last executing test programs: 2.336081874s ago: executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000047d8e896eb2c64234ed10cf04810f786eaf2f0a98e45f6b9447c9823e8bf37b7521e99af24aa5279a08bacc9df2077fff8b3fd62d6906d73a2e5680cc03aeb07361d61026b8c5808"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) gettid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000013c0), 0x0, &(0x7f0000001640)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="000000002c0000000000ca99adff38bb9fe324b5", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES64=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYBLOB="eb000e27fd8b49ba18d4155d987a75e9247eb376ed756025ad7095ff658630ca55fa76de9dd1a9544a1eec3f0d98596e035dbff5c6738180b9073a1eea6b95e0dfb87e450db6937dbf0d49ccfcafbf2a", @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES8, @ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000060000000100000002000000293cc607859c12713311c04d17216817e19ad33281c41e545a1aefe8ff9dd102e9bfe01bbe1308aeca730466e4768d5565a6177bd155b91624a3bd5e40eef67f194b13c7bfec8d63122dd91df91a62c6799a3b9ebf0a71a9893f1f526de1c6084924b0e746cabfe19b550ac1e14664f8eb5279a73c0bcc4d7dfac5cf55923a3b81cc868e77c0ff6dc78be0cec2670da642d8d1023e309569f1a7416fbbd6046f99a62e8acfd0878836abefeb3389f8c27c7d876ee2fc1a9ef55a511dbf1bb773d237ab45", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x118, 0x440d4}}], 0x1, 0x4008014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="780200001600000228bd7000ffdbdf25ac1e0001000000000000000000000000200100000000000000000000000000014e2300004e2100000a0080806c00000089", @ANYRES64, @ANYRES32=0x0], 0x278}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[@ANYBLOB="78010000", @ANYRES16=0x0, @ANYBLOB="080126bd7000fbdbdf25020000002c0001", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000100000008000300010000000800030004000000340001801400020070696d3672656700000000000000000008000100", @ANYRES32=r3, @ANYBLOB="14000200776c616e3000000000000000000000005000018014000200776c616e30000000000000000000000008000100", @ANYBLOB="14000200626f6e643000000000000000000000000800030001000000140002006873723000000000000000000000000038000180080001", @ANYRES32=r3, @ANYBLOB="1400020070696d367203000300000008000100"/31, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="7c00018008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d7265673100000000000000000014", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="140002006e723000000000000000000000000000080003000300000014000200726f736530000000000000000000000008", @ANYRES32, @ANYBLOB="f5babfdde49182b91181e13835126f0b33acd51ce1323171f99ce461627db0b15e481045d740471fafe813546b2837415758f3926a39a6ef829892171d26a810889d8f154d3c6701f9e0610d13"], 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040091) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f1ff2dbd7000fddbdf250e0f000008003900360c006008000300", @ANYRES32=r6], 0x24}, 0x1, 0x14, 0x0, 0x4000804}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00080bbd7000ffdbdf250300000008003c000700000005002f00410000000500d14da2f13a0001000000050029000100000008000b000000000008002b0003000000050037000100000008003b0004003031dc4400006087beb4cd60d77acc3dc9a16d24c9f760fd29657a94e59e9a5df4d8d1a4cf46ec823687112b4f5c"], 0x54}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmsg(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x0) r11 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000580)}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r10, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x20040400) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="00032bbd7000fbdbdf250200000018000180140002007465616d5f736c6176655f0500000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44040090}, 0xc1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "00fa00"}) 2.282626347s ago: executing program 1: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0x17}, 0xfffffffc}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff31, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001500)=ANY=[@ANYBLOB="38010000100000020000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000001f32000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000a00040000000000fb914bad91000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002c80)=@newtaction={0x6c, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x54, 0x1, [@m_xt={0x50, 0x0, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0x14, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)="162b5ed9e21c9fa6b505c17a00307c20a2ba4058126eed062f59f9c4cb64f75fb14b9d734f6f00d999491975fcf37f1ea0e19611663c9ded32ad1e5c85e8d7d9e034c99423e6880b5b127d55eb58c8ab882faf93a5a3c96927082aee64658b705b17f1d300fb18f879ec3078ac5636c3cf225359144710ad49ce7daa434ad4ccca7b220ad9b38e472896b4452317011c90bb5ccca62481b37cf474ec373c3a52971a833ed953bb24af17a882af21abf52f5c32b83fb98d42f9ea4e", 0xbb}, {&(0x7f0000000540)="958bba6cda1f57a4bf03e06d0ee0147f4213fb1d31a73a901938420b16cf271ab5544e6498a51900826cb88a038d701995c5daf2488b0303a1d3f3051af97e0a23c5fb821003243388c4cbd3427c7036958065", 0x53}, {&(0x7f0000000040)="943398fe87bc51722973b55b07e3c11efe65", 0x12}], 0x3}}], 0x1, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.123402224s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81a100850000006d000000040000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.63144014s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) unshare(0x26020480) unshare(0x2a040000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140400001000010000000000000000000000000a14000000020a01021e2139d036edd62c84f200000000000000000000000014000000110001000000585b9c74cdee"], 0x3c}, 0x1, 0x1200}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRES64=r3]) getsockopt$nfc_llcp(r3, 0x6a, 0x0, 0x0, 0x20000071) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000063c0)=[{{&(0x7f0000004300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000005480)=ANY=[@ANYBLOB="180b41517e55b3e6240d337329000000000000001f00000004000010000000"], 0x30}}], 0x1, 0x0) r6 = socket(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='tlb_flush\x00'}, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)) socket$caif_seqpacket(0x25, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$CAIFSO_REQ_PARAM(r6, 0x84, 0x80, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) unshare(0x20040600) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000340)=0xffff7800, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 1.511667551s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x100000}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000000c0)={0x8, 'veth0_vlan\x00', {'team_slave_0\x00'}, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast1, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x70bd26}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000048001a803c000a80050008"], 0x68}}, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x28, 0x1, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x9, &(0x7f0000000040), 0x4) 1.496134868s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000400), 0xffc00) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7fffffff, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x9, 0x30}, &(0x7f0000000140)=0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x9, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x30044815}, 0x4000880) 1.422748462s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000005400010000ddf37177586c0000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000000e000000200000000000000000000000008000000"], 0x38}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x63, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000f40)=ANY=[@ANYBLOB="78050000", @ANYRES16=r2, @ANYBLOB="08002bbd7000fddbdf250c0000006c010380380103801c00018008000200235b9f000a000200ffffffffffff0000040003000c000180080001004a0000001c000180080001008000000008000100ff7f0000080001000500000024000180080001000100000004000300040003000800020047504c00080002007d3a24003400018008000100d55c000004000300080001006600000004000300040003000c0002002e242e5c242c210008000100ffffff7f3000018009000200766c616e0000000004000300040003000800010007000000080001000500000004000300040003001800018008000100020000000400030004000300040003005000018009000200aaaaaaaaaa000000080001003f000000040003000b0002002d2d7b2cfb2d000008000100040000000800010003000000090002002f2e5d2100000000050002000000000004000300040001002c0003802800018005000200000000000800020027da25000400030008000100010000000800020047504c004c00018008000100", @ANYRES32=r5, @ANYBLOB="140002007663616e30000000000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x578}, 0x1, 0x0, 0x0, 0x4048084}, 0x811) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) r8 = socket$nl_route(0x10, 0x3, 0x0) connect$bt_sco(r7, &(0x7f0000000080)={0x1f, @none}, 0x8) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x64, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r12}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x64}}, 0x0) 1.354339776s ago: executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) socket$inet(0x2, 0x4, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000400ffffffff080003"], 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000022c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x290, 0x328, 0x328, 0x328, 0x1a8, 0x290, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'batadv0\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ip_vti0\x00', 'nicvf0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000003, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006860c736f4b9502cbf08654b5f9fdfd53ad1c236bcb0b23de28467039863959190b726a1792efd3ce7aa987173698bc6fde389f73de72f66ddcb1b9bc2225437119e320b0a6adb6fab1d6ff5cd4dd051054541cb31089d3249278e311a79fc9f628ce1f9e35d4097a4bf95dcd509a2044f0051a5736e3aaf2fdd2bb5a3ba22fe27afe45a8d8447af576b0859f559bcf331325622cc766a2d5b1a738465fb4bb2bcf7bd7e74631301fb4de68c4eaa4e39b528694c41"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200810000000000000000000000000000000000000000000000001000000a69bbfa853b"], 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r6, r7, 0x0, 0x900000001) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x81, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x400}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) pipe(&(0x7f0000000040)) 1.259146254s ago: executing program 3: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x850) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x6a3a2000) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x81000) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000580), 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x48000) syz_init_net_socket$ax25(0x3, 0x0, 0xcb) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r5, &(0x7f00000008c0), &(0x7f0000000940)=@tcp, 0x1}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x7bfd91387607f843}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x6c, r8, 0x800, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc657, 0x8}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x590c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r10 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000d00)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000d40)=0x401, 0x4) r11 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8d4}, 0x4000000) 1.16392013s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8000}) close(r1) socket$packet(0x11, 0x2, 0x300) accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40014) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="24002d80040002000000fd000500010000aa549b2fc05c33610000"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x0) 1.113648863s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0xde3d, 0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000100)={0x12fc, r2, 0x902, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c0, 0x11d, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x4, 0x36, 0x16, 0x6, 0x6, 0x36, 0x30, 0x4, 0x48, 0x4, 0x18, 0x6c, 0x6, 0x18, 0xc, 0x6, 0x24, 0x48, 0x36, 0x1b, 0x36, 0x30, 0x16, 0x16, 0x3, 0x0, 0x9, 0x12, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x8001, 0x40, 0x81, 0xeb2, 0x3, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3ff, 0x3, 0x3, 0x5, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x4, 0x9}, {0x5, 0x7}, {0x5, 0x9}, {0x6, 0x2}, {0x3, 0x2}, {0x6, 0x5}, {0x3, 0x9}, {0x7}, {0x1, 0x9}, {0x1, 0x9}, {}, {0x5, 0x4}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x5}, {0x4, 0x6}, {0x6, 0x4}, {0x4, 0x9}, {0x7}, {0x6}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x9}, {0x2, 0x5}, {0x5, 0x5}, {0x3}, {0x7, 0x9}, {0x2, 0x7}, {0x7}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x2}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x8, 0xffff, 0x5, 0x6db8, 0x4, 0xcc53]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x9, 0x1, 0x1f, 0x5, 0xffff, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x75}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x1, 0x24, 0x4, 0x0, 0x877fabc94330ee6c, 0x16, 0x3, 0x30, 0x9, 0x12, 0x6c, 0xc, 0x1b, 0x6c, 0x1b, 0x3, 0x24, 0xb, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5f21, 0xc6c, 0xfd5b, 0x6, 0x7, 0x200, 0x2]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xfffc, 0xe2ab, 0x400, 0x5, 0x4, 0x9]}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x6, 0x7, 0x5, 0x7, 0x1ff, 0x5, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x200, 0x0, 0x1, 0x6, 0x200, 0x3, 0x7]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x21f, 0x1f, 0xffff, 0x401, 0x5, 0x5, 0xdb06, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0x4, 0xffc1, 0x3f, 0xe4, 0x3f, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x24, 0x5524af03ffd68bb, 0x10, 0x3, 0x5, 0x30, 0x18, 0x4, 0x3, 0x1b, 0x8, 0x1b, 0x6, 0x5d, 0x1b, 0x5, 0x6c, 0x30, 0x24, 0x2, 0xcfdc680f845dcd83, 0x2, 0x68, 0x18, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x7f, 0x400, 0xf001, 0x0, 0x9, 0x7, 0x9]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}]}]}, @NL80211_ATTR_TID_CONFIG={0x230, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ff}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffeffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xca}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x200, 0x6, 0x40, 0x2, 0x100, 0x8001]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x5}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x3ff, 0x4, 0xe, 0x8, 0xfffd, 0x3, 0x28]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x8, 0xfe00, 0x1, 0x1d, 0x3ff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x1, 0x1, 0xa5c, 0x1f, 0x8000, 0x8, 0xa4f]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x36, 0x1b, 0x60, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x7}, {0x5, 0x3}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0xa}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x5, 0x1, 0x5, 0x3, 0x30, 0x36, 0x1b, 0x12, 0x2, 0x6, 0x18, 0x6, 0x9, 0x5, 0x36, 0x3, 0xc, 0x18, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x5, 0x6}, {}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x4, 0x9}, {0x3, 0x4}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x4}, {0x7, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x88}]}]}, @NL80211_ATTR_TID_CONFIG={0x19c, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x6c, 0x48, 0x30, 0x6c, 0x5, 0x3, 0x48, 0x36, 0x3, 0xb, 0x8, 0x1b, 0x18, 0x24, 0x2, 0x5, 0x18, 0xc, 0x24, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4d}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x100, 0x9, 0x0, 0x8, 0x5, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0xb, 0x1b, 0x9, 0x6c, 0x9, 0x16, 0x4, 0x6, 0x30, 0x30, 0x30, 0x3, 0x30, 0x16, 0x18, 0x30, 0x16, 0x18, 0x9, 0x12, 0x1, 0x60, 0xc]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x4, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0x1}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x5}, {0x3, 0x5}, {0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0xa}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x4}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x6, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0x2}, {0x7}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x5, 0x5}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x5}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x4, 0x6}, {0x6, 0xa}, {0x2, 0x1}, {0x1}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x6}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x1}, {0x2, 0x9}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x7, 0x6}, {}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9000000}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x80, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6327}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1fbe}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x18ee741fc000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x8, 0x5, 0x9, 0x1, 0x3, 0x81]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0xa}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x3, 0x5}, {0x1, 0x8}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x4, 0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x1}, {0x7, 0x7}, {0x6, 0x2}, {0x6, 0x1}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x4}, {0x3, 0xa}, {0x7, 0x6}, {0x2, 0x1}, {0x5}, {0x6, 0x7}, {0x7, 0x4}, {0x5}, {0x3, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x52b, 0x0, 0x9, 0x100, 0xff, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x20, 0x8, 0x5, 0x1, 0x1f, 0xfff, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x724, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x9, 0xb58f, 0x0, 0x1, 0x8, 0x1]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x316, 0x9, 0x81, 0x4, 0x20, 0x2, 0xce, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x0, 0xfffc, 0x0, 0x81, 0x3f, 0xe5, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x0, 0x60, 0x1b, 0x2b, 0x1, 0x48, 0x2, 0x9, 0x1b]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x5, 0x18, 0x1b, 0x4, 0x2, 0x12, 0x18, 0x5e, 0x1, 0x48, 0x36, 0x3, 0x30, 0x6c, 0x1, 0x16, 0x1b, 0x2, 0x60, 0x16, 0x6, 0x6c, 0x2, 0x4, 0x5, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xff01, 0xfff, 0x100, 0x1f, 0x903, 0x1f, 0x1]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0x8}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x60, 0x2]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x5}, {}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x3}, {0x0, 0x2}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x2}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {}, {0x1, 0x8}, {0x7}, {0x3, 0x1}, {0x2}, {0x6, 0x8}, {0x3, 0xa}, {0x3}, {0x1, 0x3}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x9}, {0x3, 0x6}, {0x3, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x7}, {0x3, 0x5}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x5}, {0x2, 0x9}, {0x6, 0x7}, {0x5, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x3]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x5, 0x60, 0xc, 0x38, 0x1, 0x9, 0x12, 0x30, 0x30, 0xc, 0x1b, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x4, 0x7, 0x8, 0x3, 0x1, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf939, 0x2, 0x9, 0x401, 0x7, 0x80, 0x8, 0x8]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x1f, 0x40b, 0x2, 0x8, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0xa4, 0x6, 0x1, 0x3, 0x80, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x939}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3e}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x8, 0x6, 0x3ff, 0x424, 0x7, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x2, 0x1, 0x401, 0x800, 0xa478, 0xfb, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x7}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x1}, {0x5, 0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x3}, {0x5, 0x4}, {0x1, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x12, 0x30, 0x0, 0xf, 0x1b, 0xb, 0x24, 0x48, 0x2, 0x18, 0x36, 0x18, 0x16, 0x18, 0xc, 0xb, 0x3, 0x18, 0x1, 0x6c, 0x60]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x3}, {0x4}, {0x4, 0x8}, {0x6, 0x5}, {0x3, 0x3}, {0x5}, {0x4}, {0x3, 0x7}, {0x2, 0xa}, {0x3, 0x2}, {0x2, 0x3}, {0x5, 0x6}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0xa}, {0x2, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x4, 0xa}, {0x4, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x2, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x5, 0x1e}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x5}, {0x4}, {0x6, 0x8}, {0x1}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x5, 0xfffe, 0x9, 0x8, 0x9, 0x9, 0x3ff]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x3}, {0x5, 0x4}, {0x4, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x6}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0xa}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x1}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x1}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x3f, 0xfffc, 0x0, 0x1b, 0x90eb, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x3, 0x63, 0x6c]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x1}, {0x5, 