last executing test programs: 2m35.28403992s ago: executing program 3 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r1, 0x8b2c, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x7}, 0x50) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) listen(r2, 0x5) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000000008000100ac141400040008"], 0x2c}}, 0x0) 2m34.980240798s ago: executing program 3 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c250000000000227a557a1af8ff00000000bfa100000000000007010000f8ffffffb702f8ff08000000b70300000000000085000000100000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bind$802154_dgram(r1, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1e, &(0x7f0000000c00)=0x80000001, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000851}, 0x20040040) 2m34.910339001s ago: executing program 3 (id=273): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r1], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'ip6erspan0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfe3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b) 2m34.641482416s ago: executing program 3 (id=279): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1a, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000400)) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x68, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x55}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x48001) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010003904000004000052000000000000", @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6, @ANYRES64=r7, @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000010003904fcffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5b}}, 0x44) 2m34.382620753s ago: executing program 3 (id=284): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2m33.802120966s ago: executing program 3 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a494}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x28004000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x140f, 0x8, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048015) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r12, 0x0}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0xfffffffffffffffe}, 0x4004001) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) 2m33.620660683s ago: executing program 32 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a494}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x28004000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x140f, 0x8, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048015) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r12, 0x0}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0xfffffffffffffffe}, 0x4004001) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) 2.155541829s ago: executing program 4 (id=1808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xea, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d40)={&(0x7f0000000380)="890e9bd3b1f6c02716ad991f1e5e693b336b7af9f8bc2991572e64640bd22c12f0e620c4b3394dcce0be0feb", &(0x7f0000000b00)=""/214, &(0x7f0000000c00)="3e8e89d4e4ab6353667eadfa4f7111e64fb702e2d7e810d76276ccb60a35c6362c8fc0a9bc6bf52c4416e939d8e7d9e36d290b861571736011304d15af93e495112b8f19e3a3ed929ebd32039ab4f4b003d63c4b87934cf83d35a220a5", &(0x7f0000000c80)="6b25188b2ae14412adb311345683167c4c34f166891b610f3ce1a5c904ad840c6b735cfcbb7f0ae011d05afb2aa996ca89944a6b8fad0dc028ce35893288cdbcb6a31b35ed450ecc7488b52febdecea081ea1587d5d62022be1263f514207f4c9cd19ad9d34627062e78702c2cb32cc756718f026aef0e4eefd49c42bb72187a30cbd7c26e41482e719fe119b5559873b786dfefb375", 