last executing test programs: 2m7.228281494s ago: executing program 32 (id=2514): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) unshare(0x64000600) r4 = socket$inet6(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}}) 2m7.174094149s ago: executing program 33 (id=2517): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) unshare(0x64000600) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000015c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xffffff33}, 0x3, 0x0, 0x2, 0x401, 0x16, 'syz0\x00', "afb5f82e68578bffa16f123b4afbdb533ccdf7ee6904b342c7c4010379139ca0", "8853adffb2bfddf9dbee9dcc287dd1490064c46c7ca92cc40e13fc106ef6fb9e", [{0xa9, 0x1, {0x0, 0x27}}, {0x2, 0xd, {0x3, 0x1}}, {0x7, 0x9, {0x2, 0x2}}, {0x8, 0x5, {0x2, 0x4}}, {0x400, 0x9, {0x2, 0xd2f}}, {0x8001, 0x0, {0x1, 0x100}}, {0x7, 0x8, {0x2, 0x6}}, {0x7, 0xffff, {0x0, 0x6621}}, {0x5, 0x3, {0x0, 0x5d7}}, {0x8, 0x7, {0x0, 0xfff}}, {0x3, 0x1, {0x2, 0x79b5}}, {0x4, 0x5, {0x1, 0x8dd}}, {0x0, 0x6, {0x0, 0x7f}}, {0x4b8, 0xffff, {0x1, 0x401}}, {0x6, 0x3, {0x3, 0x4}}, {0xa55, 0x5, {0x0, 0x9}}, {0x100, 0x8, {0x3, 0xffffffff}}, {0xd, 0x2, {0x0, 0x80000000}}, {0x2, 0xdd, {0x1, 0x3}}, {0x2, 0x80, {0x2, 0x9}}, {0x8001, 0x100, {0x3, 0x66b}}, {0xfff, 0x9, {0x0, 0x1}}, {0xf85, 0x7, {0x2, 0xfffffc00}}, {0x1a, 0xfff, {0x2, 0xfffffff5}}, {0x8000, 0x2, {0x3, 0x81}}, {0x6, 0xa, {0x0, 0x3}}, {0x86b, 0x225, {0x1, 0x81}}, {0x2, 0x6, {0x2, 0x7}}, {0x1, 0xe, {0x3, 0x6}}, {0x7a7, 0x7, {0x1, 0x9}}, {0x80, 0x4, {0x3}}, {0x7, 0xa, {0x0, 0x1}}, {0x2, 0x1, {0x3, 0x3}}, {0xa, 0x8000, {0x2, 0x7}}, {0x1, 0x5e, {0x3, 0x1000}}, {0x100, 0xd9f, {0x0, 0x82}}, {0x26, 0x8, {0x3, 0x8}}, {0x2, 0x581, {0x2, 0x6}}, {0x4, 0x1, {0x1, 0x3}}, {0x1, 0x8001, {0x2, 0xe98f}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000000000000000000000300000095000000000000f700"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x1}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x2, 0x0, 0x3d) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 2m3.570978231s ago: executing program 34 (id=2556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x00\x00', @ANYRES32], 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) unshare(0x68040200) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="caae", 0x2}], 0x1) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='.\x00\x00\x00\x00', @ANYRES32], 0x20) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) (async) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) (async) unshare(0x68040200) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="caae", 0x2}], 0x1) (async) close(r0) (async) 1m55.530584629s ago: executing program 35 (id=2664): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001f00010000000000000000000019feffffff00000000000000000000000000000000000000000000000000000000080000000000000089fa5e6602df53a7feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x1, 0x2}, 0xc) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xcd, 0x0, 0x5c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000606010100000000000000000100e9050900020073797a3000000000635a2805199ca7cbba8d718804dc36250254f7f56a33e8cc8416c49d6ff9b141b07a02a2527f6c47a1774697e75d3be06cc65e8834392e4abd7b979e35eefe2145e7f9"], 0x20}}, 0x4000001) (async) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "e9c9cf623465aab2"}, 0x28) (async) r5 = socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), r3) (async) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000084e95c050000000000000005ff923500515c", @ANYRESHEX=r5, @ANYBLOB="01002cbd7000fedbdf250300000008000100", @ANYRESOCT=r0, @ANYBLOB="080002000100000008000400ac1414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) (async) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x2b, 0x3, 0x6) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) 1m43.008839616s ago: executing program 36 (id=2717): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='2'], 0x20) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000063c0)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="598847167aa3eeecd678a4be219c9f7ac36dd422be5e395f6579a0878eb84f76bdd866c510f785691711178ee5cb9450f77f56bbaf73c14c1ebd44", 0x3b}, {&(0x7f00000005c0)="b786bc4294b02f59a1cb691b04822a3154b2b17f39", 0x15}], 0x2, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x800) (async) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000001540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f0000000280)={0x1280, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1160, 0x111, 0x0, 0x1, {0x115c, 0x5, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb3e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}]}, {0x4d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x44c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffaf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9000}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x238, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x65}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x73b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x92}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x234, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xea}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0xa8, 0x111, 0x0, 0x1, {0xa4, 0x5, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x1280}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0006"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 1m42.9677376s ago: executing program 37 (id=2718): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001000000080001001200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000003000000b6660339040c5bfa3d4e90aa1ec95fcef3203620264216362cecd7ce94db6a65401521fdd2524ab4ff0c2716a3fa4bb67c3db9b828ff9092b95753ce81fa67da1413b7fad42130bac2917bfac786d67fba46cc66626a5ec888ae940fb4173fa9126500000a5cfedd684d82c89eff9282c32baa9d0ef28b5ddf1b5887899dbdce8fcbb46722664ed421a56675408db18ca430"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xffffffffffffff3d) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000040)=[{r6}, {0xffffffffffffffff, 0x10}, {r3, 0x80}, {r4, 0x101}, {r3, 0x8004}, {0xffffffffffffffff, 0x18}], 0x6, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) socket(0x26, 0xa, 0x7ffc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x7fe, 0x0, 0xceda, 0x3]}, &(0x7f0000000000)=0x54) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1m39.140621023s ago: executing program 38 (id=2737): socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe, 0x38, &(0x7f0000000680)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x7105, 0x4) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x7105, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000002b80)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000007a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc", @ANYRESDEC=r0, @ANYRESOCT=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x1, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40010) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0xffff, 0x0, 0x0, {0xa, 0x4e22, 0x5, @private1, 0xab}}}, 0x32) unshare(0x20000400) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x8000, 0x3, @mcast1, 0xa872}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x8000, 0x3, @mcast1, 0xa872}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb010018000000000000001000f8001000000000000000010000000000000e4500000000000000005f2e00"], 0x0, 0x2c, 0x0, 0x0, 0x5}, 0x28) 1m37.168355963s ago: executing program 39 (id=2721): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0xfffffead, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x201000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) close(r2) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) (async) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 1m35.618718425s ago: executing program 9 (id=2783): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882", 0x26}], 0x2, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r4, @ANYBLOB="080002007f00000114000600ff030000ffffffff030000000000000008000400e0"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000001c0)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000180001000400000000000000020000000500ff090024000006001500020000001400168010000880070002"], 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r10 = socket(0x8, 0x0, 0x8000) accept4$netrom(r10, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) 1m29.915292046s ago: executing program 40 (id=2764): unshare(0x64000600) socket$inet6_sctp(0xa, 0x0, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) unshare(0x50700) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000120000000087ac000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705001f97062219145ba7000800000085000000a5000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x50) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x2, 0x0, 0x3d) (async) setsockopt$sock_attach_bpf(r5, 0x110, 0x2, 0x0, 0x3d) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00', @ANYBLOB="21012cbd70000000000014000000", @ANYBLOB="060036", @ANYRES32=0x0], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00', @ANYBLOB="21012cbd70000000000014000000", @ANYBLOB="060036", @ANYRES32=0x0], 0x2c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cf5000/0x3000)=nil, 0x3000, 0x2000002, 0x15, r3, 0x743f9000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x35, 0x1b}, 0x20) socket$inet(0x2, 0x5, 0x800) (async) socket$inet(0x2, 0x5, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8, 0xc}, 0x28) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00), 0x0, 0x4c040) unshare(0x2c020400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 1m20.578892412s ago: executing program 41 (id=2783): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882", 0x26}], 0x2, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r4, @ANYBLOB="080002007f00000114000600ff030000ffffffff030000000000000008000400e0"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000001c0)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000180001000400000000000000020000000500ff090024000006001500020000001400168010000880070002"], 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r10 = socket(0x8, 0x0, 0x8000) accept4$netrom(r10, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) 1m18.08538961s ago: executing program 4 (id=2875): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x800000000000008) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x80, 0x0, 0xc, 0x0, 0x0, 0x6, 0x0, 0xff, 0x1, 0xe], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x3dc, 0x0, 0x4000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20008001) 1m18.019222879s ago: executing program 4 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000050000001000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) unshare(0x20000400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000300)=0x7f, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x82}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004}, 0x4004010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0xe8, 0x24, 0x4ee4e6a52ff56541, 0x400, 0x0, {0x0, 0x0, 0x0, r2, {0x7}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfb, 0x0, 0x7, 0x10000, 0x2, 0x8ec, 0xc7, 0x3}}, {0xa, 0x2, [0x4, 0x4ba1, 0x3]}}, {{0x1c, 0x1, {0x25, 0xc, 0x5, 0x4, 0x0, 0x4, 0x6, 0x8}}, {0x14, 0x2, [0x7fff, 0x89f, 0x1, 0x3ff, 0x400, 0x8000, 0x9, 0x1200]}}, {{0x1c, 0x1, {0x6, 0x80, 0xfff7, 0x9, 0x0, 0x1, 0xfffffff7, 0x7}}, {0x12, 0x2, [0x8006, 0x9, 0x0, 0xf, 0x3, 0x2, 0x81]}}, {{0x1c, 0x1, {0x6, 0x42, 0x2, 0x0, 0x0, 0x3, 0x200, 0x9}}, {0x16, 0x2, [0x1, 0x3, 0x4, 0x9, 0x0, 0x7, 0x3, 0x8, 0x15a]}}]}, @TCA_STAB={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) 1m17.741241976s ago: executing program 4 (id=2878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, 0x0) 1m17.519563731s ago: executing program 4 (id=2880): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x3, 0xb6bc, 0x5b}, 0x2c) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x4c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000008eaace052f204c984643ae5d13fc66629fdc422de2cee1a2b935ca8b11d6be4ede0689b3da76b2ed19b9645af7cf61362f0183ffd34ba3e7b36f2db16da3eabafcd4965d8b06c737a5fe09bb5a04bffbbe7d312bffc960000000000000202703a91f44ce59d393425a28f6c14269f2a0d46265cc9cb59f2e0308e8f9105e4ec1742c1a32fea256c407d90528b31df402e2d067f92af6dd3facecf07d176cdebcdf0f59f773d83330609c6329b2e5913f348a6ee2cf308f354b000964a9a23e7c32c11c047ce22d8969c1243c4", @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff07000070000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001600), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000001640)='FREEZING\x00', 0x9) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$unix(0x1, 0x5, 0x0) 1m15.557379604s ago: executing program 0 (id=2893): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000021c0)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x4000800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m15.48984505s ago: executing program 0 (id=2894): unshare(0x6a040000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310700000000000000fb370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x4040) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000040)={@empty, @private}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.272655834s ago: executing program 42 (id=2842): unshare(0x64000600) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) unshare(0x50700) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000060000000000000efe5debf06924f27e00", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="ff07000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x6a040000) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x2, 0x0, 0x3d) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00', @ANYBLOB="21012cbd70000000000014000000", @ANYBLOB="060036", @ANYRES32=0x0], 0x2c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cdd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r0, 0xe2c52000) socket$inet(0x2, 0x5, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x18, 0x0, 0x8}, 0x28) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x57, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900fc0000002c000000080026006c09000008009f0000000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020028bd7000fedbdf0e64002aba576b0000080001001b000000", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x40011) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00), 0x0, 0x4c040) unshare(0x2c020400) 1m2.231666207s ago: executing program 43 (id=2880): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x3, 0xb6bc, 0x5b}, 0x2c) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x4c000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000008eaace052f204c984643ae5d13fc66629fdc422de2cee1a2b935ca8b11d6be4ede0689b3da76b2ed19b9645af7cf61362f0183ffd34ba3e7b36f2db16da3eabafcd4965d8b06c737a5fe09bb5a04bffbbe7d312bffc960000000000000202703a91f44ce59d393425a28f6c14269f2a0d46265cc9cb59f2e0308e8f9105e4ec1742c1a32fea256c407d90528b31df402e2d067f92af6dd3facecf07d176cdebcdf0f59f773d83330609c6329b2e5913f348a6ee2cf308f354b000964a9a23e7c32c11c047ce22d8969c1243c4", @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff07000070000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001600), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000001640)='FREEZING\x00', 0x9) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$unix(0x1, 0x5, 0x0) 1m0.403103998s ago: executing program 44 (id=2894): unshare(0x6a040000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310700000000000000fb370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x4040) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000040)={@empty, @private}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.185955989s ago: executing program 3 (id=3042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000ed00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x7, 0x4, 0x4, 0x1}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048090}, 0x800) 51.151011238s ago: executing program 7 (id=3043): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x37, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @generic={0x7, 0x6007, 0x6, 0x7, 0xb, @random="0000cb69bd01", "33d3578d14ae14", @multicast, "fe7cf6936adc6ad59679c055014e"}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000080)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10000, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000300)="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") 50.857341134s ago: executing program 3 (id=3044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={r6, 0x5}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000640)={r6, 0xa7, "62f65a767ed4ac262b75ee79638c4b8cdf19196ca36512a83ebaa5f6c6f56265558ee7db3ab699784b0dfe476d65f7b8526f43169044b0a7c22a389e642ef1f5ce349a3c3e9d9a6c7b8936430e3a823ab9c230e3cfdd63e171378e1a059f083b4199ec527c7ecd042bdf71d32ff124cf73f9d77a6d126df8961f02605cae69ed17e614686736ed2bd12e284ccc40819c60c1491f80009dcc4e5ca8a845b42baf10819735606f63"}, &(0x7f0000000080)=0xaf) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xa4fffffc, @rand_addr=' \x01\x00'}}}, 0x108) 50.429842325s ago: executing program 3 (id=3045): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xffdd) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x8, 0x0, 0x1fffe}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x8000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, 0x0, 0x4800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a3705", 0x1d) r3 = socket$inet(0x2, 0x9f558988b0970d10, 0x5) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000400)={0x88, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'ovf\x00', 0x8, 0x0, 0x4f}, 0x2c) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x20, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0xb7}, @generic={0x3, 0x2}]}}}}}}}}, 0x0) 50.227298182s ago: executing program 3 (id=3046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0xdc, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 50.073192903s ago: executing program 7 (id=3048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x341}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async, rerun: 32) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) (async, rerun: 32) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) (async, rerun: 32) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r8, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async) close(r9) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r12) sendmsg$IEEE802154_LLSEC_SETPARAMS(r12, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000340)=ANY=[@ANYBLOB="e400375968a241536834f852acdf0f490a0a19e50556b12643fd45de3509e346badc86f125ee3a378eb65f7347a9a3712d70b041b203d8c05f0f60587f430b272d2c035598094c4766651b2c3801773a91a2", @ANYRES16=r13, @ANYBLOB="190026bd7000ffdbdf2525000000050029000100000005002b000200000008000200", @ANYRES32=r11, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24004051}, 0x0) 50.045152616s ago: executing program 3 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000060000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000004000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb63e5af58332896, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000340)=[{{&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x3, 0xf4, "73438868d9d740eb472ac13707f2cd020ca64fc526b2a577f434926aeb9628be87e5fd894959c7c0c9f77b2d0de95298b3bddbb6319ed2eb725590e4980c01", 0x2d}, 0x80, 0x0}}], 0x1, 0x200448e4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002900)={r1, r0}, 0xc) socket(0x17, 0x4, 0x0) r3 = socket$inet(0x2, 0x1, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) close(r4) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 49.850961268s ago: executing program 45 (id=2953): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x61d9, &(0x7f0000000000)={0x700, 0x9, [0xa5a, 0x0, 0x1, 0x3, 0x7]}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="86e39fc04cf9da1b51977b6f0c040000100001", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000944bc17398848ac1fb7b481586f40780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000011200300686173683a6e65742c6e657400000000d8bd3e5ac5af0827298c64b265b99be4fe3ee4186093d88ec71b93e31f2aec7b782e264eeb27efd2fe688ce6ff05c422b6c87e630ca8cba95fe8439c6e4ad06a2ccf781500456a0a1159109015dc6ef6cce6a3d48eae762dba87d65c3060b3fc258de99bcc72cb8c20ce67a3556b89c48ee284b1403036"], 0x60}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x42000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x16, 0x66, 0x0, 0x8b, 0x6c, 0x0, @private=0xa010100, @broadcast}, "3297"}}, 0x24) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000a40)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x50}}, 0xe) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000002a40)) 49.801987561s ago: executing program 7 (id=3053): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="b9fe030768045c8c989a14f088a8657986c6", 0x0, 0x9d, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.616445639s ago: executing program 7 (id=3055): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711292000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.462957143s ago: executing program 3 (id=3057): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x2, 0x7, 0xdd7, 0x1e69}, 0x27) sendmmsg$inet6(r0, &(0x7f0000000bc0), 0x0, 0x20000004) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x260b27c8) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000000000000007000000ab67ad9503ea13c012f67b64efa1134c9e557802b2a28d2e5a418c2d76b530eecaed9fc499614f5156e0066ae9545d44140dd9d887f73986538970695533ca05bcd1d22df8b25919362401351805370b64ecb2bf3aedf243980a85e66ba3ddd26ab243d32e2b852008997f55efa6fc602cea153ad45b0ab9"], 0x8}, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r2, 0x40305839, &(0x7f0000000a00)={{r2}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd3782f409d56bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf5b757758f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d960"}) r3 = socket(0x28, 0x4, 0x6) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x100000000000000) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, 0x0, 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[], 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) 48.525266132s ago: executing program 7 (id=3062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) unshare(0x2040400) socket(0x1e, 0x4, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x64b99}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x100000000, 0x5, 0x1, 0x4, 0xe}}]}, 0x44}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9bb6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 48.104686397s ago: executing program 7 (id=3066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r1, 0x1, 0xea, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x68, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2d, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008042}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103df250200000000004e2000"/36], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040) close(0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000f80)=""/209, 0xd1}, {&(0x7f0000003100)=""/4057, 0xfd9}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f00000010c0)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f00000020c0)=""/204, 0xcc}], 0xc}, 0x40012100) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1d0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x3c, 0x9, 0x6, 0x7, 0x6, 0x7fff, 0xffffffa4, 0x80, 0x8c}, {0x5}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0xe, "e42e", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@remote, @remote, 0xff000000, 0xff, 'ip6_vti0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x1, 0x7], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x0, 0x1, 0x2, 0x4, 0x2], 0x5, 0x5}, {0x4, [0x7, 0x7, 0x6, 0x5, 0x0, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x5}, {0xfff3, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0xfffd]}}]}]}, 0x54}}, 0x0) 42.845385497s ago: executing program 5 (id=3094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) splice(r2, &(0x7f0000000080)=0xadc, r4, &(0x7f0000000180)=0x1, 0xffffffffffffffff, 0x1) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0x2}, {0x9, 0xffff}, {0x6}}}, 