0x1}]}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffeffff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x298, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x67, 0x6, 0x0, 0x5, 0x36, 0x60, 0x60, 0x36, 0xc, 0xb, 0x60, 0x60, 0x16, 0x3, 0x60, 0x1, 0x1, 0x30, 0x16]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfb}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0xfe0, 0xe0ca, 0x1ff, 0x0, 0x1, 0xcd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x965c, 0x9, 0x446e, 0xbaf, 0xfff, 0xb6b, 0x101]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x1}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x2}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0x6}, {0x3}, {0x6, 0x5}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x4, 0x9}, {0x4}, {0x4}, {0x2, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x7, 0x6}, {0x5, 0x5}, {0x2, 0x9}, {0x2}, {0x1, 0x9}, {}, {0x7, 0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x278, 0x5, 0x9, 0x0, 0x40, 0x80]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x4, 0x8}, {0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x5, 0x6}, {0x6}, {0x5, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x8}, {0x2}, {0x3, 0x5}, {0x4, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x5}, {0x4, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x8}, {0x3, 0x4}, {0x7, 0x5}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x8}, {0x5}, {0x4, 0xa}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x4, 0x7}, {}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x7, 0xa}, {0x3}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x83201bdf5e697080, 0x1b, 0x4, 0x6, 0x4, 0x24, 0x1, 0x36, 0x24, 0x24, 0x48, 0x30, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4f, 0x9, 0x120, 0x7, 0xe3f, 0x527d, 0x7784]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1eec, 0x5, 0x7ff, 0x3d, 0x0, 0x9, 0x6, 0x365]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x2}, {0x3, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x1}, {0x4, 0xa}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x6}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0xa}, {0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x5}, {0x7}, {0x5, 0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x3, 0xa}, {0x7, 0x8}, {0x2, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3, 0x2, 0xfe01, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x7ff, 0x7ff, 0x4d, 0x8, 0x2, 0x5, 0x64]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x7, 0xb191, 0x4, 0x7, 0x7cb, 0x2]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x2, 0x1b, 0x0, 0x30, 0x4, 0x6, 0x16, 0x1, 0x3, 0x12, 0x6c, 0x48, 0x6, 0x30, 0x30, 0x3, 0x30, 0x12]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x2, 0x5, 0x12, 0xc, 0x30, 0x14, 0x12, 0x6c, 0x3, 0x18, 0x36, 0x5, 0x1b, 0x9, 0x36, 0x1b, 0x4, 0xb]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0xb, 0x24, 0x2, 0x36, 0x9]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x3}, {0x0, 0xa}, {0x4}, {0x1, 0x4}, {0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x3}, {0x6, 0x7}, {0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x2, 0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x459c, 0xfff, 0x96, 0x4, 0xe9b, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x8}, {0x4, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x2, 0x6c, 0x1b, 0x9, 0x4, 0x30, 0x1, 0x1, 0x12, 0x0, 0xc, 0x36, 0x2, 0x3, 0x3, 0x5, 0x24, 0x6, 0x48, 0x9, 0x36, 0x6, 0xc, 0x3, 0x3, 0x3cbc1bbd1b071465, 0x18, 0x4]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0xc, 0x30, 0x16, 0x2, 0x1b, 0x12, 0x1, 0x24, 0xb, 0x5, 0x60, 0x6c, 0x1b, 0x5, 0x16, 0x48, 0x36, 0x12, 0x18, 0xb, 0x24, 0x18, 0x4, 0x18, 0x60, 0x6c]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x24, 0x6]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x4}, {0x5, 0x4}, {}, {0x0, 0x2}, {0x6, 0x9}, {0x7}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x6}, {0x7, 0x9}, {0x4, 0x6}, {0x4, 0x6}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x4, 0x6}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x6}, {0x2, 0x4}, {0x2, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x8}, {0x7, 0x8}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x5, 0xb, 0xb, 0x2, 0x6c, 0x3, 0x1, 0x36, 0x0, 0xc, 0x4, 0x1, 0xb, 0x1, 0x3, 0x5, 0x18, 0x6c, 0xc, 0x1b, 0x36]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x4, 0x48, 0x18, 0xc, 0x60, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffc1, 0x200, 0x7, 0x1, 0x5, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8000, 0x7fff, 0xf8, 0x6, 0x3, 0x0, 0x1f]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7, 0x8, 0x68d, 0x3, 0x2, 0x4, 0x8ea]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x3, 0x24, 0x5, 0x24, 0x1b, 0x6, 0x18, 0x1b, 0x1, 0x6c, 0x4, 0x3, 0x48, 0x1b, 0x6, 0x5, 0xb, 0x12, 0x60, 0xc, 0x60, 0x1, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}]}]}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000001480)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @bcast, 0x3, 0x8, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x48010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001640)={'hsr0\x00', 0x200}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_icmp(0x2, 0x2, 0x1) poll(&(0x7f0000001680)=[{r1, 0x4028}, {r0, 0x1}, {r1, 0x2004}, {r0, 0x25c2}, {}, {r5, 0x818c}, {r1, 0x110}, {r6, 0x8000}], 0x8, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000016c0)={0x5, 0x0, 0x1, 0x9, 0x7fffffff}, 0x14) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001ec0)=@filter={'filter\x00', 0xe, 0x5, 0x766, [0x0, 0x20001740, 0x200019bc, 0x20001d28], 0x0, &(0x7f0000001700), &(0x7f0000001740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x1, 0x6006, 'veth0_macvtap\x00', 'syzkaller1\x00', 'virt_wifi0\x00', 'tunl0\x00', @random="e38a75987fac", [0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0x116, 0x116, 0x166, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'ip6erspan0\x00', {}, 'ip6_vti0\x00', {0xff}, 0x11, 0x13}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x21, 0x5, 0x200, 0x1}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x927, {0x488e}}}}}, {0x3, 0x59, 0x6004, 'veth1_to_team\x00', 'syz_tun\x00', 'ip_vti0\x00', 'erspan0\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7fff, 0x4, 0x7f, 0x0, 0x0, "8d573752d4084d2437f43688865a984db8f058a164c3cb34d6a1d5a77fa57b6074f940cf68a9511592c9ea9aba130ecad9c7f3076443208e72c551cfd4a8631e"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x2e, 0x9, 'vxcan1\x00', 'veth1_to_batadv\x00', 'pim6reg0\x00', 'batadv0\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], 0xbe, 0x186, 0x1be, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@remote, [0xffffffff, 0xffffffff, 0x0, 0xff], 0x4e20, 0x8, 0x2, 0x4e24, 0x10, 0x2}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10001, 'syz1\x00', {0xf1}}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x3ff, 0x1000, 0x1ff, 0x0, 0x0, "c557bcd2803f17acedf2abcb361791ff39927804605527565519c3b295559e2bc7403a2eefae3abed94f49121fb5ab5d5b5c3fc62300b750aeaf64342c9a4f6a"}}}], @common=@dnat={'dnat\x00', 0x10, {{@random="0ddb8ad552b6", 0x7fffffffffffffff}}}}, {0x11, 0x10, 0x88f5, 'geneve1\x00', 'team_slave_0\x00', 'veth0_to_batadv\x00', 'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0xff], 0xce, 0x14e, 0x17e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xff, 0x9, 0x3, 0x7}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x4, 0x4, 0xc496, 0x0, 0x4}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x9, {0xffffffffffffff0f}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x4, 0x2, 0x1, [{0x9, 0x1, 0x886c, 'veth1_vlan\x00', 'veth0_vlan\x00', 'pimreg0\x00', 'syzkaller0\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xbbaea035b71444d6], 0x6e, 0xa6, 0x11e, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0xf40f, 0x7, 0x1, 0x0, "c54c77ccc17a01b0c71ba7f9b10d7755a225389b34253b1bd8d67b80930307aabd037b81ba15ce0e99820ae913699e6d449960e18dc5c22332652eacc595833a"}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x7de) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002000)={0x0, 0x90, &(0x7f0000001f40)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x12b7, @remote, 0x5}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @mcast1}, @in6={0xa, 0x4e21, 0xfffffffa, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x7, @empty, 0xff}]}, &(0x7f0000002040)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002080)={r7, 0x80000000}, 0x8) r8 = accept4$rose(r1, &(0x7f00000020c0)=@short={0xb, @dev, @rose, 0x1, @rose}, &(0x7f0000002100)=0x1c, 0x80000) r9 = accept4$unix(r1, &(0x7f0000002140), &(0x7f00000021c0)=0x6e, 0x800) ppoll(&(0x7f0000002200)=[{r5, 0x1000}, {r6, 0xa}, {r6, 0x40c0}, {r8, 0x1242}, {r6, 0x1000}, {r5, 0x8008}, {r6, 0x200c}, {r6, 0x3023}, {r9, 0x90}], 0x9, &(0x7f0000002280)={0x0, 0x3938700}, &(0x7f00000022c0), 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002340), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xc8, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40100}, 0x14) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f00000025c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002500)=""/118, 0x76, 0x0, &(0x7f0000002580)=""/61, 0x3d}, &(0x7f0000002600)=0x40) openat$cgroup(r1, &(0x7f0000002640)='syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002680)={r7, 0x5}, &(0x7f00000026c0)=0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000002700)={0x1f, 0x3, 0x4}, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) sendto$l2tp6(r1, &(0x7f0000002740)="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", 0x1000, 0x0, &(0x7f0000003740)={0xa, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x4}, 0x20) connect$tipc(r1, &(0x7f0000003780)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x2}}, 0x10) 1.043397306s ago: executing program 4: bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @prog_id, r0}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0xd8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x24, r4, 0x100, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2d}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f000700", @ANYRES32=r5], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0x0, 0x2c, &(0x7f0000000980), &(0x7f00000009c0)=""/44, 0x7fff, 0x0, 0xdec, 0x0, &(0x7f0000000bc0)="7a043b0cea6c640032753966e2491ee9bff6ea0ab29278b6a7f2d949388a61915aeb888cb352906f9b3a91b64b59b144b2d43c91c498838bc2a8c2ad573ede8511ccd34fffd9417b8e874f79379a15514265fa85f83178429a628a53a53e986a5c19d2a49e029aa51cf0b0efb241280315167379e9ccd6f4986bbb85684e63662d0828645e963467a95edc7856cbe9adbd3e01ea941aa702ac19d47b4b434580855623a65425472ff6009083637dfa0a9335298b167291eff5f987db71ef26b1bca8b061f4902aa1e803e7de7f73a42315b571034e23d12f1bef93d8d5c65b72a471c284514d504c7709f9b14666f0c245fd93c85df4c5f2dfe08ddcb04d31f001922f994fbe7b997d34624b1e16245d91ff7b2c291a74881ff7a0aeb6125c3c7c97d223ddf04d7223aafaef4dd45c8ecf4152686d9afe490ae5080dd93137bed0c311e079fdcd1a2b57e39013b1a984031aba05e292311f7d93acdf066b097a0c21b151c7c499376e1e8d67822e690b1cc339b24ff1e59da663f45b3fa643ad6f58f013883235ea0731548b1edec668a3ce22ce8f29eefa178db2bc563f0430cd5d32488bdb497445848b8bb2c9ed746e7e06c2ad605d3158756e192567cea366914a779fc0f58e94f1e784dbad9db252297d36ee127d51dc71deffe8e351c98d3f68d550d68ad2619d0d5a30685d4232a0b887e87294b293eb76d4777afb1000a0f9c978c658c367634eadb417283fc88186db04ab813ee6baa6cd8c7bc0a0997980d58f9513bea5ce5a9aa7d8a19f781878911ef00168343d1b1adb499ecd0f208f2cf983e09a1b5cb314a842e012d1145c7f6da649e1e9b2b77556556124883f26a47147936395b6fa8f292554c971f62b64e4407a412a4768c6f1e4bfc4f7a54fed04df6181d8371a40b4f1ebf582ace9b5ab0bbef892cadeacc9fc63d735761d21a7d1a47d816707ea576b914796c7e32a7a041de4d6cfd730c94b33498d4122a4c448057a210964215a4e6be3b9d90a334375b58df950764fd23e14cbba7a8ddccd237a27afb9e934cbd1910e078e29fdf0f8d837eb3619599d75e9e29956460cac30a28bb2246ed95172848e452a2c103b09b54ebcef3fbf9cdac8e5e879e27a6b2f4c6a41ce982641309ed6550b7dcff861c52fae39a62f61034b45103b9ccadf6f3c79722def6180cb0be4cba3e8ec21be76c07ba9386362d932e2a501adac3ee840c7154cfdd58c7bb2f324046c50bee5d0b25a3665b0a28561d060431a095432b29eec2436b59a4d728f05490dbd8703296c67e045f371ecafbbb9938d63b27926e94f765af15d738167f1ef7b00b4d8f122112e470d5560e59d684719abef143c8c0264375a5f3357500dc6f37296aae6acdd1664a4c79dfcdb3baaec93667960bdbe4edb952d98a7b799dd491d05bc1d92b462754074cf025e6c3ad7b5d83a6c1ebb76c1cb228bea57619f18f46d0a61fb00213d94411f15eb1f90a1cbd13097493fa3731b6d3a8c1a0e66afd18de98029dc1fcd800992f92c15bee0cda5833426ccbc93d698be457de6c9c2843d7422d064e80167dc7bdb0b85c56c61b37a81de24ca56ec7b8b19fa632bdcb257bf272681bc1a89504c1b4c6ca5dafce6d2a47580b5d00c894325dae9d9d439f9569be7db073e11fe391b82af94750640689e45c91af5ed3652fe81d01513fa09fb5a0f9b06ecb146bf970aa71894ec47473c86d90bbd7032aa29569493abfeeb695566d36a2a283f1ff74ef55cb4f852f82bbee3f7561895b2937e87245f989e2471f2879dfaa5929170dc2db6fef1efaa399ffabc4cccab061698254f6451baf61e42ee93a78b1756d577998444dc3c73848304654398e2ac02cfc42ac4e54186be9199b6f34659810547959b427df4081030e2c65498529aa001ba3fbbd1c57eba1f5de615314c81a1ded32dd56fb4dfffd5f4d3c253d9610a2135b1d6a76a69c83ecd638af2c74370027445a648e1a42a68f419e35bb9ef237157e974d25dab0252af26e5320fd489351585a3b4a836cf0d15ca69bfdd0a1ee725988197c5b62819ee017e57c76834a3827dc251e349c2705c99dc792df8b2bc0e146852d217fa96bd3ebc60f6947b8a9aaf9d00309d07418a0920c576b1aefc9703193bfb7b65939e29ebc704446e4c1214871211c50dc069e28e581814f962cca9b6b3cae0cd4acd41c9a22c90a47edf3ffa5465f68220a725ed06be6ea6e23e8df6db87221f619968090a36de873e79b1bd2a5fa1437cdf754c21de01399e24dfb94839129ac5935706c86854f90c3b92f5940b329d76961fb238bd36d9027eec21437916db00f632670472ee4c2ab1d77da8d801b208e2417ef82d535e7e682417343162cd0787c29aeceeb31c382f38b71a5691d2ce0e42fd7ef055526ffed80ae028ca0634f61631453bb916a3ad92f9341147954de445eef9e2e16397cf5e2f19110a70432d76232dc648451f61e8104e25768d7a4c8d4b45a31b6e64636fe89756cb84e349c91b1ffe92345e910d0a5aa499c02ead9317211903c53e62250f910e6cd5a9c75594d517b01ea17a6095fefb0667a6568bb2fc4d56e738128b3de5bdbb5d568bd14e2c25b6bc9c3ef28548d4b3e10359ef819fbdca5d0f62d94a5c4ed094cb1ada1bdfb34fde665423d1a8f373b19482e023b1ce7eed1e5ca0e3af8b29758b093eabc98e92ad7286c3c85eb6fd99df6539cb4ab175be115575bdbf2e96934cbfd588d879329bf41aaba10b3c4293afcedc5bec878eb5d778eb097d9810b12fb5247449ff9134269cd447bec0289ffb07b86a0ba745da4b55843a639eda8663b06f38b53d53e3d7dd76a610bd3c72645d10d1dd1de9b99c08d5bb6efa27c83ca131c05b1a2d5184e9072390cd26d999aeb388f8291c7a5af612a4d011cdb3af302bebdf8a4ea748bc2576f3dbd0dd3143a3cec1cec96c2cb5e3b36815f59d24e412eba890c8e081e7b08b6d83c5fde85fab96c5ded4b2539f582e81c43946802c45b786e42c176f24eaeb5c215c91fdada83233f3acb1aa0f0bd69b89c0bd7ed64b83504272fdcd5d57f449a60e491cb1f74469373574ecff7d9f5081d65f33486f44012939b337c3129f1c60721372c20bf666d9b2d0bfd4d4f3db1dd7082607d4a4c340809bf1696d8015b03586484f675d3180d994b312be17c1d59b28962e6fbddcfaf36f8b23d32c126550e368a52f6765099bd24cfbf4aad8738a43fa27f7fdc0913921e9d5c0ef1100ccf6d77f9eafb0b06d9c505cf3e74c5bd45acfb0e0f9c3b13fc027ecf047b617a61a98f41e25cec0eee576a6eb3e87fd4b140aa766d1950913e8ce15c631d8dea370e9b230588fc3ff2d44f0d047e23808a947b17bcb955813324361aab3d21b8468f3144466d189aa6b7a94347cf9c9f6065953417e49e4114e2b0aa509d2a1f066140a8848d0a72aab10589a3cb2050364d4ed00246a20f3d1b3de85c6730362d9b923ca0e02cc864916110d6feeedf53d2d4dddeaa9b6b71925e3a57ce64ecf6c8a072a8673422d9ff8914c1c0b3e25c19086fa30ebc32e4c1b76db1ccebe6f7b8dd0faba6e52b804c400e0925ba8f89da23d2d07e097a490ecf79d00e71a063a11d682e4854e461099d5df3e8822b2fcabfcf3e8af42e5943924a4b2a874fad061881aeba0088c8b16ab2654e5919e0acb072cd46221a4c6c3ed4dfcfcc370b0721b7944ee7ec3b0f1a3d1352cffa7df111a728b73bc1583164c1460140811a258fa3974f4b2d26d2956067ac49fcf33981eff23f01f30f2279f0b2757caa62849fd22024c13513e040ebd0d1fc73e154b27f531d99888ab93c0e408c07802ebc48084c6023ed247710b0c078aad49e206fedb50f22ee3f66d01fc6a914b7ff2ebd67f11de5667622931b94005a60c4e43d68a7bc9e640fbfd4f8696c21988417387cb646721371a4c98162c9ea41da2c4fd15fbe3a806f0c8d7a0fcf3cdbc6b5fad3494e193676464c0ea781ebf232d41e67b462405ea37790655f4eebea9fa4b1259256989d798a7f73c6587449c91fed145f7e6937817aee9d839b9367406affa6e91defef3f0c2b897256f87076bd76a1939d5289fad85b292e235f8f57f5eb0ca233ce15865e00a3360bbe962e15338f3fd263472f95a1a9ebc926bb96727b744cee4df05a79813dd9325a3dfb1d0b0ceb70c5ffc1f53cb4096ecc23727c77b8084f4d9c6cc9c6307c741c822499d3f4b191e157116a81cbfdf220f153df64b64acda9c995d8aa17df6338851d8462d54c9f5efa4936ccf3a8ce1f60c2058cb1e5a23f3925153988c399bc67e5d2f74ab35845bf3eaf9d15f8a2f007ed7c68e0b17c86af11c01d5468feae80be9b83c98dd4a99ad8d470a3dd1c6ed2bad346c6cef8852a5e2c9c6236032137f3980464245e897d5f20f83130b23f7bf2a62f88bb44a9e983d188f7c33e2b2d31644dc024f28838ee0e75fb87f4076c11842594e9e881c38398265f01b05e7f5a17b52997a662176918a84bddcd4b6b9c4696e249406b2bf89a5816e834e3075856e548ba6f088a5c894e60fda56955352cc4af5bd35d00fedc324006d9593a149423a06f4410a5ddd18b0c41ccf536b7a44d6b440cbf0839b6dae96837ef142ae5cf66e55cc0a8fc1fc96c9d4c1d9b09bd66830a0dc472ea9a22add5a53200b57474efcf8f3ab9e261138a04cb29eb242ddb43aae7457a265f606d9e93779e384d5a1defe46ab605f1dfe40d7da69dbf7bf384d7734b1fbd6be014a4377d23c6f83bfe836d6c94ea231505de67aba55f3c04caaaa6720b2218b25afb1b04199832777f46f5c508f6014b88c6f019e1e33c47870e4e290e7f3a1d2d7d73e64a303ffbe9f73a47354b240d759dfd9aee240b3d57702033dba1d89c7ea45207048b895af660a287ec96e737dba28bac237257fdce56aa4e47867802c0c7f615e012bbce584cae5d57e95a0560735658b1300fa0d5e42d59a6f3de74c1080063234beb338d3da743ee9ddb50b6b29ef38596a65a0c45234", &(0x7f0000000a00), 0x3, 0x0, 0xfffffffb}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000004900), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000002940)={0x39c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x2ac, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0a34424d49218578c6248e5094783398e387df9cd0700ddde44eca086795d4b3"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1}}]}, {0x200, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0811e5fe58799effa2a1b294dcc72fb9171471b5a6c5685ef39df1b9997f6d2e"}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0x4}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x44}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a7a30ca530db4d1febf3da821d1c78c0b6b670b90534f14048dbf547e5fc20a7"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x8c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4}, {0x4}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa241}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x39c}}, 0x40000) 997.691171ms ago: executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x1f0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x174, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x4, 0x1], 0x0, [0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x108, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe1f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3f}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x45}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x40, 0x8, 0xf3, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x1, 0x0]}}, {{0x1c, 0x1, {0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc11}}, {0x4}}]}]}, 0x1f0}}, 0x0) 938.644407ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000a40)="2e77d41b9f377bd0884aba1b68bc0820aa78acf853146c284836be36e134a1bc2033af116e38eb34dead3c4b595aacd7b7501acf67db325e7e735eb4249a5d9b8d", 0x41) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="12d34fb69c0f301030a3e81428b6b8b78e177240166b719a7c2469709ab73ff2b50e4e2cd676e47bb4d8809a68614cb40d2d30bba54ec5692d1150edafe7a89e990deda083749d9ead0cf9c98effced3c7e9e481b9a31e0a92f559624fa9"], 0x20}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000980)=0x1, 0x4) write$cgroup_type(r6, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000002c0)=""/3, 0x3, 0x0, &(0x7f0000000300)=""/192, 0xc0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000800000000181100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x18) r14 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCDELRT(r14, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804a0013}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x23, &(0x7f0000000ac0)=ANY=[@ANYBLOB="85100000faffffff186900000700000000000000c0ffffff207500040900000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0300008500000006000000950000000000000018130000", @ANYRESDEC=r3, @ANYBLOB="a7e7469c3902c59f120000000000000092da6abb434900"], &(0x7f0000000040)='syzkaller\x00', 0x800, 0x82, &(0x7f0000000180)=""/130, 0x41100, 0x4, '\x00', r3, 0x24, r6, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0xfffffffe, 0xff}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0xffffffffffffffff, r8, r9, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, r12, r13], &(0x7f0000000740)=[{0x4, 0x2, 0xe, 0x7}], 0x10, 0x18}, 0x90) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0012800b00410065727370616e000010000280d501010000c59d159ef4a058"], 0x40}}, 0x0) 898.422706ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x100000}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000000c0)={0x8, 