last executing test programs: 5.442622344s ago: executing program 1 (id=562): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x1fc, 0xfffffffe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0xf92323da62a22f5b, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24008010) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xec, 0x6, 0x0, 0x5, 0x2, 0x3, 0x3f, 0x81, 0x5, 0xac, 0xd2, 0x5, 0x8}, 0xe) 5.196258615s ago: executing program 0 (id=565): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r1, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8440, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e22, 0x4, 'lblcr\x00', 0x2e, 0x61, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb07a24f79ee3f86dd60200000000c2f00fc000000000000000000000000000001ff00000000000000000000010000883e000c907801000000"], 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.134496029s ago: executing program 4 (id=576): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}}, 0x20}}, 0x24) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000280)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r6, 0x75, 0x48}, &(0x7f0000000240)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfff7f038}, {0x6}]}, 0x10) (async) sendmmsg$unix(r8, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="61808588", 0x4}], 0x1, 0x0, 0x0, 0x80000ac}}], 0x1, 0x24002104) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00') r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x1402, 0x400, 0xfffff800, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r12}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r13}]}, 0x3c}}, 0x810) 2.727896389s ago: executing program 4 (id=578): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fdffffff10000000180001801400020076657468315f746f5f68737200000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0xfffd, 0x6, {0xa, 0x4e20, 0x1ff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r12, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r10}, 0x20) sendmmsg$inet6(r10, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) writev(r10, &(0x7f0000000880)=[{&(0x7f00000003c0)="f51af5231a", 0x5}], 0x1) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000002c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000480)="b4951e752ee2dfd890b3f9e7157b93c48b5d64dd7b598b1303111c33933f7084605dd20adcbf9e97a893d0d189865ef940059960e8dce44ee34528c1e2dd61a5e151cddd442daf66ab5696d376ea7e4c89eddb9fd8a2325a6f8b5b9a8dbd00ca06a67a3b9f5254d8243f6872005dbd051eebe1b6f729ffdcb614a6222971417ee92097d9886b1236e84238439c3b893d8450aa4b189ecbabaf6b", 0x9a}, {&(0x7f0000000740)="ab04217ec3a188d81edbb9bd94d3384056004939b0fa5682454103eaf9d8eedff2db0df42e2c8e3331013f6851465f11bfa5ba8cda7df57fcb99753ffd01ab916d574443e6ed1435ba4122c210df0e18b82e9b9b97d37f4f2054bee45e0f204b419842f40519c0dcbcda39419a548a3652a37d416a8d85721e5c42fdf531b29ba7d2330167e3e7482d414610f23c5c61db4cff0562e078dd3cc183cb0799f5bdea11c639076f2baa0d905d406225aea603000b4d70718a0c4619682a3d242145e270efe82283fae8bc7e4b28106dff46b7298ba30cc47f8913ac7b97160b83f6a96ed3ee40f6", 0xe6}, {&(0x7f0000000580)="b6de24b3999794aa7818409066c0dc96f8d66dad8586f2aa02cea8aa5d7aa90b576be7e08ff57730e19a94acbca95bbcdb8e154e7c642e324bb9b576c46a73104789a05f33d78247a014988ea0e8447802a28ffd32cc", 0x56}, {&(0x7f00000009c0)="36523e5a3d8d2130b12f0981879022d272f6973599df5cb0c9a57635bdfd01725c09803b94bae6d28efb959e2cf36ed9e4429aaa57f1e2ba80952a07b21a1549d365c09cd6cebcaa5a169df51470de66ec32551c563beef078969e091f4f6f285c4eed0c639629985b5da0e6b1feac3397283ef50af29087fd2c4b6f678ed19eb4a16ce5a06deb1ea91c2324399dd9a6fb4d4c00ff5374cf825c4444003eb73b89e87517a13f28ab540f68e8940a55a2aed988a1dfb1e7a499244d757b74f64f5969", 0xc2}, {&(0x7f00000008c0)="ee8bfca32d0380fc7170f78cbc8449351cdb66c6f7437a1cb377fae8400fe75bfbb095ffcd7dc17cc1eb386aa5962dbc9372edfe9d47815c49c4c689343068295457aeeae4c741ce07d5144787fc8972dc58ccdf1c7c7d673294445035981f0eb8bb166d5d79ae7513fe4bab0d03d7bdd9fbe9bd87d3837d1fcf7ccd126e29dd88f22123d2db8a1972c0cfd5aee3b61ba26832ea5818488781c722aad21f6951107d10b38975ad22d87d", 0xaa}, {&(0x7f0000000ac0)="216d5c84eae87db96cc132f397ee279d41ffd1c6cccac99881d5a5b9314edf1f2ef158bfca2d1c9e4dd5c0e1700ca7633134482d95bae07499a1a6db8ab641ecc8edf4de00ab775ca85da57f1b1cdbb548b44bec4244e5fc49fc1b7f74019dc9db987af107f426e15125c5dee160dfaf407e32f29b278ed76442c1d3dc029df5058e716fa82c2c16d901b8262fbf26aa9b6c2f134a5111b237de1607c1dc061a9af044bf4c2d1c976a4e33790aa3bcf1e477337e33c4b4bfab72f497142fd9fdf2417aca93492bbcdadedda85eb70022d26d4ace21848a1cbaab06c5bfe4155cb3576e568a94b12004a7d5ef34f62213082044", 0xcd}, {&(0x7f0000000240)="61f3d99fd9a9543a184108b949aec146b62abe33aa244bda14", 0x19}, {&(0x7f0000000bc0)="27425678e4135899b5a0cc7b30c24798f0b3814d5ff3a033efbb0304b3a0bb05bf156a2444ba9462459e475c3ffc7f8770361e0e517f7db9f01504e6042ff82c841e775b0917425a5c51b2b3441aaa52a7dc733f71306bb18aec1d29a20aaf7c066510b1104a058bc39f84ddad2cb03fd2a6c21d84d31b6581780f66eb130ca6cd9a1afc3b94fe6d0c0dc8de98af4c7a1e16b8e4755e27b3524c571b46148845decfbcf05a1f1866c0a471975f403b1a940ee5fabb", 0xb5}, {&(0x7f0000000ec0)="266b92fc6fe8e54e3d2b5f9317a97d579fc8e0c95c974f8e01bdbb1f22d19e17f4ca8b481845c4dcabc50475797961d3afaa037c7d1f9d7bfc9c09b235de7041d26eeea570b060167204c52ea42fd83346a96ff6e7171bed8f232c13ffb897d6b8841c9a8e9eec2520e2d5a4203b7eb9a6af8ad9b39656d7a82747547d5d031be40dc0f22f5e66d198ee47d197c72ca0916e20c7da259c54b06e07f41575d8744df440da5086197c1974a63dd7f205116abb3bfd48d1fb083bd0932d505e1fc56c33ab2b40de61f8", 0xc8}, {&(0x7f0000000d80)="a3921d75c1410c2e5153b3010184ce459159e3f2a3ec282aa493e1639767605b9de0bf5a4232c70ef4e521ad0236e6c4e3d1ac45de44a10450469fbf6d0d2f3673d2203afb9c026e30f1757656bde5578ca9f0ab357dcf880773f8037fa14c0ecc", 0x61}], 0xa, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x12a0}, 0x2000800) 2.494116405s ago: executing program 4 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80, 0x0}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r4, &(0x7f0000000ac0)={&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000880)=""/117, 0x75}, {&(0x7f0000000900)=""/229, 0xe5}], 0x9, &(0x7f0000001bc0)=""/131, 0x83}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x3) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\n\x00j~', @ANYRES16=r1, @ANYBLOB="010000000000020000000300000004000180"], 0x18}}, 0x0) 2.300579717s ago: executing program 0 (id=580): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet(0x2, 0x1, 0x0) close(0x3) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 2.185629291s ago: executing program 3 (id=581): socket$inet(0x10, 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="15abdf9ce90d70f5c9da80cc813ca02004a40c2a02d3d60d7e18377b8372b3c57f", 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1fffffffffffffa4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796100f3052c7f2624bf70af000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="00020000af7241f5f30ae1c865d60515235068068d703f4627963e22f84341fa1f6afc436df324af18f253ce1e7abb75fddee2d944637b6f5ac2ec3f66dfbb56e764c4d692a804eae2bc16d82c7345e10000000000", @ANYRES16=r6, @ANYBLOB="00032abd7000fbdbdf25060000000c009900010000001a0000000a00e8000802110000000000280017800400010004000100040006000400010004000300040003000400020004000200040002001c00e7004a5920b9b604a315f65f63d88a1166fece939cd3fdbbabe91c00e7005c9f3742ee8a6ad4d63ed2f369d9a3e9e81ef5871088eafd1c00e700ba808baba74dc5f5def77f2f81d27c62948b7c1bf2c6194b1c00e700ea478da876730ba9936ff5b0901b40d53dea2c26721e11fa0500530000000000050053000100000014001780040005000400050004000300040003000a00e800ffffffffffff000008001780040002000a00e80008021100000000001c00e70081b3d4a803074632d5b7291e91294eb9b76292467d7386892400178004000200040004000400050004000600040005000400060004000300040003000a00e80008021100000100000a00e80008021100000000001c00e700d73214edb6ed65683f93ba5bc0696b8ac290fef255c752510a00e80008021100000100001c00e700101dc76fc95a172b077c6dcd8ba0b8c2091047a6db6d84d208000500070000000a00e800ffffffffffff00001800178004000100040004000400060004000300040001000a00e80008021100000000000a00e80008021100000000000a00e80008021100000100000a0018000303030303030000"], 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffffd2}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r4) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.75286838s ago: executing program 3 (id=583): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80240}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, 0x140b, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4002}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x20008044) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00090000000400000000000000000000ed400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r2, &(0x7f00000000c0)="1800000016005f0214ffffffffffff", 0xf) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31840000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000068000380"], 0x118}}, 0x4000040) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}]}, 0x34}}, 0x4084) (async) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}, {0x0}], 0x2) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}}, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000007b80)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="23ce7c64f988bb6c729186dfacb42e2f", 0x10}], 0x1, 0x0, 0x0, 0x40805}], 0x1, 0x40) 1.685126434s ago: executing program 0 (id=584): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4008011, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447243b0ad92e414f70018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40080c0) 1.503691113s ago: executing program 0 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000001740)={0xb98, r2, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x28}}}}, [@NL80211_ATTR_TID_CONFIG={0x410, 0x11d, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5e15}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}]}, {0x388, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x6c, 0x37, 0x2, 0x4, 0x8, 0x3, 0x2, 0x60, 0x30, 0x1b, 0x4, 0x16, 0x6c, 0x9, 0x18, 0x60, 0x6, 0x18, 0x36, 0x9, 0x6, 0x30, 0x4, 0x36, 0x60, 0x1b, 0x0, 0x2, 0x4d, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x8, 0x86, 0x8, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x6}, {0x7, 0x7}, {0x7, 0x9}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0xa}, {0x4}, {0x2, 0x7}]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x7}, {0x6, 0x5}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x3}, {0x3, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x2}, {0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x4}, {0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x4, 0x6}, {0x6, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x4}, {0x2}, {0x6}, {0x3, 0x3}, {0x4, 0x9}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x5}, {0x5, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x8}, {0x6, 0x4}, {0x2, 0x8}, {0x7, 0x1}, {0x3, 0x2}, {0x4, 0x2}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x3}, {0x7, 0x9}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0x3}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x1, 0x4}, {0x2}, {0x1, 0x7}, {0x2, 0x7}, {0x7, 0x3}, {0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x3ff, 0xd, 0x5, 0x7fff, 0x1ff, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0xc, 0x24, 0x6, 0x1, 0x0, 0x9, 0x9, 0x48, 0x30, 0x3c]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x7, 0x7ff, 0x6, 0x1, 0x794e, 0x40, 0xb75]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x1, 0x8, 0x4, 0x2, 0xfe01, 0x2]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x33e, 0xd83, 0x2, 0xf0b6, 0x3, 0x4, 0x3, 0xfffc]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9f, 0x5, 0x7, 0xc12, 0x8, 0x6, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x103, 0x9, 0x6, 0x3, 0x5, 0x3ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x1, 0x8, 0x5, 0x7ff, 0x3, 0x81, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x4}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x7, 0x5}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x4, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0x8}, {0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x1, 0x1}, {0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x5}]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x7, 0xfff8, 0x0, 0x2, 0x4, 0x1, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xff, 0xc9b4, 0x9, 0x1, 0x2, 0x1000, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x1, 0xe, 0x9, 0x10, 0x4, 0xe, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x3, 0x8}, {0x3, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x7, 0x3}, {0x0, 0x2}, {0x6, 0x3}, {0x2}, {0x4, 0xa}, {0x2, 0x7}, {0x7, 0x7}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x1}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x5}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x9}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x718, 0x1000, 0xcad, 0x3, 0x6777, 0x9]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x30, 0x36, 0x2, 0x36, 0x9, 0x12, 0x30, 0x24, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x6, 0x6, 0x8001, 0x3, 0x2, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xda, 0x9, 0x39, 0x1, 0x2, 0x4, 0x7ff]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x9}, {0x7, 0x6}, {0x6, 0x5}, {0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0x8}, {0x4, 0x5}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0xa}, {}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0xa}]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x6, 0x0, 0x6c, 0x1b, 0x24, 0x5, 0x6, 0x12, 0x2, 0x60, 0x1b, 0x12, 0x4, 0x6c, 0x60, 0x24, 0x1, 0x16, 0x12, 0x48, 0x24, 0xb, 0x4, 0x2, 0x5, 0x48, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff8, 0x8, 0xc301, 0x80, 0x2, 0x9, 0x7fff]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1a8, 0x11d, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x2, 0x5, 0x1, 0x3f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x5, 0x4, 0x9, 0x0, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x2, 0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x5, 0x8}, {0x2, 0x1}, {0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x4}, {0x7, 0x3}, {0x7, 0x2}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x3}, {0x2, 0x8}, {0x6, 0x7}, {0x6}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x4}, {0x5, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0xa}, {0x2, 0x8}, {0x5, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x3, 0x2}, {0x4, 0x3}, {0x1}, {0x3, 0x6}, {0x0, 0x3}, {0x5, 0x6}, {0x4, 0x1}, {0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x7}, {0x2, 0x9}, {0x2, 0x9}, {0x7, 0x1}, {0x3, 0x6}, {0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x6}, {0x5, 0x2}, {0x1, 0x7}, {0x3, 0x1f}, {0x4, 0x6}, {0x3, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x8}, {0x4, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {0x6, 0x4}, {0x0, 0xa}, {0x2}, {0x2, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x5, 0x9}, {0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x7}, {0x3, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x57}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffd}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0xb, 