0x24}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000040)={&(0x7f00000006c0)=""/4096, 0x1000, 0x8001, 0xf}) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) (async) unshare(0x2c060000) (async) unshare(0x2c020400) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 42.557890574s ago: executing program 5 (id=3098): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80, 0x80800) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000002040)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) 42.475431837s ago: executing program 5 (id=3099): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x2040011, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}], 0x1, 0x4048884) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) getsockopt$ax25_int(r1, 0x101, 0xd, 0x0, 0x0) r2 = socket(0x2, 0x5, 0x3ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010102}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8005}, 0x0) recvmmsg(r2, &(0x7f0000004100)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/128, 0x80}, {&(0x7f0000004300)=""/85, 0x55}, {&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000300)=""/156, 0x9c}], 0x7, &(0x7f0000001500)=""/132, 0x84}, 0x800000}, {{&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=""/222, 0xde}, 0x3}, {{&(0x7f0000001700)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001780)=""/127, 0x7f}, {&(0x7f0000001800)=""/79, 0x4f}, {&(0x7f0000001880)=""/141, 0x8d}, {&(0x7f0000001940)=""/128, 0x80}, {&(0x7f00000019c0)=""/155, 0x9b}, {&(0x7f0000001a80)=""/77, 0x4d}, {&(0x7f0000001b00)=""/44, 0x2c}, {&(0x7f0000001b40)=""/222, 0xde}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x9, &(0x7f0000002d00)=""/212, 0xd4}, 0x9}, {{&(0x7f0000002e00)=@isdn, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002e80)=""/254, 0xfe}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)=""/239, 0xef}], 0x3}, 0xffff}, {{&(0x7f0000003100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003180)=""/146, 0x92}, {&(0x7f0000003240)=""/52, 0x34}, {&(0x7f0000003280)=""/212, 0xd4}, {&(0x7f0000003380)=""/241, 0xf1}, {&(0x7f0000003480)=""/35, 0x23}, {&(0x7f00000034c0)}], 0x6, &(0x7f0000003580)=""/222, 0xde}, 0x111}, {{&(0x7f0000003680)=@vsock, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003700)=""/98, 0x62}, {&(0x7f0000003780)=""/167, 0xa7}, {&(0x7f0000003840)=""/187, 0xbb}, {&(0x7f0000003900)=""/86, 0x56}, {&(0x7f0000003980)=""/8, 0x8}], 0x5, &(0x7f0000003a40)=""/175, 0xaf}, 0x4}, {{&(0x7f0000003b00)=@caif=@rfm, 0x80, &(0x7f0000004040)=[{&(0x7f0000003b80)=""/142, 0x8e}, {&(0x7f0000003c40)=""/116, 0x74}, {&(0x7f0000004380)=""/253, 0xfd}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/12, 0xc}, {&(0x7f0000003e00)=""/251, 0xfb}, {&(0x7f0000003f00)=""/230, 0xe6}, {&(0x7f0000004000)=""/8, 0x8}], 0x8, &(0x7f00000040c0)=""/13, 0xd}, 0x6}], 0x7, 0x40002001, &(0x7f00000042c0)={0x0, 0x3938700}) 41.557934514s ago: executing program 5 (id=3102): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200), 0x4) (async) socket$kcm(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x650, 0x19, 0x100, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba"}]}, @nested={0x5ec, 0x6, 0x0, 0x1, [@nested={0x5e8, 0x75, 0x0, 0x1, [@nested={0x5d0, 0x105, 0x0, 0x1, [@nested={0x15f, 0xce, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r2}, @generic="9db6859cccae2434ff2e8f93db2df78257b0170f04b50b3be1e4c913ca056fe917b18f5222ac3d3541f98865f03144d0b08bebc32edca5884fdd79091323071734155332e8388f50ece0c5f03a29b281c639e10effac78129089df5ef6cfc31b315f5d873171723ff22203aab3e5053649597853a74ba2af1ee6beec35caed1a3ac803501167580d1c3d3c71cbe7b7d46bf41688a56358a6e631a860ce019d10f0b3d70c28acb57ccb7b8f82b6", @nested={0x4, 0x26}, @generic="d8d3d1db8748d6722ff8e5ff280050dbf23bd286517142b3f76bfd7bbd6c48ac1886055a792809322736af9898f9d253e5ffe1e589041e2c9b1de861a6891efc987e635819f3dbee9e9216a1701c66c2b5deebf7a938855116116235ff753020316ca1dc2c3053f0d15b2913dbcdca6599f1f941f4cb5d7ff44ae5245e9d27dca1654651ea32ad4e1b04a1e415274154df1a9593bc82f8c84d1a05e116bc5dd01cc5"]}, @nested={0x469, 0xeb, 0x0, 0x1, [@generic="5ab6b7078930e43e0939c1cde326348421c6bc5f89415fa5361942499f8491c502a0b879b6cedfccdca4de3173077e29e216fae75bc123b63d11557354abd4d70f4f63603e46d305fb161017209c0ee56fe299c9b2018f1af4b6ba7c7721cc438aff6f76f1e7cfb8151070b7602b0fe49facb66c6042f7c1533e6325fcca20d1daba4d429e227f02ea5d193c11bdaf63832109b1bfed008940f1dcd8f49328e1df559b45ace750605ad890dc4fef", @nested={0xc, 0x72, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic]}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x12e, 0x0, 0x0, @uid=r3}, @generic="30d5bac10a51a4c53a840091ee5d67b6291e9dc6a2d97b46ba00f3ac423804b091e9fd9aa1d9b4227c4acf951e7ada1868b501f6720ea9df48b5b794732ec14144ef61dd468bdc860ea1303d9209db89d5f4421c0570b93945618d221c92f150ec27e83ce0", @generic="d66db714756080140a41e4d45f42d1af248b74dfc711decee5cd0f9cc6313f07af70eef0d0ace18cc1f973ffb5a2d8407546c2aaad8c28c9e7f8f232e2421865110e8b56bff38f033030b480acee589561dbd4f9655bf6bed5f183889087287448c1178a4940561c6e0c7df1167fb5c0a8b3c7e3018fa1bb57e8bf8b8a5e3848e77af37a", @generic="b59b9af9d93100003e6666d528ed4634578233695fe949be3e16a20c45b9ce7af6308d55ae0bef7502626161a2f635ae51e8d66db9ca44bd906efc55d2c6d8cbc03289b14ab4a6bacbdfd91bec5bc90717470143bc0711a2393986507b3bbda25919c7c702a3e9fb29d468d310254c897df4088606eed876ec86f4bb44da231b21352a3122feae8defb85a8e7dd0d5e9c174b078fd17a9e15541ea8e149840c8acaeb2a9b37af7a54685d85305ebb807a2b07836845429f783154c55120d0dca6e9dedf40942fa63b574f67d6ef088a59192", @nested={0x1c9, 0x45, 0x0, 0x1, [@generic="69dc4cdd8e8e0693f848e854842d61c441b6a199143060bc553b7b80e0798d8131442ec33a5ad21ca4c76ff5f74bfe1483f02ec0b625daeab509f5946648452bc433f21ba8e28d42f0c698ad02bbec6bb64d3868478786ec01260e0acdaee58deb989abb22d4cfb450a10fd1c2335cd8aed33be068f5a94f16f398f080d65bc044861ae791d69063676a5a7ae0e64e25b43e22d32ed388d15447af36aed4fac16d8d02b29c92ce29e0691e31ec7aa1fe7cded4ac0a33c4d3fcb2d1093a88f0adf8aaee517776a7ea0bc1882a0bf87e014359810d", @nested={0x4, 0xb5}, @nested={0x4, 0x12e}, @generic="a26f72a4fe5eb7968629d5b30b7e3a222b0bf3ce719db0d2762084ad0cd88a05d6832de647aa31ab9d2accc5384f98c5721d317022436292872f165e2d7cf1c6a3233a0d5a0e15bc2d8cb55fbd2d810483a2bd0712f45ff06aa586d90e9f566f3b42ab86baf1c70d2b6a1dc9193be16f1a4636ac0d69a675c5789d6bb7e6b6bd9492e71d8c54f2a4e160591389e9f64cb5ad9b478089d77a61cedb501632ff5656ff490678dd9c1afb367aad25a8701dec2b07f42e345360838294c1ca4912981076f0f71bdeeb89094b986e9efa8d2d414d68d6479e0636bc7e7979b67db1e256754b7600", @nested={0x4, 0xa3}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x136, 0x0, 0x0, @uid=r3}]}]}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0xc, 0x125, 0x0, 0x1, [@typed={0x8, 0xc1, 0x0, 0x0, @pid=r4}]}]}]}]}, 0x650}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}}) 41.276426392s ago: executing program 5 (id=3103): syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x2, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x8000003, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x2, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x0, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x11) 39.363895238s ago: executing program 5 (id=3104): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 33.9211189s ago: executing program 46 (id=3057): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x2, 0x7, 0xdd7, 0x1e69}, 0x27) sendmmsg$inet6(r0, &(0x7f0000000bc0), 0x0, 0x20000004) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x260b27c8) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000000000000007000000ab67ad9503ea13c012f67b64efa1134c9e557802b2a28d2e5a418c2d76b530eecaed9fc499614f5156e0066ae9545d44140dd9d887f73986538970695533ca05bcd1d22df8b25919362401351805370b64ecb2bf3aedf243980a85e66ba3ddd26ab243d32e2b852008997f55efa6fc602cea153ad45b0ab9"], 0x8}, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r2, 0x40305839, &(0x7f0000000a00)={{r2}, "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"}) r3 = socket(0x28, 0x4, 0x6) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x100000000000000) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, 0x0, 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[], 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) 33.036913186s ago: executing program 47 (id=3066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r1, 0x1, 0xea, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x68, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2d, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008042}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103df250200000000004e2000"/36], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040) close(0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000f80)=""/209, 0xd1}, {&(0x7f0000003100)=""/4057, 0xfd9}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f00000010c0)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f00000020c0)=""/204, 0xcc}], 0xc}, 0x40012100) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1d0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_vlan\x00', {0x3c, 0x9, 0x6, 0x7, 0x6, 0x7fff, 0xffffffa4, 0x80, 0x8c}, {0x5}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0xe, "e42e", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@remote, @remote, 0xff000000, 0xff, 'ip6_vti0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x1, 0x7], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x0, 0x1, 0x2, 0x4, 0x2], 0x5, 0x5}, {0x4, [0x7, 0x7, 0x6, 0x5, 0x0, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x5}, {0xfff3, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0xfffd]}}]}]}, 0x54}}, 0x0) 30.525072429s ago: executing program 8 (id=3170): socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r3, 0x0, 0x81}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x2e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x24000000) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0x60000005}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44881}, 0x800) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x0, 0x117, 0x4, 0x6bf1be27}], 0x0, 0x4009}, 0x10) (async, rerun: 32) recvmmsg(r8, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e2c, 0x2, @local, 0x4}}, [0x4e00000000000000, 0xa, 0x7ff, 0xddfa, 0x7594c299, 0x1, 0xff, 0x0, 0x7, 0xff, 0x5, 0x9, 0x287a, 0x1, 0xe]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000440)={r9, @in={{0x2, 0x4e21, @loopback}}}, 0x84) 27.418821852s ago: executing program 8 (id=3172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000500)=""/3, 0x3}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) r2 = socket(0x18, 0x3, 0xfe) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) sendmsg$802154_raw(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)="0b3b987ef327e8d94487eed399635d0113dbc644ea692c74b10086721d67e8d98771174678fa3bb1184fed27931f45bdabe8605c25fabd7206dd15d040b2b230037d2bd8a7207d410ab321a771347c40d2e5e5fde6be01ff607ab2c359e1fc7da4da1ada4a5a0fe4ef72114dcc247e7c4f17dcee9dd63ea53f015f80345ad67c5598584c51b03d3b4b1cafb0ad6c8bc9b2e482357add65ef4f0cf0b2f7842ca385582eaad879fb97acddb2c69e8d7d63d48bc92fe0953744dfe578d88e3d93ba0d64939c8422c01ae8c46a98788f2ccf", 0xd0}, 0x1, 0x0, 0x0, 0x40040}, 0x8084) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000140)=@in={0x2, 0x4e24, @multicast2}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x0, 0x1}], 0x10}, 0x30040000) 27.291094337s ago: executing program 8 (id=3174): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet(0x2, 0x3, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x24000810) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0xb8, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0xfeff, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 26.678636722s ago: executing program 8 (id=3178): r0 = socket(0x1d, 0x2, 0x6) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="180000aa3432a8131e000000000047e34305af2a72b747e06baa08f68f000000000000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x59, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20050800) 26.405085715s ago: executing program 8 (id=3180): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r4, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x2, 0x0, 0x0) recvmsg(r4, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000003d40)=""/173, 0xad}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0x6f}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r6, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) r8 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x10, 0x20, 0xc000000, 0x91, {{0x17, 0x4, 0x0, 0x2d, 0x5c, 0x67, 0x0, 0x2, 0x2f, 0x0, @local, @private=0xa010102, {[@cipso={0x86, 0x15, 0xfffffffffffffffe, [{0x0, 0xd, "17065768611b75daef302a"}, {0x7a056c12e85d338c, 0x2}]}, @timestamp={0x44, 0x8, 0xee, 0x0, 0x6, [0x0]}, @lsrr={0x83, 0x2b, 0xe, [@rand_addr=0x64010102, @remote, @remote, @local, @broadcast, @rand_addr=0x64010100, @multicast2, @broadcast, @multicast2, @multicast2]}]}}}}}) bind$packet(r8, &(0x7f0000000340)={0x11, 0x8, r9, 0x1, 0xff, 0x6, @random="a43efab59a4b"}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000000001fe8000000000ffffffffff000000000000009b000000034e2000000a0000205e0000000000000087142c76545651f336970077d13ee6fd49df2459129ebc0b844bcb400efd6f4e7016a302043af3dcd1c6b99b13916f88c480deffe43aebb39ce1042e10778a6ab63cf786e6459473dc02bef80fb84435c344e5131cc72475912577ff638edaaaf0cd8f16b29e91479ed9f5dac30666a7c4825fc24621283cb84ec1c166"], 0x1fc}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000006c0)={&(0x7f0000000380)="fc145c2dfc2e79607264e3b6c158d4bb97a89362cdfdd0faeb57ecdfad89a92c7f5a1903c6af801d24f4c0cbe0a9ed2b7c84c34cc8b140b70eed0a40976c360bca4a195b0dc94d4c66e4b225d4edf06972a373986f7aa6478626396c5f549bb7eb7668f18731ecf2648172ba44a02621beb2", &(0x7f0000000400)=""/3, &(0x7f0000000440)="ce097543a61cad365861cc9f844c4e2ef8fda0a185ded211494cf90ef2840365db4764c616f43e01ff3e5c1ecb179f90", &(0x7f0000000480)="2006d31090f1b804b598c6a5d05a6248f2b586b9cbf71f6b68e5bb", 0x7fffffff, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) 24.646489174s ago: executing program 8 (id=3190): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8000000008) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004014}, 0x40000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x8, 0x3, 0x2, 0x0, 0x100001, 0x2}}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x180000000) 24.49333073s ago: executing program 6 (id=3191): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x7fffffff}]}}}]}, 0x4c}}, 0x4000) 24.072089985s ago: executing program 48 (id=3104): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 24.061323742s ago: executing program 6 (id=3193): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000140000000000019078ac1e0001ac14f9054b14aa0300907803240000450000000000000000010000ac1414aaac141400867100000000000ce256b28c59881681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e976"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000002000000000000020000000008000400fbffffff08000600ffffff7f1200"/44], 0x2c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r6, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r7, r5, 0x0, r5}, 0xb) r8 = socket$igmp(0x2, 0x3, 0x2) socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000002c0)={0xa0000004}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c140000"], 0xa0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) shutdown(r0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x158, 0x180, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@connlabel={{0x28}, {0x7fff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffffff, 0xff000000], @ipv6=@remote, [0xff000000, 0xffffff00, 0xffffff00], 0x2, 0x10001, 0x3c, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x300, 0x2001}, 0x80, 0x1000, 0x4e29, 0x4e22, 0x4e23, 0x4e24}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x6}, {}, 0x360, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 23.410214835s ago: executing program 6 (id=3194): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000ffffff03000400"], 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 22.401177282s ago: executing program 6 (id=3195): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65", 0x5}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x6bda, 0x8) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r2, 0x3, 0x7, 0x2dfb}) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048040}, 0x8000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$tipc(0x1e, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65", 0x5}], 0x1}, 0x448e4) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) socket(0x10, 0x803, 0x0) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x6bda, 0x8) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r2, 0x3, 0x7, 0x2dfb}) (async) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048040}, 0x8000) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) 22.031255887s ago: executing program 6 (id=3196): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="14000000000000000000000001000000bf00000000000000110000000000000000000000010000000100000000000000380000000000000000000000070000004428ec60000000e3000000000000000500000007000000018000000b0000000280000000000050cd1c0000000000000000000000080000002f30"], 0x88}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100185e0000000000005d7100000000000006000000000030110040"], 0x0, 0x1e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="58000007ed000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r6, 0x0, 0x3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRES32, @ANYBLOB="00580987000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r11}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) close(r13) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r9}, &(0x7f0000000900), &(0x7f0000000940)=r8}, 0x20) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'wlan0\x00', {}, {}, 0x6c, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x2, 0x24, 0x6], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x2], 0x0, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @multicast2, 0xffffff00, 0xffffff00, 'rose0\x00', 'gretap0\x00', {0xff}, {}, 0x6, 0x2, 0xc}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x81, 0x2, 0x7fff, 'snmp\x00', {0x400000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 21.887880321s ago: executing program 6 (id=3197): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0xffffffff, 0x0, [0x0, 0x5, 0x0, 0x0, 0x0, 0x200000], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 19.430221122s ago: executing program 9 (id=3145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000840)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x6}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendmsg(r0, 0x0, 0x880) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @mcast1, 0xffffffff}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESHEX=r5], &(0x7f0000000400)='GPL\x00', 0x1, 0xd6, &(0x7f0000000440)=""/214, 0x0, 0x40}, 0x94) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x4e24, @multicast1}}, 0xe5, 0x0, 0x3, 0x7, 0x0, 0x267d, 0x9}, 0x9c) 19.001195141s ago: executing program 2 (id=3200): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x434, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0xe25, 0xd, 0x0, 0x0, 0x2, 0x8000, 0xe15, 0x10001, 0xae0, 0xd8b2, 0x1, 0x5c8a3c99, 0xbbf, 0x80, 0x4, 0x23, 0x1, 0x248, 0x6, 0x2, 0x9, 0x8, 0x8000, 0x0, 0x3ff, 0x0, 0x6, 0xffffffff, 0x48d, 0xf2, 0x4, 0x3, 0x20000000, 0x7, 0x7, 0x4, 0xb0, 0x7, 0x401, 0x7, 0xfffffff7, 0x7, 0x800, 0x100, 0xfffffff8, 0x80, 0x40, 0x1, 0x6, 0xe, 0x2, 0x5, 0x3, 0x5, 0x1, 0x0, 0x81, 0x85d, 0x3, 0x4, 0x0, 0xfffffff7, 0xb9, 0x1000, 0x1, 0x6, 0x6, 0x4, 0x6, 0x5, 0x66, 0x0, 0x10, 0x5, 0x8, 0x101, 0x3, 0x80000000, 0xfffffff7, 0x8, 0x6, 0x1, 0xd7c, 0x3, 0x4, 0x3, 0x3b, 0x6, 0xd, 0x3, 0x4, 0xf5, 0x2, 0xd, 0x1, 0x1, 0x3, 0x101, 0x7e29, 0x5, 0x2, 0x3, 0x3, 0x1, 0x5, 0xc, 0x0, 0x8000, 0x7, 0x332, 0xd, 0x9, 0x7fffffff, 0xbfb, 0x4, 0x5, 0x4, 0x5, 0xfffffff0, 0x6, 0x4, 0xffffffff, 0x8, 0x10001, 0x6, 0x8, 0x5, 0x7, 0x7, 0x40, 0x7ff, 0xda, 0x1, 0x100, 0xc, 0x5, 0x7, 0x1, 0x1, 0xfffffff8, 0x0, 0x8, 0x316, 0x9, 0xf87, 0x7, 0x7, 0x6, 0xffffffff, 0x1, 0x7, 0x1, 0x8, 0x5089, 0x800, 0xa, 0x1, 0x10, 0x6, 0x2, 0x0, 0x8, 0xa, 0x1, 0x6, 0x200, 0x583, 0x1, 0xfec, 0xffffffa3, 0x419, 0x3ff, 0x200, 0x5, 0x2, 0x6, 0xffffffff, 0x1cf9, 0x9, 0x8, 0x81, 0x400, 0xfffffff8, 0xfed0, 0xfffffe01, 0x4, 0xfffffff7, 0x40, 0xb, 0x10000, 0xfffffffb, 0x9, 0x48a, 0x7, 0xaa6, 0x5, 0x2, 0x10, 0x5, 0x10001, 0x6, 0x3, 0x1, 0x4, 0x5, 0x6, 0xb, 0x0, 0x0, 0x7, 0x10, 0x8, 0x3, 0x3, 0xe, 0x200, 0xffff1858, 0x2, 0x81, 0x7, 0x4, 0x80000000, 0x2689, 0x4, 0xfffffff7, 0x2, 0xf63b, 0x10001, 0x3, 0x7, 0x1, 0x9, 0x1, 0x1, 0x7bb, 0x4, 0x10001, 0x4, 0x0, 0xea, 0x3, 0x4, 0x7, 0x8000, 0xa1fa, 0x6, 0x0, 0xf25e, 0x6, 0x1ff, 0xb, 0x6658, 0x40, 0x16ef]}]}}]}, 0x434}}, 0x0) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000006c0)=""/213, 0xd5}], 0x2}, 0x8}], 0x1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x8001, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000003b2e7f5f9c1fbfbd732ba2b6cb58f5f373dacf320baa9a9d3fbfc5544694b105"], 0x14}], 0x1}, 0x0) 18.949418039s ago: executing program 2 (id=3201): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e20, 0x3, 'none\x00', 0x30, 0x4, 0x68}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e1e, 0x7fffff, 'dh\x00', 0x35, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0x8000, 0x1012d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 18.835448078s ago: executing program 2 (id=3202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b0a37aa3c4734ff2f755889f9c5232fe"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6895625c4ccffc13d2f63a40a7b1df2c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e7513cf8c2e14bde3e45d74575e85b25"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7788fde5387f15dc8cef86a039f38ab8"}, @NL80211_ATTR_PMK={0x14, 0xfe, "345cf8de22c51a367014ea132c1f26c7"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008045) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x6) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r8, @ANYRES64=r2, @ANYRES16=r5, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRES16=r5, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x4000) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/241, 0xf1}], 0x2, 0x66e0, 0x40) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4145002c}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x54}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r10, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="cc842718", 0x4}, {&(0x7f0000002440)="14", 0x1}], 0x2}}], 0x1, 0x8040) sendmmsg$inet(r9, &(0x7f0000001880)=[{{&(0x7f0000000d00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e80)="66a42e", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001380)='$`^', 0x3}, {&(0x7f0000000000)="f42b3cc11fcf9952a79687e3013caf5a13f7fa3438fa0350fd5fbabdd74ec114a72a04febf95d92d2600d16a3c9379c1c5b64521271015f788b19f1d979955e10c3c278e48e27d96eabb4f5930", 0x4d}, {&(0x7f0000002480)="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", 0x1000}], 0x3}}], 0x2, 0x4000004) 18.6253522s ago: executing program 2 (id=3203): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1411, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000dcebe7462559515b858cb8edaf763e05fbe558e457072d1ebcd60a0712b027c4859bd119f96914b433663b2e5c2aa47a6180c6cbd438"], 0x38}}, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 18.487904735s ago: executing program 9 (id=3204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8, 0x62d5}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x647e4, 0x64da0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0xba01}, 0x0) 18.290909672s ago: executing program 2 (id=3205): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0xa2, 0x4) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e00)=ANY=[@ANYBLOB="20000000421c5ddb9cd5a70077b3dcda86949f998ad652e25d16aa78d3ae3c7f395b73676c0663e926c34c5e58d51f5c28fc8347eceb71aaf150c3c8c311c2c763e32ae0ff8cc58abe344031dafc7547c2db89bd143bdf8d0bbc38c07e1e43de1a782c0e0ec1579cce1318613cfaa6535562", @ANYRES16=r8, @ANYBLOB="010080000000fedbdf250f002d000c0007800800020007000000"], 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, 0x0, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @private1}, 0x1c) recvmmsg(r9, 0x0, 0x0, 0x40010002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 