0xd}, 0x38) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=@can_delroute={0x54, 0x19, 0x10, 0x70bd2c, 0x30, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "a6746984fbc294d2"}, 0x7}}, @CGW_LIM_HOPS={0x5, 0xd, 0x55}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0x0, 0x4, 0x6}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "3c15e83111a1d514"}}}]}, 0x54}}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000600)=r2}, 0x20) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x2a, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa3c}, {}, {}, [@ldst={0x1, 0x1, 0x6, 0x6, 0x4, 0xfffffffffffffff4, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @call={0x85, 0x0, 0x0, 0x92}, @alu={0x4, 0x1, 0x7, 0x9, 0x2, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @generic={0x1b, 0x8, 0x8, 0x1ff, 0x40}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', r5, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x5, 0x6, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r10, r11], &(0x7f0000000900)=[{0x2, 0x5, 0x3, 0x5}, {0x0, 0x3, 0x1, 0xa}, {0x0, 0x2, 0xe, 0xb}, {0x2, 0x5, 0x9, 0x2}, {0x2, 0x4, 0xc}, {0x3, 0x1, 0xd, 0xc}], 0x10, 0x1}, 0x94) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xffe3}, {0x0, 0xd}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0x6, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}]}}]}, 0x68}}, 0x20040054) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x178, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xfffb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x621}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7961, 0x10001, 0x5, 0x5, 0x5, 0x5, 0x6, 0xd2e, 0xa55, 0x6, 0x16, 0x7, 0x3, 0x8, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[], 0x28}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 2.154822245s ago: executing program 1 (id=1809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="280320000a00140000007e0906be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d7887f937fb37c3aef80895e06f37fe8", 0x40, 0x404c010, &(0x7f0000000080)={0x11, 0x16, r4, 0x1, 0xe5, 0x6, @multicast}, 0x14) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) 1.913787285s ago: executing program 2 (id=1812): openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r9, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2712, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x61d2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r11 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x89e1, 0x0) 1.910314974s ago: executing program 4 (id=1813): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x5, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061119400000000001800000000001a000000000000f4d33ab773490ac9000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f0000000000)) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.852419466s ago: executing program 2 (id=1815): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, r1, 0x24}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000700)={0xa, 0x4e24, 0x10000, @mcast2, 0x8000}, 0x1b, 0x0}}], 0x1, 0x4000000) 1.84285457s ago: executing program 1 (id=1816): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) (async) listen(r1, 0xfff) (async) accept(r1, 0xfffffffffffffffd, &(0x7f0000000440)) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x1, 0x0, @empty, @broadcast}, @source_quench={0x4, 0x0, 0x0, 0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) syz_emit_ethernet(0x3d, &(0x7f00000001c0)={@random="c69ae77b40c8", @link_local, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@arp={0x806, @generic={0x200, 0x88e5, 0x6, 0xd, 0x1, @broadcast, "78f6b61f5df7ab67d7055e26f2", @empty, "b806d88d4a9ac34f061d"}}}}, 0x0) 1.636720187s ago: executing program 2 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000002680)=@ethtool_cmd={0x15, 0x6, 0xff, 0x200, 0x5, 0x0, 0x9, 0x5, 0x1e, 0x2, 0xede, 0x7fff, 0x7, 0xe, 0x29, 0x3f4, [0x200, 0x8]}}) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x1, {0x2, 0x18, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) socket(0x10, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 1.136020858s ago: executing program 2 (id=1822): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x1d, 0xfffffff9, 0x6008, 0x1, 0xb5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x5}, 0x50) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 1.129373666s ago: executing program 4 (id=1823): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_newaddr={0x18, 0x14, 0x385, 0x0, 0x0, {0x2, 0x80, 0x48}}, 0x18}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000100000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 995.014066ms ago: executing program 4 (id=1825): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @multicast1}], 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 910.324156ms ago: executing program 1 (id=1827): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/69, 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a80)=""/8, 0x8}], 0x1}}], 0x4, 0x400123a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 846.107913ms ago: executing program 5 (id=1828): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5ebe25ed9991203e04d3bdc1e70ef759d8f6ca8744bd9d672c1c9368faa9f538c1e6d3f741c022ddc02e6d3e1881c4ebf6d62df9fc11edf041909cea12539f7b05232c1cd9a748ff7e4a6b7ce7420bab33b3ce6da2742316d128730875e8c1d068a59aef9030e56546effdf83fe2b6fcadf2a73552e77d9cfdb452639cae6aa8f5c7aba74516be0a290f60c30c51e8de293376c07b999d87ac564e47f21f28fda4d277beb21a78ab228bfa2b84461fc73b9a82c9ac29bf066fa44f3f676ef64edab4c6dcaa57c48c0065817b0cbf3263361e93334a400fd74ae663ccc959da070390c833a3dc9381a771d719ae9417cd07b43c30e6a10ae8a59c4fd0a9004cc3f9cb772a64d240d7a0d0dac57f4d7978a304adf48f94ce0b7d6a2dff5d3ff8738a81daad9df5b8d6f361e7032c0d2cc84c73a7a2f07a35b1b26966bb08fe07ecb2438006de2d9ff9b9ca0b94bc44c858e785a261bbfbf5f6cfa78b017d671ee8180312522c8031744591711d0517fb8b120e27fb7752f0a0e85bbf1e7059aa2711bf2355fe98e3df0d7cece9741623e2fa492af8287e0fa75daea5725e0519e70aba398c00ae69c572e327755ba2fa81dc47bdcd4e5b722e0ecc8f92f4cd821d575f5f8421dc2e2994621d17da042fd59a2c3ee0ba998a771e066fcf3646007ef3c731edb9472baaa6a5