0x18, 0x30, 0x3, 0x26, 0x48, 0x74, 0x30, 0x9, 0x24, 0x30, 0x24, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4b}]}]}, @NL80211_ATTR_TID_CONFIG={0x448, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x3f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x6, 0x8, 0xe, 0x26c, 0x30f, 0x8349]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x0, 0x0]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x30, 0x48, 0x30, 0x6, 0x12, 0x6, 0x36, 0x9, 0x48, 0x5, 0xc, 0x18, 0x5c, 0x4, 0x77, 0x5, 0x5, 0x12, 0x12, 0x6, 0x27, 0x16, 0x0, 0xb, 0x12, 0x6c, 0x5, 0x5]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0xa}, {0x5, 0x9}, {0x3, 0x7}, {0x0, 0xa}, {0x1}, {0x6}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x6}, {0x6, 0x6}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0x8}, {0x6, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x4, 0x9}, {0x3}, {0x3, 0x9}, {0x4, 0x8}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0x2}, {0x6, 0x6}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0x4, 0x2, 0x3, 0x9, 0xff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa4, 0xffff, 0x5, 0x1000, 0x800, 0x5, 0x4, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x14, 0x36, 0xb, 0x4, 0x6, 0x36, 0x30, 0x9, 0x6, 0x16, 0x36, 0x24, 0x30, 0x3, 0x24, 0x36, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x7ff, 0x7, 0x7, 0x16, 0xfc, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x4, 0x2, 0x30, 0x18, 0x4, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffd, 0x8, 0x7fff, 0x8, 0x92, 0xbcee, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa000, 0x0, 0x9, 0x6, 0x7ff, 0xfffc, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x9, 0x48, 0x60, 0x5, 0x66, 0x30, 0x1b, 0x30]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x36, 0x2, 0x12, 0x18, 0x18, 0x9, 0xc, 0x18, 0x60, 0x36, 0x6, 0x6c, 0x3, 0xa, 0x30, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x9, 0x30, 0x5, 0x4, 0x3, 0x6c, 0x36, 0xb, 0x36, 0x30, 0x23, 0x18, 0x2]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x4}, {0x6, 0x4}, {0x5, 0x8}, {}, {0x2, 0x3}, {0x5, 0xa}, {0x7, 0x7}, {0x3, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x5}, {0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0xa}, {0x2}, {0x4, 0x5}, {0x2, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x6}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x0, 0x3, 0x5, 0x30, 0x6c, 0x12, 0x12, 0x6c, 0x1b, 0x30, 0x6, 0x6c, 0x4, 0x66, 0x30, 0x36, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x101, 0x3, 0x36, 0x1, 0x2, 0x402b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x100, 0x401, 0x401, 0xfa, 0x7, 0xfff7, 0xf92]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x2, 0x6, 0x1b, 0x6c, 0x5, 0x9, 0x9, 0x6c, 0x43, 0x6, 0xb, 0x2, 0x18, 0x12, 0x60, 0x1, 0x9, 0x6c, 0x36, 0xb, 0xb, 0xb, 0x1, 0x16, 0x5c, 0x5, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x6, 0xb66, 0x100, 0x1, 0xff, 0x1ff]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x2}, {0x6, 0x5}, {0x1, 0xa}, {}, {0x1}, {0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x7, 0x4}, {0x3, 0x6}, {0x1}, {0x5}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x6}, {0x3, 0x3}, {0x5, 0x3}, {0x3, 0x4}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x5}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x1, 0x2}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x4, 0x5}, {0x7}, {0x2, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x4}, {0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x1}, {0x5, 0x5}, {0x1}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0xa}, {0x4}, {0x4, 0x5}, {0x3, 0x7}, {0x7, 0x8}, {0x5, 0x5}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8d, 0x38fe, 0x2, 0x0, 0x4, 0x9055, 0x0, 0x7f]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x2cbc, 0x3, 0x0, 0x6, 0x5d1, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x1, 0x2, 0x7, 0x8, 0x5, 0x1, 0xc000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff8, 0x7ff, 0x100, 0x4, 0x3, 0x79a4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x6}, {0x4, 0x8}, {0x4, 0x5}, {0x5, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x2}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x2, 0x8}, {0x2}, {0x1, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x1}, {0x0, 0x8}, {0x2}, {0x5, 0x4}, {0x4, 0x9}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x2, 0x4}, {0x7, 0x9}, {}, {0x1, 0x7}, {0x4, 0x4}, {0x6}, {0x4, 0x3}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x3}, {0x2, 0x9}, {0x0, 0x8}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x7}, {0x4, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x4}, {0x7, 0x9}, {0x7, 0x15}, {0x6, 0x5}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x7, 0x8, 0x5, 0x7, 0x3, 0x101, 0x2]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa0, 0xb, 0x10, 0x3, 0x6, 0xff, 0x81]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffa, 0x4, 0x7, 0x401, 0x3, 0xdc3, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x84, 0x89e, 0x8e59, 0x7, 0xf, 0x1, 0x6, 0x54ba]}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xba}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}]}]}, @NL80211_ATTR_TID_CONFIG={0x148, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5}, {0x6, 0x1}, {0x3, 0x3}, {0x5, 0x8}, {0x7, 0x6}, {0x7, 0x9}, {}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x1, 0xa}, {0x6, 0x2}, {0x5, 0x2}, {0x4}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x4}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0x5}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x2}, {0x5, 0x8}, {0x2, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x4}, {0x3}, {}, {0x6, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d, 0x3, 0xc181, 0x5, 0x0, 0x8, 0x0, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0xf, 0x7, 0xac, 0x4, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x8}, {0x0, 0x1}, {0x6, 0xa}, {0x5, 0x7}, {0x5, 0x3}, {0x6, 0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x1}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x30, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0xb98}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r6 = getpid() r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000500)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r6, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r7, @ANYBLOB="217b348dc9f05e4cc7ac1507ddac6f288c5a3ea4b47b9dcf4189cf5283a7570d83653e23819ff500000000485a337f0c2fbee07cfd2199bbbeb6715ba9be839dbf908a9e382f101efe44f707000000e7c0c1ed4fde2104dbb552"], 0xd0}}, 0x44004080) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000280)={@private1, 0x2, r11}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000005000000020000000000000010000400", @ANYRES32=r8, @ANYBLOB="0600"/20, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="030000000400000004000000080000008b5f86116174"], 0x50) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty}, 0xc) sendmsg$NL80211_CMD_NEW_KEY(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="840000006f1ba94919c5490ecbb3bfb5f20619ad251e393bf75604dc26d199eef26b3c201b7d40226b2fdf229c8492254c8c6ccb432e0357bf1ee94d00f37cda270656c87290f4ffffb4e6ff79694d034fcf3b1869a078b0ef1c0546da7ab993575a0c965d39e2f15e0f49ce5a39811d335fdc8df8e8cabbd92ceff954b0df640e7d1368f4c5", @ANYRES16=r3, @ANYBLOB="010800044000000000000b000000080050800400050005000800050000000400508004000b005400508005000900010000001100010002ca9a921bbbf0a27773fc14dc000000050002000400000005000900010000000800030001ac0f000500090000000000050002000000000004000500080003000b22170004002800"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x7, 0x30}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8d1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x37, 0x9, 0x70bd29, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r13) 1.502826583s ago: executing program 2 (id=586): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xee, &(0x7f0000000340)=""/238, 0x41100, 0x0, '\x00', 0x0, 0x900, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x5, 0x2000000000010000}) 1.482943168s ago: executing program 3 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) unshare(0x6a000000) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x38}, 0x10001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x700, 0x40, 0x8001, 0x80000001, {{0x6, 0x4, 0x1, 0xc, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2c}, {[@end]}}}}}) sendto$packet(r1, &(0x7f0000000180)="0dc7f5b6b4f1122d0ac657ba17370ee0df9cef8c2afa8e2545220c50b107eca92ab4701bc76ded9f840853ea70241e58433d82b5745d82b5d21f1d169cd2d78244dc1a3a5459df797c4da453f75d9be6e2fd85f286573cab0f778020073b1102f1924b6be16d", 0x66, 0x840, &(0x7f0000000340)={0x11, 0x1a, r3, 0x1, 0x6, 0x6, @local}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r5, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000017c0), 0x4) 1.461811693s ago: executing program 4 (id=588): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x4000000, r3}, 0x10) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.209076852s ago: executing program 0 (id=589): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffccb) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x20000800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'tunl0\x00', 0x0}) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)="139b979a6d806f705257aaf7841fc7d28e166dea156ae87157c2f6630d9ae3f6fbe4bb4ce385cc7ad69ea38ef7b7d306a1e029c050bbce24cfddcfa229b7bc518440a0b15c0501d60845bb8d50a4fb820686457c3a269529a85238c58dbeed9ef2ea30e058222ff0a3865c5aa89a7bdd2557193d2c1fb6beaf4465df69d16b8227f6f73a3036012ed88c1b68923008720c76bb22df9f249cc405f80e0f49cbba7807489eb87f06ed131de52142bf8248e5", &(0x7f0000000240)="883c83e77f372d71f2d63ce63202c4057ebb03e8f4bb6c18e14b08b817d8fd209700d4a5f1a424d370007f309bab3aced1dbd880ac23216365260ebcc82280071ef089cabe890bf943711f1769c5c4f4400ad76d908662109b290ae4cc179c8d0e105d6157c06611dcc75feb18acbbb87ff1d2d886f393f3d318c2c7b28e127ec4541f2196b4076d84a55df1367be6abf1bf400586cd7ed2d10f55294e4a4084326aeb67c372fb9788463acb61020bb903456201c6f556b5616624593dce1290", 0x1000, r4, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, 0x0, &(0x7f0000001580)=""/92}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.206362332s ago: executing program 2 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000140)={0x0, 0xd, 0x1}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'gre0\x00', 0x10}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x7d, 0x0, 0x2}, 0x50) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @aes128, 0x0, @desc4}) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog512-generic)\x00'}, 0x58) (async) close(r3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/237, 0xed}], 0x1}, 0x0) (async) close(r4) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000008c00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xb}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 1.049500899s ago: executing program 4 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x2, 0x5, 0x0, {0x31, 0x7f, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x9, 0xba}}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_IE={0x4b, 0x2a, [@mic={0x8c, 0x18, {0xec1, "4d2d3d8e6158", @long="c263411ecea61223da24d1d2a6e47cf2"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x7, 0x0, {0x4, 0x1cb7, 0x0, 0x3b9, 0x0, 0x0, 0x1, 0x2}, 0x408, 0x0, 0x3}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @peer_mgmt={0x75, 0x4, {0x0, 0x4, @void, @void, @void}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008010}, 0x90) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x9) socketpair(0x29, 0x800, 0xb, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x78bf, 0x8, 0x9, 0x0, {{0x3b, 0x4, 0x1, 0x9, 0xec, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop, @timestamp_addr={0x44, 0x24, 0xeb, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x39}, 0xff}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x900}]}, @end, @timestamp_addr={0x44, 0xc, 0x37, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7}]}, @rr={0x7, 0x7, 0xc1, [@empty]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x77, 0x3, 0xf, [{@private=0xa010100}, {@remote}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x1}, {@rand_addr=0x64010102, 0x8}]}, @generic={0x88, 0xe, "aa2a804e45c0d482fd5cdff9"}, @timestamp_addr={0x44, 0x2c, 0x7e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@multicast2, 0x4}, {@multicast1, 0x3}, {@multicast1, 0x6}, {@local, 0xbf10}]}, @timestamp_addr={0x44, 0x2c, 0xae, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x5}, {@private=0xa010100, 0xdf}, {@empty, 0x80000001}, {@empty, 0x5}]}]}}}}}) getpeername$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x10, 0x7, 0xf2, 0x5, {{0x22, 0x4, 0x3, 0x4, 0x88, 0x65, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@generic={0x82, 0x11, "22087162eb7734d4f268eaaaee1547"}, @generic={0x88, 0x8, "5ac6c02cff86"}, @timestamp={0x44, 0xc, 0xc, 0x0, 0x0, [0x7fffffff, 0x3]}, @generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x4c, 0x2d, 0x3, 0x5, [{@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}, {@private=0xa010101, 0x5}, {@multicast2, 0x4}, {@broadcast, 0x7ff}, {@private=0xa010102, 0x8}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) getsockname$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x40, 0x20, 0x0, 0x200, {{0x11, 0x4, 0x0, 0x3, 0x44, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2, {[@lsrr={0x83, 0xf, 0x97, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local]}, @rr={0x7, 0xf, 0x7a, [@broadcast, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0xb, 0xb7, [@dev={0xac, 0x14, 0x14, 0x8}, @broadcast]}, @generic={0x88, 0x3, '`'}, @end]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) getpeername$packet(r3, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000a80)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000b80)={@rand_addr, @local, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000e40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1ac, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000e80)) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0x1}, &(0x7f0000000ec0), &(0x7f0000000f00)=r0}, 0x20) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000f80)={0xa, 0x4e22, 0x8, @remote, 0x5}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000fc0)="8c7532214eb1bb0b62f0f5", 0xb}, {&(0x7f0000001000)="ff9b626057dcddc3ea7084b5c6b3143d2ea70e16facc77194d", 0x19}, {&(0x7f0000001040)="69189f9c58f7e720b5d61bdf7be71867a6b213add288a19eb416fe1db498031bb2db05a36ff8595f445f11c057c5a9515ae5c570425d3fb8b9932a7efbd7ef5663c816716fd07b756193b48b097f9c87a8f5c21eca7b0aa9521f73dede1ecda9f21eeb73e464538801c96681eed36449275d8fc2a9ca5a991bee6134cbacbddf3aac8dbd3cbece65b02e99f5295f6b2605a906fd040a50db44e65f88f5e9692c5caf0e1f1ef244240e8a15b79dacb8b6c8c1fb646342970c8dd7a54eeb742e77d6", 0xc1}, {&(0x7f0000001140)="d00491103c3ff05e063c63151209f6bd20a436a77a3653f8921733d50e8294097d282137f32e4e219d99c3d23998414776702d90da88d3d6200344a782ffbbd3b83bf07afb57abf6499a4955767bdbb88a3bc7f498691aa54c765dd868367faee78c09ab624a9bbee2f6a158c944d6aed0444147b50c1b26561544bf90c6f6385a2253a04fb19ea45e61f6050a12c52a0b0dba0c689c9d44c189439c00b6cb4ea4454b0ea854a7c4b4", 