18.153178726s ago: executing program 9 (id=3206): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000070000000700002c"], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000031fc6fe949eca8b0c0000f1c5ccc51ca8bf348843e8301db0d3216962daf696394eefc0908cc0d2e4a055e8e828ec8990b6539d6d99366afd03d961dacc10a76f69d0b251aee4d5c9ebc9e670785f6ebc759bd9d83960c0e847ebf37515d12eaa6c1a4d467d51ec25faec3f3aafdaec848f57952e69dcbb149780181c40a52f335bff2cd2dcc74d80184b4200cc34ffb1fe1a9b850668eaf7a4a40c365f"], &(0x7f00000003c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000580)=""/209, 0x40f00, 0x219f4a965fdacbde, '\x00', 0x0, 0x0, r6}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r7, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9a, 0x5, 0x0, 0x21011, r2, 0x4, '\x00', 0x0, r6, 0x1, 0x1, 0x3, 0xc}, 0x50) socket$alg(0x26, 0x5, 0x0) 17.828229805s ago: executing program 9 (id=3207): syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000086dd600fe10400183a0000000000000000000000ffffac141433ff02000000000000000000000000bb018400907800060800ff020000000000000000000000000001"], 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003e80)=ANY=[], 0x10b8}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x68) close(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8811) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = socket(0x2, 0x80805, 0x22) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xd}, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x18, &(0x7f0000000800)={r5, 0x1, 0x6}, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @local, 0x4000101}, 0x1c) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f00000004c0)) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xc}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendto$packet(r3, &(0x7f0000000040)="02030007ffff0000000045", 0xb, 0x4000011, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0xc, 0x8, 0x8, 0x200, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r8 = socket(0x1e, 0x4, 0x0) sendmmsg(r8, &(0x7f0000001980)=[{{&(0x7f00000001c0)=@generic={0x1e, "80279403106ee61e8d503c106c2b20cc2e4a98c7e0b8336a1b3f521f90b7c7e912e4ae1d3f4810a75d249dc6e6ff5c77a232260bfb54b7a10f503cb7189100a5d683ef90b2d498e9567805f8aa14a61365c8c26cb1350c9dc5638fce2f1bc5d5b8b96c6b73cd35709f0aac81541644bf291a7f29d2bc9d6a7e912b333f55"}, 0x80, 0x0}}], 0x1, 0x9200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0xd, 0x8001, 0xbc}, 0x10, 0x1c2d1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x67a}, 0x94) 17.761485852s ago: executing program 2 (id=3208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000400000006001800ffff0000"], 0x44}}, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x62040200) (async) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0xa, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) (async) splice(r2, 0x0, r8, 0x0, 0x80, 0x4) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$phonet_pipe(r9, 0x0, 0x0, 0x80800) (async) read(r2, &(0x7f0000000240)=""/233, 0xe9) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$rxrpc(r7, &(0x7f0000000680)="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", 0x132, 0x95, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}}) (async) write(r5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r11, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 17.42131433s ago: executing program 9 (id=3209): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000240)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async) sendmsg$DCCPDIAG_GETSOCK(r4, 0x0, 0xc855) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) unshare(0xc000000) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r7, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28) 15.728479066s ago: executing program 4 (id=3192): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x12bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_route={{0xa}, {0x128c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xe0}, @TCA_ROUTE4_POLICE={0xc44, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0x0, 0xf4, 0x1, 0x7fffffff, 0x6, 0x3, 0x7, 0xfffffeff, 0x7fff, 0xa0e5, 0x8000, 0x0, 0xebcafed, 0x6, 0x8, 0x4, 0x9, 0x3, 0xd, 0x1, 0x9, 0x9, 0xfffffff7, 0xf6, 0xfffffffd, 0x5, 0x40, 0x1, 0xff, 0x58, 0x3, 0x6, 0x89, 0x4, 0x5, 0x5, 0x20006, 0x6, 0x7, 0x5, 0x3, 0x6, 0x3200000, 0x5, 0x1, 0x0, 0x5, 0xf1a, 0x2, 0x4, 0x67f, 0xfffffff9, 0x8, 0x4, 0x1000, 0x1c, 0x0, 0x5, 0x6, 0x7, 0x100, 0x5679, 0xa4, 0x7, 0x2, 0x5, 0xcce3, 0x8000, 0x4, 0x3, 0x4, 0x5, 0xffff, 0xd, 0xb, 0x7, 0xd, 0x4, 0x0, 0x7, 0xfff, 0x4, 0x6, 0xf, 0x5, 0x475, 0x7, 0x81, 0xc41, 0x4d, 0x5, 0x401, 0x4, 0x0, 0xe85c, 0xffff, 0x6, 0x0, 0x200, 0x0, 0xa, 0x1c55, 0xaff4, 0x732, 0x5, 0x1, 0x2, 0xa, 0x4, 0x0, 0xef, 0x80, 0xf, 0x9, 0x5, 0x9, 0xfffffffc, 0x92f, 0xffffff7f, 0x2, 0xa32, 0x2, 0x6, 0x101, 0x9, 0x3, 0x1, 0x8, 0x6, 0x4, 0x1, 0x8001, 0x101, 0xca, 0x0, 0x508, 0x1, 0xb, 0x8, 0x101, 0x400, 0x9, 0x7, 0x1, 0x3, 0x7, 0xb, 0x2, 0x9, 0x4, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x3, 0x9, 0x7, 0x3, 0x1, 0x5, 0x6, 0x7a70, 0x80000000, 0x0, 0x0, 0x5, 0x4, 0x2, 0x5, 0x3, 0x1, 0x10, 0xa3, 0x5, 0x1ff, 0x2, 0x40, 0x80, 0x4, 0x8, 0xc3, 0x0, 0x1, 0x94, 0x4169, 0x7, 0x3, 0x4cbc, 0xe, 0x7fff, 0x0, 0xa4, 0x0, 0xd, 0x4, 0x1000, 0x1, 0x2, 0x6a13, 0x7b9d, 0x8, 0x9, 0x0, 0x6, 0x20000002, 0x2, 0x1, 0x2, 0x8001, 0x3, 0x8, 0x5, 0x4, 0xfffffff9, 0x630, 0x8, 0x3, 0x621a, 0xd6bc, 0x0, 0x0, 0x1, 0x898, 0x4, 0x8, 0x3, 0x8, 0xe, 0x0, 0x5, 0x4, 0x1000, 0x2, 0x6, 0xa, 0x2, 0x3, 0x7, 0x32f, 0x1, 0x9, 0x2, 0x1, 0x2, 0x0, 0x10001, 0x400, 0x8, 0x2, 0x5, 0x0, 0x800]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x6, 0x8d9, 0x2, 0x4, 0x7ff, 0x6, 0x9, 0x5, 0x6, 0x3, 0xb6, 0x2, 0x1, 0x3, 0x80000000, 0x4, 0x1000, 0x5, 0x8, 0x8, 0x6, 0x7, 0x1, 0xafef, 0x4, 0x661, 0x2, 0x8, 0xfffffffb, 0x6, 0x2, 0x40, 0x4, 0x4, 0x6, 0xfffffeff, 0x6, 0x80000000, 0x6, 0x1, 0x100, 0x4, 0x7ff, 0x3, 0x3, 0x1, 0x7ff, 0xfff, 0x3, 0x5, 0x0, 0x8, 0xb, 0x5, 0x9, 0x5, 0x7, 0x5, 0x5, 0x7fffffff, 0x9, 0x1ff, 0x65e, 0x80000000, 0x7b4, 0x74, 0xd0000000, 0x1, 0x2, 0xca, 0x3, 0x8, 0x0, 0x401, 0xfffff800, 0xb9, 0x5, 0x3, 0xf, 0x5, 0xa, 0x8, 0xffffffff, 0xd1, 0x8, 0x3ff, 0xc411, 0x6, 0x7ff, 0x0, 0x8001, 0x779b77ed, 0x1d, 0x7f, 0x3, 0xc, 0x5, 0x6, 0x58e3, 0x5, 0x2, 0x26b77658, 0x4, 0x9, 0x3, 0xb3, 0x5, 0xfffffff3, 0x3, 0x1, 0x1, 0x0, 0x9, 0x61fb, 0x6, 0x0, 0xc, 0x0, 0x8, 0x77, 0x101, 0x9, 0x1553, 0x9, 0x6, 0x7ff, 0xfffffffc, 0xd, 0x0, 0x3ff, 0x3ff, 0x9, 0xfff, 0x0, 0x9, 0x4, 0x1, 0x40, 0x81, 0x8, 0x0, 0x5, 0x8, 0x8, 0x1, 0x7, 0xfffffff9, 0x7fffffff, 0x6, 0x2, 0x7, 0x4, 0xff, 0x80000000, 0xb, 0x1, 0xfffffffd, 0x10, 0x8001, 0x6ed8, 0x0, 0x81, 0x0, 0xb, 0x2, 0x3, 0xfe65, 0x1ff, 0xe7, 0x6, 0x4, 0x9, 0x6, 0x0, 0x10, 0x4, 0x5, 0x1ec60000, 0x6, 0x6, 0x9, 0x3, 0x5f9aade1, 0x2545, 0x3, 0x6, 0x6, 0xe7, 0x5d5, 0x5, 0xd, 0x6, 0xd25, 0x7f, 0x7, 0x1, 0x507, 0x800, 0x6000, 0x2, 0x9, 0x0, 0x7, 0x1, 0x9, 0x0, 0x1, 0x1, 0x1ff, 0x1575, 0x0, 0x2058, 0x5, 0xb875, 0x5, 0x8, 0x2, 0x80000000, 0x0, 0x0, 0x7fffffff, 0x641, 0x4, 0x9, 0x5, 0x759e, 0x4, 0x2, 0x8, 0x2f, 0x1, 0xfffffffe, 0x0, 0x2, 0x8000, 0x1, 0x2, 0xf, 0x1, 0x8, 0x5, 0x5, 0x1, 0x8, 0x6, 0x0, 0x9, 0x6, 0x30f, 0x8000, 0x6, 0x8, 0x4, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x14, 0xd, 0x10, 0x9, 0xc6, 0x1, 0xc, 0x3b8, 0x9, 0x3, 0x8, 0x6, 0x3, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x4, 0x7, 0x7, 0x9, 0x80000000, 0x5ade, 0xe26, 0x5, 0x8, 0x7, 0xfffffffd, 0xd2, 0x5, 0x7, 0x7, 0x9, 0x8000, 0x3, 0x2, 0xf, 0x1, 0x89ea, 0x7, 0x3, 0x3, 0x200, 0xfffffff7, 0x0, 0x6, 0x1, 0x1, 0x8, 0xfffffffa, 0x3, 0x8, 0xd, 0x8, 0x7fff, 0x8, 0xc, 0x1f, 0x8, 0x8f, 0xa, 0x7, 0x0, 0x17a, 0xd, 0xf, 0x9, 0x7d70, 0x9, 0x8c74, 0x4, 0x3, 0x4, 0x2f9, 0xb, 0x8, 0x7, 0x4, 0x1, 0x3, 0x4, 0xffff, 0x9468, 0x80000001, 0x8045, 0x521d, 0x5, 0x10001, 0x5, 0x6, 0x45, 0xe, 0x8, 0x4b0e, 0x6, 0x4, 0x5, 0x0, 0x4, 0x2, 0x9, 0x5, 0x6, 0x6, 0xa2, 0x3, 0xc, 0x9, 0x0, 0x8d7, 0x5, 0x1, 0xa, 0xd0, 0x6, 0x1, 0x2, 0xb, 0x8, 0x7, 0x7fffffff, 0x1, 0x4, 0x2, 0xab, 0x3, 0xffffff71, 0x9, 0xa4f, 0xff, 0x2f, 0x10, 0x70d6, 0x7ff, 0x5, 0x9, 0xb, 0xfffffffb, 0x1000, 0x6, 0x400, 0x90db, 0x7fff, 0x2, 0x6, 0x0, 0x4, 0x5, 0x685e, 0x1, 0x80000000, 0xad, 0x7c, 0xfffffffd, 0x3, 0x2b0, 0x2, 0x5cf2, 0x0, 0x7, 0x4, 0x2, 0x7, 0x9, 0x8, 0xf0d6, 0x5, 0x10001, 0x2, 0xa, 0x9, 0x0, 0xc, 0x9, 0x3, 0x200, 0xc, 0x7fffffff, 0x8001, 0x10, 0x53, 0x44b0, 0x2, 0x3, 0x739, 0x1, 0x7, 0xb60a, 0xfff, 0x7, 0x7ff, 0x0, 0xff, 0x242, 0x8, 0xc, 0x0, 0x5, 0x5, 0x0, 0x3, 0x5, 0xfc, 0x5, 0x6, 0x8001, 0x6, 0x7f, 0x8f, 0x0, 0x1000, 0x179, 0xe9, 0x8, 0x5, 0x10001, 0x9, 0x3, 0x3, 0x10000, 0x1000, 0x6, 0x1, 0xd9, 0x5def2a56, 0xfffffffe, 0x4, 0xe18, 0x8, 0x9, 0x8, 0x3, 0x80, 0x7, 0x100, 0x6, 0xa0, 0x8, 0x1, 0xd, 0x3, 0x5, 0x1ff, 0x10000, 0xdc55, 0x0, 0x6, 0x5, 0x9, 0x9, 0x8, 0x0, 0xb206, 0x6]}]}, @TCA_ROUTE4_ACT={0x214, 0x6, [@m_nat={0x11c, 0x1d, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x0, 0xffffffffffffffff, 0x5, 0x3}, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x2, 0x10000000, 0x7, 0x4}, @private=0xa010100, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1ff, 0x20000003, 0x1, 0x401}, @broadcast, @empty, 0xff0000ff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x8, 0x7, 0x30000000, 0x1}, @remote, @private=0xa010102, 0x0, 0x7}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe75, 0x27, 0x0, 0x8, 0x9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffc0000, 0x6, 0x3, 0x109f21e9, 0x5}, @rand_addr=0x64010101, @remote}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x19}, @TCA_MPLS_PROTO={0x6, 0x4, 0x884c}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0xb0, 0x6, "1e4fe398690ab048727cd228d3d8c0c203391ed08deffb4f79855c9a0a6cb608c16f5401b18d53681dd2ebd58c73cbe2846e32bf07a212d9611ad26588b99a422a778af2506c7fe42a2875c5b82539a7134c2bb1bf2eecc49e5c8d17a191de794affdba2555e1646a3df1c9b8a1cda664cbbbe59878490dd285320d5ae5811107a91c82d5d9d23591a3c2a2077da6db0534000d8b654c87eef429e7821d0eccb3e69458e0177e85bb17b4468"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_POLICE={0x428, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xac, 0x2, 0x8, 0x5, 0x1, 0x5, 0xbf, 0x4, 0xe0, 0x8, 0x7fffffff, 0x28, 0x0, 0x1, 0xa2dc, 0x200, 0x6, 0x1ff, 0x2, 0x8, 0x3, 0xff, 0xffff69cc, 0x10, 0x96cb, 0x3645, 0xd6a, 0x40000, 0x7f, 0x0, 0x7, 0xbddb, 0x200, 0x4, 0x6, 0x1, 0x7, 0x0, 0x800, 0x9, 0xffffffff, 0x6, 0x3461, 0x4, 0x6, 0x8, 0x4, 0x9, 0xae88, 0x81, 0x4, 0x10001, 0x5, 0x7, 0x3, 0xcf90, 0xa, 0x1, 0xfffff330, 0x4, 0x0, 0x8, 0xe02, 0x804, 0x7, 0x3, 0xc, 0x9, 0x1a3a600, 0x101, 0x3, 0x4, 0x6, 0x5, 0x5, 0x10, 0xca, 0x8001, 0x81, 0xe, 0x6, 0x80000000, 0x4, 0x8000, 0x9, 0x1, 0x9, 0x0, 0x7, 0x8, 0x9c9a, 0x4, 0xfffffffd, 0x0, 0x7, 0x0, 0x9, 0x30ab9057, 0x5, 0x9, 0x9, 0x3, 0x1, 0x8, 0x7, 0x5, 0xa00000, 0x8, 0x6, 0x3, 0x3, 0x56, 0x200, 0x3, 0x4, 0x4, 0x857, 0x101, 0x80000000, 0xfffffff7, 0x2, 0x8, 0x8, 0x7, 0x5, 0x1, 0x56, 0x0, 0x0, 0x1000, 0x3, 0x7, 0x1, 0x6, 0x7, 0x6, 0x1b, 0x1, 0x4, 0x40, 0x3, 0x0, 0x9, 0x3, 0xc, 0x10000, 0x9, 0x1, 0x7, 0x7fffffff, 0x1, 0xc, 0x7fffffff, 0x8000, 0x2, 0x6, 0x31, 0x7ed3, 0x2, 0x1, 0x7, 0xbf5, 0x2, 0xe70, 0x2, 0x0, 0x1, 0xfffffffb, 0x800000, 0x662, 0x3, 0x2, 0x80000001, 0x2, 0x4, 0x9, 0x101, 0x7, 0x50, 0x1000, 0x4, 0x22d, 0x6, 0x7fff, 0x7, 0x300, 0x4, 0x3, 0x44095353, 0x8000, 0x0, 0x1, 0x3, 0x6, 0x8, 0x3, 0x2, 0x7, 0x0, 0x8, 0xb, 0x7, 0x7, 0xa0, 0x2, 0x401, 0x10001, 0x40, 0xb1c, 0x6, 0x2, 0x8, 0x8, 0x6, 0x51, 0x6, 0x1, 0xe6a, 0x7fff, 0x101, 0xb, 0x1, 0xc, 0x7, 0xc1, 0x472, 0x9f, 0x6, 0x3, 0x7, 0xa, 0x4, 0x3, 0x1000, 0x8, 0xff, 0x6ebb, 0x5, 0x7f, 0x80, 0x0, 0x3, 0x8000, 0xd, 0x10, 0x7, 0x5, 0x0, 0x8, 0xffff1380, 0x10, 0x100, 0x1, 0x8, 0xd]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb5c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff9}]}]}}]}, 0x12bc}}, 0x0) 15.636767999s ago: executing program 4 (id=3210): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0xa, 0xfffffffe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000300)="567abfafe8fb68a8c94c60b2798b6644c950fb57481952fd5378ea4f1bf567ba36e6ac3719762e806a5e56b27f47339a94de6df9f51b9e109f000494ad5817b795c585d0d510de570070f77b", 0x4c}, {&(0x7f00000008c0)="6c433eac5f9abd4ac3192a7beb1bc5c21427555a524fb814821dfd6f254656f6294a62e766c576e8252d17c5e81b796bdabec3a8e86b9d0652a38812d4438088423af6014923285866661a3507d43a41d81a722ffea4e30cda56963a6b6834ac2683f15842d7c595dc9cca5a5dd6627c647de572898d2a37cf56ef32ababf8bbaefed201d866b9ad1f03fdbbdf36a0e2265a671cecb3721fc938b59b73ce949fb8467ea9f886c6ea753820e59f9415d63b7a7093107e5b653bc67e65cf7e2776681cf5f1d9da11f66de4973ef39dec3f5303b84ee048c8a5c58ff06e05409bdc505bdf466ebcadc63f3efb63f9127b0ffad9d9389ee0708a7489a67d8e62a870edcb673924d464ff014b01789d519e666a8a415dbb8e4f875ea2afe8827d7a06", 0x120}], 0x3, 0x408, 0x80) sendfile(r2, r3, 0x0, 0xf03a000d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0304907800000000450000000000000000010000ac141400ac1414aa07130000000000000000000000000000000000440c00037f00000100000000890f0000000000ffffffffffffffff444c0001ac1e00010000010000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff00000000440400000000"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r1, @ANYRESDEC=r6], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r7}, 0x18) unshare(0x64000600) r8 = socket$inet6(0x10, 0x2, 0x0) write(r8, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) 9.074604748s ago: executing program 49 (id=3190): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8000000008) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4004014}, 0x40000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x8, 0x3, 0x2, 0x0, 0x100001, 0x2}}) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x180000000) 6.571220344s ago: executing program 50 (id=3197): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0xffffffff, 0x0, [0x0, 0x5, 0x0, 0x0, 0x0, 0x200000], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0x78) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 5.405767885s ago: executing program 0 (id=3211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r2, 0x0, 0x1) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x5) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x43, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 5.281887067s ago: executing program 0 (id=3213): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000008694cdd897c654fe57474810d9b82b6b0d00424378e11ca18dcf214a689144e25a595dc2e5c0bec08a5aba2cc106b205fe2d6b6ff83f6aa39f46be61017eaba048c0b88b2e6f7239dc3ae4f6f1f9f6bebcde5992a31b829e6f9d5f10cb54f708112f0b01e05b7d454047bc12ac87d20435e9851b3985c89923f1eca8ec7b1285884408de911fbadee0521598f30a5bac2cf756d92c628e8dcba580a7592b370b40ea370d105cb1c8ec0fb8921f89252d1f63c5005f03db838d67afc470b415121cf1235751bb0445babfde4025b0a626bdc1a36851d033594d7310cae0426e3528b0e9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESHEX=0x0, @ANYRES32, @ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000380)="91b242fc6fc79b30d0af8f2ac309cef928f9bf520d6eb0208e07dcd2a7a7aee0fdf94d2dc4fe5b54e600d84c136b75ac3ea44e10a2386b6451812889f71ad83804d7d079832df82343b824adc91e7622db4403cdb2682d1b2f1b380957004bc823c6725bfce340a1360a4cd50ea289d3565aa11ce16b76c8f3448cca7acb125433ea0a39e1ea5f1b5542a9e58bcc93aa370d25e2cb80608608f23c95c40ad398fdca9df964ebd4f67278c961607aa20b4b28da0b22761ad0217f8f78bf8026d74ea4587a8bc2d38a523eb149cb2223469255b8", &(0x7f0000000200)=""/111}, 0x20) 5.09068238s ago: executing program 0 (id=3214): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x22020400) r2 = socket(0x1e, 0x4, 0x0) bind$bt_hci(r2, &(0x7f0000000040), 0x6) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4800001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0x6}, {0x1, 0x10}, {0xfff2, 0x3}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1, 0xcc60, 0x5a, 0x7, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0x5, 0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c60d", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0xc4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc800) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x0) poll(&(0x7f0000000040)=[{r6, 0x2124}, {r6, 0xb0c4}], 0x2, 0x11ff) shutdown(r6, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r3, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2000000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0) 4.077097586s ago: executing program 0 (id=3215): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xf, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x6) listen(r7, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x27, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 2.124241086s ago: executing program 51 (id=3209): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000240)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async) sendmsg$DCCPDIAG_GETSOCK(r4, 0x0, 0xc855) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) unshare(0xc000000) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r7, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28) 2.075644071s ago: executing program 52 (id=3208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000400000006001800ffff0000"], 0x44}}, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x62040200) (async) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0xa, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) (async) splice(r2, 0x0, r8, 0x0, 0x80, 0x4) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$phonet_pipe(r9, 0x0, 0x0, 0x80800) (async) read(r2, &(0x7f0000000240)=""/233, 0xe9) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$rxrpc(r7, &(0x7f0000000680)="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", 0x132, 0x95, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}}) (async) write(r5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r1, 0x0, 0x3}, 0x18) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r11, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.070575281s ago: executing program 1 (id=3212): socketpair(0x1, 0x80000, 0xfffff45a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x7, 0x8000, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x65, 0x0, 0x81, 0x2f, 0x0, @loopback, @empty, {[@noop, @timestamp_prespec={0x44, 0xc, 0x12, 0x3, 0x9, [{@loopback, 0x24}]}]}}}}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x41}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x61}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20004841) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) 1.906538361s ago: executing program 1 (id=3218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000004c0)=0x1ff) splice(r6, 0x0, r5, 0x0, 0x7ffff041, 0x1200000000000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd70000000000067db000008", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x34}}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8811) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x56, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118"], 0x40}, 0x20040810) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000500), &(0x7f0000000540)=0x4) r10 = socket$kcm(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000580)=0x1, 0x4) 1.605348924s ago: executing program 1 (id=3219): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0x1, 0x6, 0x6}) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000480)=@in6={0xa, 0x4e22, 0x7ff, @empty, 0x9}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)="3f04ca472eba2d1646cfa3e948d20c7db8a6e021d766c2c3288664f855bf6f19833000b29f3aa70484532c2d8617d01a2cb849b3379cb1331259e385787ca1e285bf8d8d1439a19ca5ed9b463428c5bc4c30da0ef6e8f024167bd81bc3939b04ed99ab2a", 0x64}, {&(0x7f0000000580)="595349d81eb2273a4473de7a7923baa6e87205ff7cd18165afd305d262d7c2359c29a70e20a5eb01f68b95e2769cba520d7eec85c567b1b413dcb39eb3e70c6dc3cd3b779f672dedfe4d51e764111e4b41f9c2b1f7e0531b35c13fd329fab1bc47e1f9e3c09b11a9bd7991fbeb2edf8b108ab52046e43bdd7cb5148445097a96f01bb2a93fe2de136be96ccc267a797cdf8c5dcbd3e57045d15fbdae910fbd4779eb0acda43b66f37df3dbcc26f54439579e73e12d483eccd5763bf039566fc1c77cf9d9f41c46cab4714c8c1cb0cf446b45e392f739a2f04f3424", 0xdb}, {&(0x7f0000000680)="f8ef1fd10c2517c1ded26e3b9b8808", 0xf}, {&(0x7f00000006c0)="c2e2a3d9ab7cf57b211490c2cecbd61ab8", 0x11}], 0x4}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x210, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xff], 'caif0\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x6, 0x7}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@loopback, [0xff, 0x0, 0xffffffff, 0xffffffff], 0x4e22, 0x3a, 0x5, 0x4e20, 0x4}}, @common=@hl={{0x28}, {0x1, 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 1.411783161s ago: executing program 1 (id=3220): r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000001f00010000000000000000000019feffffff00000000000000000000000000000000000000000000000000000000080000000000000089fa5e6602df53a7feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000040c0000002000018008000300020000001400020076657468315f746f5f7465616d0000001400038004000500040004000800", @ANYRES64=r6], 0x48}}, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) 355.633472ms ago: executing program 53 (id=3210): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0xa, 0xfffffffe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000300)="567abfafe8fb68a8c94c60b2798b6644c950fb57481952fd5378ea4f1bf567ba36e6ac3719762e806a5e56b27f47339a94de6df9f51b9e109f000494ad5817b795c585d0d510de570070f77b", 0x4c}, {&(0x7f00000008c0)="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", 0x120}], 0x3, 0x408, 0x80) sendfile(r2, r3, 0x0, 0xf03a000d) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078ac1e0001ac1414aa0304907800000000450000000000000000010000ac141400ac1414aa07130000000000000000000000000000000000440c00037f00000100000000890f0000000000ffffffffffffffff444c0001ac1e00010000010000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff00000000440400000000"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r1, @ANYRESDEC=r6], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r7}, 0x18) unshare(0x64000600) r8 = socket$inet6(0x10, 0x2, 0x0) write(r8, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) 257.374505ms ago: executing program 1 (id=3222): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x80, 0x702, 0x3, 0x6, {{0x24, 0x4, 0x3, 0x0, 0x90, 0x62, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0xf, 0xe3, [@private=0xa010101, @multicast1, @private=0xa010102]}, @generic={0x42, 0x2}, @generic={0x83, 0x8, "5dd9a0986635"}, @timestamp_addr={0x44, 0x2c, 0xd9, 0x1, 0xa, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4ff}]}, @ssrr={0x89, 0x17, 0xa8, [@remote, @multicast1, @empty, @empty, @remote]}, @noop, @timestamp_prespec={0x44, 0x14, 0xb1, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2fd}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x2}]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x5, [0xa4]}]}}}}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r8 = socket(0xa, 0x5, 0x7ffffffc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)="c123bd1f9ca8e8f4f0e759ef51128bdf16c9f372ccbb0615c0f71bd6d1fb1d1a9b09f1e42edeedd39fcbb8b6292da6eb7c7f7b357e4fe9"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000020000000000", @ANYRES32], 0x50) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000004900010026bd7000fbdbdf250a008000", @ANYRES32, @ANYBLOB="df530000140001"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x8080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100), 0x0, 0x2}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0xfee0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000fc0200000a000000000000000000000000000000000000010a0040009260878f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000200000000000000000000000000000100"/112], 0xb8}}, 0x0) 0s ago: executing program 1 (id=3223): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2c, 0xa, 0x5) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000047c0)=r2, 0x4) (async) write(r1, &(0x7f00000000c0)="240000005a001f021007f4f9002304000a04", 0x12) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) (async) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x1f, &(0x7f0000000140), 0x18, 0x44000}], 0x1, 0x40800) (async) recvmsg(r3, 0x0, 0x0) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000052c0)={'filter\x00', 0x0, 0x0, 0x0, [0x9573, 0x1, 0x3, 0x6, 0x200004054a, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) (rerun: 32) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f00000002c0)={'full', 0x20, 0x28a, 0x20, 0x5}, 