'veth0_vlan\x00', {'team_slave_0\x00'}, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast1, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x70bd26}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000048001a803c000a80050008"], 0x68}}, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x28, 0x1, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x9, &(0x7f0000000040), 0x4) 847.339917ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000006c0)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) read$alg(r4, &(0x7f0000003780)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00'}, 0x90) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000180)=0xc0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 788.653043ms ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000300)={0xa}, 0x0, &(0x7f0000000380)={0x9}, &(0x7f00000003c0), 0x0) 765.751854ms ago: executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000346c2a2ace96603f5190a84e200", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000800010000000000040004800800020001000000100008800c00078008000500b725887a"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) 668.738004ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@const, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x46}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000070000000c0017000000000000000000080005000000000008000100000000000a0004"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x2}, 0xe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r6) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000005f40)={r5}, &(0x7f0000005e80)=0xfc9e) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r9}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x19c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x16c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x8, 0x1, 0x5, 0xf, 0x1, 0x6, 0x9, 0xf, 0xf, 0x7, 0x9, 0x7, 0xe, 0x4, 0x4, 0x9], 0x0, [0x7, 0x1, 0x100, 0x71a, 0x8, 0x35ad, 0x0, 0x20, 0x4, 0x1ff, 0x7ff, 0x5, 0x2, 0x5, 0x9, 0xd5], [0x9, 0x9, 0x0, 0x2, 0x8, 0x8000, 0xf801, 0x1f, 0x4, 0x7, 0x2, 0xfbff, 0xff80, 0x0, 0x394b, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x9c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x96}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5a}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7fffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0xc, 0xf, 0x3, 0x1, 0x10, 0xf, 0xa, 0xa, 0x6, 0x3, 0xa, 0x5, 0x8, 0x8, 0x4, 0xa], 0x1, [0xf639, 0x3f, 0x0, 0x3ff, 0x0, 0x2, 0x401, 0x2, 0xffff, 0x200, 0x200, 0x7, 0xf001, 0x8, 0x401, 0x9], [0x22aa, 0x8001, 0x5f9c, 0x9, 0xa2f7, 0x101, 0x3f, 0x3, 0x80, 0x8, 0x4, 0x4, 0x8000, 0x7, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x400000}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4080) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "957008"}) 639.317438ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x11, &(0x7f0000000600)={r1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80000) 563.877944ms ago: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'ipvlan1\x00'}) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d47", 0x3c}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3", 0x6a}, {0x0}], 0x4}, 0xc0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 520.446831ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfb, &(0x7f00000004c0)={@local, @multicast, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2, @empty}, {0x1000, 0x0, 0xd1, 0x0, @gue={{0x1, 0x1, 0x0, 0xff, 0x0, @void}, "abaa71d8b623b04653b44d595071fcbe57fe73f236fd32d5400000000000000030474a5cc5d14cbfe6074842aee43a1712b909849313f7a7e955dc907f79988b78bdcc47934b60904cd698b90e7580c39d47b0708e6dc1c79c442a6051eba2e6d5a72d333b20dd8e18270b73fb18416ca7e54de8fbc8cdd1564b0cf7897710f4e4278e24b32f73b0619c8e1b050bcb1926f64a1c78b0fde41c54969b4259b092708dc1175e2f7f3d5bbd642d25b7a3647984d7fd2e6127921b118bfd008041567f405eff9c"}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x89e7, 0x0) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e0000090029ef8020ab0700116905"], 0xfe33) epoll_pwait(r7, &(0x7f00000001c0)=[{}], 0xa, 0xc79, &(0x7f0000000240)={[0x2]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x2001}) shutdown(r6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote, 'vcan0\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 475.043477ms ago: executing program 4: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x0, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x850) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x6a3a2000) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x81000) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000580), 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x48000) syz_init_net_socket$ax25(0x3, 0x0, 0xcb) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r5, &(0x7f00000008c0), &(0x7f0000000940)=@tcp, 0x1}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x7bfd91387607f843}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x6c, r8, 0x800, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xc657, 0x8}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x590c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r10 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000d00)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000d40)=0x401, 0x4) r11 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8d4}, 0x4000000) 443.778346ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xe1, &(0x7f00000003c0)='\xc7i\x8b\xd5\xf5\xb0\xf1\xd5\xbc\xc0\x12\x175~\x17\xdb\xce\x94\x88\v{|i\xe1\xd0\x02\x17#\xd4uK\t\"\x98Q\x93\x14&#\x92\x0eV\x82}\xc6.\xdf\xf6\xd2\xde5\xa3\xc5\xe0\xd8\xd6\b\xdf\x7f\xfcFN\xa2iS\xe8x\x89.\xb9\x9d\xeb*;<\xc3\xd3#\f\x9bq\xef\xc8\xaa\x18mb\xf7\xb5\xc8\xceo\r\xc0\xc5\xa4zz\x96Whe\xe7$\x96\xbd\xeex\xa1\xec\xe2$\xf0\x17\xff\xed\xcf\xb1\x1f\xbe\xdcjJ\x14\xd8\x11\xa4\xac\xb1e>m\xe0\xb6\x18\xee9&\xa3W\xd5\x92\xcfd?\x9drz=!\x80P\x9b\xa1V\x95\xa2\xc8f>\xaa\xad\x87\xafg\x04?eI\xf6\xbc\x1b\xd0Lk\xa4\t\x01\xcd\x02\x8c\x18\xc5\xd0\x8c~\xf9f\xd0\xe0\xea\x11\x06\xca\f\xf9\x99Y8\x1b/\x15w\x93\xe8\v{\xb8\xae\x00'/225}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) 280.945738ms ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@alu={0x7, 0x0, 0x8}, @jmp], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x23) close(r2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010868}, 0xc, &(0x7f0000000280)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x884}, 0x24008000) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 234.361169ms ago: executing program 1: unshare(0x60000f80) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@broadcast}]}]}}}}}}}, 0x0) 208.010371ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$binfmt_elf64(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "5f018930de1898e47b4d00bed0a144d2a1c4bc75bd9139466e7b11d4aa943bbcb92e5d7b91afd7e09719035d4d3721b2b4f6943e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x874) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'hash\x00'}, {0x20, ':'}, {0x20, '\x00'}], 0xa, "dbe1e8cbec59c68786138aca09be8ddb1aec362c2a784ca8933bfe0bd9b1b81977626a1e3f7737d461912f07c80ef3c25e5ca69e183e26335eecacfa757aa91e22abca480c93a0fc0bf72da0e73f60e62bf8db32a9012d4d4539b817b0c2eb07d3c831a8fc97c48411ee258044"}, 0x82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6, 0x1c}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x264, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0xfffffffd}}, @algo_auth_trunc={0x10f, 0x14, {{'cmac(aes)\x00'}, 0x618, 0x1c0, "4dd5ca9865573f0f263152188952a673d849dd60437441f011f8f368c43741e606e3683193499645004743d52f71c2218cbe1e75e1d466606723920f46b763a9b3071aaa0b32a25fb62abcfbdce4a6e9a870f67418685e15ae5245bef0dc25f65c7759f4cf26e2eb674c0e627c34a9536a4b4ac8f25c579849a157e258ae7fc2d821224090dadaee645a570efbcb712081a275318d21798f016c326b1543f74c6f5e1cbdebdc34b6245e5baae8a35d5decf5f968981a8d3fabe77657f82d6918f27753"}}]}, 0x264}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x5, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x74cb0000, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x56, 0x28, 0xdb, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8, 0x8, 0x4, 0x9}}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x28, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r8, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)='`', &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r8}, 0x38) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) 203.029824ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8000}) close(r1) socket$packet(0x11, 0x2, 0x300) accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40014) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="24002d80040002000000fd000500010000aa549b2fc05c33610000"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x0) 153.479269ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000006c0)='rcu_utilization\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) read$alg(r4, &(0x7f0000003780)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00'}, 0x90) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000180)=0xc0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122500000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c0ef815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaad1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69922050000f5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762e122428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302be7ff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9d3fded31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000bb60bc1f1635caf0ca9eabf804adc94e0a73923976299c7ac285542e5de1dd14183f1bb171eabe19fe98f551e1b635300d8e38f07eda29341535e532a6d64ed36fac9c77827bf85ac369eac8879e515b58a03438561c5e78157649c6d45e7e621b79d724e277f1ee49e5b63e81180626a73510be26082a097de42b016336707866d422a93e01c1cbe0cefd4a89dc24b0d7f549908b8620ffd7d900a0a96a381fdd763b39f0bc0af5faf593c5d39fdf43430e4b7c23b5cf691792248cfb9ec9f882dd19a9f6e9426b4f88fe14487942bb34e585083f7b98900682e2683922a94e2f0baecc00f74071d025220bcdbc7f5575ce72981e918681b5a0b1ee9af749885fd8cefb9e182b326eaebad4616647fe1c8c16e42e123c9651f634e962219f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r4 = accept4$llc(r3, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x10, 0x1000) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000440)=0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{}, {@remote}, {@local}, {@remote}, {@private}]}]}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000240)="b0184fd05b20b987986a95399622aab1", 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f1a2c1000010400300000000000000000ffff00"/31, @ANYRES32=0x0, @ANYBLOB="9414aefb000000001c001280090001007866726d000000000c0002800800020002000000140003007866726d3000"/56], 0x50}}, 0x0) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, 0x0, 0x2}, 0x18, &(0x7f0000000340)={&(0x7f00000000c0)="10", 0x6fffff9}}, 0xfeffff) accept4(r0, 0x0, &(0x7f0000000300), 0x0) kernel console output (not intermixed with test programs): ] veth1_vlan: entered promiscuous mode [ 62.940351][ T5120] veth0_macvtap: entered promiscuous mode [ 62.965243][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.983868][ T5120] veth1_macvtap: entered promiscuous mode [ 63.055738][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.070154][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.100859][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.132699][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.163868][ T5120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.180589][ T5120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.200277][ T5120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.209657][ T5120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.330448][ T5118] veth0_vlan: entered promiscuous mode [ 63.345714][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.384936][ T5118] veth1_vlan: entered promiscuous mode [ 63.473374][ T5127] veth0_vlan: entered promiscuous mode [ 63.489790][ T2873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.518330][ T2873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.552736][ T5118] veth0_macvtap: entered promiscuous mode [ 63.563044][ T5127] veth1_vlan: entered promiscuous mode [ 63.597360][ T5118] veth1_macvtap: entered promiscuous mode [ 63.620910][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.621960][ T5117] veth0_vlan: entered promiscuous mode [ 63.634390][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.682417][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.695199][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.709676][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.756056][ T5127] veth0_macvtap: entered promiscuous mode [ 63.765912][ T5117] veth1_vlan: entered promiscuous mode [ 63.775385][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.787758][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.800234][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.816141][ T5118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.825523][ T5118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.834325][ T5118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.843837][ T5118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.856652][ T5127] veth1_macvtap: entered promiscuous mode [ 63.885774][ T5116] veth0_vlan: entered promiscuous mode [ 63.935518][ T5116] veth1_vlan: entered promiscuous mode [ 63.961737][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.982786][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.994011][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.006822][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.024084][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.062345][ T5117] veth0_macvtap: entered promiscuous mode [ 64.081735][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.107910][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.119665][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.130319][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.143111][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.155720][ T5127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.166588][ T5127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178886][ T5127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.188886][ T5127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.228768][ T5117] veth1_macvtap: entered promiscuous mode [ 64.277654][ T53] Bluetooth: hci3: command tx timeout [ 64.277835][ T4491] Bluetooth: hci4: command tx timeout [ 64.283077][ T53] Bluetooth: hci2: command tx timeout [ 64.283109][ T53] Bluetooth: hci1: command tx timeout [ 64.301633][ T5116] veth0_macvtap: entered promiscuous mode [ 64.325355][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.345773][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.363205][ T53] Bluetooth: hci0: command tx timeout [ 64.371541][ T5116] veth1_macvtap: entered promiscuous mode [ 64.424905][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.436184][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.450993][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.461569][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.471481][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.482837][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.496605][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.544544][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.569227][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.580812][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.592148][ T5214] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 64.592513][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.619857][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.636439][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.655499][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.672993][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.683188][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.732857][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.744779][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.764527][ T5117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.774549][ T5117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.783771][ T5117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.793042][ T5117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.844335][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.887023][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.900018][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.916733][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.944382][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.955333][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.973527][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.985570][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.008456][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.032991][ T2873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.046626][ T2873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.076674][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.103091][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.123420][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.134548][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.150964][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.163099][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.185755][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.196653][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.212062][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.237896][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.266825][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.275597][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.302174][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.560770][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.590689][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.619547][ T5236] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.660195][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.693275][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.762751][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.793478][ T5241] syzkaller1: entered promiscuous mode [ 65.806935][ T29] audit: type=1804 audit(1719191567.322:2): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1666930979/syzkaller.frkIva/3/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 65.812770][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.850732][ T5241] syzkaller1: entered allmulticast mode [ 65.893742][ T5240] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.894214][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.903648][ T5240] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.926267][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.202611][ T5246] syz-executor.4[5246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.202765][ T5246] syz-executor.4[5246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.357527][ T53] Bluetooth: hci1: command tx timeout [ 66.374827][ T5121] Bluetooth: hci4: command tx timeout [ 66.374864][ T5124] Bluetooth: hci3: command tx timeout [ 66.387721][ T4491] Bluetooth: hci2: command tx timeout [ 66.454956][ T5124] Bluetooth: hci0: command tx timeout [ 66.592341][ T5249] netlink: 195764 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.617495][ T5252] syzkaller1: entered promiscuous mode [ 66.642488][ T5252] syzkaller1: entered allmulticast mode [ 66.808597][ T5252] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.837383][ T5252] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.024229][ T5277] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.268409][ T5282] bond0: entered promiscuous mode [ 67.296401][ T5282] bond_slave_0: entered promiscuous mode [ 67.327148][ T5282] bond_slave_1: entered promiscuous mode [ 67.380240][ T5282] syz-executor.3 (5282) used greatest stack depth: 17688 bytes left [ 67.801675][ T5309] syz_tun: entered promiscuous mode [ 67.811589][ T5309] vlan2: entered promiscuous mode [ 67.817991][ T5309] vlan2: entered allmulticast mode [ 67.823522][ T5309] syz_tun: entered allmulticast mode [ 67.837842][ T5309] syz_tun: left allmulticast mode [ 67.850654][ T5315] Zero length message leads to an empty skb [ 67.851278][ T5309] syz_tun: left promiscuous mode [ 67.911739][ T5317] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.934229][ T5323] syzkaller1: entered promiscuous mode [ 67.950062][ T5323] syzkaller1: entered allmulticast mode [ 68.064935][ T5319] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.079109][ T5319] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.128359][ T5329] bond0: entered promiscuous mode [ 68.133658][ T5329] bond_slave_0: entered promiscuous mode [ 68.144451][ T5329] bond_slave_1: entered promiscuous mode [ 68.517020][ T5124] Bluetooth: hci0: command tx timeout [ 68.595840][ T5349] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.088005][ T5380] syzkaller1: entered promiscuous mode [ 69.094560][ T5369] netlink: 195764 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.120235][ T5380] syzkaller1: entered allmulticast mode [ 69.576303][ T5407] bond0: entered promiscuous mode [ 69.583914][ T5407] bond_slave_0: entered promiscuous mode [ 69.594406][ T5407] bond_slave_1: entered promiscuous mode [ 69.701498][ T5416] syz_tun: entered promiscuous mode [ 69.737823][ T5416] vlan2: entered promiscuous mode [ 69.748481][ T5416] vlan2: entered allmulticast mode [ 69.754999][ T5416] syz_tun: entered allmulticast mode [ 69.766237][ T5416] syz_tun: left allmulticast mode [ 69.782524][ T5416] syz_tun: left promiscuous mode [ 69.902715][ T5427] tipc: Enabling of bearer rejected, failed to enable media [ 70.042167][ T5435] syzkaller1: entered promiscuous mode [ 70.066180][ T5435] syzkaller1: entered allmulticast mode [ 70.174591][ T5441] syzkaller1: entered promiscuous mode [ 70.186992][ T5441] syzkaller1: entered allmulticast mode [ 70.598074][ T5124] Bluetooth: hci0: command tx timeout [ 70.648978][ T5470] syz_tun: entered promiscuous mode [ 70.654475][ T5470] vlan2: entered promiscuous mode [ 70.659931][ T5470] vlan2: entered allmulticast mode [ 70.665225][ T5470] syz_tun: entered allmulticast mode [ 70.676234][ T5470] syz_tun: left allmulticast mode [ 70.693563][ T5470] syz_tun: left promiscuous mode [ 71.207020][ T5499] syzkaller1: entered promiscuous mode [ 71.222217][ T5499] syzkaller1: entered allmulticast mode [ 71.268943][ T5499] __nla_validate_parse: 10 callbacks suppressed [ 71.268962][ T5499] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.317062][ T5499] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.454584][ T5516] syz_tun: entered promiscuous mode [ 71.461026][ T5516] vlan2: entered promiscuous mode [ 71.466492][ T5516] vlan2: entered allmulticast mode [ 71.471943][ T5516] syz_tun: entered allmulticast mode [ 71.481083][ T5516] syz_tun: left allmulticast mode [ 71.486399][ T5516] syz_tun: left promiscuous mode [ 71.611410][ T5518] syz_tun: entered promiscuous mode [ 71.620385][ T5518] vlan2: entered promiscuous mode [ 71.625561][ T5518] vlan2: entered allmulticast mode [ 71.632251][ T5518] syz_tun: entered allmulticast mode [ 71.647507][ T5518] syz_tun: left allmulticast mode [ 71.653966][ T5518] syz_tun: left promiscuous mode [ 71.784051][ T5524] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.803555][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.809206][ T5524] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 71.810462][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.858088][ T29] audit: type=1804 audit(1719191573.382:3): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir929234997/syzkaller.8OWoF7/25/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 72.122043][ T5539] syz_tun: entered promiscuous mode [ 72.152453][ T5539] vlan2: entered promiscuous mode [ 72.167608][ T5539] vlan2: entered allmulticast mode [ 72.193111][ T5539] syz_tun: entered allmulticast mode [ 72.249532][ T5539] syz_tun: left allmulticast mode [ 72.287078][ T5539] syz_tun: left promiscuous mode [ 72.386736][ T5555] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.447972][ T5557] syz_tun: entered promiscuous mode [ 72.468975][ T5557] vlan2: entered promiscuous mode [ 72.485350][ T5557] vlan2: entered allmulticast mode [ 72.495055][ T5557] syz_tun: entered allmulticast mode [ 72.525668][ T5557] syz_tun: left allmulticast mode [ 72.534480][ T5557] syz_tun: left promiscuous mode [ 72.679684][ T5124] Bluetooth: hci0: command tx timeout [ 72.914569][ T5581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.968332][ T5587] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 72.978573][ T5587] veth0_macvtap: left promiscuous mode [ 72.984321][ T5587] macvtap0: entered allmulticast mode [ 73.002362][ T5587] macvtap0: refused to change device tx_queue_len [ 73.021041][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.404746][ T5613] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 73.424231][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.470463][ T5613] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 73.755412][ T5629] lo speed is unknown, defaulting to 1000 [ 73.790261][ T5629] lo speed is unknown, defaulting to 1000 [ 73.798733][ T5637] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.864478][ T5629] lo speed is unknown, defaulting to 1000 [ 74.145964][ T5654] bond0: entered promiscuous mode [ 74.164380][ T5654] bond_slave_0: entered promiscuous mode [ 74.184889][ T5654] bond_slave_1: entered promiscuous mode [ 74.210899][ T5658] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.346973][ T5629] infiniband syz0: set active [ 74.353290][ T5119] lo speed is unknown, defaulting to 1000 [ 74.373028][ T5629] infiniband syz0: added lo [ 74.472640][ T5629] RDS/IB: syz0: added [ 74.477730][ T5629] smc: adding ib device syz0 with port count 1 [ 74.484198][ T5629] smc: ib device syz0 port 1 has pnetid [ 74.495471][ T5119] lo speed is unknown, defaulting to 1000 [ 74.502389][ T5629] lo speed is unknown, defaulting to 1000 [ 74.758431][ T5124] Bluetooth: hci0: command tx timeout [ 74.799835][ T5629] lo speed is unknown, defaulting to 1000 [ 75.265526][ T5706] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 75.296884][ T5706] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.326948][ T5629] lo speed is unknown, defaulting to 1000 [ 75.463554][ T5706] IPVS: length: 215 != 24 [ 75.932794][ T5629] lo speed is unknown, defaulting to 1000 [ 76.326290][ T5753] __nla_validate_parse: 3 callbacks suppressed [ 76.326311][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.361270][ T5629] lo speed is unknown, defaulting to 1000 [ 76.413845][ T5756] syz_tun: entered promiscuous mode [ 76.424313][ T5756] vlan2: entered promiscuous mode [ 76.431055][ T5756] vlan2: entered allmulticast mode [ 76.436318][ T5756] syz_tun: entered allmulticast mode [ 76.456416][ T5756] syz_tun: left allmulticast mode [ 76.462920][ T5756] syz_tun: left promiscuous mode [ 76.674537][ T5764] : renamed from bond0 [ 76.837343][ T5124] Bluetooth: hci0: command tx timeout [ 76.930064][ T50] cfg80211: failed to load regulatory.db [ 76.999965][ T5774] Bluetooth: MGMT ver 1.22 [ 77.242385][ T5786] rdma_rxe: rxe_newlink: failed to add lo [ 77.271341][ T5786] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.440426][ T5790] syz_tun: entered promiscuous mode [ 77.460589][ T5790] vlan2: entered promiscuous mode [ 77.482050][ T5790] vlan2: entered allmulticast mode [ 77.495574][ T5790] syz_tun: entered allmulticast mode [ 77.527538][ T5790] syz_tun: left allmulticast mode [ 77.547052][ T5790] syz_tun: left promiscuous mode [ 77.846606][ T5805] ip6tnl0: entered promiscuous mode [ 77.855065][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.878356][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.935553][ T5804] ip6tnl0: left promiscuous mode [ 78.085123][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.099466][ T5824] Bluetooth: MGMT ver 1.22 [ 78.222390][ T5827] batadv1: entered allmulticast mode [ 78.568647][ T5849] infiniband syz0: set down [ 78.609849][ T5179] lo speed is unknown, defaulting to 1000 [ 78.626069][ T5179] lo speed is unknown, defaulting to 1000 [ 78.760913][ T5858] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 78.809424][ T5862] lo speed is unknown, defaulting to 1000 [ 78.878935][ T5863] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.919216][ T5124] Bluetooth: hci0: command tx timeout [ 78.937764][ T5868] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 78.945882][ T5868] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.107745][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.165539][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.238730][ T4491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.251265][ T4491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.261383][ T4491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.270734][ T4491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.279299][ T4491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.291751][ T4491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.418026][ T5875] lo speed is unknown, defaulting to 1000 [ 79.943744][ T5905] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 80.007816][ T5905] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 80.015919][ T5905] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 80.103419][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.200372][ T5914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.381551][ T5924] openvswitch: netlink: Flow key attribute not present in set flow. [ 80.444357][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 80.687783][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.705346][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.715184][ T5875] bridge_slave_0: entered allmulticast mode [ 80.729834][ T5875] bridge_slave_0: entered promiscuous mode [ 80.754736][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.770002][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.780242][ T5875] bridge_slave_1: entered allmulticast mode [ 80.789609][ T5875] bridge_slave_1: entered promiscuous mode [ 80.856080][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.896690][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.997862][ T4491] Bluetooth: hci0: command tx timeout [ 81.094411][ T5875] team0: Port device team_slave_0 added [ 81.122703][ T5875] team0: Port device team_slave_1 added [ 81.273011][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.297319][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.322598][ T4491] Bluetooth: hci1: command tx timeout [ 81.325555][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.348291][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.355274][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.414901][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.508642][ T5875] hsr_slave_0: entered promiscuous mode [ 81.543059][ T5875] hsr_slave_1: entered promiscuous mode [ 81.551932][ T5875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.567356][ T5875] Cannot create hsr debugfs directory [ 81.714970][ T5966] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 81.752854][ T5966] team0: Failed to send options change via netlink (err -105) [ 81.760815][ T5966] team0: Port device netdevsim0 added [ 82.032697][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.108585][ T5984] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 82.187381][ T5984] team0: Port device wlan1 added [ 82.207544][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.282627][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.427516][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.463119][ T5997] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 82.549923][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.591624][ T6000] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 82.741770][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.759021][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.775622][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.790994][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.914411][ T5936] syz-executor.2: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 82.949532][ T5936] CPU: 1 PID: 5936 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00176-g02ea312055da #0 [ 82.960001][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.970095][ T5936] Call Trace: [ 82.973401][ T5936] [ 82.976355][ T5936] dump_stack_lvl+0x241/0x360 [ 82.981096][ T5936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.986328][ T5936] ? __pfx__printk+0x10/0x10 [ 82.990954][ T5936] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 82.997410][ T5936] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 83.003954][ T5936] warn_alloc+0x278/0x410 [ 83.008329][ T5936] ? __pfx_warn_alloc+0x10/0x10 [ 83.013223][ T5936] ? hash_netport_create+0x356/0x1040 [ 83.016164][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.018609][ T5936] ? __get_vm_area_node+0x23d/0x270 [ 83.018665][ T5936] __vmalloc_node_range_noprof+0x69f/0x1460 [ 83.018720][ T5936] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.018743][ T5936] ? rcu_is_watching+0x15/0xb0 [ 83.018767][ T5936] ? trace_kmalloc+0x1f/0xd0 [ 83.018792][ T5936] ? __kmalloc_node_noprof+0x247/0x440 [ 83.018817][ T5936] ? kvmalloc_node_noprof+0x72/0x190 [ 83.018849][ T5936] kvmalloc_node_noprof+0x142/0x190 [ 83.018882][ T5936] ? hash_netport_create+0x356/0x1040 [ 83.018912][ T5936] hash_netport_create+0x356/0x1040 [ 83.018952][ T5936] ? __pfx_hash_netport_create+0x10/0x10 [ 83.018980][ T5936] ip_set_create+0xa5c/0x1900 [ 83.019004][ T5936] ? ip_set_create+0x45e/0x1900 [ 83.019035][ T5936] ? __pfx_ip_set_create+0x10/0x10 [ 83.019090][ T5936] ? nfnetlink_rcv_msg+0x225/0x1180 [ 83.019114][ T5936] nfnetlink_rcv_msg+0xbec/0x1180 [ 83.019137][ T5936] ? nfnetlink_rcv_msg+0x225/0x1180 [ 83.019185][ T5936] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 83.019233][ T5936] ? kasan_save_track+0x51/0x80 [ 83.077547][ T4491] Bluetooth: hci0: command tx timeout [ 83.079027][ T5936] ? kasan_save_track+0x3f/0x80 [ 83.079060][ T5936] ? kasan_save_free_info+0x40/0x50 [ 83.079089][ T5936] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 83.091523][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.094194][ T5936] ? __netlink_deliver_tap+0x54d/0x7c0 [ 83.094226][ T5936] ? netlink_deliver_tap+0x19d/0x1b0 [ 83.162955][ T5936] ? netlink_unicast+0x7b8/0x980 [ 83.167982][ T5936] ? netlink_sendmsg+0x8db/0xcb0 [ 83.172985][ T5936] ? ____sys_sendmsg+0x525/0x7d0 [ 83.177970][ T5936] netlink_rcv_skb+0x1e3/0x430 [ 83.182626][ T5875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.182747][ T5936] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 83.195940][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.198484][ T5936] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.198526][ T5936] ? apparmor_capable+0x138/0x1b0 [ 83.198563][ T5936] ? bpf_lsm_capable+0x9/0x10 [ 83.198585][ T5936] ? security_capable+0x90/0xb0 [ 83.198620][ T5936] nfnetlink_rcv+0x297/0x2a80 [ 83.198646][ T5936] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.198675][ T5936] ? __local_bh_enable_ip+0x168/0x200 [ 83.198694][ T5936] ? lockdep_hardirqs_on+0x99/0x150 [ 83.198722][ T5936] ? __local_bh_enable_ip+0x168/0x200 [ 83.198741][ T5936] ? dev_hard_start_xmit+0x773/0x7e0 [ 83.198764][ T5936] ? __dev_queue_xmit+0x2d2/0x3d30 [ 83.198792][ T5936] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 83.198820][ T5936] ? __dev_queue_xmit+0x2d2/0x3d30 [ 83.198846][ T5936] ? __dev_queue_xmit+0x16c9/0x3d30 [ 83.198869][ T5936] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 83.198906][ T5936] ? __dev_queue_xmit+0x2d2/0x3d30 [ 83.198941][ T5936] ? ref_tracker_free+0x643/0x7e0 [ 83.198965][ T5936] ? __asan_memcpy+0x40/0x70 [ 83.198984][ T5936] ? __pfx_ref_tracker_free+0x10/0x10 [ 83.199025][ T5936] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.199046][ T5936] ? skb_clone+0x240/0x390 [ 83.199069][ T5936] ? __pfx_lock_release+0x10/0x10 [ 83.322270][ T5936] ? __netlink_deliver_tap+0x77e/0x7c0 [ 83.327779][ T5936] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.333008][ T5936] netlink_unicast+0x7ea/0x980 [ 83.337823][ T5936] ? __pfx_netlink_unicast+0x10/0x10 [ 83.343133][ T5936] ? __virt_addr_valid+0x183/0x520 [ 83.348290][ T5936] ? __check_object_size+0x49c/0x900 [ 83.353611][ T5936] ? bpf_lsm_netlink_send+0x9/0x10 [ 83.358754][ T5936] netlink_sendmsg+0x8db/0xcb0 [ 83.363563][ T5936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.368883][ T5936] ? __import_iovec+0x536/0x820 [ 83.373305][ T6013] dvmrp0: entered allmulticast mode [ 83.373735][ T5936] ? aa_sock_msg_perm+0x91/0x160 [ 83.373770][ T5936] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 83.389208][ T5936] ? security_socket_sendmsg+0x87/0xb0 [ 83.394694][ T5936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.400004][ T5936] __sock_sendmsg+0x221/0x270 [ 83.400298][ T4491] Bluetooth: hci1: command tx timeout [ 83.404694][ T5936] ____sys_sendmsg+0x525/0x7d0 [ 83.404729][ T5936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.404766][ T5936] __sys_sendmsg+0x2b0/0x3a0 [ 83.424748][ T5936] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.429947][ T5936] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.436312][ T5936] ? do_syscall_64+0x100/0x230 [ 83.441110][ T5936] ? do_syscall_64+0xb6/0x230 [ 83.445825][ T5936] do_syscall_64+0xf3/0x230 [ 83.450361][ T5936] ? clear_bhb_loop+0x35/0x90 [ 83.455072][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.461006][ T5936] RIP: 0033:0x7f9de087d0a9 [ 83.465447][ T5936] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.485084][ T5936] RSP: 002b:00007f9de15510c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.493534][ T5936] RAX: ffffffffffffffda RBX: 00007f9de09b3f80 RCX: 00007f9de087d0a9 [ 83.501534][ T5936] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000c [ 83.509534][ T5936] RBP: 00007f9de08ec074 R08: 0000000000000000 R09: 0000000000000000 [ 83.517530][ T5936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.525525][ T5936] R13: 000000000000000b R14: 00007f9de09b3f80 R15: 00007ffff4f97408 [ 83.533540][ T5936] [ 83.550870][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.558089][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.568107][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.575274][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.616383][ T5936] Mem-Info: [ 83.633115][ T5936] active_anon:13604 inactive_anon:0 isolated_anon:0 [ 83.633115][ T5936] active_file:0 inactive_file:46481 isolated_file:0 [ 83.633115][ T5936] unevictable:768 dirty:43 writeback:0 [ 83.633115][ T5936] slab_reclaimable:10353 slab_unreclaimable:98046 [ 83.633115][ T5936] mapped:18851 shmem:1543 pagetables:653 [ 83.633115][ T5936] sec_pagetables:0 bounce:0 [ 83.633115][ T5936] kernel_misc_reclaimable:0 [ 83.633115][ T5936] free:1369960 free_pcp:1378 free_cma:0 [ 83.754116][ T5936] Node 0 active_anon:54516kB inactive_anon:0kB active_file:0kB inactive_file:185844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:75404kB dirty:168kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10376kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no [ 83.794795][ T5936] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 83.841212][ T5936] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 83.890712][ T5936] lowmem_reserve[]: 0 2571 2571 0 0 [ 83.896317][ T5936] Node 0 DMA32 free:1520748kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:54464kB inactive_anon:0kB active_file:0kB inactive_file:185544kB unevictable:1536kB writepending:164kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:880kB local_pcp:316kB free_cma:0kB [ 83.905481][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.929310][ T5936] lowmem_reserve[]: 0 0 0 0 0 [ 83.948984][ T5936] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 83.983726][ T5936] lowmem_reserve[]: 0 0 0 0 0 [ 83.989437][ T5936] Node 1 Normal free:3944424kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3828kB local_pcp:752kB free_cma:0kB [ 84.010116][ T5875] veth0_vlan: entered promiscuous mode [ 84.031245][ T5936] lowmem_reserve[]: 0 0 0 0 0 [ 84.035931][ T5875] veth1_vlan: entered promiscuous mode [ 84.041291][ T5936] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.069372][ T5936] Node 0 DMA32: 2*4kB (ME) 9*8kB (UME) 91*16kB (ME) 58*32kB (UME) 114*64kB (UME) 42*128kB (UM) 20*256kB (UM) 6*512kB (UM) 4*1024kB (UME) 2*2048kB (ME) 363*4096kB (M) = 1519296kB [ 84.088209][ T5936] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 84.092334][ T5875] veth0_macvtap: entered promiscuous mode [ 84.106348][ T5936] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 3*16kB (UM) 2*32kB (UM) 1*64kB (U) 3*128kB (U) 6*256kB (UM) 4*512kB (UM) 2*1024kB (U) 3*2048kB (U) 960*4096kB (M) = 3944528kB [ 84.119913][ T5875] veth1_macvtap: entered promiscuous mode [ 84.132000][ T5936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.142458][ T5936] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.152816][ T5936] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.156358][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.178015][ T5936] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.185360][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.188059][ T5936] 48026 total pagecache pages [ 84.205419][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.217224][ T5936] 0 pages in swap cache [ 84.221490][ T5936] Free swap = 124996kB [ 84.223084][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.225750][ T5936] Total swap = 124996kB [ 84.235922][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.241455][ T5936] 2097051 pages RAM [ 84.255662][ T5936] 0 pages HighMem/MovableOnly [ 84.258701][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.261391][ T5936] 400870 pages reserved [ 84.275502][ T5936] 0 pages cma reserved [ 