722b09aa6a4da93d855fee7bc2a4db816880160449c576ed46b4ca1e299595f0116946b841308bbd9c2d8e82ce9bcd9173476523bfa8abb82cbd16ddf2efb4aeb5476ab0f5dadbe2528360195a317f3106d25b016901b65b6eed65062083234f205cf4fefe2ee0af15a86feb5d7473d1cdf202387127171d633c02dc39faca7d69721074c0e7eee28a671fb9e75d80d8fa6bc70a50bd71f60569cb9a30b0cf5599c790353590fd3fb91f77ec89257faa66ff3d13913906166604af616d8de1b92b9cc459a05daad927ebf023c53afdf5ebad5e1d73632777374dfe33b0b90e0cc4cf85bbba301ffe94b26b9f792bdde6d5a9c644bd15ad45c373f768a3a3868ed96c112f2429a27a97bd7756cec800e4ed644a22a81f1010ec376a5726e530d5bcecc635db756ff9a6e2ee89248949d52f88c84cf71be5428a4675430ecef15f1c8ff6a786e5b74eeb76fd26b53dd6287b8e9134b8096b9425f650039af1b3465ab57662ce70c5e29c559e6ffed62f731fd95d31c2f7fa57d98a8aa0b30e454ea73d4f8ba1242bb511e2d0d0e7a764f87cc6b208f85b79b980285cd890dacf77dc2668e3c2ad211998f5e3f15be32a3600a2c59821e7e48d46974d17d642ff7b3f1334057c88bea888120095582d257ccaa903d341c850bd2b446c31980acc6f02f0c559a895614f62aea0eee4a904bd1b35193fd2cbff4354834b5f7e8698bad049cfea27a76ec83dfbe2071ff1523bf127713b062ee3ebf6986bd12c31ab386a490734a47466cdde3a82dc7535b1b068a1aa585322c4bf8dd8cf0ca2b8eb56fcf98cf8129148142344d00fca2cd5611e42c607168abcf92c94be28c15be3485375290b825136e0f4047212a866831bc670b9b038355e0c976673b80584c640ec6681ae724ea58685581d493c809fc8861c60ff245cdc486228b0c3c0ac562a3fd777b7d3d43dcc4cf031b70a101bc64a3727d1f5890890070dfc14847f225a82f5a1b3c702970a25a672aa8c4a24bd7d414bb52c839611e48afe3a9022aa9eeedb2dc4cb20aaeb244b0e438f28d3c6cac9fb16171a8b66b93e48d1afb3feae84bb6a4ed0d00ba862dc6fd474fe210faa0d6d51132dcdc4dcdd5d4f94f1ba7dc8b5712188b0f80bd7f6cc211c1a2796d5c8568a97dbfb9e1bcc6e43858342767ffe5d648873215971e968382870afb0f0b33e3a0dbfe70b982abd73b340abaedd3f71ea30c90544b6a3fb8ce0c240d0bc9da7c12a927223185e5ba907d93c30089ca68525983f04ff85ef98314f69e5c9b4a388ca67813fcd0a9b2c083defac488cb3f7e4ebabc7bf6f4f7601a6c4c1a8d10c2fb13f6863c29cf3dcb8bd56768bb0a9e642bb6b94e5957deaeab3e24223e03764bbb16a7084a05735a8d188cbfabcccfce95848a804b56bd5e2051b1755a0e4262044ea2b037113af2e4e90bfed33bdcdc33824245cad3f94c4c9ea0f414a539c36b55d423fbfe4461774696012ee12e9d9c1d645d6dd72b57cca7e8526cc98b2f9e97e23503428642bd8793a87ab120f20092b6e4cbcbb52ec9a406dbb893e303077b675ecbd48e6bec13b700ab09d55e17c8815077a31cd75057c9cd65e7a881924a50bed228517be9c0abb19c3d24c458160405dab3ad0deb989a4e1b2e509b7fa57bcddbe8292512c9656df46acc62a028bb484ad0a6548ed9efdff0e83ca82a1d4c86c7d8810d1e4ff1846d1dc8e80f8206c6834bf9c433bc92ce73560d22ba0c8030b694d737fa0f4deb8b59ea9a35147efc891e993b6489a1ed86bbbf159c590bad0b5892c72383f5afedd58b7fa5e11271b35381dbf4a14daf70505b346cbd83b3258b1b413f7247d04e30e1a9eddbf82e8a25a70903c21e6a16ea34f6d7fe3cad0d51812e827596d50549153e394c4926e5e87b78d0faf440472c12929bb7fd49c959e5b06eb48c51915d80f003c2019525c91bdd4efc0e58d7811b083af3164f254c9c6cf3f8345525770033901308d02a9439131e632d073705e7a28312f8c1ccbeec064113009a34f177d7cd953c9a635f6bb12f0ed871a1d80ba86011e13df3220bda5e49c7c3d70f8c49397f69b7c57fa78d312c5abb5eea30720f31b38cac3ddc7758f7bd1c99dca967a5aa5c788faf18eb2d996be835c3e5901349104ea63bdf1c195f4d29b8c63a0dcf58d501a102b8ac34709e82c0b0d19f762b1d3c40f01e0cb05b0909b90fb587ea260cdc0a043ac67f649486d3c57b9dbf94e44334fd8034218f82c937e6b8c97b627e8803cab0a27f33ebf0e447ab198cdbfc81371fdb6061dcf8c87