================================= [ 573.010400][ T31] [ 573.010424][ T31] NMI backtrace for cpu 0 [ 573.010438][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 573.010459][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.010470][ T31] Call Trace: [ 573.010478][ T31] [ 573.010487][ T31] dump_stack_lvl+0x189/0x250 [ 573.010514][ T31] ? __wake_up_klogd+0xd9/0x110 [ 573.010557][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.010586][ T31] ? __pfx__printk+0x10/0x10 [ 573.010614][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 573.010634][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 573.010648][ T31] ? _printk+0xcf/0x120 [ 573.010667][ T31] ? __pfx__printk+0x10/0x10 [ 573.010689][ T31] ? debug_show_all_locks+0x2e/0x180 [ 573.010706][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 573.010735][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 573.010759][ T31] watchdog+0xfee/0x1030 [ 573.010788][ T31] ? watchdog+0x1de/0x1030 [ 573.010821][ T31] kthread+0x70e/0x8a0 [ 573.010847][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.010871][ T31] ? __pfx_kthread+0x10/0x10 [ 573.010895][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.010918][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.010939][ T31] ? __pfx_kthread+0x10/0x10 [ 573.010962][ T31] ret_from_fork+0x3f9/0x770 [ 573.010992][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 573.011026][ T31] ? __switch_to_asm+0x39/0x70 [ 573.011045][ T31] ? __switch_to_asm+0x33/0x70 [ 573.011063][ T31] ? __pfx_kthread+0x10/0x10 [ 573.011086][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.011128][ T31] [ 573.011136][ T31] Sending NMI from CPU 0 to CPUs 1: [ 573.011162][ C1] NMI backtrace for cpu 1 [ 573.011174][ C1] CPU: 1 UID: 0 PID: 20750 Comm: syz.3.4117 Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 573.011193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.011203][ C1] RIP: 0010:stack_trace_consume_entry+0x0/0x280 [ 573.011224][ C1] Code: 75 0e 48 8d 65 f0 5b 41 5e 5d e9 4b 93 bb 09 cc e8 85 c1 b8 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 [ 573.011238][ C1] RSP: 0018:ffffc90000a08640 EFLAGS: 00000086 [ 573.011252][ C1] RAX: ffffffff8b65aff6 RBX: ffffc90000a08700 RCX: 5e22c4f53b067f00 [ 573.011265][ C1] RDX: 0000000000000001 RSI: ffffffff8b65aff6 RDI: ffffc90000a08700 [ 573.011282][ C1] RBP: ffffc90000a086d0 R08: ffffc90000a086a7 R09: 0000000000000000 [ 573.011294][ C1] R10: ffffc90000a08698 R11: ffffffff81acf670 R12: ffff88805c1dbc00 [ 573.011306][ C1] R13: 0000000000000000 R14: ffffffff81acf670 R15: ffffc90000a08648 [ 573.011318][ C1] FS: 00007f2d150186c0(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 573.011332][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.011343][ C1] CR2: 000000110c36611c CR3: 000000007c3fe000 CR4: 00000000003526f0 [ 573.011358][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 573.011367][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 573.011378][ C1] Call Trace: [ 573.011383][ C1] [ 573.011389][ C1] arch_stack_walk+0x110/0x150 [ 573.011408][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 573.011430][ C1] stack_trace_save+0x9c/0xe0 [ 573.011446][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 573.011468][ C1] ? __lock_acquire+0xab9/0xd20 [ 573.011490][ C1] kasan_save_track+0x3e/0x80 [ 573.011509][ C1] ? kasan_save_track+0x3e/0x80 [ 573.011523][ C1] ? kasan_save_free_info+0x46/0x50 [ 573.011545][ C1] ? __kasan_slab_free+0x62/0x70 [ 573.011562][ C1] ? kfree+0x18e/0x440 [ 573.011577][ C1] ? ref_tracker_dir_exit+0x1a3/0x510 [ 573.011599][ C1] ? __put_net+0x74/0x1f0 [ 573.011621][ C1] ? __sk_destruct+0x403/0x660 [ 573.011636][ C1] ? call_timer_fn+0x17b/0x5f0 [ 573.011667][ C1] ? __run_timer_base+0x61a/0x860 [ 573.011684][ C1] ? run_timer_softirq+0xb7/0x180 [ 573.011701][ C1] ? handle_softirqs+0x286/0x870 [ 573.011722][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 573.011743][ C1] ? irq_exit_rcu+0x9/0x30 [ 573.011786][ C1] kasan_save_free_info+0x46/0x50 [ 573.011805][ C1] __kasan_slab_free+0x62/0x70 [ 573.011819][ C1] ? ref_tracker_dir_exit+0x1a3/0x510 [ 573.011839][ C1] kfree+0x18e/0x440 [ 573.011854][ C1] ref_tracker_dir_exit+0x1a3/0x510 [ 573.011876][ C1] ? __run_timer_base+0x61a/0x860 [ 573.011893][ C1] ? run_timer_softirq+0xb7/0x180 [ 573.011913][ C1] __put_net+0x74/0x1f0 [ 573.011934][ C1] ? __pfx___put_net+0x10/0x10 [ 573.011954][ C1] ? __dev_change_flags+0x52e/0x6d0 [ 