Extracting prog: 9m5.88655931s
Minimizing prog: 8m18.350050235s
Simplifying prog options: 0s
Extracting C: 35.412112739s
Simplifying C: 9m19.625317034s


30 programs, timeouts [15s 1m40s 6m0s]
extracting reproducer from 30 programs
single: executing 5 programs separately with timeout 15s
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r0, 0x8004b707, 0x0)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$tipc-socket$tipc-bind$tipc-sendmsg$tipc
detailed listing:
executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x7}}, 0x10)
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x200000}}, 0x10, 0x0}, 0x0)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_bcm-socket$nl_route-socket$can_bcm-connect$can_bcm-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-sendmsg$nl_route
detailed listing:
executing program 0:
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0018"], 0x34}}, 0x0)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$packet-unshare-socket$xdp-unshare-syz_genetlink_get_family_id$nl80211-socket$inet6_sctp-socket$tipc-connect$tipc-accept4-syz_80211_inject_frame-sendmsg$nl_route-syz_80211_inject_frame-bind$inet-setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD-setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD-syz_80211_inject_frame-socket$nl_audit-ioctl$sock_inet_SIOCSIFFLAGS-sendmmsg$inet6-unshare-bpf$BPF_GET_PROG_INFO-ioctl$BTRFS_IOC_SYNC-setsockopt$MRT6_DEL_MFC-ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL-socket$inet_smc-unshare-syz_emit_ethernet-socket$igmp6-sendmsg$tipc-bind$inet
detailed listing:
executing program 0:
socket$packet(0x11, 0x2, 0x300)
unshare(0x20000400)
socket$xdp(0x2c, 0x3, 0x0)
unshare(0x20000400)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000000000), 0x10)
r2 = accept4(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x1800)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x464)
sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0xb8}, 0x1, 0x0, 0x0, 0x40044}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000080211000001080211000000500cc0fee6af93e3f35ddf178f50505050500000d2e1"], 0x28)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000007c0), 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="80ffffffffffffffffff0802110000005050505050500000000000640c0000005aaf734b2496440b0602020202020201000503002000710700000006000000000000000065fbdb1db0aa34734b137502475b456d66e418c9758d748a7a83e746243e1b6844821efbd6030de842cc41e14f3c1939e5401cd55936cc05c6aa80ec9fc1d31eb73076675da1a18e7b6afb42368bb7e781532428d45c06496c9d0658408e9951daef9fbe4f07fc76f44d0b8b25f2e8924ce2216c77188e7d4c03135f3bba3a3f7a18ca2e4980f7b7d5c2d5da8971e3413d7250eb050cd1039aa6f97ea0e4ef1b4bd90f"], 0x3c)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x1000})
sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)}}], 0x1, 0x0)
unshare(0x20000400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x7d, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0xc, @private2, 0x6}, {0xa, 0x4e22, 0x101, @private0, 0x4364}, 0xffffffffffffffff, {[0x9, 0x0, 0x18, 0x9, 0x0, 0x8, 0x2, 0x23]}}, 0x5c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r3, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x80, 0x40, 0x0, 0x7}})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x42000000)
syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000114200bf7f349aaf8a480f34c38b63d798e9"], 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$tipc(r5, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)

program did not crash
testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6-epoll_create1-socket$nl_netfilter-sendmsg$NFT_BATCH-openat$cgroup_ro-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$bt_sco-socket$inet_smc-getsockopt$inet_tcp_int-socket$packet-setsockopt$ax25_SO_BINDTODEVICE-ioctl$sock_netdev_private-ioctl$EXT4_IOC_SETFSUUID-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_generic-sendmsg$NL80211_CMD_JOIN_MESH-socket$nl_generic-bpf$MAP_CREATE_CONST_STR-bpf$PROG_LOAD-bpf$PROG_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$BPF_PROG_TEST_RUN-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_JOIN_MESH-sendmsg$NFT_BATCH-socket$alg-accept4$alg-openat$cgroup_ro
detailed listing:
executing program 0:
socket$inet6(0xa, 0x0, 0x0) (async, rerun: 32)
epoll_create1(0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x2dc, r4, 0x200, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xb8}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x7a2, 0xfffd, 0x359, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0xad70, 0x0, 0x1273, 0x20, 0x81]}}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1f}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3}, {0x4, 0x3}, {0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x2f, 0x16, 0x3, 0x9, 0x12, 0xb, 0x30, 0x36, 0x9, 0x24, 0x30, 0x12, 0x60, 0x1b, 0x1b, 0xe, 0xb, 0x12, 0x1, 0x18, 0x6c, 0x0, 0x9, 0x30, 0x12, 0x48, 0x6c, 0x4, 0x12, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab, 0x0, 0x0, 0x3237, 0x8, 0x98f, 0x6, 0x747]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {}, {0x7, 0xf}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x20, 0x1, 0x3, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x800, 0x2, 0x8001, 0xfff8, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfe00, 0xac1, 0xee5, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9, 0x4, 0x4, 0xfffe, 0x100, 0x5e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x1, 0x6, 0x44, 0x4, 0x0, 0x7d, 0x1b, 0x12, 0x60, 0x36, 0xc, 0x48, 0x0, 0x6c, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x8, 0x2, 0x5, 0x690d, 0x7]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0xf0a021d58c62cfdb)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100001b0000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800024000000002080003400000000008000140000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 15s