c24084614ddfdc71cc2a5324e0ea9a1f7cb21ec46d7e5fd936a2a9224e5fe3c39051eb7269f51832751a36814db4aa01eb1a79eca73480c12b1d7f79bb20ba7b957f7e8343af7c38c81edb6aa48eeb82e17f47f5335f4086ef2cb57c4e70e847a77362271e16158e010f95c3227162caa7f911e94893d3bdf17fb914dddddf7f982ae898914378e3f5a4bc810f246d84ae977290d20773761b8d52bb493076052022586b8ce915b1f4c8f6ef6093e3e12f56e642b1cde9dda220fd7fb26f40ba08899e0217cf2a0883ab552c9432a7d60c6316f936b57c271e13b35d5cc4f20dfbe5fb1b13e916e62cd39e5bec37d0885f6fb5523860f8ae09592d32574e3d9c570c651fa9f4db0d4b9fbd002af8b6919d7587504989123533804e4a496def7d1d9740ec83e0670233a732d55425014276efcf6b6634c5ed5a97f25deaab14fe934efe0eb13992ef48e29a7f190f253d3cce9929f3183c01c72315b6a36998016af08f84155ca1ad18acf1a54d23fe605957f7016873187a47d7ded54667d3ba4aab222319c5968d0192a1af47be415fce025329b81d5034d2c608ddb108d7acac2c145bf4abadb97cc6a05398c04a8385dab86979a0c857d2b27eeb7bdcd154e9f3ea7e394d3a41d81b0410356e252f5d0fba812d5099ede64b20d4a865fc359092ed619f0e3e6728acc69ce41b585e3c54f73fac28c38aa41ea53440cec35cebf03caaef987b18d9942c644c3f6a389970f3d7d18db8ea1f2c5ab2c0bb84478ce5e439c10749b278dfe8348391cb2bd4c7634a3ac813a6ea36f95bdd80c87fae037775834eb5029854cfe59c99a9597944e7cbce895d14ed0ee8b84ea586e77dc12fe709cf9a083c2a4806913d8914b379b4ecf27525e84fc1df3ff520f79ec244da60f680b59d848e591c89f069cec4b497d9579a86c19a710c5cc00239d6cf3c8596c924561843ae20ad5cac9bc92bf42157ab35329cd62242fec48117f1f6f801c68f9f3ec9677875916ceea7795dfbdd23121cfb3bb1813fe1ee14ddbd5a45985bc496449f82a2cc200905eaaadd1333bf79128459f47b580fdd5a10787094b08418c1dac843ab0e15d824aff2b3d242fe78d9762d39c713ded38cf972c227831ba6fb963c956458eef5689180baa3ef2aef3d3e57c63c2d4509759fb711dfe2772341ae308a7892e583be0917ef5355bfe68becce5bc5971733ca260055ee6481c0998698a49a1f03a0f537145d051179601c04cd887a64917480ba96ac046638dd6977599f72a7235506737e7e81a03095cc7e102586ec33b79eff0d1dc2b34912fa89dfb434f0256be53f6695685688af05361d3b6954d416f4be06b9ab7846a44ce25b39c7c79012b2f16159fdf96a3998098691364dbbf930a8e224701ee6f8b899fcde632077a03f649bcfad6f506924db17558b708d38d0b286d6f16f286b26cbf11094def0d017eda65328fe2a24d129bd7ac28679f2a98999e6ae508c3bb31b4e384de7593cf8ac46727cb8a07c30d97c87b638f154e1ae2223a8158e292d9467049cd9115051d3dc0c090f9e9ff6cc425f2fbcd3a4471af5182c0e45485194b6627839d356adf2cf7159b6360f7983a5c50f5cdfcf253cc40a413ed280b9ce7d9d70bef8233fbc8f6e0f5e9100f110519088ce84b41d861171f607338f5acf0664f56c88dd50e86851f59e81c2601f66ee9ced3ecae2dcbd37c55f6058390d6237837ff601900971806e987abbca25221d08f7ccb11a41b3a6246efffaff359e04fa52d7ac630f7d96bc5976817f8a347ddacfe079da0633d855343884bf4d2eb58638cd29d499de7af8490a6d9db3922363839371e819e49e54ef7dc953aa8125e053e3689a22d785c3c1729936eedccf682fd56e0aa6069c1ac88d46b0c06c1f43e631f74f9c8b4557678e90ad7788d25caca67b70da4470cc8d28606acf1fed5d4585085449ced76b1a871ebe8ede8d86570d505010c4f6f4656d2195b6190a1dfe423860b5f767f96c1e0fbf1194b9cab5c87dc2f6ce5f408681e2af319ada237e4232cd356574d7a5edbf7c292acc0c0ca04303614e46b6875f2b58f8b400fda08e24020739c2493ecf7c5d0695ecac14e486bc36a575e6a765d43313c4a4c43c5cc32488c045466504cc690f6b14f12e0a669b701d305a056c610b5f3e696e002bd5b940abac2edde34dbadc88881a5a5fc1d7db4389f33eed574ff8ed69eaf3a656635963e297cf2915c2da4bc7739c5d24017c4757a4aaca2b3323bd4fefefc004d2a675a40b7b31a221d825f79fc12f12b9d6637ca48fc2b55c9e982db14d8cce59172d7d7ee6a1f98a2839d263d7382e81ee306d27e7463a3a0cc71c74df84060ca69331afa4e19e0b124ddf430f4323e682d99f7d77854ba416162182dc161a41af02c75eef1688bef190ca86f712994db24d81831cfe4f54229ba2f5df634e45c2d2980cec96d8aefecdb35dcd7fb360c6117af12bcf894ada94069ba44814334ba4b4d487a866e484b45d7348e07a49460ab64c89f45f8b6f74507179fb6b5f03c202dedbc7cc70723ddb56accb1eb266787"}}, 