84.275885][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.304348][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.316483][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.334853][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.353062][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.392655][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.416018][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.434561][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.446339][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.457460][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.469316][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.480329][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.497366][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.510066][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.553176][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.565202][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.607557][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.648976][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.664571][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.692559][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.922097][ T6049] __nla_validate_parse: 5 callbacks suppressed [ 84.922116][ T6049] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.026061][ T6049] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.119652][ T2859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.135221][ T6061] dvmrp1: entered allmulticast mode [ 85.148839][ T2859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.157465][ T4491] Bluetooth: hci0: command tx timeout [ 85.255630][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.287416][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.354068][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.397505][ T6065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.477975][ T4491] Bluetooth: hci1: command tx timeout [ 85.512288][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.791301][ T6088] syz_tun: entered promiscuous mode [ 85.807082][ T6088] vlan2: entered promiscuous mode [ 85.812863][ T6088] vlan2: entered allmulticast mode [ 85.824320][ T6088] syz_tun: entered allmulticast mode [ 85.842894][ T6088] syz_tun: left allmulticast mode [ 85.854012][ T6088] syz_tun: left promiscuous mode [ 86.177594][ T29] audit: type=1800 audit(1719191587.692:4): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1964 res=0 errno=0 [ 86.590793][ T6109] syzkaller1: entered promiscuous mode [ 86.596297][ T6109] syzkaller1: entered allmulticast mode [ 86.685951][ T6113] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.145743][ T6136] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.168067][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.237288][ T4491] Bluetooth: hci0: command tx timeout [ 87.558108][ T4491] Bluetooth: hci1: command tx timeout [ 87.779949][ T6172] syzkaller1: entered promiscuous mode [ 87.785557][ T6172] syzkaller1: entered allmulticast mode [ 87.912013][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.916856][ C1] vxcan0: j1939_tp_txtimer: 0xffff888028e56c00: tx aborted with unknown reason: -2 [ 88.695873][ T6212] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.758216][ T6209] xt_hashlimit: overflow, rate too high: 0 [ 88.779315][ T6207] syzkaller1: entered promiscuous mode [ 88.796428][ T6207] syzkaller1: entered allmulticast mode [ 88.968384][ T6220] tap0: tun_chr_ioctl cmd 1074025673 [ 89.317327][ T4491] Bluetooth: hci0: command tx timeout [ 89.474649][ T6256] nbd: socks must be embedded in a SOCK_ITEM attr [ 89.486293][ T6255] syzkaller1: entered promiscuous mode [ 89.492930][ T6255] syzkaller1: entered allmulticast mode [ 89.502620][ T6256] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 89.567149][ T6256] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.591248][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.735200][ T29] audit: type=1800 audit(1719191591.252:5): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=01E10615CFB83E8E09EE9FADF4EFA727D45F6B12CCAF94413FB9C53E156E2D82216C20 dev="sda1" ino=1965 res=0 errno=0 [ 90.011630][ T6285] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 90.031607][ T6285] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 90.056342][ T6285] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 90.070170][ T6285] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 90.084770][ T6285] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 90.102322][ T6285] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 90.130657][ T6285] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 90.168882][ T6289] syzkaller1: entered promiscuous mode [ 90.174404][ T6289] syzkaller1: entered allmulticast mode [ 90.179956][ T6293] nbd: socks must be embedded in a SOCK_ITEM attr [ 90.215726][ T6293] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.338915][ T6293] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.367507][ T6293] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.445850][ T6305] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.482854][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.503897][ T6305] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.524706][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.845439][ T6326] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 90.876372][ T6326] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 90.926016][ T6326] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 91.324347][ T6348] syzkaller0: entered promiscuous mode [ 91.346393][ T6348] syzkaller0: entered allmulticast mode [ 91.397566][ T4491] Bluetooth: hci0: command tx timeout [ 91.485730][ T6356] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.572319][ T6364] syzkaller1: entered promiscuous mode [ 91.584566][ T6364] syzkaller1: entered allmulticast mode [ 91.615267][ T6365] pimreg: entered allmulticast mode [ 91.829253][ T6374] delete_channel: no stack [ 91.847882][ T6374] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.923538][ T6379] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.944874][ T6379] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.987381][ T6379] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.054748][ T6384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.255669][ T6394] nbd: socks must be embedded in a SOCK_ITEM attr [ 92.271517][ T6394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 92.346168][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.553074][ T6410] sctp: [Deprecated]: syz-executor.3 (pid 6410) Use of int in max_burst socket option deprecated. [ 92.553074][ T6410] Use struct sctp_assoc_value instead [ 93.105028][ T6450] vlan2: entered promiscuous mode [ 93.116918][ T6450] bridge0: entered promiscuous mode [ 93.131950][ T6450] vlan2: entered allmulticast mode [ 93.141453][ T6450] bridge0: entered allmulticast mode [ 93.163114][ T6450] bridge0: left allmulticast mode [ 93.173425][ T6450] bridge0: left promiscuous mode [ 93.477863][ T4491] Bluetooth: hci0: command tx timeout [ 93.539027][ T6475] pim6reg1: entered promiscuous mode [ 93.544712][ T6475] pim6reg1: entered allmulticast mode [ 93.623600][ T6480] syz_tun: entered promiscuous mode [ 93.632225][ T6480] vlan2: entered promiscuous mode [ 93.638328][ T6480] vlan2: entered allmulticast mode [ 93.643594][ T6480] syz_tun: entered allmulticast mode [ 93.652474][ T6480] syz_tun: left allmulticast mode [ 93.665099][ T6480] syz_tun: left promiscuous mode [ 93.767853][ T6487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.822892][ T6490] vxcan3: entered promiscuous mode [ 93.835490][ T6491] tap0: tun_chr_ioctl cmd 1074025673 [ 93.854460][ T6494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.222475][ T6510] pim6reg1: entered promiscuous mode [ 94.235409][ T6510] pim6reg1: entered allmulticast mode [ 94.274970][ T6516] syz_tun: entered promiscuous mode [ 94.291915][ T6516] vlan2: entered promiscuous mode [ 94.298606][ T6516] vlan2: entered allmulticast mode [ 94.303877][ T6516] syz_tun: entered allmulticast mode [ 94.312509][ T6516] syz_tun: left allmulticast mode [ 94.318760][ T6516] syz_tun: left promiscuous mode [ 94.485075][ T6527] netlink: zone id is out of range [ 94.499876][ T6527] netlink: zone id is out of range [ 94.506021][ T6527] netlink: zone id is out of range [ 94.515496][ T6527] netlink: zone id is out of range [ 94.526716][ T6527] netlink: zone id is out of range [ 94.538803][ T6527] netlink: zone id is out of range [ 94.544894][ T6527] netlink: zone id is out of range [ 94.556527][ T6527] netlink: zone id is out of range [ 94.768640][ T6537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.792974][ T6545] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 94.850773][ T6549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.965996][ T6555] syz_tun: entered promiscuous mode [ 94.987723][ T6555] vlan2: entered promiscuous mode [ 95.000663][ T6555] vlan2: entered allmulticast mode [ 95.016184][ T6555] syz_tun: entered allmulticast mode [ 95.030939][ T6555] syz_tun: left allmulticast mode [ 95.039499][ T6555] syz_tun: left promiscuous mode [ 95.351730][ T6577] bridge0: entered promiscuous mode [ 95.375736][ T6577] ip6gretap0: entered promiscuous mode [ 95.557354][ T4491] Bluetooth: hci0: command tx timeout [ 95.622495][ T6594] syzkaller1: entered promiscuous mode [ 95.628793][ T6594] syzkaller1: entered allmulticast mode [ 95.642011][ T6594] __nla_validate_parse: 24 callbacks suppressed [ 95.642029][ T6594] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.685426][ T6594] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.741570][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.937798][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.495838][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.591116][ T6653] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.601572][ T6653] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.771889][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.068088][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.280620][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.534233][ T6704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.606165][ T6715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.637475][ T4491] Bluetooth: hci0: command tx timeout [ 99.329716][ T6810] syz_tun: entered promiscuous mode [ 99.335301][ T6810] vlan2: entered promiscuous mode [ 99.341686][ T6810] vlan2: entered allmulticast mode [ 99.357262][ T6810] syz_tun: entered allmulticast mode [ 99.372964][ T6810] syz_tun: left allmulticast mode [ 99.381417][ T6810] syz_tun: left promiscuous mode [ 99.720305][ T4491] Bluetooth: hci0: command tx timeout [ 101.112809][ T6916] __nla_validate_parse: 12 callbacks suppressed [ 101.112830][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.568081][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.604714][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.797691][ T4491] Bluetooth: hci0: command tx timeout [ 102.121049][ T6976] validate_nla: 9 callbacks suppressed [ 102.121070][ T6976] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 102.233521][ T6976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.360442][ T6996] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.401996][ T6998] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 102.564445][ T6998] team0: Port device wlan1 added [ 102.676081][ T6998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.684830][ T7013] syz_tun: entered promiscuous mode [ 102.699007][ T7013] vlan2: entered promiscuous mode [ 102.704250][ T7013] vlan2: entered allmulticast mode [ 102.710010][ T7013] syz_tun: entered allmulticast mode [ 102.727495][ T7013] syz_tun: left allmulticast mode [ 102.736464][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.755059][ T7013] syz_tun: left promiscuous mode [ 103.092115][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.447138][ T7038] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.504794][ T7024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 103.804234][ T7044] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.877499][ T4491] Bluetooth: hci0: command tx timeout [ 104.057740][ T7052] syz_tun: entered promiscuous mode [ 104.087134][ T7052] vlan2: entered promiscuous mode [ 104.092383][ T7052] vlan2: entered allmulticast mode [ 104.109502][ T7052] syz_tun: entered allmulticast mode [ 104.129842][ T7052] syz_tun: left allmulticast mode [ 104.135266][ T7052] syz_tun: left promiscuous mode [ 104.335499][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.350064][ T7070] xt_hashlimit: overflow, try lower: 18446744073709551612/2047 [ 104.369629][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.556166][ T7084] tipc: Started in network mode [ 104.578241][ T7084] tipc: Node identity ff050000000000000000000000000001, cluster identity 4711 [ 104.626134][ T7084] tipc: Enabling of bearer rejected, failed to enable media [ 104.978862][ T7103] syz_tun: entered promiscuous mode [ 104.984382][ T7103] vlan2: entered promiscuous mode [ 104.989946][ T7103] vlan2: entered allmulticast mode [ 104.995328][ T7103] syz_tun: entered allmulticast mode [ 105.006040][ T7103] syz_tun: left allmulticast mode [ 105.013719][ T7103] syz_tun: left promiscuous mode [ 105.288611][ T7113] vlan0: entered promiscuous mode [ 105.957701][ T4491] Bluetooth: hci0: command tx timeout [ 106.372608][ T7171] __nla_validate_parse: 5 callbacks suppressed [ 106.372628][ T7171] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.556598][ T7156] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 106.631641][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.017861][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.095025][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 107.147859][ T7208] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.425650][ T7221] tipc: Started in network mode [ 107.431550][ T7221] tipc: Node identity ff050000000000000000000000000001, cluster identity 4711 [ 107.460298][ T7221] tipc: Enabling of bearer rejected, failed to enable media [ 107.478811][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.565810][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.846112][ T7240] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.868797][ T7237] lo speed is unknown, defaulting to 1000 [ 108.037579][ T4491] Bluetooth: hci0: command tx timeout [ 108.043260][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.201128][ T7250] tipc: Can't bind to reserved service type 1 [ 108.287759][ T7228] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 108.383780][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.427823][ T7259] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.331282][ T7294] syz_tun: entered promiscuous mode [ 109.351261][ T7294] vlan2: entered promiscuous mode [ 109.363315][ T7294] vlan2: entered allmulticast mode [ 109.371199][ T7294] syz_tun: entered allmulticast mode [ 109.390168][ T7294] syz_tun: left allmulticast mode [ 109.395604][ T7294] syz_tun: left promiscuous mode [ 109.749114][ T7311] syzkaller0: entered allmulticast mode [ 109.821431][ T7319] syz_tun: entered promiscuous mode [ 109.842608][ T7319] vlan2: entered promiscuous mode [ 109.857722][ T7319] vlan2: entered allmulticast mode [ 109.863146][ T7319] syz_tun: entered allmulticast mode [ 109.893117][ T7319] syz_tun: left allmulticast mode [ 109.906818][ T7319] syz_tun: left promiscuous mode [ 110.117607][ T4491] Bluetooth: hci0: command tx timeout [ 110.177191][ T7342] syz_tun: entered promiscuous mode [ 110.182567][ T7342] vlan2: entered promiscuous mode [ 110.188542][ T7342] vlan2: entered allmulticast mode [ 110.193687][ T7342] syz_tun: entered allmulticast mode [ 110.219175][ T7342] syz_tun: left allmulticast mode [ 110.224583][ T7342] syz_tun: left promiscuous mode [ 110.858166][ T7368] syz_tun: entered promiscuous mode [ 110.872044][ T7368] vlan2: entered promiscuous mode [ 110.889717][ T7368] vlan2: entered allmulticast mode [ 110.907549][ T7368] syz_tun: entered allmulticast mode [ 110.921352][ T7368] syz_tun: left allmulticast mode [ 110.937941][ T7368] syz_tun: left promiscuous mode [ 111.245998][ T7386] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 111.742284][ T7410] ip6tnl2: entered promiscuous mode [ 111.767402][ T7410] ip6tnl2: entered allmulticast mode [ 112.197814][ T4491] Bluetooth: hci0: command tx timeout [ 112.627058][ T7427] net_ratelimit: 16 callbacks suppressed [ 112.627089][ T7427] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [FS] L3 index 0 [ 112.711076][ T7431] syz_tun: entered promiscuous mode [ 112.715543][ T7435] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 112.716490][ T7431] vlan2: entered promiscuous mode [ 112.768617][ T7431] vlan2: entered allmulticast mode [ 112.787657][ T7431] syz_tun: entered allmulticast mode [ 112.808129][ T7431] syz_tun: left allmulticast mode [ 112.820705][ T7431] syz_tun: left promiscuous mode [ 112.875531][ T7444] __nla_validate_parse: 13 callbacks suppressed [ 112.875548][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.002340][ T7454] lo speed is unknown, defaulting to 1000 [ 113.061437][ T7458] ip6tnl1: entered promiscuous mode [ 113.079972][ T7458] ip6tnl1: entered allmulticast mode [ 113.301762][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.575516][ T7489] lo speed is unknown, defaulting to 1000 [ 113.578990][ T7490] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.005576][ T7517] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.279033][ T4491] Bluetooth: hci0: command tx timeout [ 115.136088][ T7582] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.577729][ T7601] geneve0: entered promiscuous mode [ 115.601743][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.614360][ T7601] geneve0: left promiscuous mode [ 115.821250][ T7616] pimreg: entered allmulticast mode [ 115.881333][ T7615] pimreg: left allmulticast mode [ 115.959078][ T7621] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.096262][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.355622][ T7651] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.366169][ T4491] Bluetooth: hci0: command tx timeout [ 116.480905][ T7656] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 116.553999][ T7656] team0: Port device wlan1 added [ 116.595220][ T7656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.751237][ T7668] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.167698][ T7679] xt_CT: No such helper "pptp" [ 117.314196][ T7692] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 117.356370][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.518432][ T7709] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 117.923897][ T7735] sctp: [Deprecated]: syz-executor.0 (pid 7735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.923897][ T7735] Use struct sctp_sack_info instead [ 117.943306][ T7735] syz-executor.0[7735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.943442][ T7735] syz-executor.0[7735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.121820][ T7743] __nla_validate_parse: 6 callbacks suppressed [ 118.121842][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.149995][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.172421][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.386086][ T7748] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.437441][ T4491] Bluetooth: hci0: command tx timeout [ 118.611698][ T7759] pim6reg1: entered promiscuous mode [ 118.637879][ T7759] pim6reg1: entered allmulticast mode [ 118.645297][ T7771] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.778760][ T7784] dvmrp1: entered allmulticast mode [ 119.554424][ T7823] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.585478][ T7823] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.631895][ T7825] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 119.707409][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.443220][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.464958][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.491132][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.517266][ T4491] Bluetooth: hci0: command tx timeout [ 120.671683][ T7871] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 120.720381][ T7871] team0: Port device wlan1 added [ 120.789380][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.415727][ T7902] dvmrp5: entered allmulticast mode [ 121.442367][ T7902] dvmrp5: left allmulticast mode [ 122.012902][ T7920] syz_tun: entered promiscuous mode [ 122.037633][ T7920] vlan2: entered promiscuous mode [ 122.047710][ T7920] vlan2: entered allmulticast mode [ 122.063054][ T7920] syz_tun: entered allmulticast mode [ 122.085063][ T7920] syz_tun: left allmulticast mode [ 122.100993][ T7920] syz_tun: left promiscuous mode [ 122.611634][ T4491] Bluetooth: hci0: command tx timeout [ 122.781426][ T7962] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 122.810446][ T7962] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 122.844925][ T7962] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 123.217370][ T7984] __nla_validate_parse: 10 callbacks suppressed [ 123.217391][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.079080][ T7998] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.156548][ T8006] syz_tun: entered promiscuous mode [ 124.167635][ T8006] vlan2: entered promiscuous mode [ 124.172888][ T8006] vlan2: entered allmulticast mode [ 124.187594][ T8006] syz_tun: entered allmulticast mode [ 124.227251][ T8006] syz_tun: left allmulticast mode [ 124.235212][ T8006] syz_tun: left promiscuous mode [ 124.272214][ T8010] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 124.299243][ T8010] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.323829][ T8010] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 124.341159][ T8010] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 124.532384][ T8016] syz_tun: entered promiscuous mode [ 124.547723][ T8016] vlan2: entered promiscuous mode [ 124.567122][ T8016] vlan2: entered allmulticast mode [ 124.592264][ T8016] syz_tun: entered allmulticast mode [ 124.618118][ T8016] syz_tun: left allmulticast mode [ 124.636190][ T8016] syz_tun: left promiscuous mode [ 124.659160][ T7988] warn_alloc: 3 callbacks suppressed [ 124.659180][ T7988] syz-executor.4: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 124.691224][ T4491] Bluetooth: hci0: command tx timeout [ 124.696980][ T7988] CPU: 1 PID: 7988 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00176-g02ea312055da #0 [ 124.707430][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 124.717523][ T7988] Call Trace: [ 124.720823][ T7988] [ 124.723769][ T7988] dump_stack_lvl+0x241/0x360 [ 124.728488][ T7988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.733732][ T7988] ? __pfx__printk+0x10/0x10 [ 124.738358][ T7988] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 124.744808][ T7988] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 124.751347][ T7988] warn_alloc+0x278/0x410 [ 124.755701][ T7988] ? __pfx_warn_alloc+0x10/0x10 [ 124.760569][ T7988] ? hash_netiface_create+0x356/0x1040 [ 124.766026][ T7988] ? __get_vm_area_node+0x23d/0x270 [ 124.771230][ T7988] __vmalloc_node_range_noprof+0x69f/0x1460 [ 124.777163][ T7988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.783495][ T7988] ? rcu_is_watching+0x15/0xb0 [ 124.788257][ T7988] ? trace_kmalloc+0x1f/0xd0 [ 124.792844][ T7988] ? __kmalloc_node_noprof+0x247/0x440 [ 124.798302][ T7988] ? kvmalloc_node_noprof+0x72/0x190 [ 124.803589][ T7988] kvmalloc_node_noprof+0x142/0x190 [ 124.808783][ T7988] ? hash_netiface_create+0x356/0x1040 [ 124.814238][ T7988] hash_netiface_create+0x356/0x1040 [ 124.819527][ T7988] ? __pfx_hash_netiface_create+0x10/0x10 [ 124.825240][ T7988] ip_set_create+0xa5c/0x1900 [ 124.829913][ T7988] ? ip_set_create+0x45e/0x1900 [ 124.834762][ T7988] ? __pfx_ip_set_create+0x10/0x10 [ 124.839893][ T7988] ? nfnetlink_rcv_msg+0x225/0x1180 [ 124.845088][ T7988] nfnetlink_rcv_msg+0xbec/0x1180 [ 124.850105][ T7988] ? 