0xa9}, {&(0x7f0000001200)="1734381b1bf331fa61cb1433e05394fbefd89cac41cb041a113bf212393e86d41ef8daa210587d4afbaadbd36a52150287e356a31e9c686b8f4a0c8d151849a1d4856a6d3e271c7fa6a1df0b026068a21a8b31bdbf0cd6af94ee63dadc1c82eb3909bebf663778739d4f2a61994054", 0x6f}, {&(0x7f0000001280)="856115a2449f79201198eaa368aadc", 0xf}], 0x6, &(0x7f0000001340)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x67, 0x9, '\x00', [@ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x6, [0x8, 0x6, 0xfffffffffffffffe, 0x1ff, 0x0, 0x9, 0x5]}}, @pad1]}}}], 0x80}}, {{&(0x7f00000013c0)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001400)="6dc7cbeb932322601ea9ae1e22f22d6fe2847b182bd9f1e94f13649ed646e3ff25a6715c5cb827804b1dd7a7147453755a728b6bf88aa4eee0b448de0a8083beae3cbaede92895ea9d356a49738c", 0x4e}, {&(0x7f0000001480)="b036e55306d9bef84902201f2846ba8b0229eaace3c13bbfc0f94fd191b01d490c23cdde66aa8fffaa4edb8819a6f19df5222e869afcbc97c7c6fa7e349d29a2374453c005665afdd30d8a6c657d8986d8a9078153d0c55aeb2562e7886db96a9bc55805784a9c33d600d7ecf48fdb2caee22836751bbfe00fe6285b0c31908a54f73a3442b68b744ac2025c1cf0eb8cebb6d38c72e7d364f681e996dbacf56a1bd298f18d171f2f4676d44577c37e20f66af00ada824d0a2e78bb60d0e334a518bd1486dd7999dbf9623959e9e7c6d9fd29c88e89b2591fcfc24c2adff1", 0xde}, {&(0x7f0000001580)="655452fe10f1c421cca8eb55bc08827698e2813c4934b4d7eda2005d21d36f4ce0194ee02e9ffc625f75572e98367b7bf4f76e96a3da75c397a6666a37ee0f32c7def77952d970f7dc1442028c11e95d400320726199679b578fa68c33b82d8f085b6d0d6f1bb5726ad753fb7f99d37d0aafa5d607ed3e53772b26d4d10dd49265be1fcbf4a54ac558638a0308145a49a7c8b96d1a65286594bfe3c2a324c99088bf45b96055c99ece4c60d380cfe0b5b5907a8997829afaacd7a5a1bc690c9d", 0xc0}, {&(0x7f0000001640)="f51cc4daa7ecc53341bb32032574922cc5fff3bca3f0d25893cccc125eb8b094f34e96896285f3dcb41c47cdd9109db5ff47ce9ebdb14882cb3e7f85197168db546b14d18c3d7cc02c1bbef745182f983895152022f716db90eee09c527c2fbd4c47bcd9b8fdcd0b38ab8e9b3a38743d70404c49ab8181", 0x77}, {&(0x7f00000016c0)="7abaf79320d05f80f2eed9626eed496a5c95808f23961ff99ef7479ff0899678e68474c9388dc560424eb07a61102a4ae1f4e87cf28402f70c501fbcde6321da5d4909625eb67f940037407496546c8f5d10fe7d12a1e106b46644142af53a2151217e17852e63fd191077401cd88ab4401aecbf0f5a4175f81d90994c81fdfd230624097696e1e39555a784193d232a4242b5a406f447ba77afff09d34e", 0x9e}], 0x5}}], 0x2, 0x20000004) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040842}, 0x4000000) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000001980)={'gre0\x00', 0x7fffffffffffffff, 0x1}) accept4$rose(r3, &(0x7f0000001a80)=@full={0xb, @dev, @bcast, 0x0, [@bcast, @netrom, @rose, @rose, @remote, @bcast]}, &(0x7f0000001ac0)=0x40, 0x0) 896.598599ms ago: executing program 0 (id=592): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000dc0)={0x0, 0x2}, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000de80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000de40)={&(0x7f0000002700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x8f4, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "b665b88e1104a9e19e5eeb62"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x89, 0x6, 0x1, 0x0, "66af62fa1c4f5787ced2a60f5a0cbdf2f51624e0b65f857224fa269e95a10501f869b61811cf737c15537216891e8008970af657fddd23b10753e3f9c1a0877cc787c15de933898e72f9cc5fe11c13eaf54ba378407f36de59c788f50e0d65fd1a07fe657c8c34d7919d552e4b4d7fa10f8603b2ec9a3035097adb677b2ce4a660bde9349e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7a0, 0x3, 0x0, 0x1, [{0x328, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "4898f71c7976dea970d13190680da7f3918c3ad7a028412139aaf9d7"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e9c}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "38aa6f4a0efa598399ae7c421bc02142d4d17f92a5e2de10d985f5b36ae58f41e7644125de1faceb2835837217a4e208f3dd5efd08708eba5df70464fff313c64eacf4a06e0fdbfe98a21d1ad93809a71b6e045e89d69148140bfb766d4c51d620fda11fd02262b3082b9650221ad26f3212abbb3efbf8dcf172b898ea840bb9b799ddbf8361a6c8eca99459abc2960080d7b2695f0cc987ad71d67148ea9214d1f44e40989e7d9776e17d080a8467cc8c304a69dfe4b24917f3807a754df8fc7f7f3f810afd5121e309e50b220ed94853f506a683"}, @NFTA_DATA_VALUE={0x37, 0x1, "537243e9a53f42ee6d402b06bf7a54fdc850661036bb30d4e626e899f7c7225dc47d39d197526626555310a2547d28aadb9371"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x90, 0x1, "774fc44326fae68d437cd52a41fd02cb7cfb9ee9db4f3a30b06cb91eaaedbe230d77dbb27b4f64755aaf5dcb74ab06e60b9383c14761a21d21b634f0db573ec8d1ef1b0eb9edd6875e88329dc18c6f1be59681a3d84bf48b39bacac844b02c301b9256d4f8abb3d7f3be54b634e3ae934f9d74acb03e6d3cc177749ef57784dc5a219089115b452c5c6c9361"}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x53, 0x1, "2a6f6ebd8f423f0753379a6fab15749c9cb84696c94eef9fa8392c6cab1500c9bb10741af95e1eafe93b2e90c25e387f8640a5d94b95e56403c39b016786b3db7be87eecaa84e2e810eddaad2ff0dd"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "a36a5a21797ba426374e7134d8bac19ff9c57823536cae5ca6e5f43516d9687c895e9f0f182bb00dde2c0eb58ccd8c3c1b2afb8a3b1bf8c5ef325930212d533596061a2af5b88c51ce85186eac014a92c3de7a0627"}]}, {0x220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb, 0x1, "c60bcbbe83d695"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '\xf9\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "666a203baf36bab1bb85f4519c122ca289dcd11925e84ab71600a4a601065f8e5f6520aeca7829cdc3a18535ae84b6461d7f69"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "15a378cb1185ebac10a35259329a0ab752a289c7d2a6e5e0cc48530e10bf3e0b223189dce581ea380c10710dfc044b77c8e059916e3f68a6587f64b35c6d011945ea46a1bbec21497e1773357fb06275454537da85c5bb3968d61c335c600ada03e0696bbbff61a31602dd1eb1822a393da8c3f9231058993738c3ebc2265aa3d3e7dcdc7ed65f54a2d4c7fec67677b5b163e2a3050b68f4c8b505634acfc4f98cea005eb572a6f0a8aab9135fc6b7dc5b84e9d3568a4b9607f99d979239ef9e7049de8f1ab62ba7946b1115c773d7a2e95488e0f0a0f5f5d295085d2647ade57efb432662d39f74c5a480ccb5428b727b73998ddde26a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0xf4, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "53fdf90585b0060c79335fac683e9329c7f427428c0bfb7be57f6b860562a2d59ec73e123aabe53644f33ed1ca7dd8159a7b16aaa0c48204948e71c31f63ef5a4e01f4dbd5d2c9e3939cda61f02d8bfe29cc5958de91790965b4dda79dc4671012815213dd1e67c9d6ad5627635b7598531853ef882773b027a4707e52b1b49737dff1a4d0d83df43a65f520be39d5b64ca88626a09ba5605ab496b6333ef4428ee8601388a7b5680615229f88b17bb648114bef94a0af4ac2187fe6b77164eca334ae32"}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5476e4a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xe}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x24, 0x6, "3eb45c5a436a8675a6f4475ba5436a923b1f798c9ce8d7f61eecab59ae06a1cc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc7c}, 0x1, 0x0, 0x0, 0x8040}, 0x894) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) r6 = getpid() r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r7) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r8, 0x72b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r6, @ANYBLOB="7a7223bcd9a749aff450b02efc52b831d1ee1ef7878bda8f1f9d68ec4791b9c8f978d775e4f799dc82ef2c7da82c316b354b1042e5c907b5923822d75bcdedcd84dba7ae2103655a32de471e716855c15d89c1a1ab36db858dbf20"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="f9ff00000700"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) r12 = accept(r5, &(0x7f0000000c40)=@hci, &(0x7f0000000d00)=0x80) getsockopt$llc_int(r12, 0x10c, 0x3, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000018851008000000002018100000", @ANYRES32=r11, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000064030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 849.146068ms ago: executing program 2 (id=593): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x884) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000080000008000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create(0x1) r3 = epoll_create1(0x80000) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, 0x0, 0x0) close(r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x3c, 0x1, 0x5123566f, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = accept(r1, 0x0, &(0x7f0000000480)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x5}], 0x2c) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES64=r8], 0x0, 0x56}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r9, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$inet6_udp(0xa, 0x2, 0x0) 821.817191ms ago: executing program 4 (id=594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000300)="e1", 0x1, 0x8055, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) 818.18453ms ago: executing program 3 (id=595): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x5e55b37311de6d89, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 603.262796ms ago: executing program 1 (id=596): syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000cc0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xf8a, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x8, "7fa117870e3c5193b7c790fbe7846273c2719fd2e9b3f3db613ff25418c7648b0952025b93f2570bdd348feb594ce096988b5a19cc0d46938c89f2c92660e4"}, {0x2, 0x0, 'io'}, {0x22, 0x1e7, "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"}]}}}}}}, 0x0) 584.037486ms ago: executing program 2 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005240)=ANY=[@ANYBLOB="102000003e000701fefffffffcffffff047c000008004280040008000c00018006000600800a0000e81f02"], 0x2010}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x40000403}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c1}, 0x40) (async) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="e00000001300010000000000000000004015143f4529d72384a65b0f683ca0a21fdf11440000bf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed"], 0xe0}], 0x1}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r10, 0x921, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (async) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r12, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c094}, 0x20000000) 441.143484ms ago: executing program 1 (id=598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) (async) sendmsg$nl_route(r0, 0x0, 0x20000004) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000005060103000000f8ff000000000000040900020073797a30000000000900030073797a30000000000500010007000000bda25fb07a2728f8e3248725078dfd37e7397a753630ccb3404b02b2f22df7eda1de04a2a8"], 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x14000800) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x33, &(0x7f0000000040)=0x1000, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000380), &(0x7f0000000400)=0x4) (async) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x2e, "f42a637b0000dda5b89a02db8deea00b06ee73e9da31e2faa7a8c01332068d1962fcd5e4e4fc12d7a545aa3ed6ba"}}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000000}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r9, 0x100000af5, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x3) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r8, @ANYBLOB], 0x24}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7f, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0x49, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0x0, 0x4, 0x0, 0x0, 0x28, 0x1}], {0x4e20, 0x4e21, 0x41, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe"}}}}}}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f000000aa40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYRES8, @ANYRESHEX=r7, @ANYBLOB="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", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x4855}, 0x20000004) 440.001105ms ago: executing program 3 (id=599): syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x12, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="f8", 0x1}], 0x1}, 0x2c01}], 0x1, 0x4c851) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet6(r3, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffe55}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x29, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc10f}}, @jmp={0x5, 0x1, 0x9, 0x1, 0x1, 0x18, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x7, 0x4, 0x9, 0xfffffffffffffff4, 0x31}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call, @ringbuf_query, @jmp={0x5, 0x0, 0x1, 0x4, 0x3, 0x1, 0xfffffffffffffff0}, @func], &(0x7f0000000700)='GPL\x00', 0x7, 0xc1, &(0x7f0000000740)=""/193, 0x41000, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x0, 0x100, 0x48c}, 0x10, 0x5d36, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000940)=[{0x0, 0x4, 0x2, 0xc}, {0x1, 0x2, 0x3, 0x5}, {0x4, 0x4, 0x10}, {0x1, 0x4, 0x9, 0x2}, {0x3, 0x1, 0x5, 0x5}]}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180001fe800000000000000000000000000014fe8000000000000000000000000000bb2f0100000000000004017f01036d5ff919"], 0x0) sendmmsg$alg(r7, &(0x7f0000002ec0), 0x0, 0x24004000) 392.561597ms ago: executing program 2 (id=600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) unshare(0x6020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x90) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f}}], 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 362.800962ms ago: executing program 1 (id=601): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x400010, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 178.481833ms ago: executing program 1 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000404e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 177.717043ms ago: executing program 2 (id=603): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x3, 0x7}, {0x0, 0xd}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30308c7696f1829ee53fbb4b", &(0x7f0000000180)=""/9, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000009890102f306264950eb3ce2f3b3f5502bf2313200000000000000000000000009003100"/56], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(r5, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000006240)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) socket$packet(0x11, 0x2, 0x300) 67.105964ms ago: executing program 1 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x210, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1e0, 0x2, {{0x10000, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x5, 0x7, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xf, 0xa9c8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xcc}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x210}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@delchain={0x64, 0x65, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0xf}, {0xfff1, 0x9}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf9, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xa8}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x50) 0s ago: executing program 3 (id=605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x19ae}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x8000}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000140)=""/218, 0x0, 0xc}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000000000000ca190000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8000000000000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x11, 