0x11) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) poll(0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): tdevsim7 netdevsim3: renamed from eth3 [ 354.643502][T15882] veth1_macvtap: entered promiscuous mode [ 354.654790][T15890] veth0_macvtap: entered promiscuous mode [ 354.699929][T15890] veth1_macvtap: entered promiscuous mode [ 354.765644][T15882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.790134][T15890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.810651][T15882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.820164][ T51] Bluetooth: hci5: command tx timeout [ 354.854912][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.879310][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.905752][T15890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.926391][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.937457][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.978669][ T51] Bluetooth: hci6: command tx timeout [ 355.037382][ T6619] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.120327][ T6619] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.177252][ T6619] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.193381][ T6619] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.263357][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.284900][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.323207][T15958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.427243][ T6616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.434476][T15958] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.436179][ T6616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.468049][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.492653][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.499887][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.508852][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.571385][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.578626][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.690913][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.728556][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.881216][T16031] bridge0: entered promiscuous mode [ 355.886952][T16031] vlan2: entered promiscuous mode [ 355.967467][T16034] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 355.985000][T16034] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2678'. [ 356.246233][T15958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.419009][ T51] Bluetooth: hci7: command tx timeout [ 356.715310][T16065] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2711'. [ 356.898741][ T51] Bluetooth: hci5: command tx timeout [ 357.048266][T15958] veth0_vlan: entered promiscuous mode [ 357.058290][ T51] Bluetooth: hci6: command tx timeout [ 357.072885][T16082] lo speed is unknown, defaulting to 1000 [ 357.087224][T15958] veth1_vlan: entered promiscuous mode [ 357.139042][T15958] veth0_macvtap: entered promiscuous mode [ 357.160423][T15958] veth1_macvtap: entered promiscuous mode [ 357.192998][T15958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.213392][T15958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.300159][ T6619] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.313733][ T6619] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.328170][T16085] lo speed is unknown, defaulting to 1000 [ 357.335075][ T6619] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.387710][ T6619] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.540708][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.556514][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.713473][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.746216][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.498786][ T51] Bluetooth: hci7: command tx timeout [ 358.598274][ T5167] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 358.625220][ T5167] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 358.638611][ T5167] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 358.646751][ T5167] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 358.654550][ T5167] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 358.736233][T16101] lo speed is unknown, defaulting to 1000 [ 358.764023][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2724'. [ 358.948169][T16110] netlink: 696 bytes leftover after parsing attributes in process `syz.7.2725'. [ 358.962343][T16110] openvswitch: netlink: Flow key attr not present in new flow. [ 359.105100][T16116] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2727'. [ 359.115080][T16117] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2727'. [ 359.293398][T16101] chnl_net:caif_netlink_parms(): no params data found [ 359.393392][T16130] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2729'. [ 359.424090][T16101] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.432591][T16101] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.441386][T16101] bridge_slave_0: entered allmulticast mode [ 359.449831][T16101] bridge_slave_0: entered promiscuous mode [ 359.461359][T16101] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.469542][T16101] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.476808][T16101] bridge_slave_1: entered allmulticast mode [ 359.485316][T16101] bridge_slave_1: entered promiscuous mode [ 359.566388][T16101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.590372][T16101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.592342][T16137] IPv6: addrconf: prefix option has invalid lifetime [ 359.615064][T16137] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2731'. [ 359.626467][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2731'. [ 359.653533][T16101] team0: Port device team_slave_0 added [ 359.663115][T16101] team0: Port device team_slave_1 added [ 359.725584][T16101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.735581][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.764200][T16101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.786066][T16101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.794506][T16101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.827117][T16101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.984894][T16101] hsr_slave_0: entered promiscuous mode [ 359.995922][T16101] hsr_slave_1: entered promiscuous mode [ 360.005978][T16101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.037817][T16101] Cannot create hsr debugfs directory [ 360.209603][T16148] Unsupported ieee802154 address type: 0 [ 360.328414][ T5167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.341257][ T5167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.349712][ T5167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.362743][T16101] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 360.376828][ T5167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.393214][ T5167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.463167][T16101] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 360.481113][T16149] lo speed is unknown, defaulting to 1000 [ 360.535185][T16101] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 360.578233][ T51] Bluetooth: hci7: command tx timeout [ 360.615353][T16101] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 360.748090][ T51] Bluetooth: hci8: command tx timeout [ 360.833100][T16101] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.845157][T16101] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.859023][T16101] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.882547][T16101] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.084130][T16149] chnl_net:caif_netlink_parms(): no params data found [ 361.115422][T16161] lo speed is unknown, defaulting to 1000 [ 361.297413][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.316490][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.337761][T16149] bridge_slave_0: entered allmulticast mode [ 361.346004][T16149] bridge_slave_0: entered promiscuous mode [ 361.363574][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.382100][T16149] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.390672][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.398708][T16149] bridge_slave_1: entered allmulticast mode [ 361.405840][T16149] bridge_slave_1: entered promiscuous mode [ 361.474026][T16149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.512828][T16149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.610547][T16149] team0: Port device team_slave_0 added [ 361.626665][T16149] team0: Port device team_slave_1 added [ 361.655751][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.681875][T16149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.690130][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.716754][T16149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.730547][T16149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.737511][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.764107][T16149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.784626][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.791814][ T6619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.816472][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.823676][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.879502][T16149] hsr_slave_0: entered promiscuous mode [ 361.886147][T16149] hsr_slave_1: entered promiscuous mode [ 361.895782][T16149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.903505][T16149] Cannot create hsr debugfs directory [ 362.183941][T16149] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 362.200076][T16149] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 362.242015][T16149] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 362.259686][T16149] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 362.340295][T16101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.432449][T16101] veth0_vlan: entered promiscuous mode [ 362.450180][T16149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.470027][T16101] veth1_vlan: entered promiscuous mode [ 362.489145][T16149] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.499800][ T51] Bluetooth: hci1: command tx timeout [ 362.512844][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.520023][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.543472][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.550675][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.586728][T16101] veth0_macvtap: entered promiscuous mode [ 362.599966][T16101] veth1_macvtap: entered promiscuous mode [ 362.630569][T16101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.659417][ T51] Bluetooth: hci7: command tx timeout [ 362.673657][T16101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.722936][ T1035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.733233][ T1035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.760492][ T1035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.771094][ T1035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.819193][ T51] Bluetooth: hci8: command tx timeout [ 362.880843][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.906420][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.950037][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.965727][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.077078][T16149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.114023][T16183] lo speed is unknown, defaulting to 1000 [ 363.438577][T16149] veth0_vlan: entered promiscuous mode [ 363.464351][T16149] veth1_vlan: entered promiscuous mode [ 363.584745][T16149] veth0_macvtap: entered promiscuous mode [ 363.605468][T16149] veth1_macvtap: entered promiscuous mode [ 363.627118][T16149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.652230][T16149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.672918][ T6616] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.685460][ T6616] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.695434][ T6616] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.707027][ T6616] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.790412][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.805324][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.844644][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.853381][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.032642][T16197] lo speed is unknown, defaulting to 1000 [ 364.444595][T16206] dummy0: entered promiscuous mode [ 364.480507][T16209] dummy0: left promiscuous mode [ 364.578852][ T51] Bluetooth: hci1: command tx timeout [ 364.898368][ T51] Bluetooth: hci8: command tx timeout [ 365.534072][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2744'. [ 365.544763][T16224] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2744'. [ 365.595818][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2745'. [ 365.751868][T16234] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2747'. [ 365.871291][T16240] netlink: 840 bytes leftover after parsing attributes in process `syz.8.2749'. [ 365.922901][T16242] netlink: 'syz.8.2750': attribute type 10 has an invalid length. [ 365.936949][T16242] team0: Port device dummy0 added [ 365.944747][T16242] netlink: 'syz.8.2750': attribute type 10 has an invalid length. [ 365.960408][T16242] team0: Port device dummy0 removed [ 365.969531][T16242] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 366.658569][ T51] Bluetooth: hci1: command tx timeout [ 366.977876][ T51] Bluetooth: hci8: command tx timeout [ 367.242968][T16256] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.262823][ T9005] IPVS: starting estimator thread 0... [ 367.268920][T16256] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.335333][T16260] netlink: 'syz.8.2755': attribute type 1 has an invalid length. [ 367.345003][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2755'. [ 367.358106][T16258] IPVS: using max 29 ests per chain, 69600 per kthread [ 367.567038][ T30] audit: type=1800 audit(1752407074.541:6): pid=16263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2756" name="memory.events" dev="tmpfs" ino=115 res=0 errno=0 [ 367.682139][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2757'. [ 367.711662][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.722411][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.914644][T16266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.932843][T16266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.058990][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.075172][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.095281][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.105799][ T6524] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.306798][T16274] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2759'. [ 368.317278][T16274] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2759'. [ 368.743078][ T51] Bluetooth: hci1: command tx timeout [ 370.222541][T16310] tipc: Started in network mode [ 370.227415][T16310] tipc: Node identity a25e6da92fcb, cluster identity 4711 [ 370.235022][T16310] tipc: Enabled bearer , priority 0 [ 370.242901][T16311] syzkaller0: entered promiscuous mode [ 370.249995][T16311] syzkaller0: entered allmulticast mode [ 370.262927][T16310] tipc: Enabling of bearer rejected, already enabled [ 370.275590][T16310] tipc: Enabling of bearer rejected, already enabled [ 370.304712][T16310] tipc: Resetting bearer [ 370.332010][T16310] tipc: Disabling bearer [ 370.405714][T16315] lo speed is unknown, defaulting to 1000 [ 372.799791][ T5167] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 372.809743][ T5167] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 372.819603][ T5167] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 372.828519][ T5167] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 372.838142][ T5167] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 372.839453][ T5857] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 372.857079][ T5167] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 372.868844][ T5167] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 372.879672][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 372.889188][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 372.903334][T16326] lo speed is unknown, defaulting to 1000 [ 372.967232][T16328] lo speed is unknown, defaulting to 1000 [ 373.407221][T16326] chnl_net:caif_netlink_parms(): no params data found [ 373.591658][T16326] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.599058][T16326] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.606648][T16326] bridge_slave_0: entered allmulticast mode [ 373.614404][T16326] bridge_slave_0: entered promiscuous mode [ 373.628488][T16326] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.635620][T16326] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.643691][T16326] bridge_slave_1: entered allmulticast mode [ 373.651881][T16326] bridge_slave_1: entered promiscuous mode [ 373.732722][T16326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.747387][T16326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.808890][T16326] team0: Port device team_slave_0 added [ 373.818182][T16326] team0: Port device team_slave_1 added [ 373.856701][T16326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.864292][T16326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.892269][T16326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.914143][T16326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.921141][T16326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.947716][T16326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.959353][T16328] chnl_net:caif_netlink_parms(): no params data found [ 374.078168][T16326] hsr_slave_0: entered promiscuous mode [ 374.084917][T16326] hsr_slave_1: entered promiscuous mode [ 374.092062][T16326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.104532][T16326] Cannot create hsr debugfs directory [ 374.166544][T16328] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.174770][T16328] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.185154][T16328] bridge_slave_0: entered allmulticast mode [ 374.194605][T16328] bridge_slave_0: entered promiscuous mode [ 374.209514][T16328] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.218232][T16328] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.225794][T16328] bridge_slave_1: entered allmulticast mode [ 374.234862][T16328] bridge_slave_1: entered promiscuous mode [ 374.319927][T16328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.337513][T16328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.416019][T16328] team0: Port device team_slave_0 added [ 374.425938][T16328] team0: Port device team_slave_1 added [ 374.504140][T16326] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.525890][T16328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.533663][T16328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.560422][T16328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.574502][T16328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.592100][T16328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.618542][T16328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.635312][T16326] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.702568][T16328] hsr_slave_0: entered promiscuous mode [ 374.709497][T16328] hsr_slave_1: entered promiscuous mode [ 374.715913][T16328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.723729][T16328] Cannot create hsr debugfs directory [ 374.731446][T16326] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.801842][T16326] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.914177][ T5854] Bluetooth: hci9: command tx timeout [ 374.968149][T16326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.978518][ T5854] Bluetooth: hci10: command tx timeout [ 374.980602][T16326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.000948][T16326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.027362][T16326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.093336][T16328] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 375.107407][T16328] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 375.120571][T16328] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 375.145066][T16328] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 375.289772][T16326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.333830][T16326] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.351966][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.359144][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.380741][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.387992][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.417268][T16328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.439841][T16328] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.490711][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.497897][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.532978][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.540151][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.840771][T16326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.945013][T16326] veth0_vlan: entered promiscuous mode [ 375.955211][T16328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.972940][T16326] veth1_vlan: entered promiscuous mode [ 376.015699][T16326] veth0_macvtap: entered promiscuous mode [ 376.033812][T16326] veth1_macvtap: entered promiscuous mode [ 376.060696][T16326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.086647][T16326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.111562][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.131393][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.149767][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.166747][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.316442][ T6614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.342366][ T6614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.389089][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.397024][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.639360][T16328] veth0_vlan: entered promiscuous mode [ 376.672303][T16328] veth1_vlan: entered promiscuous mode [ 376.755778][T16328] veth0_macvtap: entered promiscuous mode [ 376.786542][T16328] veth1_macvtap: entered promiscuous mode [ 376.856899][T16328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.896028][T16328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.927077][ T6616] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.956370][ T6616] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.978277][ T5854] Bluetooth: hci9: command tx timeout [ 376.994543][ T6616] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.000558][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 377.009160][ T6616] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.014584][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 377.029037][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 377.037208][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 377.049360][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 377.059151][ T5854] Bluetooth: hci10: command tx timeout [ 377.166099][ T30] audit: type=1800 audit(1752407084.141:7): pid=16385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2770" name="memory.events" dev="tmpfs" ino=33 res=0 errno=0 [ 377.177369][T16382] lo speed is unknown, defaulting to 1000 [ 377.316417][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.340700][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.398629][T16389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2772'. [ 377.417264][ T6616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.439197][ T6616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.720009][T16398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.727263][T16398] IPv6: NLM_F_CREATE should be set when creating new route [ 377.772162][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'. [ 378.092863][T16398] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.100686][T16398] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.452375][T16398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.508626][T16398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.846565][ T5854] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 378.874898][ T5854] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 378.892134][ T5854] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 378.904747][ T5854] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 378.917231][ T5854] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 379.059779][ T51] Bluetooth: hci9: command tx timeout [ 379.138065][ T51] Bluetooth: hci11: command tx timeout [ 379.138555][ T5854] Bluetooth: hci10: command tx timeout [ 379.215152][ T1035] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.234968][ T1035] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.251353][T16410] netlink: 'syz.9.2777': attribute type 1 has an invalid length. [ 379.270550][ T1035] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.283013][T16382] chnl_net:caif_netlink_parms(): no params data found [ 379.319774][ T1035] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.452271][T16406] lo speed is unknown, defaulting to 1000 [ 379.738773][T16382] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.745930][T16382] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.776407][T16382] bridge_slave_0: entered allmulticast mode [ 379.797096][T16382] bridge_slave_0: entered promiscuous mode [ 379.820742][T16382] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.840937][T16382] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.858984][T16382] bridge_slave_1: entered allmulticast mode [ 379.875277][T16382] bridge_slave_1: entered promiscuous mode [ 379.940963][T16437] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2783'. [ 379.966969][T16382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.985974][T16439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.999625][T16382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.108503][T16382] team0: Port device team_slave_0 added [ 380.150689][T16382] team0: Port device team_slave_1 added [ 380.235513][T16440] lo speed is unknown, defaulting to 1000 [ 380.265239][T16382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.284636][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.316747][T16382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.374078][T16382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.388343][T16382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.430726][T16382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.509309][T16453] bridge0: port 3(gretap0) entered blocking state [ 380.516107][T16453] bridge0: port 3(gretap0) entered disabled state [ 380.523175][T16453] gretap0: entered allmulticast mode [ 380.533429][T16453] gretap0: entered promiscuous mode [ 380.696303][T16382] hsr_slave_0: entered promiscuous mode [ 380.713167][T16382] hsr_slave_1: entered promiscuous mode [ 380.723307][T16382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.733862][T16382] Cannot create hsr debugfs directory [ 380.740302][T16457] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 380.978590][ T5854] Bluetooth: hci12: command tx timeout [ 381.072484][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 381.106159][T16463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2791'. [ 381.147844][ T5854] Bluetooth: hci9: command tx timeout [ 381.164443][T16406] chnl_net:caif_netlink_parms(): no params data found [ 381.223970][ T5854] Bluetooth: hci10: command tx timeout [ 381.225201][ T51] Bluetooth: hci11: command tx timeout [ 381.270867][T16382] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.339502][T16382] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.415254][T16406] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.430131][T16406] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.440686][T16406] bridge_slave_0: entered allmulticast mode [ 381.452076][T16406] bridge_slave_0: entered promiscuous mode [ 381.462746][T16382] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.476535][T16406] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.484086][T16406] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.491681][T16406] bridge_slave_1: entered allmulticast mode [ 381.500095][T16406] bridge_slave_1: entered promiscuous mode [ 381.544113][T16382] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.569599][T16406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.583342][T16406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.630767][T16406] team0: Port device team_slave_0 added [ 381.641839][T16406] team0: Port device team_slave_1 added [ 381.733566][T16406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.740718][T16406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.769156][T16406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.802535][T16406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.809921][T16406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.836309][T16406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.912097][T16382] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 381.944817][T16406] hsr_slave_0: entered promiscuous mode [ 381.952616][T16406] hsr_slave_1: entered promiscuous mode [ 381.966168][T16406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.974057][T16406] Cannot create hsr debugfs directory [ 381.981357][T16382] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 382.016425][T16382] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 382.042620][T16382] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.356609][T16482] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2793'. [ 382.367459][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'. [ 382.398530][T16382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.446979][T16382] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.496920][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.504043][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.523359][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.530534][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.842589][T16406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 382.873421][T16406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 382.904109][T16406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.935676][T16406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.047405][T16382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.059576][ T51] Bluetooth: hci12: command tx timeout [ 383.165414][T16406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.220679][T16382] veth0_vlan: entered promiscuous mode [ 383.238861][T16406] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.264778][T16382] veth1_vlan: entered promiscuous mode [ 383.284236][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.291413][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.299558][ T51] Bluetooth: hci11: command tx timeout [ 383.314690][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.321915][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.445811][T16382] veth0_macvtap: entered promiscuous mode [ 383.471296][T16382] veth1_macvtap: entered promiscuous mode [ 383.532080][T16382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.572298][T16382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.603843][ T6524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.624091][ T6524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.646520][ T6524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.662576][ T6524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.760391][T16516] lo speed is unknown, defaulting to 1000 [ 383.909295][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.917524][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.953152][T16406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.016574][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.038937][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.251026][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 384.329676][T16529] netlink: 'syz.2.2767': attribute type 11 has an invalid length. [ 384.531584][T16515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.554727][T16532] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 384.680119][T16406] veth0_vlan: entered promiscuous mode [ 384.725378][T16406] veth1_vlan: entered promiscuous mode [ 384.776615][T16406] veth0_macvtap: entered promiscuous mode [ 384.793236][T16406] veth1_macvtap: entered promiscuous mode [ 384.815539][T16406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.830259][T16406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.848552][ T6616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.858412][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.881132][ T6524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.913060][ T6524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.059763][ T6614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.079119][ T6614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.138629][ T51] Bluetooth: hci12: command tx timeout [ 385.190055][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.201304][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.378547][ T51] Bluetooth: hci11: command tx timeout [ 385.678586][T16569] siw: device registration error -23 [ 385.772630][T16574] netlink: 'syz.1.2810': attribute type 142 has an invalid length. [ 385.773502][T16572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2808'. [ 385.790687][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'. [ 386.014627][T16573] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.026037][T16573] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.239082][T16578] xt_cgroup: invalid path, errno=-2 [ 386.331500][ T5854] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 386.358332][ T5854] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 386.367832][ T5854] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 386.378665][ T5854] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 386.402637][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2814'. [ 386.436800][ T5854] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 386.482481][T16584] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2814'. [ 386.522808][T16579] lo speed is unknown, defaulting to 1000 [ 386.865376][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 386.897333][T16596] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.134714][T16611] netlink: 'syz.1.2822': attribute type 1 has an invalid length. [ 387.145655][T16611] netlink: 'syz.1.2822': attribute type 2 has an invalid length. [ 387.156450][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2822'. [ 387.222745][ T51] Bluetooth: hci12: command tx timeout [ 387.252928][T16604] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 387.291287][T16613] ipt_rpfilter: unknown options [ 387.303533][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2823'. [ 387.498387][T16619] syzkaller0: entered promiscuous mode [ 387.503921][T16619] syzkaller0: entered allmulticast mode [ 388.498697][ T51] Bluetooth: hci13: command tx timeout [ 390.579791][ T51] Bluetooth: hci13: command 0x041b tx timeout [ 390.973564][T16579] chnl_net:caif_netlink_parms(): no params data found [ 391.101790][T16651] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2830'. [ 391.152715][T16579] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.170100][T16579] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.190222][T16579] bridge_slave_0: entered allmulticast mode [ 391.230044][T16579] bridge_slave_0: entered promiscuous mode [ 391.261332][T16579] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.284823][T16579] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.316237][T16664] netlink: 'syz.2.2833': attribute type 3 has an invalid length. [ 391.320671][T16579] bridge_slave_1: entered allmulticast mode [ 391.331787][T16664] netlink: 'syz.2.2833': attribute type 1 has an invalid length. [ 391.342091][T16579] bridge_slave_1: entered promiscuous mode [ 391.358724][T16664] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2833'. [ 391.452901][T16579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.558244][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2836'. [ 391.572771][T16579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.646729][T16579] team0: Port device team_slave_0 added [ 391.664452][T16579] team0: Port device team_slave_1 added [ 391.799062][T16579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.813452][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.839972][T16579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.878919][T16579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.889805][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.942391][T16579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.077433][T16692] x_tables: duplicate underflow at hook 1 [ 392.180904][T16579] hsr_slave_0: entered promiscuous mode [ 392.202017][T16698] Unsupported ieee802154 address type: 0 [ 392.202268][T16579] hsr_slave_1: entered promiscuous mode [ 392.238385][T16579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.252237][T16704] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 392.266342][T16579] Cannot create hsr debugfs directory [ 392.269500][T16704] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2845'. [ 392.387067][T16694] lo speed is unknown, defaulting to 1000 [ 392.465746][T16706] lo speed is unknown, defaulting to 1000 [ 392.668125][ T5854] Bluetooth: hci13: command 0x041b tx timeout [ 392.694754][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 392.706234][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'. [ 392.753093][T16716] netlink: 'syz.1.2847': attribute type 1 has an invalid length. [ 392.774074][T16716] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2847'. [ 392.826155][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'. [ 393.009950][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2848'. [ 393.170718][T16722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci13/hci13:200/input8 [ 393.590676][T16579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.629381][T16579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.655221][T16579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.691813][T16579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.936369][T16579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.003816][T16579] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.111347][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.118548][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.140604][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.147847][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.224733][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 394.235027][T16742] gretap0: left allmulticast mode [ 394.240820][T16742] gretap0: left promiscuous mode [ 394.245949][T16742] bridge0: port 3(gretap0) entered disabled state [ 394.266592][T16742] bridge_slave_1: left allmulticast mode [ 394.275127][T16742] bridge_slave_1: left promiscuous mode [ 394.281438][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.294007][T16742] bridge_slave_0: left allmulticast mode [ 394.301604][T16742] bridge_slave_0: left promiscuous mode [ 394.307359][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.385651][T16745] erspan1: entered promiscuous mode [ 394.391211][T16745] erspan1: entered allmulticast mode [ 394.693653][T16755] bridge0: port 1(veth3) entered blocking state [ 394.708378][T16755] bridge0: port 1(veth3) entered disabled state [ 394.732180][T16755] veth3: entered allmulticast mode [ 394.741213][ T5854] Bluetooth: hci13: command 0x041b tx timeout [ 394.751768][T16755] veth3: entered promiscuous mode [ 394.991431][T16579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.126695][T16579] veth0_vlan: entered promiscuous mode [ 395.217101][T16579] veth1_vlan: entered promiscuous mode [ 395.330497][T16579] veth0_macvtap: entered promiscuous mode [ 395.368616][T16579] veth1_macvtap: entered promiscuous mode [ 395.417525][T16579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.433275][T16579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.499432][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.517801][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.558482][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.592841][T16777] geneve2: entered promiscuous mode [ 395.608221][T16777] geneve2: entered allmulticast mode [ 395.615498][ T6614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.661852][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 395.685554][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 395.695902][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 395.711835][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 395.720591][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 395.836778][T16782] lo speed is unknown, defaulting to 1000 [ 395.851599][ T6614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.882613][ T6614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.932831][T16778] lo speed is unknown, defaulting to 1000 [ 395.950692][ T6616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.967905][ T6616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.637114][T16789] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 396.771128][T16797] __nla_validate_parse: 2 callbacks suppressed [ 396.771144][T16797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2869'. [ 396.819278][ T5854] Bluetooth: hci13: command 0x041b tx timeout [ 397.016896][T16778] chnl_net:caif_netlink_parms(): no params data found [ 397.081650][T16810] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 397.197532][T16806] pim6reg1: entered promiscuous mode [ 397.204027][T16806] pim6reg1: entered allmulticast mode [ 397.269187][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 397.436057][T16778] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.446247][T16778] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.455333][T16778] bridge_slave_0: entered allmulticast mode [ 397.464675][T16778] bridge_slave_0: entered promiscuous mode [ 397.489490][T16778] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.513104][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 397.528736][T16778] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.540848][T16778] bridge_slave_1: entered allmulticast mode [ 397.549976][T16778] bridge_slave_1: entered promiscuous mode [ 397.765690][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2878'. [ 397.780707][ T5854] Bluetooth: hci14: command tx timeout [ 397.791335][T16778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.813193][T16778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.941879][T16778] team0: Port device team_slave_0 added [ 397.966623][T16778] team0: Port device team_slave_1 added [ 398.061424][ T9827] IPVS: starting estimator thread 0... [ 398.100068][T16835] can: request_module (can-proto-0) failed. [ 398.170213][T16843] IPVS: using max 35 ests per chain, 84000 per kthread [ 398.215890][T16778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.250548][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.281017][T16778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.306429][T16778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.315190][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.341824][T16778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.355503][T16841] lo speed is unknown, defaulting to 1000 [ 398.583767][T16778] hsr_slave_0: entered promiscuous mode [ 398.601842][T16778] hsr_slave_1: entered promiscuous mode [ 398.616046][T16778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.634598][T16778] Cannot create hsr debugfs directory [ 399.531695][T16778] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.663237][T16778] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.743758][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 399.757093][T16778] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.844120][T16778] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.860730][ T5854] Bluetooth: hci14: command tx timeout [ 399.869238][T16896] netlink: 'syz.0.2893': attribute type 8 has an invalid length. [ 399.964423][T16898] lo speed is unknown, defaulting to 1000 [ 400.167150][T16778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.196598][T16778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.213580][T16778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.233613][T16778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 400.425004][T16778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.467476][T16778] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.505704][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.512992][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.571763][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.578966][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.645611][T16906] netlink: 'syz.0.2894': attribute type 16 has an invalid length. [ 400.663980][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2894'. [ 400.743911][T16778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.261434][T16778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.457798][ T9827] page_pool_release_retry() stalled pool shutdown: id 91, 1 inflight 60 sec [ 401.740625][T16932] tipc: Started in network mode [ 401.745513][T16932] tipc: Node identity fab8444850b, cluster identity 4711 [ 401.754079][T16932] tipc: Enabled bearer , priority 0 [ 401.764317][T16932] syzkaller0: entered promiscuous mode [ 401.770583][T16932] syzkaller0: entered allmulticast mode [ 401.790992][T16932] tipc: Resetting bearer [ 401.845699][T16778] veth0_vlan: entered promiscuous mode [ 401.866485][T16778] veth1_vlan: entered promiscuous mode [ 401.876863][T16931] tipc: Resetting bearer [ 401.901573][T16931] tipc: Disabling bearer [ 401.939621][ T5854] Bluetooth: hci14: command tx timeout [ 401.960993][T16778] veth0_macvtap: entered promiscuous mode [ 401.973815][T16778] veth1_macvtap: entered promiscuous mode [ 402.009472][T16778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.052567][T16778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.075903][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.086034][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.106213][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.117524][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.241433][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.261129][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.308636][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.316685][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.695179][T16950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2904'. [ 402.761341][T16953] syz_tun: entered allmulticast mode [ 402.782757][T16953] syz_tun: left allmulticast mode [ 402.877189][T16959] netlink: 'syz.1.2906': attribute type 39 has an invalid length. [ 403.902437][T16973] lo speed is unknown, defaulting to 1000 [ 403.941826][T16971] netlink: 'syz.1.2909': attribute type 13 has an invalid length. [ 403.957692][T16971] netlink: 'syz.1.2909': attribute type 17 has an invalid length. [ 404.020604][ T5854] Bluetooth: hci14: command tx timeout [ 404.209916][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.220820][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.269341][T16971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.723159][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 406.467011][T17039] netlink: 'syz.5.2928': attribute type 1 has an invalid length. [ 406.475749][T17039] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2928'. [ 406.504525][T17039] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2928'. [ 406.518668][T17039] unsupported nla_type 65024 [ 406.527398][T17039] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2928'. [ 406.591893][T17043] openvswitch: netlink: Multiple metadata blocks provided [ 407.212090][T17051] bond0: (slave bond_slave_0): Releasing backup interface [ 407.238464][T17051] bond0: (slave bond_slave_1): Releasing backup interface [ 407.269095][T17051] team0: Port device team_slave_0 removed [ 407.293547][T17051] team0: Port device team_slave_1 removed [ 407.308940][T17051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.330040][T17051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.344918][T17051] veth3: left allmulticast mode [ 407.350036][T17051] veth3: left promiscuous mode [ 407.360313][T17051] bridge0: port 