0xffffffffa0001f90 [ 124.854246][ T7988] ? nfnetlink_rcv_msg+0x225/0x1180 [ 124.859464][ T7988] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 124.864940][ T7988] ? kasan_save_track+0x51/0x80 [ 124.869782][ T7988] ? kasan_save_track+0x3f/0x80 [ 124.874624][ T7988] ? kasan_save_free_info+0x40/0x50 [ 124.879820][ T7988] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 124.885010][ T7988] ? __netlink_deliver_tap+0x54d/0x7c0 [ 124.890470][ T7988] ? netlink_deliver_tap+0x19d/0x1b0 [ 124.895749][ T7988] ? netlink_unicast+0x7b8/0x980 [ 124.900674][ T7988] ? netlink_sendmsg+0x8db/0xcb0 [ 124.905607][ T7988] ? ____sys_sendmsg+0x525/0x7d0 [ 124.910540][ T7988] netlink_rcv_skb+0x1e3/0x430 [ 124.915303][ T7988] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 124.920769][ T7988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.926064][ T7988] ? apparmor_capable+0x138/0x1b0 [ 124.931090][ T7988] ? bpf_lsm_capable+0x9/0x10 [ 124.935761][ T7988] ? security_capable+0x90/0xb0 [ 124.940616][ T7988] nfnetlink_rcv+0x297/0x2a80 [ 124.945315][ T7988] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.951664][ T7988] ? __local_bh_enable_ip+0x168/0x200 [ 124.957067][ T7988] ? lockdep_hardirqs_on+0x99/0x150 [ 124.962286][ T7988] ? __local_bh_enable_ip+0x168/0x200 [ 124.967688][ T7988] ? dev_hard_start_xmit+0x773/0x7e0 [ 124.972968][ T7988] ? __dev_queue_xmit+0x2d2/0x3d30 [ 124.978075][ T7988] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 124.983792][ T7988] ? __dev_queue_xmit+0x2d2/0x3d30 [ 124.988907][ T7988] ? __dev_queue_xmit+0x16c9/0x3d30 [ 124.994097][ T7988] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 124.999214][ T7988] ? __dev_queue_xmit+0x2d2/0x3d30 [ 125.004327][ T7988] ? ref_tracker_free+0x643/0x7e0 [ 125.009353][ T7988] ? __asan_memcpy+0x40/0x70 [ 125.013957][ T7988] ? __pfx_ref_tracker_free+0x10/0x10 [ 125.019344][ T7988] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.024542][ T7988] ? skb_clone+0x240/0x390 [ 125.028954][ T7988] ? __pfx_lock_release+0x10/0x10 [ 125.033972][ T7988] ? __netlink_deliver_tap+0x77e/0x7c0 [ 125.039435][ T7988] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.044626][ T7988] netlink_unicast+0x7ea/0x980 [ 125.049394][ T7988] ? __pfx_netlink_unicast+0x10/0x10 [ 125.054668][ T7988] ? __virt_addr_valid+0x183/0x520 [ 125.059781][ T7988] ? __check_object_size+0x49c/0x900 [ 125.065073][ T7988] ? bpf_lsm_netlink_send+0x9/0x10 [ 125.070197][ T7988] netlink_sendmsg+0x8db/0xcb0 [ 125.074972][ T7988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.080257][ T7988] ? __import_iovec+0x536/0x820 [ 125.085099][ T7988] ? aa_sock_msg_perm+0x91/0x160 [ 125.090034][ T7988] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 125.095312][ T7988] ? security_socket_sendmsg+0x87/0xb0 [ 125.100769][ T7988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.106047][ T7988] __sock_sendmsg+0x221/0x270 [ 125.110727][ T7988] ____sys_sendmsg+0x525/0x7d0 [ 125.115493][ T7988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.120792][ T7988] __sys_sendmsg+0x2b0/0x3a0 [ 125.125380][ T7988] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.130527][ T7988] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.136857][ T7988] ? do_syscall_64+0x100/0x230 [ 125.141633][ T7988] ? do_syscall_64+0xb6/0x230 [ 125.146311][ T7988] do_syscall_64+0xf3/0x230 [ 125.150834][ T7988] ? clear_bhb_loop+0x35/0x90 [ 125.155516][ T7988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.161407][ T7988] RIP: 0033:0x7fa18fc7d0a9 [ 125.165816][ T7988] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 125.185424][ T7988] RSP: 002b:00007fa18f7ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.193844][ T7988] RAX: ffffffffffffffda RBX: 00007fa18fdb3f80 RCX: 00007fa18fc7d0a9 [ 125.201813][ T7988] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000009 [ 125.209778][ T7988] RBP: 00007fa18fcec074 R08: 0000000000000000 R09: 0000000000000000 [ 125.217745][ T7988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.225712][ T7988] R13: 000000000000000b R14: 00007fa18fdb3f80 R15: 00007fff0d00dfb8 [ 125.233694][ T7988] [ 125.250862][ T7988] Mem-Info: [ 125.254277][ T7988] active_anon:13636 inactive_anon:0 isolated_anon:0 [ 125.254277][ T7988] active_file:0 inactive_file:46602 isolated_file:0 [ 125.254277][ T7988] unevictable:768 dirty:98 writeback:0 [ 125.254277][ T7988] slab_reclaimable:10649 slab_unreclaimable:101444 [ 125.254277][ T7988] mapped:18432 shmem:1641 pagetables:690 [ 125.254277][ T7988] sec_pagetables:0 bounce:0 [ 125.254277][ T7988] kernel_misc_reclaimable:0 [ 125.254277][ T7988] free:1363883 free_pcp:942 free_cma:0 [ 125.300384][ T7988] Node 0 active_anon:54544kB inactive_anon:0kB active_file:0kB inactive_file:186328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73728kB dirty:388kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10524kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no [ 125.333746][ T7988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 125.380139][ T7988] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 125.432763][ T7988] lowmem_reserve[]: 0 2571 2571 0 0 [ 125.439345][ T7988] Node 0 DMA32 free:1493876kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:54452kB inactive_anon:0kB active_file:0kB inactive_file:186028kB unevictable:1536kB writepending:388kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:2232kB local_pcp:1052kB free_cma:0kB [ 125.502007][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 125.507314][ T7988] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 125.578108][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 125.579704][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.582878][ T7988] Node 1 Normal free:3946588kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:0kB free_cma:0kB [ 125.664889][ T8045] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 125.667684][ T8043] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 125.680928][ T8045] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 125.700486][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 125.703050][ T8045] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 125.713508][ T7988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.713661][ T7988] Node 0 DMA32: 175*4kB (UME) 113*8kB (UM) 104*16kB (UME) 167*32kB (UME) 178*64kB (UME) 75*128kB (UME) 36*256kB (UME) 29*512kB (UME) 27*1024kB (UM) 4*2048kB (UM) 343*4096kB (UM) = 1494436kB [ 125.796171][ T8049] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.813949][ T7988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 125.826383][ T7988] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 0*64kB 0*128kB 4*256kB (UM) 4*512kB (UM) 3*1024kB (U) 4*2048kB (U) 960*4096kB (M) = 3946588kB [ 125.845183][ T7988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.854869][ T7988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.864374][ T7988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.900203][ T7988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.916696][ T8052] syz_tun: entered promiscuous mode [ 125.941791][ T8052] vlan2: entered promiscuous mode [ 125.944397][ T7988] 48243 total pagecache pages [ 125.957280][ T7988] 0 pages in swap cache [ 125.957874][ T8052] vlan2: entered allmulticast mode [ 125.961519][ T7988] Free swap = 124996kB [ 125.966707][ T8052] syz_tun: entered allmulticast mode [ 125.980613][ T7988] Total swap = 124996kB [ 125.983594][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.984962][ T7988] 2097051 pages RAM [ 126.000797][ T8052] syz_tun: left allmulticast mode [ 126.005309][ T7988] 0 pages HighMem/MovableOnly [ 126.006593][ T8056] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.011539][ T7988] 400870 pages reserved [ 126.022726][ T8052] syz_tun: left promiscuous mode [ 126.032782][ T7988] 0 pages cma reserved [ 126.220006][ T8059] syzkaller0: entered promiscuous mode [ 126.225613][ T8059] syzkaller0: entered allmulticast mode [ 126.380730][ T8073] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.381582][ T8071] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.457261][ T8073] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.571820][ T8080] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [S.]L3 index 0 [ 126.598154][ T8082] sctp: [Deprecated]: syz-executor.1 (pid 8082) Use of int in max_burst socket option deprecated. [ 126.598154][ T8082] Use struct sctp_assoc_value instead [ 126.631015][ T8082] netlink: del zone limit has 8 unknown bytes [ 126.757383][ T4491] Bluetooth: hci0: command tx timeout [ 126.968494][ T8098] syz_tun: entered promiscuous mode [ 126.977915][ T8098] vlan2: entered promiscuous mode [ 126.983193][ T8098] vlan2: entered allmulticast mode [ 127.001223][ T8098] syz_tun: entered allmulticast mode [ 127.018777][ T8098] syz_tun: left allmulticast mode [ 127.026401][ T8098] syz_tun: left promiscuous mode [ 127.200440][ T8104] Illegal XDP return value 2609643906 on prog (id 219) dev N/A, expect packet loss! [ 128.055403][ T8137] dvmrp1: entered allmulticast mode [ 128.495585][ T8156] __nla_validate_parse: 8 callbacks suppressed [ 128.496332][ T8156] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.525107][ T8156] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.534811][ T8156] validate_nla: 11 callbacks suppressed [ 128.534827][ T8156] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 128.549008][ T8156] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.845720][ T4491] Bluetooth: hci0: command tx timeout [ 128.910796][ T8172] tun0: tun_chr_ioctl cmd 1074812117 [ 129.039539][ T8187] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.255529][ T8202] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.295110][ T8202] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.326676][ T8209] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.394663][ T8202] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.418208][ T8202] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.456644][ T8202] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.488008][ T8213] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 129.866507][ T8241] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 129.944214][ T8244] vlan2: entered promiscuous mode [ 129.970967][ T8244] batadv0: entered promiscuous mode [ 129.992489][ T8248] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 130.042462][ T8248] team0: Port device wlan1 removed [ 130.075345][ T8248] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 130.118110][ T8248] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.132323][ T8260] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.194217][ T8256] vlan3: entered promiscuous mode [ 130.245953][ T8256] vlan1: entered promiscuous mode [ 130.289107][ T8256] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 130.505273][ T8281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.917869][ T4491] Bluetooth: hci0: command tx timeout [ 130.943200][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.023387][ T29] audit: type=1804 audit(1719191632.532:6): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir929234997/syzkaller.8OWoF7/195/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 131.073082][ T8314] syz_tun: entered promiscuous mode [ 131.094589][ T8314] vlan2: entered promiscuous mode [ 131.100669][ T8314] vlan2: entered allmulticast mode [ 131.106278][ T8314] syz_tun: entered allmulticast mode [ 131.123002][ T29] audit: type=1804 audit(1719191632.532:7): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir929234997/syzkaller.8OWoF7/195/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 131.150661][ T8314] syz_tun: left allmulticast mode [ 131.158473][ T8314] syz_tun: left promiscuous mode [ 131.173271][ T29] audit: type=1804 audit(1719191632.622:8): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir929234997/syzkaller.8OWoF7/195/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 131.496426][ T8343] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 131.619368][ T8348] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 131.637682][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.901871][ T8359] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.073490][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.165902][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.211129][ T8380] syzkaller1: entered promiscuous mode [ 132.223104][ T8380] syzkaller1: entered allmulticast mode [ 132.517547][ T4491] Bluetooth: hci1: command tx timeout [ 132.669370][ T8409] vlan2: entered promiscuous mode [ 132.683607][ T8409] vlan2: entered allmulticast mode [ 132.725265][ T8407] vlan2: entered promiscuous mode [ 132.740164][ T8407] vlan2: entered allmulticast mode [ 132.984989][ T8430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.998924][ T4491] Bluetooth: hci0: command tx timeout [ 133.053508][ T8433] syz_tun: entered promiscuous mode [ 133.061409][ T8433] vlan2: entered promiscuous mode [ 133.066716][ T8433] vlan2: entered allmulticast mode [ 133.073190][ T8433] syz_tun: entered allmulticast mode [ 133.085211][ T8433] syz_tun: left allmulticast mode [ 133.090891][ T8433] syz_tun: left promiscuous mode [ 133.181949][ T8437] syzkaller1: entered promiscuous mode [ 133.188226][ T8437] syzkaller1: entered allmulticast mode [ 133.340509][ T8441] syzkaller0: entered promiscuous mode [ 133.353097][ T8441] syzkaller0: entered allmulticast mode [ 133.482684][ T8453] bond0: entered promiscuous mode [ 133.488937][ T8453] bond_slave_0: entered promiscuous mode [ 133.494916][ T8453] bond_slave_1: entered promiscuous mode [ 134.681797][ T8466] __nla_validate_parse: 5 callbacks suppressed [ 134.681818][ T8466] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.077956][ T4491] Bluetooth: hci0: command tx timeout [ 135.299129][ T8493] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 135.334721][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.443036][ T8506] syzkaller1: entered promiscuous mode [ 135.451994][ T8506] syzkaller1: entered allmulticast mode [ 135.470048][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.480685][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.170004][ T8533] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 136.252587][ T8533] team0: Port device wlan1 removed [ 136.273189][ T8533] wlan1: mtu less than device minimum [ 136.295735][ T8533] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 136.952398][ T8578] syz_tun: entered promiscuous mode [ 136.960514][ T8578] vlan2: entered promiscuous mode [ 136.965916][ T8578] vlan2: entered allmulticast mode [ 136.972543][ T8578] syz_tun: entered allmulticast mode [ 136.983211][ T8578] syz_tun: left allmulticast mode [ 136.988969][ T8578] syz_tun: left promiscuous mode [ 137.157544][ T4491] Bluetooth: hci0: command tx timeout [ 137.290314][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.482130][ T8606] netlink: 1212 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.862495][ T8628] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.875008][ T8628] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.056262][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.090487][ T8635] macvtap1: entered promiscuous mode [ 138.145771][ T8642] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 138.162126][ T8642] team0: Port device wlan1 removed [ 138.172272][ T8642] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 138.182522][ T8642] : (slave wlan1): Enslaving as an active interface with an up link [ 138.193904][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.333598][ T8648] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 138.358533][ T8648] team0: Port device wlan1 removed [ 138.364323][ T8648] wlan1: mtu less than device minimum [ 138.438031][ T8648] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 139.237504][ T4491] Bluetooth: hci0: command tx timeout [ 139.278114][ T8670] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 139.371370][ T8672] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.432908][ T8686] ip6tnl1: entered promiscuous mode [ 139.439675][ T8686] ip6tnl1: entered allmulticast mode [ 139.614282][ T8701] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 139.660866][ T8701] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 139.934441][ T8723] __nla_validate_parse: 5 callbacks suppressed [ 139.934460][ T8723] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.960651][ T8723] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.226520][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.412722][ T8749] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 140.501350][ T8755] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 140.514833][ T8758] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 140.523771][ T8758] wlan1: mtu less than device minimum [ 140.532557][ T8758] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 140.711744][ T8764] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.721367][ T8764] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.737815][ T8767] ip6tnl0: entered promiscuous mode [ 140.743431][ T8767] vlan4: entered promiscuous mode [ 140.749431][ T8767] vlan4: entered allmulticast mode [ 140.754560][ T8767] ip6tnl0: entered allmulticast mode [ 140.763870][ T8767] ip6tnl0: left allmulticast mode [ 140.773794][ T8767] ip6tnl0: left promiscuous mode [ 140.826488][ T8771] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.846962][ T8771] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.244398][ T8794] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 141.287168][ T8798] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 141.317031][ T4491] Bluetooth: hci0: command tx timeout [ 141.722883][ T8806] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.807134][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.860808][ T8821] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.892127][ T8821] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.904883][ T8825] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 142.720273][ T8876] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 