0x2, 0x0) close(r5) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @private=0xa010101}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x0, r6}, 0x18) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00'}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xffffffffffff8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xf, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008ef600008500000006000000"], &(0x7f0000000540)='GPL\x00', 0x81, 0x6a, &(0x7f0000000580)=""/106, 0x0, 0x40, '\x00', r2, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x3, &(0x7f0000000a40)=[r8, r10], &(0x7f0000000a80)=[{0x0, 0x5, 0xd, 0x7}, {0x3, 0x2, 0x10, 0x3}, {0x5, 0x2, 0xe, 0x4}], 0x10, 0x34}, 0x94) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) close(r0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000140)=0x2, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 201.727559][ T5879] cgroup: Unknown subsys name 'net' [ 201.835519][ T5879] cgroup: Unknown subsys name 'cpuset' [ 201.844894][ T5879] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 203.469136][ T5879] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 207.457794][ T5893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.471370][ T5900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.478942][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.536874][ T5905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.537287][ T5903] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.545459][ T5906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.552626][ T5903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.559582][ T5905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.566318][ T5903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.580288][ T5903] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.582422][ T5906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.590185][ T5903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.594992][ T5905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.602693][ T5903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.618471][ T5906] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.620525][ T5903] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.632058][ T5905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.640781][ T5903] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.649205][ T5903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.652024][ T5906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.657578][ T5903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.663998][ T5905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.672018][ T5903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.710667][ T5906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.720099][ T5907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.329303][ T5894] chnl_net:caif_netlink_parms(): no params data found [ 208.468571][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 208.568581][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 208.599664][ T5889] chnl_net:caif_netlink_parms(): no params data found [ 208.623510][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 208.775173][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.782575][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.789999][ T5901] bridge_slave_0: entered allmulticast mode [ 208.798654][ T5901] bridge_slave_0: entered promiscuous mode [ 208.813219][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.820358][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.828367][ T5894] bridge_slave_0: entered allmulticast mode [ 208.835901][ T5894] bridge_slave_0: entered promiscuous mode [ 208.868640][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.875909][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.883474][ T5901] bridge_slave_1: entered allmulticast mode [ 208.890687][ T5901] bridge_slave_1: entered promiscuous mode [ 208.905440][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.913143][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.920327][ T5894] bridge_slave_1: entered allmulticast mode [ 208.928924][ T5894] bridge_slave_1: entered promiscuous mode [ 209.057932][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.067762][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.075014][ T5891] bridge_slave_0: entered allmulticast mode [ 209.082752][ T5891] bridge_slave_0: entered promiscuous mode [ 209.094466][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.130011][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.137303][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.144951][ T5889] bridge_slave_0: entered allmulticast mode [ 209.153192][ T5889] bridge_slave_0: entered promiscuous mode [ 209.164578][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.175169][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.182670][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.189866][ T5891] bridge_slave_1: entered allmulticast mode [ 209.197384][ T5891] bridge_slave_1: entered promiscuous mode [ 209.220306][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.242678][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.249917][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.258247][ T5889] bridge_slave_1: entered allmulticast mode [ 209.265891][ T5889] bridge_slave_1: entered promiscuous mode [ 209.278662][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.328478][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.335826][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.343820][ T5904] bridge_slave_0: entered allmulticast mode [ 209.352135][ T5904] bridge_slave_0: entered promiscuous mode [ 209.388959][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.413296][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.420465][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.429029][ T5904] bridge_slave_1: entered allmulticast mode [ 209.437160][ T5904] bridge_slave_1: entered promiscuous mode [ 209.458882][ T5901] team0: Port device team_slave_0 added [ 209.468298][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.494759][ T5894] team0: Port device team_slave_0 added [ 209.518026][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.529347][ T5901] team0: Port device team_slave_1 added [ 209.564633][ T5894] team0: Port device team_slave_1 added [ 209.574049][ T5891] team0: Port device team_slave_0 added [ 209.599756][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.650160][ T5891] team0: Port device team_slave_1 added [ 209.658730][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.683664][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.690634][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.717127][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.741905][ T5184] Bluetooth: hci4: command tx timeout [ 209.741905][ T5907] Bluetooth: hci3: command tx timeout [ 209.742168][ T5184] Bluetooth: hci2: command tx timeout [ 209.747644][ T5907] Bluetooth: hci1: command tx timeout [ 209.771000][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.778248][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.804645][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.821238][ T5907] Bluetooth: hci0: command tx timeout [ 209.842621][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.870336][ T5889] team0: Port device team_slave_0 added [ 209.879867][ T5889] team0: Port device team_slave_1 added [ 209.886655][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.893708][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.920521][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.942525][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.949517][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.976160][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.007276][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.014512][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.040570][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.132973][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.139969][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.167473][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.188818][ T5904] team0: Port device team_slave_0 added [ 210.222799][ T5901] hsr_slave_0: entered promiscuous mode [ 210.229423][ T5901] hsr_slave_1: entered promiscuous mode [ 210.240569][ T5904] team0: Port device team_slave_1 added [ 210.249103][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.259680][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.286121][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.352491][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.359483][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.386825][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.438551][ T5891] hsr_slave_0: entered promiscuous mode [ 210.445328][ T5891] hsr_slave_1: entered promiscuous mode [ 210.452326][ T5891] debugfs: 'hsr0' already exists in 'hsr' [ 210.458163][ T5891] Cannot create hsr debugfs directory [ 210.520391][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.528398][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.554507][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.568520][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.575595][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.601849][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.619048][ T5894] hsr_slave_0: entered promiscuous mode [ 210.629880][ T5894] hsr_slave_1: entered promiscuous mode [ 210.636616][ T5894] debugfs: 'hsr0' already exists in 'hsr' [ 210.642872][ T5894] Cannot create hsr debugfs directory [ 210.842004][ T5889] hsr_slave_0: entered promiscuous mode [ 210.848447][ T5889] hsr_slave_1: entered promiscuous mode [ 210.855419][ T5889] debugfs: 'hsr0' already exists in 'hsr' [ 210.861391][ T5889] Cannot create hsr debugfs directory [ 210.872839][ T5904] hsr_slave_0: entered promiscuous mode [ 210.879528][ T5904] hsr_slave_1: entered promiscuous mode [ 210.886037][ T5904] debugfs: 'hsr0' already exists in 'hsr' [ 210.892527][ T5904] Cannot create hsr debugfs directory [ 211.278000][ T5901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.319976][ T5901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.359179][ T5901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.405597][ T5901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.509790][ T5894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.520718][ T5894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.538209][ T5894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.550761][ T5894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.653329][ T5904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.665109][ T5904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.696282][ T5904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.707062][ T5904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.806714][ T5891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.819641][ T5891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.826569][ T5906] Bluetooth: hci3: command tx timeout [ 211.826618][ T5906] Bluetooth: hci4: command tx timeout [ 211.826740][ T5907] Bluetooth: hci2: command tx timeout [ 211.832188][ T5184] Bluetooth: hci1: command tx timeout [ 211.855941][ T5891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.867577][ T5891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.901409][ T5907] Bluetooth: hci0: command tx timeout [ 211.975243][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.041156][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.068666][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.093630][ T5894] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.103751][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.111198][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.128079][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.155600][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.167979][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.180019][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.187184][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.196453][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.203590][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.221792][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.228935][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.246915][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.366312][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.402916][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.465947][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.487839][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.513915][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.521214][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.537142][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.544413][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.587929][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.595150][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.618629][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.625934][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.755879][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.851789][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.884866][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.892111][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.925038][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.932255][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.075931][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.117136][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.363323][ T5901] veth0_vlan: entered promiscuous mode [ 213.430258][ T5901] veth1_vlan: entered promiscuous mode [ 213.520665][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.558239][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.589024][ T5901] veth0_macvtap: entered promiscuous mode [ 213.616383][ T5901] veth1_macvtap: entered promiscuous mode [ 213.706003][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.751733][ T5904] veth0_vlan: entered promiscuous mode [ 213.766857][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.780827][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.817896][ T5904] veth1_vlan: entered promiscuous mode [ 213.828944][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.843478][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.854778][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.876745][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.902381][ T5907] Bluetooth: hci2: command tx timeout [ 213.907909][ T5184] Bluetooth: hci3: command tx timeout [ 213.907982][ T5898] Bluetooth: hci1: command tx timeout [ 213.915028][ T5906] Bluetooth: hci4: command tx timeout [ 213.975266][ T5891] veth0_vlan: entered promiscuous mode [ 213.984259][ T5906] Bluetooth: hci0: command tx timeout [ 214.029105][ T5891] veth1_vlan: entered promiscuous