testing program (duration=22s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 30, 30, 30, 30, 30, 11, 2, 7, 3, 1, 2, 1, 4, 4, 1, 5, 1, 4, 20, 15, 11, 2, 8, 2, 30, 2, 7, 4, 2]
detailed listing:
executing program 4:
socket$inet6(0xa, 0x0, 0x0) (async, rerun: 32)
epoll_create1(0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x2dc, r4, 0x200, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xb8}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x7a2, 0xfffd, 0x359, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0xad70, 0x0, 0x1273, 0x20, 0x81]}}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1f}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3}, {0x4, 0x3}, {0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x2f, 0x16, 0x3, 0x9, 0x12, 0xb, 0x30, 0x36, 0x9, 0x24, 0x30, 0x12, 0x60, 0x1b, 0x1b, 0xe, 0xb, 0x12, 0x1, 0x18, 0x6c, 0x0, 0x9, 0x30, 0x12, 0x48, 0x6c, 0x4, 0x12, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab, 0x0, 0x0, 0x3237, 0x8, 0x98f, 0x6, 0x747]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {}, {0x7, 0xf}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x20, 0x1, 0x3, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x800, 0x2, 0x8001, 0xfff8, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfe00, 0xac1, 0xee5, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9, 0x4, 0x4, 0xfffe, 0x100, 0x5e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x1, 0x6, 0x44, 0x4, 0x0, 0x7d, 0x1b, 0x12, 0x60, 0x36, 0xc, 0x48, 0x0, 0x6c, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x8, 0x2, 0x5, 0x690d, 0x7]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0xf0a021d58c62cfdb)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100001b0000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800024000000002080003400000000008000140000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
executing program 4:
socket$inet6(0xa, 0x0, 0x0) (async, rerun: 32)
epoll_create1(0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x2dc, r4, 0x200, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xb8}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x7a2, 0xfffd, 0x359, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0xad70, 0x0, 0x1273, 0x20, 0x81]}}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1f}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3}, {0x4, 0x3}, {0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x2f, 0x16, 0x3, 0x9, 0x12, 0xb, 0x30, 0x36, 0x9, 0x24, 0x30, 0x12, 0x60, 0x1b, 0x1b, 0xe, 0xb, 0x12, 0x1, 0x18, 0x6c, 0x0, 0x9, 0x30, 0x12, 0x48, 0x6c, 0x4, 0x12, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab, 0x0, 0x0, 0x3237, 0x8, 0x98f, 0x6, 0x747]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {}, {0x7, 0xf}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x20, 0x1, 0x3, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x800, 0x2, 0x8001, 0xfff8, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfe00, 0xac1, 0xee5, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9, 0x4, 0x4, 0xfffe, 0x100, 0x5e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x1, 0x6, 0x44, 0x4, 0x0, 0x7d, 0x1b, 0x12, 0x60, 0x36, 0xc, 0x48, 0x0, 0x6c, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x8, 0x2, 0x5, 0x690d, 0x7]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0xf0a021d58c62cfdb)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100001b0000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800024000000002080003400000000008000140000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
executing program 4:
socket$inet6(0xa, 0x0, 0x0) (async, rerun: 32)
epoll_create1(0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x2dc, r4, 0x200, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xb8}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x7a2, 0xfffd, 0x359, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0xad70, 0x0, 0x1273, 0x20, 0x81]}}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1f}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3}, {0x4, 0x3}, {0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x2f, 0x16, 0x3, 0x9, 0x12, 0xb, 0x30, 0x36, 0x9, 0x24, 0x30, 0x12, 0x60, 0x1b, 0x1b, 0xe, 0xb, 0x12, 0x1, 0x18, 0x6c, 0x0, 0x9, 0x30, 0x12, 0x48, 0x6c, 0x4, 0x12, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab, 0x0, 0x0, 0x3237, 0x8, 0x98f, 0x6, 0x747]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {}, {0x7, 0xf}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x20, 0x1, 0x3, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x800, 0x2, 0x8001, 0xfff8, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfe00, 0xac1, 0xee5, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9, 0x4, 0x4, 0xfffe, 0x100, 0x5e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x1, 0x6, 0x44, 0x4, 0x0, 0x7d, 0x1b, 0x12, 0x60, 0x36, 0xc, 0x48, 0x0, 0x6c, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x8, 0x2, 0x5, 0x690d, 0x7]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0xf0a021d58c62cfdb)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100001b0000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800024000000002080003400000000008000140000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
executing program 4:
socket$inet6(0xa, 0x0, 0x0) (async, rerun: 32)