1(veth3) entered disabled state [ 407.809953][T17064] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2935'. [ 407.834071][T17065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2937'. [ 407.844517][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 407.857283][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 407.878481][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 407.898553][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 407.906458][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 407.957353][T17066] lo speed is unknown, defaulting to 1000 [ 408.013262][T17069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2938'. [ 408.052812][T17069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2938'. [ 408.376690][T17079] netlink: 'syz.5.2939': attribute type 21 has an invalid length. [ 408.464537][T17066] chnl_net:caif_netlink_parms(): no params data found [ 408.936269][T17066] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.950976][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.958945][T17066] bridge_slave_0: entered allmulticast mode [ 408.967209][T17066] bridge_slave_0: entered promiscuous mode [ 408.977347][T17066] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.985440][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.000382][T17066] bridge_slave_1: entered allmulticast mode [ 409.009767][T17066] bridge_slave_1: entered promiscuous mode [ 409.066288][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.090798][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.141507][T17097] lo speed is unknown, defaulting to 1000 [ 409.166421][T17066] team0: Port device team_slave_0 added [ 409.176880][T17066] team0: Port device team_slave_1 added [ 409.328380][T17101] netlink: 'syz.5.2945': attribute type 1 has an invalid length. [ 409.340257][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.347224][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.396492][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.441824][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.453171][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.482309][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.552507][T17101] veth3: entered promiscuous mode [ 409.583589][T17102] erspan0: entered allmulticast mode [ 409.794266][T17066] hsr_slave_0: entered promiscuous mode [ 409.801480][T17066] hsr_slave_1: entered promiscuous mode [ 409.808861][T17066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.820523][T17066] Cannot create hsr debugfs directory [ 409.948762][ T51] Bluetooth: hci15: command tx timeout [ 410.265440][T17066] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.313597][T17119] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 410.351443][T17120] bridge1: entered promiscuous mode [ 410.356862][T17120] bridge1: entered allmulticast mode [ 410.435830][T17066] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.782116][T17066] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.948472][T17066] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.994368][T17129] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2953'. [ 410.994889][T17125] lo speed is unknown, defaulting to 1000 [ 411.004152][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2953'. [ 411.066314][T17129] syzkaller1: entered promiscuous mode [ 411.074020][T17129] syzkaller1: entered allmulticast mode [ 411.104220][T17128] lo speed is unknown, defaulting to 1000 [ 411.329322][T17066] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.372660][T17066] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.406459][T17066] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.471212][T17066] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 411.503534][T17141] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2958'. [ 411.534302][T17141] IPVS: set_ctl: invalid protocol: 8345 172.30.1.6:20003 [ 411.545843][T17141] Cannot find add_set index 3 as target [ 411.576875][T17140] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2958'. [ 411.636443][T17140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.866194][T17066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.954158][T17066] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.019043][ T51] Bluetooth: hci15: command tx timeout [ 412.046144][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.053322][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.073223][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.080412][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.393596][T17159] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2960'. [ 412.445569][T17066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.747415][T17066] veth0_vlan: entered promiscuous mode [ 412.765027][T17066] veth1_vlan: entered promiscuous mode [ 412.805531][T17066] veth0_macvtap: entered promiscuous mode [ 412.820622][T17066] veth1_macvtap: entered promiscuous mode [ 412.849239][T17066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.864586][T17066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.895149][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.905363][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.915714][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.929518][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.015094][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.031275][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.079335][ T6614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.087285][ T6614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.507859][T17173] Can't find ip_set type [ 413.593120][T17180] netlink: 1300 bytes leftover after parsing attributes in process `syz.6.2964'. [ 413.765234][ T5167] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 413.776793][ T5167] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 413.787278][ T5167] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 413.795568][ T5167] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 413.806367][ T5167] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 413.896631][T17186] lo speed is unknown, defaulting to 1000 [ 414.106547][ T5854] Bluetooth: hci15: command tx timeout [ 414.197037][T17198] bridge0: port 3(syz_tun) entered blocking state [ 414.204329][T17198] bridge0: port 3(syz_tun) entered disabled state [ 414.212201][T17198] syz_tun: entered allmulticast mode [ 414.237355][T17198] syz_tun: entered promiscuous mode [ 414.260647][T17198] bridge0: port 3(syz_tun) entered blocking state [ 414.267226][T17198] bridge0: port 3(syz_tun) entered forwarding state [ 414.507670][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2971'. [ 414.550466][T17201] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2971'. [ 414.909993][T17214] netlink: 'syz.6.2976': attribute type 4 has an invalid length. [ 414.970306][T17214] netlink: 'syz.6.2976': attribute type 4 has an invalid length. [ 414.980556][T17186] chnl_net:caif_netlink_parms(): no params data found [ 415.491565][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.497709][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'. [ 415.510354][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.528104][T17186] bridge_slave_0: entered allmulticast mode [ 415.541285][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'. [ 415.555844][T17186] bridge_slave_0: entered promiscuous mode [ 415.565461][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.573990][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.582846][ T5167] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 415.592822][ T5167] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 415.594206][T17186] bridge_slave_1: entered allmulticast mode [ 415.606942][ T5167] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 415.616965][T17186] bridge_slave_1: entered promiscuous mode [ 415.625227][ T5167] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 415.635536][ T5167] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 415.738945][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.755475][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.832710][T17186] team0: Port device team_slave_0 added [ 415.856116][T17186] team0: Port device team_slave_1 added [ 415.868944][ T5167] Bluetooth: hci16: command tx timeout [ 415.906563][T17244] lo speed is unknown, defaulting to 1000 [ 415.967796][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.975700][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.003356][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.022135][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.037869][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.112685][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.179194][ T5167] Bluetooth: hci15: command 0x0419 tx timeout [ 416.363580][T17186] hsr_slave_0: entered promiscuous mode [ 416.385653][T17186] hsr_slave_1: entered promiscuous mode [ 416.439029][T17186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.446628][T17186] Cannot create hsr debugfs directory [ 416.613359][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2986'. [ 416.886640][T17274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2988'. [ 416.896896][T17274] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2988'. [ 417.001673][T17274] team0: entered promiscuous mode [ 417.012388][T17279] netlink: 'syz.6.2990': attribute type 4 has an invalid length. [ 417.018436][T17274] team_slave_0: entered promiscuous mode [ 417.026154][T17274] team_slave_1: entered promiscuous mode [ 417.040713][T17274] bond0: entered promiscuous mode [ 417.045963][T17274] bond_slave_0: entered promiscuous mode [ 417.054586][T17274] bond_slave_1: entered promiscuous mode [ 417.080221][T17274] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 417.208428][T17281] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 417.234287][T17186] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.266896][T17290] netlink: 'syz.5.2992': attribute type 16 has an invalid length. [ 417.277717][T17290] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2992'. [ 417.323575][T17244] chnl_net:caif_netlink_parms(): no params data found [ 417.341792][T17293] netlink: 'syz.6.2993': attribute type 3 has an invalid length. [ 417.374045][T17293] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2993'. [ 417.512697][T17186] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.700814][ T51] Bluetooth: hci17: command tx timeout [ 417.712928][T17186] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.743815][T17244] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.760785][T17244] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.773658][T17244] bridge_slave_0: entered allmulticast mode [ 417.783386][T17244] bridge_slave_0: entered promiscuous mode [ 417.830129][T17186] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.850959][T17244] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.861902][T17244] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.870145][T17244] bridge_slave_1: entered allmulticast mode [ 417.879391][T17244] bridge_slave_1: entered promiscuous mode [ 417.938939][ T51] Bluetooth: hci16: command tx timeout [ 417.985068][T17244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.015767][T17244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.161668][T17244] team0: Port device team_slave_0 added [ 418.196138][T17244] team0: Port device team_slave_1 added [ 418.259782][ T51] Bluetooth: hci15: command 0x0419 tx timeout [ 418.281596][T17186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 418.391866][T17244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.438623][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.488528][T17244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.508728][T17186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 418.554985][T17244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.564717][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.595287][T17244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.699675][T17186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 418.770455][T17186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 418.855507][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3003'. [ 418.916250][T17244] hsr_slave_0: entered promiscuous mode [ 418.940751][T17244] hsr_slave_1: entered promiscuous mode [ 418.957069][T17244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.964957][T17244] Cannot create hsr debugfs directory [ 419.511517][T17357] netlink: 'syz.6.3011': attribute type 7 has an invalid length. [ 419.534388][T17357] netlink: 'syz.6.3011': attribute type 8 has an invalid length. [ 419.593352][T17244] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.691964][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.760369][T17244] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.779377][ T51] Bluetooth: hci17: command tx timeout [ 419.820552][T17186] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.868426][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.875585][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.893084][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.900309][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.976521][T17244] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.028058][ T51] Bluetooth: hci16: command tx timeout [ 420.134876][T17244] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.481863][T17244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.514556][T17244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.549442][T17244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.618387][T17244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.050444][T17186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.054706][T17405] netlink: 'syz.6.3020': attribute type 2 has an invalid length. [ 421.089572][T17405] þ`Ì: entered promiscuous mode [ 421.252507][T17244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.306530][T17244] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.339835][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.347060][ T6620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.367412][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.374630][ T6620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.525186][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3021'. [ 421.594270][T17186] veth0_vlan: entered promiscuous mode [ 421.643421][T17186] veth1_vlan: entered promiscuous mode [ 421.721412][T17186] veth0_macvtap: entered promiscuous mode [ 421.735540][T17186] veth1_macvtap: entered promiscuous mode [ 421.809397][T17186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.835590][T17186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.859591][ T51] Bluetooth: hci17: command tx timeout [ 421.913076][ T1035] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.923203][ T1035] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.936970][T17425] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3023'. [ 421.962092][ T1035] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.973990][ T1035] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.993432][T17244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.086718][T17429] netlink: 'syz.6.3024': attribute type 4 has an invalid length. [ 422.103002][ T51] Bluetooth: hci16: command tx timeout [ 422.206289][T17244] veth0_vlan: entered promiscuous mode [ 422.241081][T17244] veth1_vlan: entered promiscuous mode [ 422.263024][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.306177][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.419204][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.427053][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.435894][T17437] x_tables: duplicate underflow at hook 1 [ 422.438633][T17244] veth0_macvtap: entered promiscuous mode [ 422.466370][T17244] veth1_macvtap: entered promiscuous mode [ 422.550413][T17244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.590818][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3029'. [ 422.649536][T17244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.676849][ T6619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.709610][T17457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2961'. [ 422.741599][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3030'. [ 422.791817][ T6619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.832966][ T6619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.843478][ T6619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.932387][T17467] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 423.114612][T17473] netlink: 'syz.5.3034': attribute type 1 has an invalid length. [ 423.130577][ T6620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.133584][T17473] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3034'. [ 423.144940][ T6620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.242169][ T6616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.252889][ T6616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.352262][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3036'. [ 423.656733][T17488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.948603][ T51] Bluetooth: hci17: command tx timeout [ 423.979589][T17494] syzkaller0: entered promiscuous mode [ 423.989297][T17494] syzkaller0: entered allmulticast mode [ 425.008623][ T30] audit: type=1800 audit(1752407131.991:8): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3041" name="memory.events" dev="tmpfs" ino=371 res=0 errno=0 [ 425.438498][T17528] x_tables: duplicate underflow at hook 2 [ 425.912909][T17552] C: renamed from team_slave_0 (while UP) [ 425.939937][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 425.958206][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.071192][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.081109][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.108368][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 426.118624][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.146781][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.187054][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.228215][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.247035][T17559] lo speed is unknown, defaulting to 1000 [ 426.253869][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.277425][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.291725][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.323565][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.348215][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.366261][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.398556][ T5167] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 426.412848][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.422697][ T5167] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 426.431759][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.441441][ T5167] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 426.452763][ T5167] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 426.461088][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.469556][ T5167] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 426.476911][T17552] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3056'. [ 426.488721][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.496968][T17552] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 426.548786][T17565] geneve1: entered promiscuous mode [ 426.719546][T17562] lo speed is unknown, defaulting to 1000 [ 427.082545][T17580] tc_dump_action: action bad kind [ 427.579130][T17590] lo speed is unknown, defaulting to 1000 [ 427.689068][T17562] chnl_net:caif_netlink_parms(): no params data found [ 427.927451][T17562] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.960629][T17562] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.969904][T17562] bridge_slave_0: entered allmulticast mode [ 428.000256][T17562] bridge_slave_0: entered promiscuous mode [ 428.033196][T17562] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.046533][T17562] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.054552][T17562] bridge_slave_1: entered allmulticast mode [ 428.063500][T17562] bridge_slave_1: entered promiscuous mode [ 428.173257][T17562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.185437][ T5919] IPVS: starting estimator thread 0... [ 428.188833][T17562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.262530][T17562] team0: Port device team_slave_0 added [ 428.272698][T17562] team0: Port device team_slave_1 added [ 428.289881][T17606] IPVS: using max 37 ests per chain, 88800 per kthread [ 428.343316][T17562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.369405][T17562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.395700][T17562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.452171][T17562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.469318][T17562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.539566][T17562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.582829][ T51] Bluetooth: hci18: command tx timeout [ 428.772037][T17562] hsr_slave_0: entered promiscuous mode [ 428.790385][T17562] hsr_slave_1: entered promiscuous mode [ 428.806213][T17562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.827393][T17562] Cannot create hsr debugfs directory [ 429.895931][T17562] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 429.915061][T17562] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 429.944779][T17562] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 429.974013][T17562] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 430.170387][T17562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.213501][T17562] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.235364][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.242561][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.275402][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.282626][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.659391][ T51] Bluetooth: hci18: command tx timeout [ 430.812252][T17562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.223995][T17685] No such timeout policy "syz1" [ 431.410400][T17694] __nla_validate_parse: 68 callbacks suppressed [ 431.410419][T17694] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3087'. [ 431.540361][T17562] veth0_vlan: entered promiscuous mode [ 431.566230][T17562] veth1_vlan: entered promiscuous mode [ 431.691849][T17562] veth0_macvtap: entered promiscuous mode [ 431.750146][T17562] veth1_macvtap: entered promiscuous mode [ 431.769825][T17702] lo speed is unknown, defaulting to 1000 [ 431.813844][T17562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.854083][T17562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.891599][ T6619] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.928246][ T6619] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.948373][ T6619] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.980731][ T6619] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.197273][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.226962][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.299809][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.318490][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.523202][T17721] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3051'. [ 432.540744][T17721] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3051'. [ 432.583733][T17721] validate_nla: 60 callbacks suppressed [ 432.583751][T17721] netlink: 'syz.8.3051': attribute type 3 has an invalid length. [ 432.621973][T17723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3094'. [ 432.696425][T17723] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 432.738778][ T51] Bluetooth: hci18: command tx timeout [ 432.804653][T17731] netlink: 'syz.6.3097': attribute type 4 has an invalid length. [ 432.862396][T17729] syzkaller0: entered promiscuous mode [ 432.868392][T17729] syzkaller0: entered allmulticast mode [ 434.741463][ T51] Bluetooth: hci1: command 0x080f tx timeout [ 434.833324][ T51] Bluetooth: hci18: command tx timeout [ 436.152699][T17760] lo speed is unknown, defaulting to 1000 [ 436.617120][T17769] bridge0: entered promiscuous mode [ 436.667758][T17769] vlan0: entered promiscuous mode [ 438.027392][ T30] audit: type=1800 