142.738922][ T8876] nbd: must specify a device to reconfigure [ 143.396890][ T4491] Bluetooth: hci0: command tx timeout [ 144.316337][ T8968] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 144.353612][ T8968] nbd: must specify a device to reconfigure [ 144.396198][ T8973] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 144.405532][ T8973] wlan1: mtu less than device minimum [ 144.411659][ T8973] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 145.000197][ T8992] sit0: entered promiscuous mode [ 145.018408][ T8992] vlan2: entered promiscuous mode [ 145.027653][ T8992] vlan2: entered allmulticast mode [ 145.039777][ T8992] sit0: entered allmulticast mode [ 145.057580][ T8992] sit0: left allmulticast mode [ 145.077877][ T8994] __nla_validate_parse: 10 callbacks suppressed [ 145.077897][ T8994] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.094980][ T8992] sit0: left promiscuous mode [ 145.145498][ T8993] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.193948][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.478575][ T5124] Bluetooth: hci0: command tx timeout [ 145.529203][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.539662][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.570105][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.591995][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.633360][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.641466][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.913053][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.997743][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.277404][ T4491] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 146.339686][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.434717][ T9009] lo speed is unknown, defaulting to 1000 [ 146.584148][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.795553][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.848522][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.134511][ T35] bridge_slave_1: left allmulticast mode [ 147.146347][ T35] bridge_slave_1: left promiscuous mode [ 147.156785][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.213960][ T35] bridge_slave_0: left allmulticast mode [ 147.237766][ T35] bridge_slave_0: left promiscuous mode [ 147.244212][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.270664][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.511217][ T35] dvmrp1 (unregistering): left allmulticast mode [ 147.557045][ T4491] Bluetooth: hci0: command tx timeout [ 147.717090][ T4491] Bluetooth: hci4: command tx timeout [ 147.745935][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.757961][ T35] bond_slave_0: left promiscuous mode [ 147.766534][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.776628][ T35] bond_slave_1: left promiscuous mode [ 147.784424][ T35] bond0 (unregistering): Released all slaves [ 147.800784][ T35] bond1 (unregistering): Released all slaves [ 147.983731][ T9079] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.032418][ T9009] chnl_net:caif_netlink_parms(): no params data found [ 148.430447][ T9009] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.465108][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.496469][ T9009] bridge_slave_0: entered allmulticast mode [ 148.528678][ T9009] bridge_slave_0: entered promiscuous mode [ 148.543550][ T9112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.557218][ T9009] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.617360][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.624679][ T9009] bridge_slave_1: entered allmulticast mode [ 148.644525][ T9009] bridge_slave_1: entered promiscuous mode [ 148.775930][ T9120] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.813634][ T9009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.014264][ T9009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.373036][ T9147] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 149.399754][ T9147] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.432827][ T9146] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 149.446174][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.469965][ T9146] team0: Device ipvlan1 failed to register rx_handler [ 149.649254][ T4491] Bluetooth: hci0: command tx timeout [ 149.675325][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.686415][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.707216][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.718375][ T35] hsr_slave_0: left promiscuous mode [ 149.724043][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.733169][ T35] hsr_slave_1: left promiscuous mode [ 149.741225][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.750474][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.761048][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.787944][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.797576][ T53] Bluetooth: hci4: command tx timeout [ 149.805581][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.813524][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.854212][ T35] veth1_macvtap: left promiscuous mode [ 149.861610][ T35] veth0_macvtap: left promiscuous mode [ 149.868558][ T35] veth1_vlan: left promiscuous mode [ 149.874166][ T35] veth0_vlan: left promiscuous mode [ 150.326444][ T35] team0 (unregistering): Port device team_slave_1 removed [ 150.365594][ T35] team0 (unregistering): Port device team_slave_0 removed [ 150.733236][ T9009] team0: Port device team_slave_0 added [ 150.826006][ T9009] team0: Port device team_slave_1 added [ 150.883245][ T9159] lo speed is unknown, defaulting to 1000 [ 150.972690][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.990996][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.072979][ T9009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.116667][ T9180] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.139212][ T9180] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.151487][ T9177] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.179475][ T9009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.187001][ T9009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.216675][ T9009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.469092][ T9009] hsr_slave_0: entered promiscuous mode [ 151.494792][ T9009] hsr_slave_1: entered promiscuous mode [ 151.502265][ T9009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.528323][ T9009] Cannot create hsr debugfs directory [ 151.545851][ T9190] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 151.571617][ T9190] team0: Device ipvlan1 failed to register rx_handler [ 151.717034][ T53] Bluetooth: hci0: command tx timeout [ 151.799977][ T53] Bluetooth: hci3: command tx timeout [ 151.879693][ T53] Bluetooth: hci4: command tx timeout [ 152.014207][ T9213] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.152931][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 152.280151][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.288706][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.296048][ T9159] bridge_slave_0: entered allmulticast mode [ 152.304914][ T9159] bridge_slave_0: entered promiscuous mode [ 152.313804][ T9230] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.327661][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.335114][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.354624][ T9230] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.359656][ T9159] bridge_slave_1: entered allmulticast mode [ 152.381780][ T9159] bridge_slave_1: entered promiscuous mode [ 152.459437][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.503720][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.532077][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.604506][ T9159] team0: Port device team_slave_0 added [ 152.613611][ T9159] team0: Port device team_slave_1 added [ 152.676219][ T9009] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.709584][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.717265][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.745733][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.759214][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.766665][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.794078][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.806401][ T9009] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.815782][ T9237] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 152.867730][ T9009] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.911234][ T9009] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.972600][ T9159] hsr_slave_0: entered promiscuous mode [ 153.006347][ T9159] hsr_slave_1: entered promiscuous mode [ 153.026709][ T9159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.056136][ T9159] Cannot create hsr debugfs directory [ 153.084455][ T9242] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 153.143519][ T9243] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 153.202181][ T9245] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.445071][ T9259] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 153.574006][ T9159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.665968][ T9009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.734581][ T9159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.764417][ T9009] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.779892][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.787194][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.797753][ T53] Bluetooth: hci0: command tx timeout [ 153.812650][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.819888][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.855420][ T9159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.876508][ T9269] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 153.877445][ T53] Bluetooth: hci3: command tx timeout [ 153.888701][ T9269] team0: Device ipvlan1 failed to register rx_handler [ 153.954487][ T9159] bond0: (slave netdevsim0): Releasing backup interface [ 153.957351][ T53] Bluetooth: hci4: command tx timeout [ 153.972885][ T9159] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 153.985939][ T9159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.163813][ T9159] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.191055][ T9159] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.266055][ T9159] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.297626][ T9159] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.350673][ T9009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.461447][ T9009] veth0_vlan: entered promiscuous mode [ 154.490739][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.502044][ T9009] veth1_vlan: entered promiscuous mode [ 154.518887][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068955000: rx timeout, send abort [ 154.537182][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.561592][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.568799][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.585344][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.592684][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.656084][ T9009] veth0_macvtap: entered promiscuous mode [ 154.682500][ T9009] veth1_macvtap: entered promiscuous mode [ 154.756212][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.795305][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.805868][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.816971][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.827299][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.839278][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.850942][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.865320][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.875624][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.886217][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.903770][ T9009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.956483][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.976309][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.988818][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.008260][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.023711][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.027523][ C1] vcan0: j1939_tp_rxtimer: 0xffff888068955000: abort rx timeout. Force session deactivation [ 155.038225][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.055215][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.078971][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.107089][ T9009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.128416][ T9009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.148602][ T9009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.188113][ T9009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.211541][ T9009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.232149][ T9009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.252143][ T9009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.283893][ T9294] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 155.521213][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.612188][ T9138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.634904][ T9138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.685872][ T9140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.711153][ T9140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.778304][ T9159] veth0_vlan: entered promiscuous mode [ 155.823238][ T9159] veth1_vlan: entered promiscuous mode [ 155.870624][ T9310] IPv6: sit1: Disabled Multicast RS [ 155.877442][ T53] Bluetooth: hci0: command tx timeout [ 155.916653][ T9159] veth0_macvtap: entered promiscuous mode [ 155.932645][ T9159] veth1_macvtap: entered promiscuous mode [ 155.954702][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.966081][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.976695][ T53] Bluetooth: hci3: command tx timeout [ 155.982735][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.993726][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.004181][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.018606][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.035935][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.049043][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.059491][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.070556][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.080987][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.093629][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.105419][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.116205][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.128751][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.139392][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.151207][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.162460][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.173181][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.183538][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.194489][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.204787][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.216481][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.226630][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.238004][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.251034][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.263722][ T9321] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.362410][ T9323] syz_tun: entered promiscuous mode [ 156.391835][ T9323] syz_tun: left promiscuous mode [ 156.445141][ T9159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.462228][ T9159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.474114][ T9159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.493365][ T9159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.521341][ T9330] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 156.848545][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.874072][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.968820][ T9142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.007842][ T9142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.358777][ T9369] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.426036][ T9369] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.541039][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.800207][ T9378] erspan0: entered promiscuous mode [ 157.818516][ T9378] vlan2: entered promiscuous mode [ 157.836717][ T9378] erspan0: left promiscuous mode [ 157.874872][ T9386] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 157.926401][ T9386] team0: Device ip6gre0 is of different type [ 157.957370][ T53] Bluetooth: hci0: command tx timeout [ 158.037303][ T53] Bluetooth: hci3: command tx timeout [ 158.234906][ T9394] syzkaller1: entered promiscuous mode [ 158.252899][ T9394] syzkaller1: entered allmulticast mode [ 158.352509][ T9393] lo speed is unknown, defaulting to 1000 [ 158.747844][ T9414] syzkaller1: entered promiscuous mode [ 158.763592][ T9414] syzkaller1: entered allmulticast mode [ 158.824855][ T9414] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.858886][ T9414] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.991730][ T9418] bond0: entered promiscuous mode [ 159.007914][ T9418] bond_slave_0: entered promiscuous mode [ 159.027212][ T9418] bond_slave_1: entered promiscuous mode [ 159.329183][ T9427] netlink: 'syz-executor.0': attribute type 46 has an invalid length. [ 159.346957][ T9427] netlink: 212868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.037778][ T53] Bluetooth: hci0: command tx timeout [ 160.115326][ T9413] warn_alloc: 3 callbacks suppressed [ 160.115347][ T9413] syz-executor.4: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 160.147424][ T9413] CPU: 1 PID: 9413 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00176-g02ea312055da #0 [ 160.157883][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 160.167965][ T9413] Call Trace: [ 160.171257][ T9413] [ 160.174199][ T9413] dump_stack_lvl+0x241/0x360 [ 160.178911][ T9413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.184135][ T9413] ? __pfx__printk+0x10/0x10 [ 160.188763][ T9413] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 160.195207][ T9413] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 160.201741][ T9413] warn_alloc+0x278/0x410 [ 160.206105][ T9413] ? __pfx_warn_alloc+0x10/0x10 [ 160.210991][ T9413] ? hash_netport_create+0x356/0x1040 [ 160.216404][ T9413] ? __get_vm_area_node+0x23d/0x270 [ 160.221632][ T9413] __vmalloc_node_range_noprof+0x69f/0x1460 [ 160.227585][ T9413] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.233927][ T9413] ? rcu_is_watching+0x15/0xb0 [ 160.238713][ T9413] ? trace_kmalloc+0x1f/0xd0 [ 160.243328][ T9413] ? __kmalloc_node_noprof+0x247/0x440 [ 160.248812][ T9413] ? kvmalloc_node_noprof+0x72/0x190 [ 160.254123][ T9413] kvmalloc_node_noprof+0x142/0x190 [ 160.259351][ T9413] ? hash_netport_create+0x356/0x1040 [ 160.264754][ T9413] hash_netport_create+0x356/0x1040 [ 160.269994][ T9413] ? __pfx_hash_netport_create+0x10/0x10 [ 160.275654][ T9413] ip_set_create+0xa5c/0x1900 [ 160.280354][ T9413] ? ip_set_create+0x45e/0x1900 [ 160.285244][ T9413] ? __pfx_ip_set_create+0x10/0x10 [ 160.290416][ T9413] ? nfnetlink_rcv_msg+0x225/0x1180 [ 160.295636][ T9413] nfnetlink_rcv_msg+0xbec/0x1180 [ 160.300690][ T9413] ? 