mode [ 214.040803][ T5889] veth0_vlan: entered promiscuous mode [ 214.063283][ T5894] veth0_vlan: entered promiscuous mode [ 214.071106][ T5904] veth0_macvtap: entered promiscuous mode [ 214.085476][ T5904] veth1_macvtap: entered promiscuous mode [ 214.135438][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.148735][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.192573][ T5894] veth1_vlan: entered promiscuous mode [ 214.204227][ T5889] veth1_vlan: entered promiscuous mode [ 214.216777][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.227548][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.242812][ T5891] veth0_macvtap: entered promiscuous mode [ 214.254105][ T5891] veth1_macvtap: entered promiscuous mode [ 214.268364][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.306300][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.364011][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.369640][ T5901] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 214.376937][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.399337][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.408455][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.425201][ T5889] veth0_macvtap: entered promiscuous mode [ 214.440821][ T5889] veth1_macvtap: entered promiscuous mode [ 214.454733][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.470829][ T5894] veth0_macvtap: entered promiscuous mode [ 214.502229][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.513275][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.539045][ T5894] veth1_macvtap: entered promiscuous mode [ 214.552588][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.567307][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.602301][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.626106][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.644366][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.666235][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.697467][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.741610][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.806170][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.859092][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.876212][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.926963][ T1158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.936022][ T1158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.956760][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.973061][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.976039][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.980909][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.998358][ T1158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.014991][ T1158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.105799][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.139946][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.259161][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.286087][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.370931][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.394066][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.448163][ T6015] Zero length message leads to an empty skb [ 215.486957][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.497101][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.547046][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 215.630086][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.638449][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.972042][ T6030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8'. [ 215.982076][ T5907] Bluetooth: hci3: command tx timeout [ 215.987973][ T5906] Bluetooth: hci1: command tx timeout [ 215.991321][ T5898] Bluetooth: hci4: command tx timeout [ 215.998752][ T5907] Bluetooth: hci2: command tx timeout [ 216.042520][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.064625][ T5898] Bluetooth: hci0: command tx timeout [ 216.070604][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.147764][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 216.336654][ T6040] Illegal XDP return value 65535 on prog (id 6) dev N/A, expect packet loss! [ 216.422714][ T6043] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 216.462725][ T6045] sctp: [Deprecated]: syz.4.5 (pid 6045) Use of int in max_burst socket option. [ 216.462725][ T6045] Use struct sctp_assoc_value instead [ 216.494347][ T6046] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10'. [ 216.775259][ T6056] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 216.851283][ T6056] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 216.950024][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 217.174772][ T6074] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 218.900688][ T6123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.744322][ T6149] sctp: [Deprecated]: syz.3.34 (pid 6149) Use of int in max_burst socket option deprecated. [ 219.744322][ T6149] Use struct sctp_assoc_value instead [ 219.775077][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 220.029930][ T6148] netlink: 'syz.4.32': attribute type 2 has an invalid length. [ 220.058538][ T6157] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 220.325037][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.38'. [ 220.455791][ T6167] _ÐZ`Ô€@S!: entered promiscuous mode [ 220.601564][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 220.635261][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 220.884550][ T6193] team0: entered promiscuous mode [ 220.889657][ T6193] team_slave_0: entered promiscuous mode [ 220.918466][ T6193] team_slave_1: entered promiscuous mode [ 220.932534][ T6193] team0: entered allmulticast mode [ 220.964068][ T6193] team_slave_0: entered allmulticast mode [ 220.989366][ T6193] team_slave_1: entered allmulticast mode [ 221.164360][ T6205] netlink: 72 bytes leftover after parsing attributes in process `syz.1.48'. [ 221.219961][ T6203] dummy0: entered promiscuous mode [ 221.226156][ T6203] macsec1: entered promiscuous mode [ 221.241947][ T6203] dummy0: left promiscuous mode [ 221.458414][ T6216] netlink: 'syz.1.50': attribute type 5 has an invalid length. [ 221.489911][ T6216] netlink: 'syz.1.50': attribute type 7 has an invalid length. [ 221.566391][ T6216] : entered promiscuous mode [ 221.572339][ T6224] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.826908][ T6231] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 222.464613][ T6256] !: renamed from dummy0 (while UP) [ 222.568926][ T6257] Bluetooth: MGMT ver 1.23 [ 222.843127][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'. [ 222.951306][ T6282] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 223.140189][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 223.302363][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 223.354799][ T6287] batadv0: entered promiscuous mode [ 223.354987][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 223.381776][ T6287] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.402095][ T6287] batadv0: left promiscuous mode [ 224.064690][ T1158] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.080696][ T6307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.70'. [ 224.115788][ T1158] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.124161][ T5961] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.655884][ T6325] syz_tun: entered allmulticast mode [ 224.761489][ T5961] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.892278][ T5961] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.009066][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 225.028572][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 225.187570][ T6351] bridge_slave_1: left allmulticast mode [ 225.193563][ T6351] bridge_slave_1: left promiscuous mode [ 225.220584][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.292853][ T6351] bridge_slave_0: left allmulticast mode [ 225.298557][ T6351] bridge_slave_0: left promiscuous mode [ 225.315884][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.467659][ T6317] syz_tun: left allmulticast mode [ 225.739718][ T6375] __nla_validate_parse: 1 callbacks suppressed [ 225.739738][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.75'. [ 225.880433][ T6365] netlink: 60 bytes leftover after parsing attributes in process `syz.4.75'. [ 225.937776][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 226.002708][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 226.120501][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.83'. [ 226.134436][ T6381] batadv0: entered promiscuous mode [ 226.141631][ T5898] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 226.143454][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.188278][ T6381] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.230967][ T6381] batadv0: left promiscuous mode [ 226.587639][ T6401] netlink: 'syz.1.89': attribute type 1 has an invalid length. [ 226.658037][ T6401] vlan2: entered allmulticast mode [ 226.677065][ T6401] batadv0: entered allmulticast mode [ 226.786209][ T6415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.93'. [ 226.986484][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 226.997766][ T6415] syzkaller0: entered promiscuous mode [ 227.009504][ T6415] syzkaller0: entered allmulticast mode [ 227.160368][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.93'. [ 227.814222][ T6456] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 228.031947][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.104'. [ 228.121891][ T6462] tipc: Enabling of bearer rejected, failed to enable media [ 228.152987][ T6462] tipc: Enabling of bearer rejected, failed to enable media [ 228.267566][ T6471] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 228.304031][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 228.568772][ T6489] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 229.408452][ T6528] netlink: 'syz.0.120': attribute type 10 has an invalid length. [ 229.629725][ T6528] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 229.731466][ T6532] Unsupported xt match [ 229.731486][ T6532] unable to load match [ 229.751452][ T6533] netlink: 'syz.1.123': attribute type 83 has an invalid length. [ 230.145071][ T5992] IPVS: starting estimator thread 0... [ 230.183046][ T6536] syz.2.124 (6536) used greatest stack depth: 16088 bytes left [ 230.205306][ T6545] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 230.243456][ T6545] team0: Device dummy0 is up. Set it down before adding it as a team port [ 230.261340][ T6546] IPVS: using max 34 ests per chain, 81600 per kthread [ 230.362321][ T6552] netlink: 'syz.3.129': attribute type 13 has an invalid length. [ 230.370152][ T6552] netlink: 'syz.3.129': attribute type 17 has an invalid length. [ 230.794152][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.956501][ T6576] __nla_validate_parse: 7 callbacks suppressed [ 230.956523][ T6576] netlink: 19 bytes leftover after parsing attributes in process `syz.4.133'. [ 232.172817][ T6612] netlink: 'syz.3.142': attribute type 12 has an invalid length. [ 232.219225][ T6612] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.142'. [ 232.606623][ T6626] syzkaller1: entered promiscuous mode [ 232.616776][ T6626] syzkaller1: entered allmulticast mode [ 233.287897][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 233.513508][ T6664] syzkaller1: entered promiscuous mode [ 233.519163][ T6664] syzkaller1: entered allmulticast mode [ 234.431622][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 234.615349][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 234.695984][ T6705] syzkaller0: entered promiscuous mode [ 234.706019][ T6705] syzkaller0: entered allmulticast mode [ 234.769029][ T6717] netlink: 96 bytes leftover after parsing attributes in process `syz.0.170'. [ 234.978599][ T6721] netlink: 160 bytes leftover after parsing attributes in process `syz.0.172'. [ 235.002182][ T6723] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 235.062998][ T6721] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (10621439) [ 235.129933][ T6721] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 235.350196][ T6736] pim6reg: entered allmulticast mode [ 235.404998][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 236.262286][ T6769] sctp: [Deprecated]: syz.0.182 (pid 6769) Use of int in max_burst socket option deprecated. [ 236.262286][ T6769] Use struct sctp_assoc_value instead [ 236.328414][ T6769] netlink: 52 bytes leftover after parsing attributes in process `syz.0.182'. [ 236.382503][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 236.621401][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.658422][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 236.740140][ T6759] team0: Port device team_slave_1 removed [ 237.000188][ T6784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.188'. [ 237.338328][ T6342] tipc: Subscription rejected, illegal request [ 237.614578][ T6797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.191'. [ 237.686362][ T6807] tipc: Started in network mode [ 237.695854][ T6807] tipc: Node identity 3aad1be6ff63, cluster identity 4711 [ 237.717169][ T6807] tipc: Enabled bearer , priority 0 [ 237.789780][ T6810] syzkaller0: entered promiscuous mode [ 237.800533][ T6810] syzkaller0: entered allmulticast mode [ 237.836863][ T6806] tipc: Started in network mode [ 237.843743][ T6806] tipc: Node identity 52adb5bdfc95, cluster identity 4711 [ 237.853366][ T6806] tipc: Enabled bearer , priority 0 [ 237.867095][ T6795] tipc: Resetting bearer [ 237.925448][ T6795] tipc: Disabling bearer [ 237.964867][ T6803] tipc: Disabling bearer [ 238.478412][ T6827] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 238.531270][ T6827] netlink: 'syz.3.200': attribute type 2 has an invalid length. [ 238.748273][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 238.872551][ T6817] netlink: 44 bytes leftover after parsing attributes in process `syz.4.196'. [ 238.952393][ T6836] pim6reg1: entered promiscuous mode [ 238.981220][ T6836] pim6reg1: entered allmulticast mode [ 239.071636][ T6845] sit0: entered promiscuous mode [ 239.139680][ T6845] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 239.160654][ T6845] netlink: 1 bytes leftover after parsing attributes in process `syz.2.204'. [ 239.308287][ T6852] netlink: 'syz.2.206': attribute type 28 has an invalid length. [ 239.564537][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 239.717208][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.825993][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 239.909168][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.917263][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.095257][ T6885] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20001 [ 240.107518][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.124653][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.277129][ T6863] bond_slave_0: entered promiscuous mode [ 240.283038][ T6863] bond_slave_1: entered promiscuous mode [ 240.289724][ T6863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.304264][ T6863] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 240.313888][ T6868] tipc: Enabling of bearer rejected, failed to enable media [ 240.544853][ T6342] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.582681][ T6342] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.632453][ T6342] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.677543][ T6342] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.331213][ T6924] vlan2: entered promiscuous mode [ 241.337867][ T6924] bond0: entered promiscuous mode [ 241.372008][ T6924] bond_slave_0: entered promiscuous mode [ 241.378007][ T6924] bond_slave_1: entered promiscuous mode [ 241.416095][ T6924] vlan2: entered allmulticast mode [ 241.444030][ T6924] bond0: entered allmulticast mode [ 241.490965][ T6924] bond_slave_0: entered allmulticast mode [ 241.561252][ T6924] bond_slave_1: entered allmulticast mode [ 241.808656][ T6941] __nla_validate_parse: 2 callbacks suppressed [ 241.808679][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 241.908436][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 241.998099][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 242.278865][ T6950] bridge2: entered promiscuous mode [ 242.301885][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 242.632020][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'. [ 243.012881][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.021314][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.462124][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 243.614973][ T6999] netlink: 'syz.1.242': attribute type 16 has an invalid length. [ 243.623000][ T6999] netlink: 'syz.1.242': attribute type 17 has an invalid length. [ 243.675476][ T6999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.931027][ T7005] FAULT_INJECTION: forcing a failure. [ 243.931027][ T7005] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 244.006615][ T7005] CPU: 1 UID: 0 PID: 7005 Comm: syz.4.246 Not tainted syzkaller #0 PREEMPT(full) [ 244.006642][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.006661][ T7005] Call Trace: [ 244.006669][ T7005] [ 244.006678][ T7005] dump_stack_lvl+0x189/0x250 [ 244.006727][ T7005] ? __pfx____ratelimit+0x10/0x10 [ 244.006747][ T7005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.006771][ T7005] ? __pfx__printk+0x10/0x10 [ 244.006800][ T7005] ? __might_fault+0xb0/0x130 [ 244.006842][ T7005] should_fail_ex+0x414/0x560 [ 244.006875][ T7005] _copy_from_user+0x2d/0xb0 [ 244.006901][ T7005] __sys_sendto+0x25c/0x520 [ 244.006926][ T7005] ? __pfx___sys_sendto+0x10/0x10 [ 244.006945][ T7005] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 244.006992][ T7005] ? __fget_files+0x3a0/0x420 [ 244.007022][ T7005] ? ksys_write+0x22a/0x250 [ 244.007049][ T7005] ? __pfx_ksys_write+0x10/0x10 [ 244.007071][ T7005] ? rcu_is_watching+0x15/0xb0 [ 244.007097][ T7005] __x64_sys_sendto+0xde/0x100 [ 244.007122][ T7005] do_syscall_64+0xfa/0x3b0 [ 244.007145][ T7005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.007164][ T7005] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 244.007183][ T7005] ? clear_bhb_loop+0x60/0xb0 [ 244.007207][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.007226][ T7005] RIP: 0033:0x7f3f6018ebe9 [ 244.007249][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.007264][ T7005] RSP: 002b:00007f3f60fc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.007289][ T7005] RAX: ffffffffffffffda RBX: 00007f3f603c5fa0 RCX: 00007f3f6018ebe9 [ 244.007312][ T7005] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 244.007324][ T7005] RBP: 00007f3f60fc8090 R08: 0000200000000140 R09: 0000000000000014 [ 244.007336][ T7005] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 244.007347][ T7005] R13: 00007f3f603c6038 R14: 00007f3f603c5fa0 R15: 00007ffd72bd8f48 [ 244.007372][ T7005] [ 244.249136][ T7009] 8021q: VLANs not supported on ip6_vti0 [ 244.574009][ T7024] lo: entered allmulticast mode [ 244.579607][ T7024] lo: left allmulticast mode [ 244.592993][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 244.627949][ T7024] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 244.833401][ T7037] Bluetooth: MGMT ver 1.23 [ 244.941197][ T7052] FAULT_INJECTION: forcing a failure. [ 244.941197][ T7052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.004236][ T7052] CPU: 1 UID: 0 PID: 7052 Comm: syz.1.260 Not tainted syzkaller #0 PREEMPT(full) [ 245.004263][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.004276][ T7052] Call Trace: [ 245.004284][ T7052] [ 245.004292][ T7052] dump_stack_lvl+0x189/0x250 [ 245.004322][ T7052] ? __pfx____ratelimit+0x10/0x10 [ 245.004344][ T7052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.004369][ T7052] ? __pfx__printk+0x10/0x10 [ 245.004397][ T7052] ? __might_fault+0xb0/0x130 [ 245.004449][ T7052] should_fail_ex+0x414/0x560 [ 245.004481][ T7052] _copy_from_iter+0x1de/0x1790 [ 245.004516][ T7052] ? __lock_acquire+0xab9/0xd20 [ 245.004541][ T7052] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 245.004578][ T7052] ? __pfx__copy_from_iter+0x10/0x10 [ 245.004601][ T7052] ? dev_get_by_index+0x22/0x2e0 [ 245.004628][ T7052] ? dev_get_by_index+0x22/0x2e0 [ 245.004659][ T7052] packet_sendmsg+0x3072/0x5080 [ 245.004695][ T7052] ? unix_peer_perm+0xf96/0x11b0 [ 245.004733][ T7052] ? __pfx___might_resched+0x10/0x10 [ 245.004749][ T7052] ? __lock_acquire+0xab9/0xd20 [ 245.004789][ T7052] ? __pfx_packet_sendmsg+0x10/0x10 [ 245.004812][ T7052] ? aa_sk_perm+0x81e/0x950 [ 245.004846][ T7052] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 245.004871][ T7052] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.004891][ T7052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.004910][ T7052] ? __pfx_packet_sendmsg+0x10/0x10 [ 245.004937][ T7052] __sock_sendmsg+0x219/0x270 [ 245.004967][ T7052] __sys_sendto+0x3bd/0x520 [ 245.004989][ T7052] ? __pfx___sys_sendto+0x10/0x10 [ 245.005005][ T7052] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 245.005039][ T7052] ? __fget_files+0x3a0/0x420 [ 245.005066][ T7052] ? ksys_write+0x22a/0x250 [ 245.005093][ T7052] ? __pfx_ksys_write+0x10/0x10 [ 245.005114][ T7052] ? rcu_is_watching+0x15/0xb0 [ 245.005138][ T7052] __x64_sys_sendto+0xde/0x100 [ 245.005161][ T7052] do_syscall_64+0xfa/0x3b0 [ 245.005180][ T7052] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.005199][ T7052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.005216][ T7052] ? clear_bhb_loop+0x60/0xb0 [ 245.005247][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.005268][ T7052] RIP: 0033:0x7eff0bb8ebe9 [ 245.005284][ T7052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.005298][ T7052] RSP: 002b:00007eff0c941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 245.005317][ T7052] RAX: ffffffffffffffda RBX: 00007eff0bdc5fa0 RCX: 00007eff0bb8ebe9 [ 245.005331][ T7052] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 245.005342][ T7052] RBP: 00007eff0c941090 R08: 0000200000000140 R09: 0000000000000014 [ 245.005354][ T7052] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 245.005364][ T7052] R13: 00007eff0bdc6038 R14: 00007eff0bdc5fa0 R15: 00007ffc8e4b1878 [ 245.005392][ T7052] [ 245.447347][ T7060] tipc: Started in network mode [ 245.452434][ T7060] tipc: Node identity 8ea3cea5548e, cluster identity 4711 [ 245.460899][ T7060] tipc: Enabled bearer , priority 0 [ 245.475069][ T7062] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 245.483968][ T7062] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 245.592599][ T7059] syzkaller0: entered promiscuous mode [ 245.598111][ T7059] syzkaller0: entered allmulticast mode [ 245.653752][ T7059] tipc: Resetting bearer [ 245.697864][ T7059] tipc: Disabling bearer [ 245.753792][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 245.763032][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 246.119321][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 246.274609][ T7098] FAULT_INJECTION: forcing a failure. [ 246.274609][ T7098] name failslab, interval 1, probability 0, space 0, times 1 [ 246.287722][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 246.287747][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.287758][ T7098] Call Trace: [ 246.287766][ T7098] [ 246.287773][ T7098] dump_stack_lvl+0x189/0x250 [ 246.287802][ T7098] ? __pfx____ratelimit+0x10/0x10 [ 246.287821][ T7098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.287843][ T7098] ? __pfx__printk+0x10/0x10 [ 246.287870][ T7098] ? __pfx___might_resched+0x10/0x10 [ 246.287906][ T7098] ? fs_reclaim_acquire+0x7d/0x100 [ 246.287930][ T7098] should_fail_ex+0x414/0x560 [ 246.287962][ T7098] should_failslab+0xa8/0x100 [ 246.287992][ T7098] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 246.288019][ T7098] ? __alloc_skb+0x112/0x2d0 [ 246.288044][ T7098] __alloc_skb+0x112/0x2d0 [ 246.288069][ T7098] alloc_skb_with_frags+0xca/0x890 [ 246.288105][ T7098] sock_alloc_send_pskb+0x857/0x990 [ 246.288151][ T7098] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 246.288182][ T7098] ? dev_get_by_index+0x22/0x2e0 [ 246.288209][ T7098] ? dev_get_by_index+0x22/0x2e0 [ 246.288243][ T7098] packet_sendmsg+0x33a0/0x5080 [ 246.288281][ T7098] ? unix_peer_perm+0xf96/0x11b0 [ 246.288320][ T7098] ? __pfx___might_resched+0x10/0x10 [ 246.288337][ T7098] ? __lock_acquire+0xab9/0xd20 [ 246.288381][ T7098] ? __pfx_packet_sendmsg+0x10/0x10 [ 246.288416][ T7098] ? aa_sk_perm+0x81e/0x950 [ 246.288452][ T7098] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 246.288475][ T7098] ? aa_sock_msg_perm+0xf1/0x1d0 [ 246.288492][ T7098] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.288509][ T7098] ? __pfx_packet_sendmsg+0x10/0x10 [ 246.288531][ T7098] __sock_sendmsg+0x219/0x270 [ 246.288557][ T7098] __sys_sendto+0x3bd/0x520 [ 246.288575][ T7098] ? __pfx___sys_sendto+0x10/0x10 [ 246.288590][ T7098] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 246.288618][ T7098] ? __fget_files+0x3a0/0x420 [ 246.288641][ T7098] ? ksys_write+0x22a/0x250 [ 246.288669][ T7098] ? __pfx_ksys_write+0x10/0x10 [ 246.288688][ T7098] ? rcu_is_watching+0x15/0xb0 [ 246.288713][ T7098] __x64_sys_sendto+0xde/0x100 [ 246.288732][ T7098] do_syscall_64+0xfa/0x3b0 [ 246.288749][ T7098] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.288765][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.288780][ T7098] ? clear_bhb_loop+0x60/0xb0 [ 246.288799][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.288815][ T7098] RIP: 0033:0x7f32a778ebe9 [ 246.288830][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.288844][ T7098] RSP: 002b:00007f32a85a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 246.288860][ T7098] RAX: ffffffffffffffda RBX: 00007f32a79c5fa0 RCX: 00007f32a778ebe9 [ 246.288872][ T7098] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 246.288882][ T7098] RBP: 00007f32a85a5090 R08: 0000200000000140 R09: 0000000000000014 [ 246.288892][ T7098] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 246.288900][ T7098] R13: 00007f32a79c6038 R14: 00007f32a79c5fa0 R15: 00007fff23882fc8 [ 246.288925][ T7098] [ 246.765563][ T5968] IPVS: starting estimator thread 0... [ 246.772338][ T7111] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 246.780122][ T7113] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 246.855299][ T7116] __nla_validate_parse: 1 callbacks suppressed [ 246.855317][ T7116] netlink: 64 bytes leftover after parsing attributes in process `syz.4.280'. [ 246.863701][ T7112] IPVS: using max 28 ests per chain, 67200 per kthread [ 246.880195][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 246.890513][ T7117] netlink: 64 bytes leftover after parsing attributes in process `syz.4.280'. [ 246.899745][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 247.019698][ T7122] tipc: Enabled bearer , priority 0 [ 247.045619][ T7123] syzkaller0: entered promiscuous mode [ 247.066639][ T7123] syzkaller0: entered allmulticast mode [ 247.078191][ T7129] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 247.128904][ T7122] netlink: 2 bytes leftover after parsing attributes in process `syz.0.283'. [ 247.159806][ T7123] tipc: Resetting bearer [ 247.180574][ T7121] tipc: Resetting bearer [ 247.234563][ T7121] tipc: Disabling bearer [ 247.296895][ T7135] vlan2: entered promiscuous mode [ 247.308060][ T7135] bond0: entered promiscuous mode [ 247.314508][ T7135] bond_slave_0: entered promiscuous mode [ 247.320424][ T7135] bond_slave_1: entered promiscuous mode [ 247.349332][ T7135] vlan2: entered allmulticast mode [ 247.352529][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 247.364053][ T7135] bond0: entered allmulticast mode [ 247.369200][ T7135] bond_slave_0: entered allmulticast mode [ 247.376021][ T7135] bond_slave_1: entered allmulticast mode [ 247.577462][ T7149] netlink: 'syz.2.289': attribute type 5 has an invalid length. [ 247.599708][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 247.610647][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'. [ 247.704843][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 247.719385][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 247.857252][ T7163] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 247.924508][ T7167] ÿÿÿÿ: tun_chr_ioctl cmd 2147767520 [ 248.168056][ T7175] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 248.189668][ T7175] netlink: 'syz.4.298': attribute type 6 has an invalid length. [ 248.782910][ T5184] Bluetooth: hci4: command tx timeout [ 248.873225][ T7214] bond1: entered promiscuous mode [ 248.879206][ T7214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.937230][ T7214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.944941][ T7214] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 248.957939][ T7214] bond1: (slave vcan1): Error -95 calling set_mac_address [ 249.170750][ T7226] netlink: 'syz.3.314': attribute type 7 has an invalid length. [ 249.189171][ T7226] netlink: 'syz.3.314': attribute type 8 has an invalid length. [ 249.375734][ T7187] netlink: 'syz.1.302': attribute type 13 has an invalid length. [ 249.386787][ T7187] netlink: 'syz.1.302': attribute type 17 has an invalid length. [ 249.438744][ T7187] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 249.509451][ T7241] batadv1: entered promiscuous mode [ 249.737410][ T7249] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 249.920666][ T7241] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.066937][ T7290] vlan2: entered promiscuous mode [ 251.109281][ T7290] bond0: entered promiscuous mode [ 251.127346][ T7290] bond_slave_0: entered promiscuous mode [ 251.136715][ T7290] bond_slave_1: entered promiscuous mode [ 251.142906][ T7290] vlan2: entered allmulticast mode [ 251.148180][ T7290] bond0: entered allmulticast mode [ 251.191104][ T7290] bond_slave_0: entered allmulticast mode [ 251.202892][ T7290] bond_slave_1: entered allmulticast mode [ 251.308060][ T7288] syzkaller0: entered promiscuous mode [ 251.326389][ T7288] syzkaller0: entered allmulticast mode [ 252.631316][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.775996][ T7320] tipc: Enabling of bearer rejected, failed to enable media [ 253.466403][ T7354] __nla_validate_parse: 15 callbacks suppressed [ 253.466423][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 253.508225][ T7347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.342'. [ 253.735840][ T980] IPVS: starting estimator thread 0... [ 253.876157][ T7368] IPVS: using max 24 ests per chain, 57600 per kthread [ 253.952600][ T7374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.147100][ T7383] veth0: entered promiscuous mode [ 254.217409][ T7374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.279953][ T7377] veth0: left promiscuous mode [ 254.420477][ T7374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.458068][ T7406] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 254.468758][ T7407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.357'. [ 254.484153][ T7406] team0: left promiscuous mode [ 254.496321][ T7406] team_slave_0: left promiscuous mode [ 254.507232][ T7406] team_slave_1: left promiscuous mode [ 254.515353][ T7406] team0: left allmulticast mode [ 254.520352][ T7406] team_slave_0: left allmulticast mode [ 254.529095][ T7406] team_slave_1: left allmulticast mode [ 254.537313][ T7411] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 254.609907][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.644361][ T7406] team0: entered promiscuous mode [ 254.659844][ T7406] team_slave_0: entered promiscuous mode [ 254.679832][ T7406] team_slave_1: entered promiscuous mode [ 254.700598][ T7406] team0: entered allmulticast mode [ 254.715888][ T7406] team_slave_0: entered allmulticast mode [ 254.724395][ T7406] team_slave_1: entered allmulticast mode [ 254.739689][ T7406] bond0: (slave team0): Enslaving as an active interface with an up link [ 254.807305][ T7374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.885957][ T7411] syz_tun: entered promiscuous mode [ 254.891989][ T7411] syz_tun: entered allmulticast mode [ 254.898464][ T7411] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 255.147625][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.201354][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.245388][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.367595][ T6339] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.565498][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 255.663380][ T7446] netlink: 'syz.3.366': attribute type 8 has an invalid length. [ 255.722616][ T7448] netlink: 2 bytes leftover after parsing attributes in process `syz.3.366'. [ 255.843288][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.912075][ T7438] pim6reg1: entered promiscuous mode [ 255.920441][ T7438] pim6reg1: entered allmulticast mode [ 256.164571][ T7459] netlink: 'syz.4.369': attribute type 9 has an invalid length. [ 256.196903][ T7459] netlink: 224 bytes leftover after parsing attributes in process `syz.4.369'. [ 256.505432][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 256.528890][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.373'. [ 256.670380][ T7480] netlink: 'syz.1.373': attribute type 74 has an invalid length. [ 256.823538][ T7489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.106054][ T7498] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 257.118357][ T7498] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 257.200737][ T7506] netlink: 'syz.4.381': attribute type 6 has an invalid length. [ 257.263902][ T5898] Bluetooth: hci4: command 0x0405 tx timeout [ 257.390388][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 257.589872][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 257.611023][ T7522] netlink: 'syz.4.384': attribute type 5 has an invalid length. [ 257.646225][ T7522] geneve2: entered promiscuous mode [ 257.673334][ T7522] geneve2: entered allmulticast mode [ 257.705554][ T6342] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 257.728573][ T6342] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 257.741679][ T6342] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 257.766505][ T6342] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 258.028157][ T7543] netlink: 'syz.2.389': attribute type 10 has an invalid length. [ 258.045018][ T7543] batman_adv: batadv0: Adding interface: virt_wifi0 [ 258.056729][ T7543] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.111186][ T7543] batman_adv: batadv0: Interface activated: virt_wifi0 [ 258.498316][ T7572] __nla_validate_parse: 4 callbacks suppressed [ 258.498336][ T7572] netlink: 64 bytes leftover after parsing attributes in process `syz.1.395'. [ 258.520410][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.395'. [ 258.632354][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 258.637604][ T7572] nbd: socks must be embedded in a SOCK_ITEM attr [ 259.131105][ T7592] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 259.167061][ T7602] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 259.174626][ T7592] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 259.304471][ T7609] tipc: Enabled bearer , priority 0 [ 259.340740][ T7613] netlink: 'syz.4.405': attribute type 11 has an invalid length. [ 259.350368][ T5898] Bluetooth: hci4: command 0x0405 tx timeout [ 259.368540][ T7613] netlink: 44 bytes leftover after parsing attributes in process `syz.4.405'. [ 259.442474][ T7609] tipc: Disabling bearer [ 259.488039][ T7616] tipc: Enabled bearer , priority 0 [ 259.495919][ T7616] syzkaller0: entered promiscuous mode [ 259.506978][ T7616] syzkaller0: entered allmulticast mode [ 259.521783][ T7616] tipc: Resetting bearer [ 259.539082][ T7615] tipc: Resetting bearer [ 259.603138][ T7615] tipc: Disabling bearer [ 259.652680][ T7630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.410'. [ 259.779184][ T7637] netlink: 3 bytes leftover after parsing attributes in process `syz.0.413'. [ 259.837354][ T7637] batadv1: entered promiscuous mode [ 259.860346][ T7637] batadv1: entered allmulticast mode [ 259.909885][ T7645] netlink: 48 bytes leftover after parsing attributes in process `syz.0.413'. [ 260.149579][ T7648] vxcan2: entered allmulticast mode [ 260.334838][ T7654] netlink: 'syz.3.415': attribute type 13 has an invalid length. [ 260.353098][ T7654] netlink: 'syz.3.415': attribute type 17 has an invalid length. [ 260.411269][ T7654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.478855][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.417'. [ 260.503471][ T7662] 8021q: VLANs not supported on ip6tnl0 [ 260.564021][ T7665] netlink: 'syz.4.417': attribute type 17 has an invalid length. [ 260.803347][ T7681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.425'. [ 260.874271][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.2.427'. [ 261.087472][ T7697] netlink: 'syz.2.429': attribute type 9 has an invalid length. [ 262.048627][ T7738] Bluetooth: MGMT ver 1.23 [ 262.103735][ T7736] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.166730][ T7738] geneve2: entered promiscuous mode [ 262.287467][ T7736] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.525599][ T7736] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.769819][ T7736] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.048038][ T6345] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.083846][ T6345] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.128529][ T1158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.173010][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.340004][ T7774] netlink: 'syz.1.453': attribute type 13 has an invalid length. [ 263.363938][ T7774] netlink: 'syz.1.453': attribute type 17 has an invalid length. [ 263.745977][ T7783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.902022][ T7785] __nla_validate_parse: 2 callbacks suppressed [ 263.902042][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.453'. [ 264.358533][ T7793] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 264.383581][ T7774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.388583][ T7793] netlink: 232 bytes leftover after parsing attributes in process `syz.3.459'. [ 264.439759][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 264.490502][ T7796] ip6tnl1: entered promiscuous mode [ 264.497924][ T7796] ip6tnl1: entered allmulticast mode [ 264.649896][ T7802] vlan2: entered promiscuous mode [ 264.662021][ T7802] bridge0: entered promiscuous mode [ 265.074865][ T7830] tipc: Enabled bearer , priority 0 [ 265.089712][ T7830] syzkaller0: entered promiscuous mode [ 265.125136][ T7830] syzkaller0: entered allmulticast mode [ 265.169245][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 265.272408][ T7823] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.292089][ T7836] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 265.309955][ T7828] tipc: Resetting bearer [ 265.383959][ T7828] tipc: Disabling bearer [ 266.648118][ T7836] bond1: (slave gretap1): making interface the new active one [ 266.662125][ T7836] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 266.831447][ T7856] nbd0: detected capacity change from 0 to 127 [ 266.852412][ T5184] block nbd0: Receive control failed (result -32) [ 266.873323][ T7865] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 266.923378][ T7865] netlink: 3 bytes leftover after parsing attributes in process `syz.3.480'. [ 266.962328][ T7865] 0ªX¹¦À: renamed from caif0 [ 266.996310][ T7865] 0ªX¹¦À: entered allmulticast mode [ 267.007501][ T7865] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 267.472221][ T7893] netlink: 'syz.3.488': attribute type 13 has an invalid length. [ 267.480633][ T7893] netlink: 'syz.3.488': attribute type 17 has an invalid length. [ 267.503895][ T7893] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.517135][ T7893] 0ªX¹¦À: left allmulticast mode [ 267.526180][ T7893] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 267.550506][ T7892] xfrm0: entered promiscuous mode [ 267.557033][ T7892] xfrm0: entered allmulticast mode [ 267.764789][ T7900] IPv6: addrconf: prefix option has invalid lifetime [ 267.940829][ T7909] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 267.986334][ T7909] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 268.495250][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 268.703645][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 268.742501][ T7964] netlink: 48 bytes leftover after parsing attributes in process `syz.4.507'. [ 269.080111][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 269.126431][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 269.709939][ T7992] vlan2: entered allmulticast mode [ 269.716888][ T7992] batadv0: entered allmulticast mode [ 269.875660][ T8003] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 269.889905][ T8003] macsec1: entered promiscuous mode [ 269.989704][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 270.016838][ T8007] netlink: 48 bytes leftover after parsing attributes in process `syz.0.520'. [ 270.495899][ T8022] syzkaller1: entered promiscuous mode [ 270.502310][ T8022] syzkaller1: entered allmulticast mode [ 270.801610][ T8033] can: request_module (can-proto-0) failed. [ 270.838104][ T8033] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 270.887792][ T8030] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 270.901642][ T8033] team0: Failed to send options change via netlink (err -105) [ 270.932204][ T8033] team0: Port device dummy0 added [ 270.947260][ T8038] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 271.119017][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 271.155840][ T8048] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 271.227206][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.531'. [ 272.644289][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 272.656747][ T8079] netlink: 'syz.0.539': attribute type 5 has an invalid length. [ 272.665468][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.539'. [ 272.713884][ T8079] geneve2: entered promiscuous mode [ 272.720944][ T8079] geneve2: entered allmulticast mode [ 272.777019][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 272.795209][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 272.821647][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 272.859433][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 272.945643][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 273.047575][ T8087] bridge_slave_1: left allmulticast mode [ 273.056508][ T8087] bridge_slave_1: left promiscuous mode [ 273.062664][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.085581][ T8087] bridge_slave_0: left allmulticast mode [ 273.098941][ T8087] bridge_slave_0: left promiscuous mode [ 273.115811][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.240103][ T8095] vlan2: entered promiscuous mode [ 273.245848][ T8095] bond0: entered promiscuous mode [ 273.253371][ T8095] bond_slave_0: entered promiscuous mode [ 273.259379][ T8095] bond_slave_1: entered promiscuous mode [ 273.266276][ T8095] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 273.281192][ T8095] vlan2: entered allmulticast mode [ 273.286840][ T8095] bond0: entered allmulticast mode [ 273.292844][ T8095] bond_slave_0: entered allmulticast mode [ 273.298681][ T8095] bond_slave_1: entered allmulticast mode [ 273.311682][ T8095] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 273.330554][ T8096] vlan1: entered promiscuous mode [ 273.930706][ T8121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.549'. [ 274.127383][ T8129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.551'. [ 274.379561][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.552'. [ 274.603839][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 274.784365][ T8162] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 274.802303][ T8162] tipc: Enabled bearer , priority 10 [ 274.834347][ T8162] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 274.912298][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.051169][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.191117][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.281544][ T8189] tipc: Started in network mode [ 275.299116][ T8189] tipc: Node identity 2ac0662ca4a7, cluster identity 4711 [ 275.319835][ T8189] tipc: Enabled bearer , priority 0 [ 275.331578][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.386584][ T8193] syzkaller0: entered promiscuous mode [ 275.410165][ T8193] syzkaller0: entered allmulticast mode [ 275.471124][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.526408][ T8189] tipc: Resetting bearer [ 275.611118][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.627791][ T8188] tipc: Resetting bearer [ 275.751138][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 275.753981][ T8188] tipc: Disabling bearer [ 275.894646][ T5968] tipc: Node number set to 3660435109 [ 276.302960][ C1] net_ratelimit: 1 callbacks suppressed [ 276.302979][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 276.360493][ T8223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.767172][ T8230] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.841150][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 277.243221][ T8230] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.483207][ T8230] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.594237][ T8230] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.911159][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 278.025159][ T6339] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.165120][ T6345] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.177630][ T8272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.194238][ T6345] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.239918][ T1158] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.468533][ T8280] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 278.547457][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 278.552108][ T8280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.860323][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.2.582'. [ 278.941178][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 279.418601][ T8303] bridge2: entered allmulticast mode [ 279.917139][ T8328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 279.981403][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 280.104414][ T8328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.174083][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 280.266481][ T8328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.305968][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 280.330721][ T8350] batman_adv: batadv0: Adding interface: ipvlan3 [ 280.337509][ T8350] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.365887][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.401365][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.415230][ T8350] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 280.423053][ T8360] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.459456][ T8328] bond0: (slave netdevsim0): Releasing backup interface [ 280.468926][ T8328] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 280.489178][ T8328] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 280.524674][ T8328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 280.591436][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 280.614626][ T8367] ================================================================== [ 280.622754][ T8367] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 280.626177][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 280.630684][ T8367] Read of size 1 at addr ffff88805af88770 by task syz.3.605/8367 [ 280.630707][ T8367] [ 280.630721][ T8367] CPU: 0 UID: 0 PID: 8367 Comm: syz.3.605 Not tainted syzkaller #0 PREEMPT(full) [ 280.630743][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.630757][ T8367] Call Trace: [ 280.630765][ T8367] [ 280.630778][ T8367] dump_stack_lvl+0x189/0x250 [ 280.630812][ T8367] ? __kasan_check_byte+0x12/0x40 [ 280.630847][ T8367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.630875][ T8367] ? lock_release+0x4b/0x3e0 [ 280.630917][ T8367] ? __virt_addr_valid+0x4a5/0x5c0 [ 280.630949][ T8367] print_report+0xca/0x240 [ 280.630972][ T8367] ? xfrm_state_find+0x2cf2/0x5400 [ 280.630997][ T8367] kasan_report+0x118/0x150 [ 280.631032][ T8367] ? xfrm_state_find+0x2cf2/0x5400 [ 280.631065][ T8367] xfrm_state_find+0x2cf2/0x5400 [ 280.631105][ T8367] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.631152][ T8367] ? xfrm_state_find+0x1da/0x5400 [ 280.631185][ T8367] ? __pfx_xfrm_state_find+0x10/0x10 [ 280.631215][ T8367] ? trace_fib_table_lookup+0x85/0x200 [ 280.631250][ T8367] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 280.631299][ T8367] ? fib_rules_lookup+0xc55/0xe90 [ 280.631327][ T8367] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 280.631361][ T8367] ? __lock_acquire+0xab9/0xd20 [ 280.631407][ T8367] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 280.631447][ T8367] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 280.631483][ T8367] ? xfrm_expand_policies+0x41f/0x6a0 [ 280.631517][ T8367] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 280.631555][ T8367] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 280.631589][ T8367] ? rcuref_put+0x1b7/0x210 [ 280.631618][ T8367] ? __pfx_rcuref_put+0x10/0x10 [ 280.631648][ T8367] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 280.631687][ T8367] xfrm_lookup_route+0x3c/0x1c0 [ 280.631720][ T8367] __ip4_datagram_connect+0x9a5/0x1270 [ 280.631764][ T8367] __ip6_datagram_connect+0x9f0/0x1150 [ 280.631794][ T8367] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 280.631816][ T8367] ? __local_bh_enable_ip+0x12d/0x1c0 [ 280.631839][ T8367] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 280.631867][ T8367] ip6_datagram_connect_v6_only+0x63/0xa0 [ 280.631891][ T8367] __sys_connect+0x313/0x440 [ 280.631917][ T8367] ? __pfx___sys_connect+0x10/0x10 [ 280.631948][ T8367] ? rcu_is_watching+0x15/0xb0 [ 280.631975][ T8367] __x64_sys_connect+0x7a/0x90 [ 280.632000][ T8367] do_syscall_64+0xfa/0x3b0 [ 280.632026][ T8367] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.632048][ T8367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.632072][ T8367] ? clear_bhb_loop+0x60/0xb0 [ 280.632106][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.632130][ T8367] RIP: 0033:0x7f32a778ebe9 [ 280.632151][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.632170][ T8367] RSP: 002b:00007f32a85a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 280.632195][ T8367] RAX: ffffffffffffffda RBX: 00007f32a79c5fa0 RCX: 00007f32a778ebe9 [ 280.632216][ T8367] RDX: 000000000000001c RSI: 0000200000000000 RDI: 000000000000000b [ 280.632232][ T8367] RBP: 00007f32a7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 280.632248][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.632261][ T8367] R13: 00007f32a79c6038 R14: 00007f32a79c5fa0 R15: 00007fff23882fc8 [ 280.632291][ T8367] [ 280.632300][ T8367] [ 280.655588][ T8369] netlink: 'syz.1.604': attribute type 6 has an invalid length. [ 280.658727][ T8367] Allocated by task 7114: [ 280.658742][ T8367] kasan_save_track+0x3e/0x80 [ 280.988887][ T8367] __kasan_slab_alloc+0x6c/0x80 [ 280.993769][ T8367] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 280.999248][ T8367] xfrm_state_alloc+0x24/0x2f0 [ 281.004570][ T8367] __find_acq_core+0x8a7/0x1c00 [ 281.009449][ T8367] xfrm_find_acq+0x78/0xa0 [ 281.013894][ T8367] xfrm_alloc_userspi+0x6b3/0xc90 [ 281.018940][ T8367] xfrm_user_rcv_msg+0x7a3/0xab0 [ 281.023985][ T8367] netlink_rcv_skb+0x205/0x470 [ 281.028780][ T8367] xfrm_netlink_rcv+0x79/0x90 [ 281.033487][ T8367] netlink_unicast+0x82c/0x9e0 [ 281.038293][ T8367] netlink_sendmsg+0x805/0xb30 [ 281.043075][ T8367] __sock_sendmsg+0x219/0x270 [ 281.047776][ T8367] ____sys_sendmsg+0x505/0x830 [ 281.052560][ T8367] ___sys_sendmsg+0x21f/0x2a0 [ 281.057274][ T8367] __x64_sys_sendmsg+0x19b/0x260 [ 281.061273][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 281.062228][ T8367] do_syscall_64+0xfa/0x3b0 [ 281.073591][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.079494][ T8367] [ 281.081818][ T8367] Freed by task 5968: [ 281.085800][ T8367] kasan_save_track+0x3e/0x80 [ 281.090491][ T8367] kasan_save_free_info+0x46/0x50 [ 281.095522][ T8367] __kasan_slab_free+0x5b/0x80 [ 281.100295][ T8367] kmem_cache_free+0x18f/0x400 [ 281.105073][ T8367] xfrm_state_gc_task+0x52d/0x6b0 [ 281.110124][ T8367] process_scheduled_works+0xae1/0x17b0 [ 281.115674][ T8367] worker_thread+0x8a0/0xda0 [ 281.120270][ T8367] kthread+0x70e/0x8a0 [ 281.124347][ T8367] ret_from_fork+0x3fc/0x770 [ 281.129027][ T8367] ret_from_fork_asm+0x1a/0x30 [ 281.133828][ T8367] [ 281.136158][ T8367] The buggy address belongs to the object at ffff88805af88440 [ 281.136158][ T8367] which belongs to the cache xfrm_state of size 928 [ 281.150122][ T8367] The buggy address is located 816 bytes inside of [ 281.150122][ T8367] freed 928-byte region [ffff88805af88440, ffff88805af887e0) [ 281.163923][ T8367] [ 281.166251][ T8367] The buggy address belongs to the physical page: [ 281.172764][ T8367] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5af88 [ 281.181534][ T8367] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 281.190667][ T8367] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 281.198224][ T8367] page_type: f5(slab) [ 281.202213][ T8367] raw: 00fff00000000040 ffff88801af1a500 dead000000000122 0000000000000000 [ 281.210817][ T8367] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 281.219404][ T8367] head: 00fff00000000040 ffff88801af1a500 dead000000000122 0000000000000000 [ 281.228083][ T8367] head: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 281.236759][ T8367] head: 00fff00000000002 ffffea00016be201 00000000ffffffff 00000000ffffffff [ 281.245431][ T8367] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 281.254102][ T8367] page dumped because: kasan: bad access detected [ 281.260535][ T8367] page_owner tracks the page as allocated [ 281.266251][ T8367] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6635, tgid 6634 (syz.2.148), ts 232679159780, free_ts 232561551287 [ 281.285534][ T8367] post_alloc_hook+0x240/0x2a0 [ 281.290325][ T8367] get_page_from_freelist+0x21e4/0x22c0 [ 281.295875][ T8367] __alloc_frozen_pages_noprof+0x181/0x370 [ 281.301684][ T8367] alloc_pages_mpol+0x232/0x4a0 [ 281.306541][ T8367] allocate_slab+0x8a/0x370 [ 281.311060][ T8367] ___slab_alloc+0xbeb/0x1420 [ 281.315758][ T8367] kmem_cache_alloc_noprof+0x283/0x3c0 [ 281.321229][ T8367] xfrm_state_alloc+0x24/0x2f0 [ 281.325999][ T8367] __find_acq_core+0x8a7/0x1c00 [ 281.330868][ T8367] xfrm_find_acq+0x78/0xa0 [ 281.335294][ T8367] pfkey_getspi+0x65d/0xee0 [ 281.339805][ T8367] pfkey_sendmsg+0xbfb/0x1090 [ 281.344487][ T8367] __sock_sendmsg+0x219/0x270 [ 281.349173][ T8367] ____sys_sendmsg+0x505/0x830 [ 281.353936][ T8367] ___sys_sendmsg+0x21f/0x2a0 [ 281.358621][ T8367] __x64_sys_sendmsg+0x19b/0x260 [ 281.363569][ T8367] page last free pid 6632 tgid 6632 stack trace: [ 281.369903][ T8367] __free_frozen_pages+0xbc4/0xd30 [ 281.375031][ T8367] free_large_kmalloc+0x13a/0x1f0 [ 281.380074][ T8367] skb_release_data+0x62d/0x7c0 [ 281.384934][ T8367] sk_skb_reason_drop+0x127/0x170 [ 281.389977][ T8367] skb_queue_purge_reason+0x2c8/0x360 [ 281.395449][ T8367] netlink_sock_destruct+0x2d/0x1a0 [ 281.400662][ T8367] __sk_destruct+0x89/0x660 [ 281.405171][ T8367] rcu_core+0xcab/0x1770 [ 281.409452][ T8367] handle_softirqs+0x283/0x870 [ 281.414259][ T8367] __irq_exit_rcu+0xca/0x1f0 [ 281.418853][ T8367] irq_exit_rcu+0x9/0x30 [ 281.423097][ T8367] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 281.428734][ T8367] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.434722][ T8367] [ 281.437069][ T8367] Memory state around the buggy address: [ 281.442700][ T8367] ffff88805af88600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.450851][ T8367] ffff88805af88680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.458915][ T8367] >ffff88805af88700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 281.466978][ T8367] ^ [ 281.474706][ T8367] ffff88805af88780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 281.482775][ T8367] ffff88805af88800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 281.490853][ T8367] ================================================================== [ 281.539754][ T8367] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 281.547013][ T8367] CPU: 0 UID: 0 PID: 8367 Comm: syz.3.605 Not tainted syzkaller #0 PREEMPT(full) [ 281.556233][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.566396][ T8367] Call Trace: [ 281.569685][ T8367] [ 281.572621][ T8367] dump_stack_lvl+0x99/0x250 [ 281.577227][ T8367] ? __asan_memcpy+0x40/0x70 [ 281.581826][ T8367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.587033][ T8367] ? __pfx__printk+0x10/0x10 [ 281.591646][ T8367] vpanic+0x281/0x750 [ 281.595653][ T8367] ? preempt_schedule+0xae/0xc0 [ 281.600510][ T8367] ? __pfx_vpanic+0x10/0x10 [ 281.605024][ T8367] ? preempt_schedule_common+0x83/0xd0 [ 281.610483][ T8367] ? preempt_schedule+0xae/0xc0 [ 281.615347][ T8367] ? __pfx_preempt_schedule+0x10/0x10 [ 281.620722][ T8367] panic+0xb9/0xc0 [ 281.624472][ T8367] ? __pfx_panic+0x10/0x10 [ 281.628896][ T8367] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 281.634803][ T8367] ? xfrm_state_find+0x2cf2/0x5400 [ 281.639920][ T8367] check_panic_on_warn+0x89/0xb0 [ 281.644872][ T8367] ? xfrm_state_find+0x2cf2/0x5400 [ 281.649989][ T8367] end_report+0x78/0x160 [ 281.654249][ T8367] kasan_report+0x129/0x150 [ 281.658767][ T8367] ? xfrm_state_find+0x2cf2/0x5400 [ 281.663886][ T8367] xfrm_state_find+0x2cf2/0x5400 [ 281.668918][ T8367] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.675282][ T8367] ? xfrm_state_find+0x1da/0x5400 [ 281.680317][ T8367] ? __pfx_xfrm_state_find+0x10/0x10 [ 281.685614][ T8367] ? trace_fib_table_lookup+0x85/0x200 [ 281.691091][ T8367] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 281.697277][ T8367] ? fib_rules_lookup+0xc55/0xe90 [ 281.702313][ T8367] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 281.708909][ T8367] ? __lock_acquire+0xab9/0xd20 [ 281.713776][ T8367] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 281.719160][ T8367] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 281.724562][ T8367] ? xfrm_expand_policies+0x41f/0x6a0 [ 281.729947][ T8367] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 281.735428][ T8367] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 281.741262][ T8367] ? rcuref_put+0x1b7/0x210 [ 281.745785][ T8367] ? __pfx_rcuref_put+0x10/0x10 [ 281.750803][ T8367] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 281.756220][ T8367] xfrm_lookup_route+0x3c/0x1c0 [ 281.761106][ T8367] __ip4_datagram_connect+0x9a5/0x1270 [ 281.766597][ T8367] __ip6_datagram_connect+0x9f0/0x1150 [ 281.772084][ T8367] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 281.777994][ T8367] ? __local_bh_enable_ip+0x12d/0x1c0 [ 281.783398][ T8367] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 281.789145][ T8367] ip6_datagram_connect_v6_only+0x63/0xa0 [ 281.794891][ T8367] __sys_connect+0x313/0x440 [ 281.799504][ T8367] ? __pfx___sys_connect+0x10/0x10 [ 281.804645][ T8367] ? rcu_is_watching+0x15/0xb0 [ 281.809426][ T8367] __x64_sys_connect+0x7a/0x90 [ 281.814201][ T8367] do_syscall_64+0xfa/0x3b0 [ 281.818717][ T8367] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.823931][ T8367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.830005][ T8367] ? clear_bhb_loop+0x60/0xb0 [ 281.834693][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.840591][ T8367] RIP: 0033:0x7f32a778ebe9 [ 281.845021][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.864639][ T8367] RSP: 002b:00007f32a85a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 281.873063][ T8367] RAX: ffffffffffffffda RBX: 00007f32a79c5fa0 RCX: 00007f32a778ebe9 [ 281.881041][ T8367] RDX: 000000000000001c RSI: 0000200000000000 RDI: 000000000000000b [ 281.889020][ T8367] RBP: 00007f32a7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.896999][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.904974][ T8367] R13: 00007f32a79c6038 R14: 00007f32a79c5fa0 R15: 00007fff23882fc8 [ 281.912962][ T8367] [ 281.916227][ T8367] Kernel Offset: disabled [ 281.920550][ T8367] Rebooting in 86400 seconds..