epoll_create1(0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x2dc, r4, 0x200, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xb8}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x7a2, 0xfffd, 0x359, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0xad70, 0x0, 0x1273, 0x20, 0x81]}}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1f}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3}, {0x4, 0x3}, {0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x2f, 0x16, 0x3, 0x9, 0x12, 0xb, 0x30, 0x36, 0x9, 0x24, 0x30, 0x12, 0x60, 0x1b, 0x1b, 0xe, 0xb, 0x12, 0x1, 0x18, 0x6c, 0x0, 0x9, 0x30, 0x12, 0x48, 0x6c, 0x4, 0x12, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab, 0x0, 0x0, 0x3237, 0x8, 0x98f, 0x6, 0x747]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {}, {0x7, 0xf}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x20, 0x1, 0x3, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x800, 0x2, 0x8001, 0xfff8, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfe00, 0xac1, 0xee5, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9, 0x4, 0x4, 0xfffe, 0x100, 0x5e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x1, 0x6, 0x44, 0x4, 0x0, 0x7d, 0x1b, 0x12, 0x60, 0x36, 0xc, 0x48, 0x0, 0x6c, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x8, 0x2, 0x5, 0x690d, 0x7]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0xf0a021d58c62cfdb)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100001b0000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800024000000002080003400000000008000140000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
executing program 4:
socket$inet6(0xa, 0x0, 0x0) (async, rerun: 32)
epoll_create1(0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x2dc, r4, 0x200, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xb8}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x7a2, 0xfffd, 0x359, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0xad70, 0x0, 0x1273, 0x20, 0x81]}}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1f}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3}, {0x4, 0x3}, {0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x2f, 0x16, 0x3, 0x9, 0x12, 0xb, 0x30, 0x36, 0x9, 0x24, 0x30, 0x12, 0x60, 0x1b, 0x1b, 0xe, 0xb, 0x12, 0x1, 0x18, 0x6c, 0x0, 0x9, 0x30, 0x12, 0x48, 0x6c, 0x4, 0x12, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab, 0x0, 0x0, 0x3237, 0x8, 0x98f, 0x6, 0x747]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {}, {0x7, 0xf}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x20, 0x1, 0x3, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x800, 0x2, 0x8001, 0xfff8, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfe00, 0xac1, 0xee5, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9, 0x4, 0x4, 0xfffe, 0x100, 0x5e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x1, 0x6, 0x44, 0x4, 0x0, 0x7d, 0x1b, 0x12, 0x60, 0x36, 0xc, 0x48, 0x0, 0x6c, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x8, 0x2, 0x5, 0x690d, 0x7]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0xf0a021d58c62cfdb)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100001b0000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800024000000002080003400000000008000140000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
executing program 4:
socket$inet6(0xa, 0x0, 0x0) (async, rerun: 32)
epoll_create1(0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x2dc, r4, 0x200, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xb8}]}, @NL80211_ATTR_TX_RATES={0x2a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x2}, {0x2}, {0x6, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x8}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x400, 0x7a2, 0xfffd, 0x359, 0x3, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x8, 0xad70, 0x0, 0x1273, 0x20, 0x81]}}]}, @NL80211_BAND_5GHZ={0x120, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x4, 0x1f}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x1}, {0x3, 0xa}, {0x4, 0x7}, {0x5, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0x8}, {0x4}, {0x5}, {0x4}, {0x3, 0xa}, {0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x5}, {0x6}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0xa}, {0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x3}, {0x4, 0x3}, {0x5}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x7, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x0, 0x2f, 0x16, 0x3, 0x9, 0x12, 0xb, 0x30, 0x36, 0x9, 0x24, 0x30, 0x12, 0x60, 0x1b, 0x1b, 0xe, 0xb, 0x12, 0x1, 0x18, 0x6c, 0x0, 0x9, 0x30, 0x12, 0x48, 0x6c, 0x4, 0x12, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab, 0x0, 0x0, 0x3237, 0x8, 0x98f, 0x6, 0x747]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x7, 0x7}, {}, {0x6}, {0x2, 0x5}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x9}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x5}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0xa}, {0x1}, {0x3, 0x3}, {}, {0x5, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x2}, {}, {0x7, 0xf}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x3, 0x2}, {0x7, 0x7}, {0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x20, 0x1, 0x3, 0x8, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x8001, 0x6, 0xffff, 0x3, 0x9, 0x1, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x800, 0x2, 0x8001, 0xfff8, 0x8000, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x9}, {0x6, 0x5}, {0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfe00, 0xac1, 0xee5, 0x8, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x9, 0x4, 0x4, 0xfffe, 0x100, 0x5e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x1, 0x6, 0x44, 0x4, 0x0, 0x7d, 0x1b, 0x12, 0x60, 0x36, 0xc, 0x48, 0x0, 0x6c, 0x36, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x4}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x5}, {0x7, 0x2}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x401, 0x8, 0x2, 0x5, 0x690d, 0x7]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0xf0a021d58c62cfdb)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100001b0000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000440000000000800024000000002080003400000000008000140000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x44}}, 0x0)
executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
getsockname$inet6(r0, 0x0, &(0x7f0000000400))
executing program 0:
syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ec0000a8070000330000001300000100000000000000ff020000000000000000000000000001010090"], 0x0)
executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f00000001c0)=@file={0xa, './file0\x00'}, 0x6e, 0x0}, 0x0)
executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d040000000000000000000004000000000400000000000088030000000000000061"], 0x0, 0x52}, 0x20)
executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8)
executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='fdb_delete\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20)
executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071108f00000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e611a1800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0)
executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r2=>0x0})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6060000, r4})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2})
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r7})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r10})
r11 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r12=>0x0})
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r12})
ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'})
executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00'})
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x400000e, 0x10, r1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x18, 0x0, &(0x7f0000000380))
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000600))
executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0}}, 0x10)
executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', <r2=>0x0})
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev, @broadcast}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan1\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x40}}, 0x0)
executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xe09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8}, @IFLA_GRE_FLOWINFO={0x8}]}}}]}, 0x44}}, 0x0)
executing program 2:
socket$packet(0x11, 0x2, 0x300)
unshare(0x20000400)
socket$xdp(0x2c, 0x3, 0x0)
unshare(0x20000400)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000000000), 0x10)
r2 = accept4(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x1800)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x464)
sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0xb8}, 0x1, 0x0, 0x0, 0x40044}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000080211000001080211000000500cc0fee6af93e3f35ddf178f50505050500000d2e1"], 0x28)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000007c0), 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="80ffffffffffffffffff0802110000005050505050500000000000640c0000005aaf734b2496440b0602020202020201000503002000710700000006000000000000000065fbdb1db0aa34734b137502475b456d66e418c9758d748a7a83e746243e1b6844821efbd6030de842cc41e14f3c1939e5401cd55936cc05c6aa80ec9fc1d31eb73076675da1a18e7b6afb42368bb7e781532428d45c06496c9d0658408e9951daef9fbe4f07fc76f44d0b8b25f2e8924ce2216c77188e7d4c03135f3bba3a3f7a18ca2e4980f7b7d5c2d5da8971e3413d7250eb050cd1039aa6f97ea0e4ef1b4bd90f"], 0x3c)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x1000})
sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)}}], 0x1, 0x0)
unshare(0x20000400)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x7d, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0xc, @private2, 0x6}, {0xa, 0x4e22, 0x101, @private0, 0x4364}, 0xffffffffffffffff, {[0x9, 0x0, 0x18, 0x9, 0x0, 0x8, 0x2, 0x23]}}, 0x5c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r3, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x80, 0x40, 0x0, 0x7}})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x42000000)
syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000114200bf7f349aaf8a480f34c38b63d798e9"], 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$tipc(r5, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000101010100000000000000000a0000000c001980080001000d02000008001a40000000bd300001802c0001801400030000000000000000000000ffffe00000011400040000000000001000000000000000000001080003"], 0x60}}, 0x0)
executing program 1:
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0018"], 0x34}}, 0x0)
executing program 0:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x7}}, 0x10)
sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x200000}}, 0x10, 0x0}, 0x0)
executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r0, 0x8004b707, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 5 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r0, 0x8004b707, 0x0)

program crashed: WARNING: lock held when returning to user space in ns_ioctl
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace
detailed listing:
executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x8004b707, 0x0)

program did not crash
testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
detailed listing:
executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$NS_GET_PARENT(r0, 0x8004b707, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
simplifying C reproducer
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
testing compiled C program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-ioctl$NS_GET_PARENT
program crashed: WARNING: lock held when returning to user space in ns_ioctl
reproducing took 27m19.274064979s
repro crashed as (corrupted=false):
================================================
WARNING: lock held when returning to user space!