0xffffffffa000094c [ 160.304861][ T9413] ? nfnetlink_rcv_msg+0x225/0x1180 [ 160.310110][ T9413] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.315620][ T9413] ? kasan_save_track+0x51/0x80 [ 160.320488][ T9413] ? kasan_save_track+0x3f/0x80 [ 160.325358][ T9413] ? kasan_save_free_info+0x40/0x50 [ 160.330596][ T9413] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 160.335827][ T9413] ? __netlink_deliver_tap+0x54d/0x7c0 [ 160.341310][ T9413] ? netlink_deliver_tap+0x19d/0x1b0 [ 160.346618][ T9413] ? netlink_unicast+0x7b8/0x980 [ 160.351572][ T9413] ? netlink_sendmsg+0x8db/0xcb0 [ 160.356535][ T9413] ? ____sys_sendmsg+0x525/0x7d0 [ 160.361498][ T9413] netlink_rcv_skb+0x1e3/0x430 [ 160.366271][ T9413] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.371729][ T9413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.377024][ T9413] ? apparmor_capable+0x138/0x1b0 [ 160.382048][ T9413] ? bpf_lsm_capable+0x9/0x10 [ 160.386725][ T9413] ? security_capable+0x90/0xb0 [ 160.391583][ T9413] nfnetlink_rcv+0x297/0x2a80 [ 160.396254][ T9413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.402575][ T9413] ? __local_bh_enable_ip+0x168/0x200 [ 160.407935][ T9413] ? lockdep_hardirqs_on+0x99/0x150 [ 160.413126][ T9413] ? __local_bh_enable_ip+0x168/0x200 [ 160.418484][ T9413] ? dev_hard_start_xmit+0x773/0x7e0 [ 160.423759][ T9413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 160.428861][ T9413] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.434577][ T9413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 160.439688][ T9413] ? __dev_queue_xmit+0x16c9/0x3d30 [ 160.444882][ T9413] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.450000][ T9413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 160.455120][ T9413] ? ref_tracker_free+0x643/0x7e0 [ 160.460152][ T9413] ? __asan_memcpy+0x40/0x70 [ 160.464739][ T9413] ? __pfx_ref_tracker_free+0x10/0x10 [ 160.470121][ T9413] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.475311][ T9413] ? skb_clone+0x240/0x390 [ 160.479718][ T9413] ? __pfx_lock_release+0x10/0x10 [ 160.484733][ T9413] ? __netlink_deliver_tap+0x77e/0x7c0 [ 160.490190][ T9413] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.495381][ T9413] netlink_unicast+0x7ea/0x980 [ 160.500146][ T9413] ? __pfx_netlink_unicast+0x10/0x10 [ 160.505419][ T9413] ? __virt_addr_valid+0x183/0x520 [ 160.510532][ T9413] ? __check_object_size+0x49c/0x900 [ 160.515809][ T9413] ? bpf_lsm_netlink_send+0x9/0x10 [ 160.520981][ T9413] netlink_sendmsg+0x8db/0xcb0 [ 160.525765][ T9413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.531065][ T9413] ? __import_iovec+0x536/0x820 [ 160.535924][ T9413] ? aa_sock_msg_perm+0x91/0x160 [ 160.540862][ T9413] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.546139][ T9413] ? security_socket_sendmsg+0x87/0xb0 [ 160.551598][ T9413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.556885][ T9413] __sock_sendmsg+0x221/0x270 [ 160.561577][ T9413] ____sys_sendmsg+0x525/0x7d0 [ 160.566340][ T9413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.571631][ T9413] __sys_sendmsg+0x2b0/0x3a0 [ 160.576216][ T9413] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.581352][ T9413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.587688][ T9413] ? do_syscall_64+0x100/0x230 [ 160.592480][ T9413] ? do_syscall_64+0xb6/0x230 [ 160.597166][ T9413] do_syscall_64+0xf3/0x230 [ 160.601682][ T9413] ? clear_bhb_loop+0x35/0x90 [ 160.606363][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.612360][ T9413] RIP: 0033:0x7fa18fc7d0a9 [ 160.616772][ T9413] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 160.636458][ T9413] RSP: 002b:00007fa18f7ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.644871][ T9413] RAX: ffffffffffffffda RBX: 00007fa18fdb3f80 RCX: 00007fa18fc7d0a9 [ 160.652831][ T9413] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 160.660795][ T9413] RBP: 00007fa18fcec074 R08: 0000000000000000 R09: 0000000000000000 [ 160.668758][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.676715][ T9413] R13: 000000000000000b R14: 00007fa18fdb3f80 R15: 00007fff0d00dfb8 [ 160.684696][ T9413] [ 160.701724][ T9413] Mem-Info: [ 160.705190][ T9413] active_anon:14106 inactive_anon:0 isolated_anon:0 [ 160.705190][ T9413] active_file:0 inactive_file:46906 isolated_file:0 [ 160.705190][ T9413] unevictable:768 dirty:73 writeback:0 [ 160.705190][ T9413] slab_reclaimable:10836 slab_unreclaimable:104108 [ 160.705190][ T9413] mapped:18425 shmem:1666 pagetables:677 [ 160.705190][ T9413] sec_pagetables:0 bounce:0 [ 160.705190][ T9413] kernel_misc_reclaimable:0 [ 160.705190][ T9413] free:1361515 free_pcp:2653 free_cma:0 [ 160.753570][ T9413] Node 0 active_anon:56524kB inactive_anon:0kB active_file:0kB inactive_file:187544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73700kB dirty:288kB writeback:0kB shmem:5128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11044kB pagetables:2708kB sec_pagetables:0kB all_unreclaimable? no [ 160.799494][ T9413] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 160.802221][ T9446] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.840943][ T9449] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 160.850762][ T9449] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 160.859554][ T9413] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.888119][ T9449] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.907951][ T9413] lowmem_reserve[]: 0 2571 2571 0 0 [ 160.915244][ T9413] Node 0 DMA32 free:1489212kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:56572kB inactive_anon:0kB active_file:0kB inactive_file:187244kB unevictable:1536kB writepending:284kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:4280kB local_pcp:3448kB free_cma:0kB [ 160.950927][ T9413] lowmem_reserve[]: 0 0 0 0 0 [ 160.977382][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.977796][ T9413] Node 0 [ 160.987004][ T9451] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744072484814854) [ 160.988073][ T9413] Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 160.996686][ T9451] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 161.009570][ T9413] lowmem_reserve[]: 0 0 0 0 0 [ 161.065783][ T9413] Node 1 Normal free:3944940kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3268kB local_pcp:3268kB free_cma:0kB [ 161.095658][ T9413] lowmem_reserve[]: 0 0 0 0 0 [ 161.100464][ T9413] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.116887][ T9413] Node 0 DMA32: 49*4kB (UE) 68*8kB (UME) 47*16kB (UME) 101*32kB (UME) 45*64kB (ME) 46*128kB (UME) 132*256kB (UME) 98*512kB (UME) 62*1024kB (UE) 5*2048kB (UME) 322*4096kB (M) = 1490100kB [ 161.137971][ T9413] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 161.151830][ T9413] Node 1 Normal: 2*4kB (U) 1*8kB (M) 11*16kB (UM) 15*32kB (UM) 2*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 3*1024kB (U) 4*2048kB (U) 960*4096kB (M) = 3944992kB [ 161.197087][ T9413] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.206697][ T9413] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.228834][ T9413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.238533][ T9413] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.248784][ T9413] 48347 total pagecache pages [ 161.253487][ T9413] 0 pages in swap cache [ 161.258707][ T9413] Free swap = 124996kB [ 161.263038][ T9413] Total swap = 124996kB [ 161.268283][ T9413] 2097051 pages RAM [ 161.272116][ T9413] 0 pages HighMem/MovableOnly [ 161.276984][ T9413] 400870 pages reserved [ 161.281153][ T9413] 0 pages cma reserved [ 161.507664][ T9468] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 161.575521][ T9484] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 161.585157][ T9484] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 161.595035][ T9484] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.615934][ T9468] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.627757][ T9468] unsupported nlmsg_type 40 [ 161.634983][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.647054][ T9484] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744072484814854) [ 161.657985][ T9484] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 162.116957][ T53] Bluetooth: hci0: command tx timeout [ 162.305127][ T9521] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 162.379264][ T9521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.401115][ T9523] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.707503][ T9539] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.734481][ T9539] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.946921][ T29] audit: type=1804 audit(1719191664.462:9): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1687509102/syzkaller.GgNzqF/213/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 163.119258][ T9562] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.247547][ T9569] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.328699][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.359795][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.387468][ T9578] syzkaller0: entered promiscuous mode [ 163.396082][ T9578] syzkaller0: entered allmulticast mode [ 163.751829][ T9604] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 163.995923][ T9608] syzkaller0: entered promiscuous mode [ 164.014652][ T9608] syzkaller0: entered allmulticast mode [ 164.042439][ T9621] [ 164.044805][ T9621] ====================================================== [ 164.051826][ T9621] WARNING: possible circular locking dependency detected [ 164.058849][ T9621] 6.10.0-rc4-syzkaller-00176-g02ea312055da #0 Not tainted [ 164.065963][ T9621] ------------------------------------------------------ [ 164.072984][ T9621] syz-executor.2/9621 is trying to acquire lock: [ 164.079315][ T9621] ffff88805ada6218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}, at: __dev_queue_xmit+0x22f5/0x3d30 [ 164.091531][ T9621] [ 164.091531][ T9621] but task is already holding lock: [ 164.098907][ T9621] ffff88802a4210d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 164.108778][ T9621] [ 164.108778][ T9621] which lock already depends on the new lock. [ 164.108778][ T9621] [ 164.119193][ T9621] [ 164.119193][ T9621] the existing dependency chain (in reverse order) is: [ 164.128216][ T9621] [ 164.128216][ T9621] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}: [ 164.136510][ T9621] lock_acquire+0x1ed/0x550 [ 164.141557][ T9621] _raw_spin_lock+0x2e/0x40 [ 164.146608][ T9621] sch_direct_xmit+0x1c4/0x5f0 [ 164.151920][ T9621] __dev_queue_xmit+0x1a24/0x3d30 [ 164.157488][ T9621] ip6_finish_output2+0xff8/0x1670 [ 164.163141][ T9621] ip6_finish_output+0x41e/0x810 [ 164.168622][ T9621] NF_HOOK+0x9e/0x430 [ 164.173145][ T9621] mld_sendpack+0x838/0xda0 [ 164.178178][ T9621] mld_ifc_work+0x7d6/0xd90 [ 164.183216][ T9621] process_scheduled_works+0xa2c/0x1830 [ 164.189267][ T9621] worker_thread+0x86d/0xd70 [ 164.194362][ T9621] kthread+0x2f0/0x390 [ 164.196955][ T53] Bluetooth: hci0: command tx timeout [ 164.198926][ T9621] ret_from_fork+0x4b/0x80 [ 164.198952][ T9621] ret_from_fork_asm+0x1a/0x30 [ 164.214482][ T9621] [ 164.214482][ T9621] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}: [ 164.224830][ T9621] validate_chain+0x18e0/0x5900 [ 164.230199][ T9621] __lock_acquire+0x1346/0x1fd0 [ 164.235574][ T9621] lock_acquire+0x1ed/0x550 [ 164.240588][ T9621] _raw_spin_lock+0x2e/0x40 [ 164.245599][ T9621] __dev_queue_xmit+0x22f5/0x3d30 [ 164.251160][ T9621] ip6_finish_output2+0xff8/0x1670 [ 164.256785][ T9621] ip6_finish_output+0x41e/0x810 [ 164.262249][ T9621] ndisc_send_skb+0xab0/0x1380 [ 164.267531][ T9621] ndisc_solicit+0x493/0x6a0 [ 164.272625][ T9621] __neigh_event_send+0xec8/0x15a0 [ 164.278242][ T9621] neigh_resolve_output+0x1b5/0x740 [ 164.283975][ T9621] ip6_finish_output2+0xff8/0x1670 [ 164.289605][ T9621] ip6_finish_output+0x41e/0x810 [ 164.295079][ T9621] ip6_send_skb+0x112/0x230 [ 164.300108][ T9621] icmp6_send+0x15fc/0x2070 [ 164.305140][ T9621] ip6_link_failure+0x3c/0x4f0 [ 164.310426][ T9621] ip_tunnel_xmit+0x164f/0x2940 [ 164.315792][ T9621] __gre_xmit+0x1cf/0x260 [ 164.320639][ T9621] erspan_xmit+0xaba/0x1310 [ 164.325650][ T9621] dev_hard_start_xmit+0x27a/0x7e0 [ 164.331269][ T9621] sch_direct_xmit+0x2b6/0x5f0 [ 164.336542][ T9621] __qdisc_run+0xbfd/0x2170 [ 164.341555][ T9621] __dev_queue_xmit+0x14f0/0x3d30 [ 164.347090][ T9621] ip6_finish_output2+0xff8/0x1670 [ 164.352708][ T9621] ip6_finish_output+0x41e/0x810 [ 164.358155][ T9621] rawv6_send_hdrinc+0xb79/0x1610 [ 164.363701][ T9621] rawv6_sendmsg+0x1962/0x23c0 [ 164.368988][ T9621] __sock_sendmsg+0x1a6/0x270 [ 164.374180][ T9621] ____sys_sendmsg+0x525/0x7d0 [ 164.379461][ T9621] __sys_sendmsg+0x2b0/0x3a0 [ 164.384565][ T9621] do_syscall_64+0xf3/0x230 [ 164.389584][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.395990][ T9621] [ 164.395990][ T9621] other info that might help us debug this: [ 164.395990][ T9621] [ 164.406199][ T9621] Possible unsafe locking scenario: [ 164.406199][ T9621] [ 164.413635][ T9621] CPU0 CPU1 [ 164.418985][ T9621] ---- ---- [ 164.424335][ T9621] lock(&qdisc_xmit_lock_key#3); [ 164.429365][ T9621] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 164.438984][ T9621] lock(&qdisc_xmit_lock_key#3); [ 164.446520][ T9621] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 164.453648][ T9621] [ 164.453648][ T9621] *** DEADLOCK *** [ 164.453648][ T9621] [ 164.461772][ T9621] 10 locks held by syz-executor.2/9621: [ 164.467297][ T9621] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rawv6_send_hdrinc+0x9df/0x1610 [ 164.477031][ T9621] #1: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 164.486848][ T9621] #2: ffffffff8e334000 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 164.496754][ T9621] #3: ffff88802a4210d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 164.507025][ T9621] #4: ffff88802a7a81d8 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xc45/0x2070 [ 164.516409][ T9621] #5: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: icmp6_send+0xba4/0x2070 [ 164.525534][ T9621] #6: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 164.535349][ T9621] #7: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ndisc_send_skb+0x572/0x1380 [ 164.544818][ T9621] #8: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 164.554637][ T9621] #9: ffffffff8e334000 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 164.564547][ T9621] [ 164.564547][ T9621] stack backtrace: [ 164.570446][ T9621] CPU: 0 PID: 9621 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00176-g02ea312055da #0 [ 164.580840][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 164.590880][ T9621] Call Trace: [ 164.594145][ T9621] [ 164.597068][ T9621] dump_stack_lvl+0x241/0x360 [ 164.601750][ T9621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.606945][ T9621] ? print_circular_bug+0x130/0x1a0 [ 164.612134][ T9621] check_noncircular+0x36a/0x4a0 [ 164.617062][ T9621] ? __pfx_check_noncircular+0x10/0x10 [ 164.622511][ T9621] ? __bfs+0x368/0x6f0 [ 164.626567][ T9621] ? __pfx_usage_skip+0x10/0x10 [ 164.631409][ T9621] validate_chain+0x18e0/0x5900 [ 164.636262][ T9621] ? __pfx_validate_chain+0x10/0x10 [ 164.641447][ T9621] ? __pfx_validate_chain+0x10/0x10 [ 164.646641][ T9621] ? register_lock_class+0x102/0x980 [ 164.651917][ T9621] ? __pfx_register_lock_class+0x10/0x10 [ 164.657538][ T9621] ? mark_lock+0x9a/0x350 [ 164.661856][ T9621] __lock_acquire+0x1346/0x1fd0 [ 164.666703][ T9621] lock_acquire+0x1ed/0x550 [ 164.671192][ T9621] ? __dev_queue_xmit+0x22f5/0x3d30 [ 164.676381][ T9621] ? __pfx_lock_acquire+0x10/0x10 [ 164.681392][ T9621] ? __pfx_lock_acquire+0x10/0x10 [ 164.686426][ T9621] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 164.692583][ T9621] ? rcu_read_lock_bh_held+0x7e/0x120 [ 164.697956][ T9621] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 164.703764][ T9621] _raw_spin_lock+0x2e/0x40 [ 164.708268][ T9621] ? __dev_queue_xmit+0x22f5/0x3d30 [ 164.713456][ T9621] __dev_queue_xmit+0x22f5/0x3d30 [ 164.718473][ T9621] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.724787][ T9621] ? read_seqbegin+0x157/0x2b0 [ 164.729537][ T9621] ? __dev_queue_xmit+0x2d2/0x3d30 [ 164.734638][ T9621] ? read_seqbegin+0x208/0x2b0 [ 164.739390][ T9621] ? __pfx___dev_queue_xmit+0x10/0x10 [ 164.744748][ T9621] ? neigh_resolve_output+0x2e5/0x740 [ 164.750107][ T9621] ? eth_header+0x11c/0x1f0 [ 164.754597][ T9621] ? __asan_memcpy+0x40/0x70 [ 164.759175][ T9621] ? eth_header+0x11c/0x1f0 [ 164.763666][ T9621] ? __pfx_eth_header+0x10/0x10 [ 164.768507][ T9621] ? neigh_resolve_output+0x61f/0x740 [ 164.773960][ T9621] ip6_finish_output2+0xff8/0x1670 [ 164.779062][ T9621] ? ip6_finish_output2+0x712/0x1670 [ 164.784333][ T9621] ? nf_hook+0x9e/0x450 [ 164.788475][ T9621] ? __pfx_ip6_finish_output2+0x10/0x10 [ 164.794009][ T9621] ? ip6_mtu+0x81/0x3f0 [ 164.798175][ T9621] ip6_finish_output+0x41e/0x810 [ 164.803110][ T9621] ndisc_send_skb+0xab0/0x1380 [ 164.807860][ T9621] ? ndisc_send_skb+0x572/0x1380 [ 164.812787][ T9621] ? __pfx_ndisc_send_skb+0x10/0x10 [ 164.817971][ T9621] ? __pfx_dst_output+0x10/0x10 [ 164.822807][ T9621] ? __asan_memcpy+0x40/0x70 [ 164.827386][ T9621] ? __pfx_ndisc_ns_create+0x10/0x10 [ 164.832656][ T9621] ? ipv6_get_lladdr+0x35a/0x3d0 [ 164.837580][ T9621] ? ipv6_get_lladdr+0x2c/0x3d0 [ 164.842436][ T9621] ndisc_solicit+0x493/0x6a0 [ 164.847039][ T9621] ? __pfx_ndisc_solicit+0x10/0x10 [ 164.852158][ T9621] ? __skb_clone+0x454/0x6c0 [ 164.856760][ T9621] ? __pfx_ndisc_solicit+0x10/0x10 [ 164.861872][ T9621] __neigh_event_send+0xec8/0x15a0 [ 164.867129][ T9621] neigh_resolve_output+0x1b5/0x740 [ 164.872329][ T9621] ? __ipv6_neigh_lookup_noref+0x52c/0x730 [ 164.878134][ T9621] ip6_finish_output2+0xff8/0x1670 [ 164.883245][ T9621] ? ip6_finish_output2+0x712/0x1670 [ 164.888534][ T9621] ? nf_hook+0x9e/0x450 [ 164.892695][ T9621] ? __pfx_ip6_finish_output2+0x10/0x10 [ 164.898239][ T9621] ? ip6_mtu+0x81/0x3f0 [ 164.902394][ T9621] ip6_finish_output+0x41e/0x810 [ 164.907332][ T9621] ip6_send_skb+0x112/0x230 [ 164.911834][ T9621] ? icmp6_send+0xba4/0x2070 [ 164.916416][ T9621] icmp6_send+0x15fc/0x2070 [ 164.920911][ T9621] ? icmp6_send+0xba4/0x2070 [ 164.925494][ T9621] ? __pfx_icmp6_send+0x10/0x10 [ 164.930333][ T9621] ? inet6_dump_addr+0xa50/0x1470 [ 164.935349][ T9621] ? __pfx_lock_release+0x10/0x10 [ 164.940371][ T9621] ? ip6_neigh_lookup+0x44b/0x580 [ 164.945383][ T9621] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 164.950746][ T9621] ? do_syscall_64+0xf3/0x230 [ 164.955420][ T9621] ip6_link_failure+0x3c/0x4f0 [ 164.960186][ T9621] ? dst_link_failure+0x107/0x160 [ 164.965204][ T9621] ip_tunnel_xmit+0x164f/0x2940 [ 164.970056][ T9621] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 164.975245][ T9621] ? gre_build_header+0x341/0xb30 [ 164.980256][ T9621] ? skb_release_data+0x2b5/0x880 [ 164.985273][ T9621] ? __pfx_gre_build_header+0x10/0x10 [ 164.990634][ T9621] ? pskb_expand_head+0xc89/0x1390 [ 164.995737][ T9621] __gre_xmit+0x1cf/0x260 [ 165.000056][ T9621] ? __pfx___gre_xmit+0x10/0x10 [ 165.004898][ T9621] ? erspan_build_header+0x174/0x360 [ 165.010174][ T9621] erspan_xmit+0xaba/0x1310 [ 165.014671][ T9621] ? __pfx_erspan_xmit+0x10/0x10 [ 165.019602][ T9621] ? dev_queue_xmit_nit+0x2b/0xc10 [ 165.024703][ T9621] dev_hard_start_xmit+0x27a/0x7e0 [ 165.029811][ T9621] sch_direct_xmit+0x2b6/0x5f0 [ 165.034565][ T9621] ? qdisc_tree_reduce_backlog+0x84/0x5f0 [ 165.040278][ T9621] ? __pfx_sch_direct_xmit+0x10/0x10 [ 165.045555][ T9621] __qdisc_run+0xbfd/0x2170 [ 165.050049][ T9621] ? qdisc_tree_reduce_backlog+0x84/0x5f0 [ 165.055758][ T9621] ? pfifo_tail_enqueue+0x2d2/0x410 [ 165.060978][ T9621] __dev_queue_xmit+0x14f0/0x3d30 [ 165.065997][ T9621] ? read_seqbegin+0x157/0x2b0 [ 165.070746][ T9621] ? __dev_queue_xmit+0x2d2/0x3d30 [ 165.075847][ T9621] ? read_seqbegin+0x208/0x2b0 [ 165.080603][ T9621] ? __pfx___dev_queue_xmit+0x10/0x10 [ 165.085961][ T9621] ? neigh_resolve_output+0x2e5/0x740 [ 165.091320][ T9621] ? eth_header+0x11c/0x1f0 [ 165.095811][ T9621] ? __asan_memcpy+0x40/0x70 [ 165.100391][ T9621] ? eth_header+0x11c/0x1f0 [ 165.104881][ T9621] ? __pfx_eth_header+0x10/0x10 [ 165.109717][ T9621] ? neigh_resolve_output+0x61f/0x740 [ 165.115086][ T9621] ip6_finish_output2+0xff8/0x1670 [ 165.120185][ T9621] ? ip6_finish_output2+0x712/0x1670 [ 165.125455][ T9621] ? nf_hook+0x9e/0x450 [ 165.129600][ T9621] ? __pfx_ip6_finish_output2+0x10/0x10 [ 165.135135][ T9621] ? ip6_mtu+0x81/0x3f0 [ 165.139281][ T9621] ip6_finish_output+0x41e/0x810 [ 165.144210][ T9621] ? rawv6_send_hdrinc+0x9df/0x1610 [ 165.149397][ T9621] rawv6_send_hdrinc+0xb79/0x1610 [ 165.154414][ T9621] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 165.159856][ T9621] ? ip6_dst_lookup_flow+0x13e/0x180 [ 165.165126][ T9621] ? __pfx_dst_output+0x10/0x10 [ 165.169961][ T9621] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 165.175583][ T9621] ? aa_label_sk_perm+0x4f0/0x6d0 [ 165.180596][ T9621] ? rawv6_sendmsg+0xef9/0x23c0 [ 165.185434][ T9621] rawv6_sendmsg+0x1962/0x23c0 [ 165.190218][ T9621] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 165.195344][ T9621] ? aa_sk_perm+0x967/0xab0 [ 165.199848][ T9621] ? inet_sendmsg+0x330/0x390 [ 165.204511][ T9621] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 165.209783][ T9621] ? security_socket_sendmsg+0x87/0xb0 [ 165.215231][ T9621] __sock_sendmsg+0x1a6/0x270 [ 165.219904][ T9621] ____sys_sendmsg+0x525/0x7d0 [ 165.224657][ T9621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.229937][ T9621] __sys_sendmsg+0x2b0/0x3a0 [ 165.234516][ T9621] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.239631][ T9621] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.245943][ T9621] ? do_syscall_64+0x100/0x230 [ 165.250703][ T9621] ? do_syscall_64+0xb6/0x230 [ 165.255377][ T9621] do_syscall_64+0xf3/0x230 [ 165.259873][ T9621] ? clear_bhb_loop+0x35/0x90 [ 165.264544][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.270436][ T9621] RIP: 0033:0x7f3697e7d0a9 [ 165.274836][ T9621] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 165.294427][ T9621] RSP: 002b:00007f3698bfd0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.302830][ T9621] RAX: ffffffffffffffda RBX: 00007f3697fb4050 RCX: 00007f3697e7d0a9 [ 165.310788][ T9621] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 165.318744][ T9621] RBP: 00007f3697eec074 R08: 0000000000000000 R09: 0000000000000000 [ 165.326720][ T9621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.334689][ T9621] R13: 000000000000006e R14: 00007f3697fb4050 R15: 00007ffee1667f58 [ 165.342665][ T9621] 2024/06/24 01:14:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 165.378031][ T9621] syz-executor.2 (9621) used greatest stack depth: 17680 bytes left