0xfce) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'hsr0\x00', @ifru_hwaddr}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) 845.335909ms ago: executing program 4 (id=1829): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x11a}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000415) r1 = socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0x4, 0x9}, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x60, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffff, 0xe}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7f}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0x80, 0x7, @device_a, 0x7fff, @void, 0x2a8, 0x3, @device_a, 0x1}}]}]}, 0x60}}, 0x40001) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000002540)}, 0x20000010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x101, 0x6d}}}}, ["", "", ""]}, 0x28}}, 0x44805) 819.479932ms ago: executing program 0 (id=1830): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x5) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0x1a, 0x1, 0x2a7, 0x300, 0x10}}) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000100)={{r0}, "6133239cec2a9e19a43db1371ee4e30dd8795e955b4dcbbd8e9417f7144854ead94942a3e42c9631cd6199976029989ba48461ac4e80dcc8555a40d055bd5917b4898d8e37aa774e2db0aa691a83e3e4b636a92ca4683db2bddaea4fbb34b06488bed2865ce0a17c00ca7a9bac1d5379b8108f518b8f2ca0f3abd0f941dca485b988be4dad50630eff6576b5a0b2f4f0876a31c78c150c96dc0e4cc8548a1c52fd3c227dd82b21622cc96490fc6490daa7fedffd60fcc1b713d8312e4803989cde1aaf34227dc0461b36ece3173f5fd3ebf1158ff6084a26262fbc63ddc52a9837a26329baf068b035da39aef46cff1963c90b7a5f0cf22d46c5d978a806f923e081a21f4056f57abdc0b77a2bad4e00ab428c14b70cae94f9e01a338f09381355d960a461e278bb96e5f5654d55f1abfaee5edd77dd8caa674ed630e9c1b3e2c8c03be5b83561e5f873d558b64c094531f454a9321e4f10fab5159dadaa629de34866333823c7ff8f0be60be230ce9f2d466fc9b508535e7fc01caf6c380289212fdd4e21b0de29f6dc568987bd79d7eb67f43d1e3d118b8279461618561d7358e1d7a742f842d51a0e7b9475a2d17ecd472e09b25729dbbba9e67a28e5d22418745ef6257749ba41b2493c51d434db487b6552a70b2e373bc3916a15b2b241867f082aeb01c5888d89cfa01bbe8ba5f43e4bfa5d91eeb9632736b0d4819cff90976bc0ef767659e8e8d92f7cd09ff35a36fc667e3e8c9b4259d4c222c941c8e06510e402c6c729e5507a547fcbee85a12ccaa6d209bb0800164bbae10eee9b363ddfdbfb8ec9e5998cf3262c6bfce4f51e13ab989449127d2208f7bd66826b78549141d3d038f34dacec348290b83a1641ddc28003e15694a602fa53361ba8e86fe954f54b3a20c018577cd904d3a60d83dc2bcefe79338337adac47e0d42e6079f52be8958c3f3c2ce2609afb3ad3a9010d7c107fabffb0045e36c82507593ca0ce8be954d42aa5364493977b5e8b34a7c5e98651183d6611ac8b18f559ed6406c913a20a192d9db279311c0aa339abb8469540f898a197da52242b381088e116bc23257ef41a83c7b73215645c44fd7094cbbdb02e89311a172133146c7d0e0a6b1fe43e84a7d12f3deb01819d2db9f6f506ed4deded58a1b4581aaa632628045684963bbaf0e339c54026e127526542b73fe7edbb10ab73049b2d258fdd65983e54028d0e07d3