6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted
------------------------------------------------
syz-executor256/5090 is leaving the kernel with locks still held!
1 lock held by syz-executor256/5090:
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:327 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:839 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x3e0/0x740 fs/nsfs.c:184
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5090, name: syz-executor256
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
INFO: lockdep is turned off.
CPU: 1 PID: 5090 Comm: syz-executor256 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 __might_resched+0x5d4/0x780 kernel/sched/core.c:8437
 might_alloc include/linux/sched/mm.h:337 [inline]
 prepare_alloc_pages+0x1c9/0x5d0 mm/page_alloc.c:4454
 __alloc_pages_noprof+0x166/0x6c0 mm/page_alloc.c:4672
 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265
 vma_alloc_folio_noprof+0xf3/0x1f0 mm/mempolicy.c:2304
 folio_prealloc+0x31/0x170
 wp_page_copy mm/memory.c:3285 [inline]
 do_wp_page+0x11cc/0x52f0 mm/memory.c:3677
 handle_pte_fault+0x117e/0x7090 mm/memory.c:5397
 __handle_mm_fault mm/memory.c:5524 [inline]
 handle_mm_fault+0x10df/0x1ba0 mm/memory.c:5689
 do_user_addr_fault arch/x86/mm/fault.c:1338 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x459/0x8c0 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f0a8bc43de0
Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 02 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 <f0> 0f b1 15 e0 2e 0a 00 0f 85 0f 02 00 00 4c 8d 25 d3 2e 0a 00 4c
RSP: 002b:00007ffcc42fbda0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000001 RSI: 00007f0a8bce4110 RDI: 0000000000000000
RBP: 00007f0a8bce4110 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>

final repro crashed as (corrupted=false):
================================================
WARNING: lock held when returning to user space!
6.10.0-syzkaller-04472-g51835949dda3 #0 Not tainted
------------------------------------------------
syz-executor256/5090 is leaving the kernel with locks still held!
1 lock held by syz-executor256/5090:
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:327 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:839 [inline]
 #0: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: ns_ioctl+0x3e0/0x740 fs/nsfs.c:184
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5090, name: syz-executor256
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
INFO: lockdep is turned off.
CPU: 1 PID: 5090 Comm: syz-executor256 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114
 __might_resched+0x5d4/0x780 kernel/sched/core.c:8437
 might_alloc include/linux/sched/mm.h:337 [inline]
 prepare_alloc_pages+0x1c9/0x5d0 mm/page_alloc.c:4454
 __alloc_pages_noprof+0x166/0x6c0 mm/page_alloc.c:4672
 alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265
 vma_alloc_folio_noprof+0xf3/0x1f0 mm/mempolicy.c:2304
 folio_prealloc+0x31/0x170
 wp_page_copy mm/memory.c:3285 [inline]
 do_wp_page+0x11cc/0x52f0 mm/memory.c:3677
 handle_pte_fault+0x117e/0x7090 mm/memory.c:5397
 __handle_mm_fault mm/memory.c:5524 [inline]
 handle_mm_fault+0x10df/0x1ba0 mm/memory.c:5689
 do_user_addr_fault arch/x86/mm/fault.c:1338 [inline]
 handle_page_fault arch/x86/mm/fault.c:1481 [inline]
 exc_page_fault+0x459/0x8c0 arch/x86/mm/fault.c:1539
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623
RIP: 0033:0x7f0a8bc43de0
Code: 41 54 55 48 89 f5 53 89 fb 48 83 ec 18 48 83 3d 0d 02 0a 00 00 89 54 24 0c 74 08 84 c9 0f 85 09 02 00 00 31 c0 ba 01 00 00 00 <f0> 0f b1 15 e0 2e 0a 00 0f 85 0f 02 00 00 4c 8d 25 d3 2e 0a 00 4c
RSP: 002b:00007ffcc42fbda0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
RDX: 0000000000000001 RSI: 00007f0a8bce4110 RDI: 0000000000000000
RBP: 00007f0a8bce4110 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001
 </TASK>