573.011969][ C1] ? bpf_sk_storage_free+0x21/0x230 [ 573.011990][ C1] ? bpf_sk_storage_free+0x21/0x230 [ 573.012009][ C1] ? bpf_sk_storage_free+0x21/0x230 [ 573.012031][ C1] __sk_destruct+0x403/0x660 [ 573.012048][ C1] call_timer_fn+0x17b/0x5f0 [ 573.012067][ C1] ? __pfx_tcp_write_timer+0x10/0x10 [ 573.012089][ C1] ? call_timer_fn+0xbe/0x5f0 [ 573.012108][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 573.012133][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.012150][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.012167][ C1] ? __pfx_tcp_write_timer+0x10/0x10 [ 573.012189][ C1] __run_timer_base+0x61a/0x860 [ 573.012207][ C1] ? ktime_get+0x3e/0x1f0 [ 573.012228][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 573.012245][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 573.012270][ C1] run_timer_softirq+0xb7/0x180 [ 573.012312][ C1] handle_softirqs+0x286/0x870 [ 573.012336][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 573.012361][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 573.012385][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 573.012405][ C1] __irq_exit_rcu+0xca/0x1f0 [ 573.012427][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 573.012454][ C1] irq_exit_rcu+0x9/0x30 [ 573.012474][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 573.012492][ C1] [ 573.012498][ C1] [ 573.012503][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.012519][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 573.012538][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 95 20 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 86 20 1f 00 eb 06 e8 7f 20 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 2a 92 82 00 48 8b 1b 48 8b 44 24 [ 573.012551][ C1] RSP: 0018:ffffc9000b6de5c0 EFLAGS: 00000287 [ 573.012564][ C1] RAX: 1ffffffff1d36acf RBX: ffffffff8e9b5678 RCX: 0000000000080000 [ 573.012575][ C1] RDX: ffffc90020601000 RSI: 00000000000089ea RDI: 00000000000089eb [ 573.012585][ C1] RBP: ffffc9000b6de710 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e [ 573.012597][ C1] R10: dffffc0000000000 R11: fffffbfff1f4203f R12: dffffc0000000000 [ 573.012608][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5620 [ 573.012628][ C1] ? console_flush_all+0x13a/0xc40 [ 573.012648][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 573.012670][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 573.012690][ C1] console_unlock+0xc4/0x270 [ 573.012706][ C1] ? __pfx_console_unlock+0x10/0x10 [ 573.012722][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 573.012743][ C1] vprintk_emit+0x5b7/0x7a0 [ 573.012758][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 573.012772][ C1] ? __lock_acquire+0xab9/0xd20 [ 573.012801][ C1] _printk+0xcf/0x120 [ 573.012819][ C1] ? __pfx__printk+0x10/0x10 [ 573.012833][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 573.012859][ C1] ? __netdev_printk+0x365/0x4d0 [ 573.012881][ C1] netdev_info+0x10a/0x160 [ 573.012902][ C1] ? __pfx_netdev_info+0x10/0x10 [ 573.012922][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 573.012943][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.012965][ C1] netif_set_allmulti+0x1b8/0x380 [ 573.012984][ C1] __dev_change_flags+0x52e/0x6d0 [ 573.013001][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 573.013018][ C1] ? __pfx_netif_change_name+0x10/0x10 [ 573.013042][ C1] netif_change_flags+0x88/0x1a0 [ 573.013059][ C1] do_setlink+0xc55/0x41c0 [ 573.013081][ C1] ? ___ratelimit+0x7c3/0xab0 [ 573.013098][ C1] ? __pfx_do_setlink+0x10/0x10 [ 573.013114][ C1] ? __pfx____ratelimit+0x10/0x10 [ 573.013138][ C1] ? __lock_acquire+0xab9/0xd20 [ 573.013179][ C1] ? __mutex_trylock_common+0x153/0x260 [ 573.013197][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 573.013216][ C1] ? rcu_is_watching+0x15/0xb0 [ 573.013230][ C1] ? trace_contention_end+0x39/0x120 [ 573.013247][ C1] ? __mutex_lock+0x330/0xe80 [ 573.013269][ C1] ? __pfx_aa_get_newest_label+0x10/0x10 [ 573.013297][ C1] ? rtnl_setlink+0x4ea/0x900 [ 573.013320][ C1] ? rcu_is_watching+0x15/0xb0 [ 573.013335][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 573.013361][ C1] ? ns_capable+0x8a/0xf0 [ 573.013388][ C1] rtnl_setlink+0x604/0x900 [ 573.013414][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 573.013444][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 573.013508][ C1] ? __pfx_rtnl_setlink+0x10/0x10 [ 573.013532][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 