audit(1752407145.001:9): pid=17801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3115" name="memory.events" dev="tmpfs" ino=49 res=0 errno=0 [ 438.455862][T17813] lo speed is unknown, defaulting to 1000 [ 439.355158][T17839] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 439.776211][T17852] netlink: 'syz.6.3129': attribute type 1 has an invalid length. [ 439.812315][T17852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.875995][T17852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.884704][T17852] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 439.902800][T17852] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 439.949705][T17858] veth3: entered promiscuous mode [ 439.976009][T17858] bond1: (slave veth3): Enslaving as an active interface with a down link [ 440.014856][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.054644][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.509151][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3138'. [ 442.024240][ T5167] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 442.035174][ T5167] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 442.044730][ T5167] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 442.060473][ T5167] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 442.061907][T17928] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3151'. [ 442.125986][ T5167] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 442.260474][T17934] lo speed is unknown, defaulting to 1000 [ 442.289698][T17925] lo speed is unknown, defaulting to 1000 [ 442.457177][T17938] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 443.088785][ T5167] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 443.105784][ T5167] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 443.115003][ T5167] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 443.124888][ T5167] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 443.133218][ T5167] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 443.159921][T17945] macsec1: entered promiscuous mode [ 443.165768][T17945] macsec1: entered allmulticast mode [ 443.325457][T17952] lo speed is unknown, defaulting to 1000 [ 443.824757][T17925] chnl_net:caif_netlink_parms(): no params data found [ 443.837277][T17974] netlink: 'syz.6.3163': attribute type 11 has an invalid length. [ 444.184625][ T51] Bluetooth: hci19: command tx timeout [ 444.439419][T17925] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.464036][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.493734][T17925] bridge_slave_0: entered allmulticast mode [ 444.503213][T17925] bridge_slave_0: entered promiscuous mode [ 444.623521][T17925] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.648301][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.665972][T17925] bridge_slave_1: entered allmulticast mode [ 444.691860][T17925] bridge_slave_1: entered promiscuous mode [ 444.853827][T17925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.914919][T17925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.160622][T17925] team0: Port device team_slave_0 added [ 445.222837][ T51] Bluetooth: hci20: command tx timeout [ 445.280173][T17925] team0: Port device team_slave_1 added [ 445.534189][T17925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.547710][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.668305][T17925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.700993][T17925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.728536][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.798394][T17925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.986030][T17952] chnl_net:caif_netlink_parms(): no params data found [ 446.117499][T17925] hsr_slave_0: entered promiscuous mode [ 446.130534][T17925] hsr_slave_1: entered promiscuous mode [ 446.137076][T17925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.189195][T17925] Cannot create hsr debugfs directory [ 446.264209][ T5167] Bluetooth: hci19: command tx timeout [ 446.786625][T17952] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.828338][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.842264][T17952] bridge_slave_0: entered allmulticast mode [ 446.853133][T17952] bridge_slave_0: entered promiscuous mode [ 446.872328][T17952] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.899931][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.929099][T17952] bridge_slave_1: entered allmulticast mode [ 446.958636][T17952] bridge_slave_1: entered promiscuous mode [ 447.298102][ T5167] Bluetooth: hci20: command tx timeout [ 447.381494][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.453547][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.931343][T17925] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.004561][T17952] team0: Port device team_slave_0 added [ 448.034215][T17952] team0: Port device team_slave_1 added [ 448.158824][T17925] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.245835][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.254342][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.301328][T18019] netlink: 'syz.6.3176': attribute type 2 has an invalid length. [ 448.311728][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.338173][ T5167] Bluetooth: hci19: command tx timeout [ 448.427077][T18020] xt_CT: No such helper "syz0" [ 448.442259][T17925] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.465069][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.475663][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.504308][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.591687][T17925] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.742843][T17952] hsr_slave_0: entered promiscuous mode [ 448.759790][T17952] hsr_slave_1: entered promiscuous mode [ 448.766346][T17952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.788426][T17952] Cannot create hsr debugfs directory [ 448.870027][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3178'. [ 449.126308][T18030] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.378152][ T5167] Bluetooth: hci20: command tx timeout [ 449.385909][T18030] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.461658][T17925] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 449.486235][T18034] netlink: 324 bytes leftover after parsing attributes in process `syz.8.3180'. [ 449.540352][T17925] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 449.633174][T18030] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.669826][T17925] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 449.733079][T17952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.769565][T17925] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 449.812401][T18030] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.982756][T17952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.106027][T17952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.213301][T17952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.334659][T17925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.351469][ T6524] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.383189][T18062] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 450.393481][T18062] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 450.404530][T18062] team0: Failed to send options change via netlink (err -105) [ 450.412880][T18062] team0: Port device batadv1 added [ 450.419367][ T5167] Bluetooth: hci19: command tx timeout [ 450.452366][ T6524] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.521308][T17925] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.560314][ T6619] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.614251][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.621502][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.680580][ T6614] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.701441][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.708619][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.831732][T17952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 450.855063][T17952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 450.911650][T17952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.006449][T17952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.111936][T18077] lo speed is unknown, defaulting to 1000 [ 451.455491][T17952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.471971][ T5167] Bluetooth: hci20: command tx timeout [ 451.532558][T17952] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.571769][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.578973][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.786370][T18092] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3193'. [ 451.853954][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.861197][ T6620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.235618][ T51] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 452.251350][ T51] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 452.288831][ T51] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 452.296984][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3194'. [ 452.320208][ T51] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 452.339414][T18102] netlink: 'syz.6.3194': attribute type 16 has an invalid length. [ 452.347340][T18102] netlink: 'syz.6.3194': attribute type 17 has an invalid length. [ 452.382609][ T51] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 452.391128][T18102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.438524][T17925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.591687][T18100] lo speed is unknown, defaulting to 1000 [ 453.101809][T18115] netlink: 'syz.6.3195': attribute type 10 has an invalid length. [ 453.197143][T17952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.490503][T17925] veth0_vlan: entered promiscuous mode [ 453.577024][T17952] veth0_vlan: entered promiscuous mode [ 453.607449][T17925] veth1_vlan: entered promiscuous mode [ 453.760038][T17952] veth1_vlan: entered promiscuous mode [ 453.859721][T18123] lo speed is unknown, defaulting to 1000 [ 453.915773][T17952] veth0_macvtap: entered promiscuous mode [ 453.967227][T17925] veth0_macvtap: entered promiscuous mode [ 454.003241][T17952] veth1_macvtap: entered promiscuous mode [ 454.025152][T17925] veth1_macvtap: entered promiscuous mode [ 454.037046][T18100] chnl_net:caif_netlink_parms(): no params data found [ 454.185580][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.233941][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.313000][T17925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.450054][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3197'. [ 454.472753][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3197'. [ 454.498474][ T5167] Bluetooth: hci21: command tx timeout [ 454.601285][T17925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.619128][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.639396][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.653836][T18100] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.690797][T18100] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.710966][T18100] bridge_slave_0: entered allmulticast mode [ 454.719822][T18100] bridge_slave_0: entered promiscuous mode [ 454.763275][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.783377][T18100] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.791750][T18100] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.800022][T18100] bridge_slave_1: entered allmulticast mode [ 454.809233][T18100] bridge_slave_1: entered promiscuous mode [ 454.837708][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.961686][ T61] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.991876][T18100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.006960][T18100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.032153][ T6616] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.044220][ T6616] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.101190][ T6616] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.154334][T18100] team0: Port device team_slave_0 added [ 455.206826][T18100] team0: Port device team_slave_1 added [ 455.253183][ T6524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.271796][ T6524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.325332][T18100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.333456][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.360813][T18100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.409685][T18100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.419809][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.448771][T18100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.498193][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.516366][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.539513][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.548502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.664901][T18100] hsr_slave_0: entered promiscuous mode [ 455.673644][T18100] hsr_slave_1: entered promiscuous mode [ 455.681045][T18100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.728326][T18100] Cannot create hsr debugfs directory [ 455.800690][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.810011][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.319501][T18100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.432319][T18100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.490257][ T9005] IPVS: starting estimator thread 0... [ 456.539842][T18100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.579648][T18148] IPVS: using max 27 ests per chain, 64800 per kthread [ 456.580358][ T5167] Bluetooth: hci21: command tx timeout [ 456.737064][T18100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.842402][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 456.866712][T18152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3203'. [ 457.129963][T18155] veth3: entered promiscuous mode [ 457.236348][T18100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 457.303774][T18100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 457.324034][T18100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 457.346099][T18160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3205'. [ 457.360592][T18160] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 457.374256][T18100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 457.732871][T18173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3208'. [ 457.772363][T18100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.804216][T18100] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.845425][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.852685][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.902393][ T6616] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.909605][ T6616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.976243][T18175] lo speed is unknown, defaulting to 1000 [ 458.111189][T18180] lo speed is unknown, defaulting to 1000 [ 458.117484][T18100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.666516][ T5167] Bluetooth: hci21: command tx timeout [ 458.673078][T18100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.208714][T18100] veth0_vlan: entered promiscuous mode [ 459.230256][T18100] veth1_vlan: entered promiscuous mode [ 459.293768][T18100] veth0_macvtap: entered promiscuous mode [ 459.319194][T18100] veth1_macvtap: entered promiscuous mode [ 459.341687][T18100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.361022][T18100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.389950][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.400113][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.427034][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.453718][ T6619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.534503][ T6619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.543748][ T6619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.603630][ T6619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.613281][ T6619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.702805][T18195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3192'. [ 459.713544][T18195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3192'. [ 459.826975][T18197] lo speed is unknown, defaulting to 1000 [ 460.261632][T18199] lo speed is unknown, defaulting to 1000 [ 460.284621][T18198] netlink: 'syz.4.3210': attribute type 12 has an invalid length. [ 460.739445][ T5167] Bluetooth: hci21: command tx timeout [ 466.667129][ T51] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 466.680765][ T51] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 466.690008][ T51] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 466.700372][ T51] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 466.712338][ T51] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 466.773149][T18203] lo speed is unknown, defaulting to 1000 [ 467.205457][T18203] chnl_net:caif_netlink_parms(): no params data found [ 467.356844][T18203] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.370536][T18203] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.379499][T18203] bridge_slave_0: entered allmulticast mode [ 467.390799][T18203] bridge_slave_0: entered promiscuous mode [ 467.399468][T18203] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.406562][T18203] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.415285][T18203] bridge_slave_1: entered allmulticast mode [ 467.424357][T18203] bridge_slave_1: entered promiscuous mode [ 467.483749][T18203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.496563][T18203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.549698][T18203] team0: Port device team_slave_0 added [ 467.559431][T18203] team0: Port device team_slave_1 added [ 467.606157][T18203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.613742][T18203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.644952][T18203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.660674][T18203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.671714][T18203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.699307][T18203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.773332][T18203] hsr_slave_0: entered promiscuous mode [ 467.781889][T18203] hsr_slave_1: entered promiscuous mode [ 467.790017][T18203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.798168][T18203] Cannot create hsr debugfs directory [ 468.004676][T18203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.093584][T18203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.193157][T18203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.276065][T18203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.470976][T18203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.483393][T18203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.505847][T18203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.519064][T18203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.640626][T18203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.673424][T18203] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.687411][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.694898][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.721168][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.728475][ T6524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.738590][ T5167] Bluetooth: hci22: command tx timeout [ 469.194779][T18203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.322255][T18203] veth0_vlan: entered promiscuous mode [ 469.351485][T18203] veth1_vlan: entered promiscuous mode [ 469.441074][T18203] veth0_macvtap: entered promiscuous mode [ 469.464212][T18203] veth1_macvtap: entered promiscuous mode [ 469.473271][ T51] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 469.484965][ T51] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 469.486625][T18203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.509870][ T51] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 469.525173][ T51] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 469.531711][T18203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.535157][ T51] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 469.574061][ T6616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.584595][ T6616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.620214][ T6616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.632066][ T6616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.729901][T18222] lo speed is unknown, defaulting to 1000 [ 469.768997][ T6616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.776922][ T6616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.870745][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.889237][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.401375][T18231] netlink: 'syz.0.3214': attribute type 2 has an invalid length. [ 470.442143][T18231] þ`Ì: entered promiscuous mode [ 470.472591][T18222] chnl_net:caif_netlink_parms(): no params data found [ 470.608055][T18222] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.615344][T18222] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.623645][T18222] bridge_slave_0: entered allmulticast mode [ 470.632958][T18222] bridge_slave_0: entered promiscuous mode [ 470.651728][T18222] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.660985][T18222] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.668907][T18222] bridge_slave_1: entered allmulticast mode [ 470.677008][T18222] bridge_slave_1: entered promiscuous mode [ 470.759693][T18222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.775024][T18222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.848695][ T51] Bluetooth: hci22: command tx timeout [ 470.855885][T18222] team0: Port device team_slave_0 added [ 470.876862][T18222] team0: Port device team_slave_1 added [ 470.925265][T18222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.933353][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.964112][T18222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.979702][T18222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.986664][T18222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.013429][T18222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.109778][T18222] hsr_slave_0: entered promiscuous mode [ 471.116401][T18222] hsr_slave_1: entered promiscuous mode [ 471.130783][T18222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.139629][T18222] Cannot create hsr debugfs directory [ 471.537115][T18239] lo speed is unknown, defaulting to 1000 [ 471.619882][ T51] Bluetooth: hci23: command tx timeout [ 471.995085][T18222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.007096][T18222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.026883][T18222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.049987][T18222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.324651][T18222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.354334][T18222] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.371191][ T6616] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.378485][ T6616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.410773][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.417979][ T6614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.723463][T18222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.799769][T18222] veth0_vlan: entered promiscuous mode [ 472.814304][T18222] veth1_vlan: entered promiscuous mode [ 472.854318][T18222] veth0_macvtap: entered promiscuous mode [ 472.866167][T18222] veth1_macvtap: entered promiscuous mode [ 472.899180][ T51] Bluetooth: hci22: command tx timeout [ 472.904701][T18222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.904725][ T5167] Bluetooth: hci5: command 0x0406 tx timeout [ 472.918670][ T5866] Bluetooth: hci6: command 0x0406 tx timeout [ 472.923853][T18222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.961817][ T6619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.971805][ T6619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.002740][ T6619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.012404][ T6619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.105692][ T6614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.124216][ T6614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.172233][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.183426][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.636146][T18257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3218'. [ 473.700136][ T5857] Bluetooth: hci23: command tx timeout [ 473.872579][T18259] x_tables: duplicate underflow at hook 2 [ 474.165716][ T5854] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 474.180103][ T5854] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 474.189670][ T5854] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 474.201661][ T5854] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 474.211544][ T5854] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 474.341859][ T5857] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 474.364070][ T5857] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 474.366977][T18262] lo speed is unknown, defaulting to 1000 [ 474.378184][ T5857] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 474.390455][ T5857] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 474.400283][ T5857] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 474.516440][T18265] lo speed is unknown, defaulting to 1000 [ 474.980387][ T5854] Bluetooth: hci22: command tx timeout [ 475.103477][T18262] chnl_net:caif_netlink_parms(): no params data found [ 475.667276][T18262] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.688502][ T5857] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 475.699708][ T5857] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 475.699730][T18262] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.708397][ T5857] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 475.723517][ T5857] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 475.733539][ T5857] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 475.742635][T18262] bridge_slave_0: entered allmulticast mode [ 475.770499][T18262] bridge_slave_0: entered promiscuous mode [ 475.784555][T18262] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.792875][ T5857] Bluetooth: hci23: command tx timeout [ 475.800769][T18262] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.808891][T18262] bridge_slave_1: entered allmulticast mode [ 475.816971][T18262] bridge_slave_1: entered promiscuous mode [ 475.928820][T18277] lo speed is unknown, defaulting to 1000 [ 475.974631][T18262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.990938][T18262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.214931][T18262] team0: Port device team_slave_0 added [ 476.249773][T18262] team0: Port device team_slave_1 added [ 476.265301][T18281] lo speed is unknown, defaulting to 1000 [ 476.347152][ T5857] Bluetooth: hci24: command tx timeout [ 476.426783][T18262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.436331][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.499284][ T5857] Bluetooth: hci25: command tx timeout [ 476.508396][T18262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.532589][T18262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.540090][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.566747][T18262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.959743][T18262] hsr_slave_0: entered promiscuous mode [ 476.966823][T18262] hsr_slave_1: entered promiscuous mode [ 476.977386][T18262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.994408][T18262] Cannot create hsr debugfs directory [ 477.037399][T18265] chnl_net:caif_netlink_parms(): no params data found [ 477.516605][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.539897][T18265] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.547323][T18265] bridge_slave_0: entered allmulticast mode [ 477.570761][T18265] bridge_slave_0: entered promiscuous mode [ 477.590582][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.608675][T18265] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.616100][T18265] bridge_slave_1: entered allmulticast mode [ 477.628824][T18265] bridge_slave_1: entered promiscuous mode [ 477.780157][ T5857] Bluetooth: hci26: command tx timeout [ 477.784184][T18265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.835043][T18265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.872628][ T5857] Bluetooth: hci23: command tx timeout [ 477.999762][T18262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.180868][T18262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.203298][T18265] team0: Port device team_slave_0 added [ 478.248723][T18265] team0: Port device team_slave_1 added [ 478.352147][T18262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.418526][ T5854] Bluetooth: hci24: command tx timeout [ 478.477053][T18281] chnl_net:caif_netlink_parms(): no params data found [ 478.573973][T18262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.588237][ T5854] Bluetooth: hci25: command tx timeout [ 478.622817][T18265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.655196][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.718441][T18265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.761872][T18265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.779558][T18265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.848664][T18265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.121382][T18265] hsr_slave_0: entered promiscuous mode [ 479.164520][ T31] INFO: task syz.1.2514:15293 blocked for more than 143 seconds. [ 479.174069][ T31] Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 [ 479.183742][T18265] hsr_slave_1: entered promiscuous mode [ 479.200324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.211726][T18265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.250893][ T31] task:syz.1.2514 state:D stack:24024 pid:15293 tgid:15289 ppid:5844 task_flags:0x400140 flags:0x00004006 [ 479.263316][T18265] Cannot create hsr debugfs directory [ 479.358294][ T31] Call Trace: [ 479.361636][ T31] [ 479.364582][ T31] __schedule+0x16f5/0x4d00 [ 479.438319][ T31] ? schedule+0x165/0x360 [ 479.442708][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.479831][ T31] ? __pfx___schedule+0x10/0x10 [ 479.484998][ T31] ? schedule+0x91/0x360 [ 479.490071][ T31] schedule+0x165/0x360 [ 479.494262][ T31] schedule_timeout+0x9a/0x270 [ 479.514300][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 479.521715][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.538599][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.543860][ T31] ? wait_for_completion+0x267/0x5d0 [ 479.568184][ T31] wait_for_completion+0x2bf/0x5d0 [ 479.573373][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 479.588361][ T31] ? remove_client_context+0x19c/0x1e0 [ 479.593871][ T31] disable_device+0x1c6/0x320 [ 479.609711][ T31] ? __pfx_disable_device+0x10/0x10 [ 479.614977][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 479.630372][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 479.668595][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 479.674373][ T31] nldev_dellink+0x2d1/0x320 [ 479.688205][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 479.693480][ T31] ? rcu_is_watching+0x15/0xb0 [ 479.719224][ T31] ? apparmor_capable+0x137/0x1b0 [ 479.724312][ T31] ? bpf_lsm_capable+0x9/0x20 [ 479.730025][ T31] ? security_capable+0x7e/0x2e0 [ 479.734996][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 479.758538][ T31] rdma_nl_rcv+0x6ab/0x980 [ 479.763025][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 479.768962][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.773859][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.785603][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.791819][ T31] netlink_unicast+0x75c/0x8e0 [ 479.796648][ T31] netlink_sendmsg+0x805/0xb30 [ 479.801972][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.807288][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 479.813906][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.820086][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.825407][ T31] __sock_sendmsg+0x219/0x270 [ 479.830836][ T31] ____sys_sendmsg+0x505/0x830 [ 479.835631][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.842555][ T31] ? import_iovec+0x74/0xa0 [ 479.847091][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 479.860699][ T5854] Bluetooth: hci26: command tx timeout [ 479.869366][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.874771][ T31] ? __fget_files+0x2a/0x420 [ 479.879935][ T31] ? __fget_files+0x3a0/0x420 [ 479.884651][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 479.890313][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.895810][ T31] ? rcu_is_watching+0x15/0xb0 [ 479.901242][ T31] ? do_syscall_64+0xbe/0x3b0 [ 479.905964][ T31] do_syscall_64+0xfa/0x3b0 [ 479.911099][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.916321][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.923021][ T31] ? clear_bhb_loop+0x60/0xb0 [ 479.928572][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.934516][ T31] RIP: 0033:0x7f3316f8e929 [ 479.939743][ T31] RSP: 002b:00007f3317d36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.948566][ T31] RAX: ffffffffffffffda RBX: 00007f33171b6080 RCX: 00007f3316f8e929 [ 479.964538][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 479.973344][ T31] RBP: 00007f3317010b39 R08: 0000000000000000 R09: 0000000000000000 [ 479.981941][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.990546][ T31] R13: 0000000000000000 R14: 00007f33171b6080 R15: 00007ffe989ee0d8 [ 479.999109][ T31] [ 480.002660][ T31] [ 480.002660][ T31] Showing all locks held in the system: [ 480.048276][ T31] 4 locks held by kworker/u8:0/12: [ 480.053427][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 480.128329][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 480.146956][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 480.156525][ T31] #3: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: xa_find_after+0xae/0x430 [ 480.173572][ T31] 4 locks held by kworker/u8:1/13: [ 480.180265][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.191871][ T31] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.203082][ T31] #2: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 480.238085][ T31] #3: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.271588][ T31] 1 lock held by khungtaskd/31: [ 480.277181][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 480.300798][ T31] 2 locks held by kswapd0/86: [ 480.305537][ T31] 4 locks held by kworker/u8:6/3563: [ 480.311718][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.324070][ T31] #1: ffffc9000cae7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.335816][ T31] #2: ffffffff8f520508 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 480.345911][ T31] #3: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 480.357530][ T31] 2 locks held by getty/5606: [ 480.362947][ T31] #0: ffff8880316e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 480.383734][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 480.395470][ T31] 2 locks held by kworker/u9:2/5849: [ 480.401540][ T31] #0: ffff88802546e148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.458680][ T31] #1: ffffc900043ffbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.499599][ T5854] Bluetooth: hci24: command tx timeout [ 480.530219][ T31] 3 locks held by kworker/u8:9/6614: [ 480.535560][ T31] 7 locks held by kworker/u8:12/6619: [ 480.558455][ T31] 2 locks held by syz.1.2514/15293: [ 480.563691][ T31] #0: ffffffff99e80cd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 480.608265][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 480.620544][ T31] 2 locks held by syz.1.2514/15312: [ 480.625762][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.635923][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.651809][ T31] 2 locks held by syz.2.2517/15298: [ 480.657032][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.667231][ T5854] Bluetooth: hci25: command tx timeout [ 480.682439][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.694352][ T31] 2 locks held by syz.2.2517/15308: [ 480.700189][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.710139][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.722057][ T31] 2 locks held by syz.4.2556/15447: [ 480.727260][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.737344][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.749412][ T31] 2 locks held by syz.4.2556/15451: [ 480.754626][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.766067][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.786381][ T31] 2 locks held by syz.0.2664/15830: [ 480.791986][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.801740][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.813440][ T31] 2 locks held by syz.5.2717/16082: [ 480.819856][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.830028][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.842232][ T31] 2 locks held by syz.6.2718/16085: [ 480.847441][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.858223][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.870377][ T31] 2 locks held by syz.7.2737/16161: [ 480.875590][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.891930][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.905421][ T31] 2 locks held by syz.3.2721/16183: [ 480.911374][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.921519][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.933663][ T31] 2 locks held by syz.8.2764/16315: [ 480.940283][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.951875][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 480.963928][ T31] 2 locks held by syz.9.2783/16440: [ 480.970143][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.992630][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.005480][ T31] 2 locks held by syz.2.2842/16694: [ 481.011400][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.021730][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.033677][ T31] 2 locks held by syz.2.2842/16706: [ 481.039439][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.049851][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.071906][ T31] 2 locks held by syz.4.2880/16841: [ 481.079176][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.100088][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.112313][ T31] 2 locks held by syz.0.2894/16898: [ 481.117527][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.128315][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.141032][ T31] 2 locks held by syz.1.2953/17125: [ 481.146255][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.156368][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.168437][ T31] 2 locks held by syz.1.2953/17128: [ 481.173660][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.183629][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.203009][ T31] 2 locks held by syz.3.3057/17559: [ 481.208463][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.219550][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.231616][ T31] 2 locks held by syz.7.3066/17590: [ 481.236843][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.246974][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.258851][ T31] 2 locks held by syz.5.3104/17760: [ 481.264064][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.274018][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.285929][ T31] 2 locks held by syz.8.3190/18077: [ 481.307057][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.317088][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.331783][ T31] 2 locks held by syz.6.3197/18123: [ 481.337018][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.347128][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.360756][ T31] 2 locks held by syz.2.3208/18175: [ 481.365986][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.376300][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.407996][ T31] 2 locks held by syz.9.3209/18180: [ 481.413239][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.438306][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.468394][ T31] 2 locks held by syz.4.3210/18199: [ 481.473636][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.488438][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.512097][ T31] 2 locks held by syz.0.3215/18239: [ 481.517313][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.528596][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.545001][ T31] 7 locks held by syz-executor/18262: [ 481.555599][ T31] #0: ffff888035fcc428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 481.565208][ T31] #1: ffff88806deb3488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 481.575383][ T31] #2: ffff888143fb7f08 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 481.603578][ T31] #3: ffffffff8edad9c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x12c/0x6f0 [ 481.619498][ T31] #4: ffff88802f94b0e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 481.630193][ T31] #5: ffff88802f94c250 (&devlink->lock_key#26){+.+.}-{4:4}, at: nsim_drv_probe+0xc1/0xb70 [ 481.649263][ T31] #6: ffffffff8f520508 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 481.659987][ T31] 4 locks held by syz-executor/18265: [ 481.665382][ T31] #0: ffff88806fc84dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 481.677339][ T31] #1: ffff88806fc840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 481.688341][ T31] #2: ffffffff8f688428 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 481.710603][ T31] #3: ffff88814ca37338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 481.720795][ T31] 2 locks held by syz.1.3223/18277: [ 481.725998][ T31] #0: ffffffff8f513730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 481.736282][ T31] #1: ffff8880795586d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 481.748814][ T31] 1 lock held by syz-executor/18281: [ 481.754122][ T31] #0: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 481.765891][ T31] [ 481.768992][ T31] ============================================= [ 481.768992][ T31] [ 481.777443][ T31] NMI backtrace for cpu 1 [ 481.777465][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 481.777486][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.777496][ T31] Call Trace: [ 481.777504][ T31] [ 481.777512][ T31] dump_stack_lvl+0x189/0x250 [ 481.777535][ T31] ? __wake_up_klogd+0xd9/0x110 [ 481.777561][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.777577][ T31] ? __pfx__printk+0x10/0x10 [ 481.777607][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 481.777630][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 481.777645][ T31] ? _printk+0xcf/0x120 [ 481.777671][ T31] ? __pfx__printk+0x10/0x10 [ 481.777694][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 481.777714][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 481.777735][ T31] watchdog+0xfee/0x1030 [ 481.777754][ T31] ? watchdog+0x1de/0x1030 [ 481.777781][ T31] kthread+0x70e/0x8a0 [ 481.777807][ T31] ? __pfx_watchdog+0x10/0x10 [ 481.777822][ T31] ? __pfx_kthread+0x10/0x10 [ 481.777844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.777864][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.777882][ T31] ? __pfx_kthread+0x10/0x10 [ 481.777904][ T31] ret_from_fork+0x3fc/0x770 [ 481.777925][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 481.777949][ T31] ? __switch_to_asm+0x39/0x70 [ 481.777967][ T31] ? __switch_to_asm+0x33/0x70 [ 481.777986][ T31] ? __pfx_kthread+0x10/0x10 [ 481.778008][ T31] ret_from_fork_asm+0x1a/0x30 [ 481.778040][ T31] [ 481.932096][ T31] Sending NMI from CPU 1 to CPUs 0: [ 481.937331][ C0] NMI backtrace for cpu 0 [ 481.937347][ C0] CPU: 0 UID: 0 PID: 18281 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 481.937366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.937376][ C0] RIP: 0010:lock_acquire+0x120/0x360 [ 481.937397][ C0] Code: 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e8 e0 02 00 00 <48> 83 c4 28 48 c7 c7 92 e2 b8 8d e8 f0 b3 d2 09 b8 ff ff ff ff 65 [ 481.937410][ C0] RSP: 0000:ffffc90004707788 EFLAGS: 00000086 [ 481.937424][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 177acc9d65089000 [ 481.937435][ C0] RDX: 0000000000000001 RSI: ffff888024a1e4f0 RDI: ffff888024a1da00 [ 481.937446][ C0] RBP: ffffffff822ec6d2 R08: 0000000000000000 R09: ffffffff822ec6d2 [ 481.937457][ C0] R10: dffffc0000000000 R11: fffff94000b2a107 R12: 0000000000000002 [ 481.937467][ C0] R13: ffffffff8e13f160 R14: 0000000000000000 R15: 0000000000000246 [ 481.937478][ C0] FS: 0000000000000000(0000) GS:ffff888125c11000(0000) knlGS:0000000000000000 [ 481.937491][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.937502][ C0] CR2: 00007f715770a120 CR3: 0000000035cb2000 CR4: 00000000003526f0 [ 481.937516][ C0] Call Trace: [ 481.937523][ C0] [ 481.937529][ C0] ? page_ext_get+0x22/0x2f0 [ 481.937554][ C0] ? page_ext_get+0x22/0x2f0 [ 481.937568][ C0] page_ext_get+0x3e/0x2f0 [ 481.937580][ C0] ? page_ext_get+0x22/0x2f0 [ 481.937595][ C0] __reset_page_owner+0x28/0x1f0 [ 481.937613][ C0] __free_frozen_pages+0xc71/0xe70 [ 481.937635][ C0] vfree+0x25a/0x400 [ 481.937651][ C0] ? __pfx_kcov_close+0x10/0x10 [ 481.937671][ C0] kcov_close+0x28/0x50 [ 481.937683][ C0] __fput+0x449/0xa70 [ 481.937707][ C0] task_work_run+0x1d1/0x260 [ 481.937728][ C0] ? __pfx_task_work_run+0x10/0x10 [ 481.937748][ C0] ? kmem_cache_free+0x18f/0x400 [ 481.937767][ C0] do_exit+0x6b5/0x22e0 [ 481.937789][ C0] ? do_raw_spin_lock+0x121/0x290 [ 481.937815][ C0] ? __pfx_do_exit+0x10/0x10 [ 481.937840][ C0] do_group_exit+0x21c/0x2d0 [ 481.937859][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.937878][ C0] get_signal+0x1286/0x1340 [ 481.937903][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 481.937924][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 481.937948][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 481.937975][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 481.937992][ C0] exit_to_user_mode_loop+0x75/0x110 [ 481.938008][ C0] do_syscall_64+0x2bd/0x3b0 [ 481.938025][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.938039][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 481.938054][ C0] ? clear_bhb_loop+0x60/0xb0 [ 481.938070][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.938083][ C0] RIP: 0033:0x7fbdd05907bc [ 481.938095][ C0] Code: Unable to access opcode bytes at 0x7fbdd0590792. [ 481.938103][ C0] RSP: 002b:00007ffc4374e460 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 481.938120][ C0] RAX: 000000000000006c RBX: 00007fbdd12e4620 RCX: 00007fbdd05907bc [ 481.938131][ C0] RDX: 000000000000006c RSI: 00007fbdd12e4670 RDI: 0000000000000003 [ 481.938142][ C0] RBP: 0000000000000000 R08: 00007ffc4374e4b4 R09: 000000000000000c [ 481.938152][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 481.938162][ C0] R13: 0000000000000000 R14: 00007fbdd12e4670 R15: 0000000000000000 [ 481.938180][ C0] [ 482.298329][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 482.305212][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 482.317024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.327087][ T31] Call Trace: [ 482.330375][ T31] [ 482.333307][ T31] dump_stack_lvl+0x99/0x250 [ 482.337895][ T31] ? __asan_memcpy+0x40/0x70 [ 482.342474][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.347656][ T31] ? __pfx__printk+0x10/0x10 [ 482.352294][ T31] panic+0x2db/0x790 [ 482.356178][ T31] ? __pfx_panic+0x10/0x10 [ 482.360588][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 482.365357][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 482.371160][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 482.376515][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 482.382657][ T31] watchdog+0x102d/0x1030 [ 482.386987][ T31] ? watchdog+0x1de/0x1030 [ 482.391414][ T31] kthread+0x70e/0x8a0 [ 482.395490][ T31] ? __pfx_watchdog+0x10/0x10 [ 482.400157][ T31] ? __pfx_kthread+0x10/0x10 [ 482.404762][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 482.409972][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.415168][ T31] ? __pfx_kthread+0x10/0x10 [ 482.419779][ T31] ret_from_fork+0x3fc/0x770 [ 482.424376][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 482.429482][ T31] ? __switch_to_asm+0x39/0x70 [ 482.434242][ T31] ? __switch_to_asm+0x33/0x70 [ 482.438990][ T31] ? __pfx_kthread+0x10/0x10 [ 482.443570][ T31] ret_from_fork_asm+0x1a/0x30 [ 482.448334][ T31] [ 482.451727][ T31] Kernel Offset: disabled [ 482.456034][ T31] Rebooting in 86400 seconds..