573.013556][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 573.013579][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.013601][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 573.013622][ C1] ? __copy_skb_header+0xa7/0x550 [ 573.013640][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.013668][ C1] netlink_rcv_skb+0x205/0x470 [ 573.013683][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.013708][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.013730][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.013745][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.013763][ C1] netlink_unicast+0x758/0x8d0 [ 573.013791][ C1] netlink_sendmsg+0x805/0xb30 [ 573.013811][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.013829][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 573.013850][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.013871][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.013887][ C1] __sock_sendmsg+0x219/0x270 [ 573.013909][ C1] sock_write_iter+0x258/0x330 [ 573.013930][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 573.013955][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 573.013973][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 573.013999][ C1] do_iter_readv_writev+0x56b/0x7f0 [ 573.014018][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 573.014038][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 573.014060][ C1] ? security_file_permission+0x75/0x290 [ 573.014079][ C1] ? rw_verify_area+0x258/0x650 [ 573.014105][ C1] vfs_writev+0x31a/0x960 [ 573.014126][ C1] ? __lock_acquire+0xab9/0xd20 [ 573.014149][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 573.014176][ C1] ? __fget_files+0x2a/0x420 [ 573.014196][ C1] ? __fget_files+0x3a0/0x420 [ 573.014213][ C1] ? __fget_files+0x2a/0x420 [ 573.014235][ C1] do_writev+0x14d/0x2d0 [ 573.014255][ C1] ? __pfx_do_writev+0x10/0x10 [ 573.014279][ C1] ? rcu_is_watching+0x15/0xb0 [ 573.014296][ C1] ? do_syscall_64+0xbe/0x3b0 [ 573.014319][ C1] do_syscall_64+0xfa/0x3b0 [ 573.014339][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.014359][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.014375][ C1] ? clear_bhb_loop+0x60/0xb0 [ 573.014393][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.014408][ C1] RIP: 0033:0x7f2d1418e929 [ 573.014421][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.014435][ C1] RSP: 002b:00007f2d15018038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 573.014450][ C1] RAX: ffffffffffffffda RBX: 00007f2d143b5fa0 RCX: 00007f2d1418e929 [ 573.014462][ C1] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 573.014471][ C1] RBP: 00007f2d14210b39 R08: 0000000000000000 R09: 0000000000000000 [ 573.014481][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.014491][ C1] R13: 0000000000000000 R14: 00007f2d143b5fa0 R15: 00007ffe0abf99f8 [ 573.014510][ C1] [ 573.015497][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 573.015515][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12422-g2c7e4a2663a1 #0 PREEMPT(full) [ 573.015549][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.015563][ T31] Call Trace: [ 573.015572][ T31] [ 573.015582][ T31] dump_stack_lvl+0x99/0x250 [ 573.015619][ T31] ? __asan_memcpy+0x40/0x70 [ 573.015650][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.015684][ T31] ? __pfx__printk+0x10/0x10 [ 573.015722][ T31] panic+0x2db/0x790 [ 573.015761][ T31] ? __pfx_panic+0x10/0x10 [ 573.015793][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 573.015831][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 573.015860][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 573.015893][ T31] watchdog+0x102d/0x1030 [ 573.015926][ T31] ? watchdog+0x1de/0x1030 [ 573.015965][ T31] kthread+0x70e/0x8a0 [ 573.015994][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.016023][ T31] ? __pfx_kthread+0x10/0x10 [ 573.016051][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.016077][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.016103][ T31] ? __pfx_kthread+0x10/0x10 [ 573.016130][ T31] ret_from_fork+0x3f9/0x770 [ 573.016164][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 573.016202][ T31] ? __switch_to_asm+0x39/0x70 [ 573.016224][ T31] ? __switch_to_asm+0x33/0x70 [ 573.016245][ T31] ? __pfx_kthread+0x10/0x10 [ 573.016273][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.016314][ T31] [ 573.017425][ T31] Kernel Offset: disabled