349c33a40c662ead0569484d826531d368df7c3dbba30d1377e63fa4f8bf783c890c4f4f44e21596474c613281f6a26f9649413e8de79b67496994612fe371a6598f63f850260522b522274a37a587f452ca900bfc981d1c1035459fd87e3a0a960f406797c434a0ac6983933db253eac1e6b1cb990480ba12f5e79a647a0e1abd9b344991cd45545844e751b4959ca7e4c89187397efb1a8260898e82cdb2b0136ec7c6fdb6ded00f206f7b4f5ab0c46a42df17e78975b95c67ba42066b6f3c7b5668f667f0b4f8745d122a1276c06b6299539db3c324acc220e008b2d57b762742cf16a54f586574feb31685f51d1819ea99c2c3e0b7e9d002a6b65d47a3f884a3816bcc19ea1362ffbc928e285160a7f6bffce6d44793bde96c0f14ab4a824dbc5f472c41443add1db9496001c08e8844ee5d3ee01852762248effb66902f62bc75ad3b71dcba7bf50229ab426093af504dca7bbc9f5ab3f6f5f8822af333e1864d20c336af5ffad2b649802e13e10d916376823fada489015ecfce5e726b423ec0b59f401203973ec4e51398fe45c769e2141dbf2ebe49842c7dddf4d2c98a45628cc20d28fd28fe700839827eb60e4a37ecce57f37e9e9a0ac34f79ffe708feda5b7673be1c7f46ed0b5a44d281e9076e5e505554bbc188ff1c44401472e494b55d41ed6fdcf25761d9a0536d55c84c6e07262e306f219824310b9f78e4cf4cfffe1e08de287e9bc057e4e778be0fa6d696d74927f47e82e3fb1736fa809e93f8409a138d3e89c4d6b9fd0203ec36a6d609ab5269499062b4f40351e5fa53c86bcf8490465a09b50936aa0b110333feea9b3c18d775f8d0f89038b2169430e2f55930a969a4c4fb44785db4fe5b125dc408c4d14926453977af09f96b9ced5de1a75997d6f4f1ea33dfc570cd08b5837c4d9d3ba85c6d2ba0f4c8853f57d52b62323b23e2e3e171ce632364e825931a505e25df2938326e9e4887748c15c64eb1ceb102f79fe7222e4775a264c1cdb9ca7360f62ed11266e05286685e8f1c1d50002c95a9adffa9d9b4b2e1e8f83a751cefdb3d08f13c7ce6e3a6520381c490136bbe05ff408f9013738bbb63e327af63e78793c13b8f38dec7c25424f315789d3d868c429c5190acf672d7a15d19f131ac04bec0505f6acc898f78792b2f06bc7c5903b7de47437939e92069fee4ed8a2eb03c79165db06c677d4e0496a7b56ab6b4262c3974b56286b98913be8befdfdb2d783c278e300b5923a8364b1772a5f04a090b2744fe83d7b0c987f3e0dbbb208871e94d1739d92f46569f30c52a31b8be7af623526f544b362918eea822f5ddeeda7d95d9d769508e1698caabe13a1494d53f240ae8b81f779a569aa629c5330e5ea680a145f2fca6e70ea6008e6f69b472fac50fd64cf3ea84ae25f9fe326dc05a54f3312c26b7a884aa723d9c02defd033a31f0ac841f65240912cbfb7ce1c3b1839eda995362ed8ba36ce2010ada5a46b041817d43390b95d50dfa83d7ed93db47042451adf137874985f1cf4f7299739ab3a7c0436cdcfdce42779d0ee3ab8973d8766c7584d96205394be4eba9378e65f7b21d07514ff60d143d7d4b4200dc1babbb58b179bcb309b151832f79efbbb6c6ec65ea085b27946df2ee7c5142b4529c8af8f3862896c3dbbc4cab40b0ceccf3032170843b5859d32fafc66dd096efeef34aff8dfe4dbd49d09e7c2686587e41901e4fc7058c71ab2870eaffe5defc845e8197c118e23744f788d11ecae553976bd425b86d73f0c32a7ddb0da55ccf68f0b0cb14792adc83505b316d90a23e3665ff90491c90a93e8c8efb27be273c6d9f8ff50c94f239cf607dca2de3ba516bc108e1c804514d7126ac756ad08817c3a861cfcaa16924f22a4a8404833c8947adfe055fd21f8083fb0ebf2aafa265d72f8da3eabfe07e92d28a09cce8aaca026889e001403d462ce9afcc733df9c9f53091e4caa573ea228cdabbd2ce42796c3c684f24515e1023a3822f3437af0c1530b8ee7980d453c373ae6bd555f9929ae00331dca69194a8c8467b5b7c2ae529a36f88eed33fee008899667b94fdcf63a456d0b816110b4838af7aaa9ec37f0d729c77726f3bd8891dcd603408f1064083e159488ba0d5181fb2a85990b4326ad145046c0e0ca4b5ee5b359a879b8022d745fb013e911885a6463820480e37180dcf501e60b45b551fc7a28ffdfd4b475658ae6ca7ea8ce0f826b0d88c8a3bf2b0b30587b013f84dff961629ddcb4d279af455ba4f508f1df05db8455ed830bb73d3b5ade37d92be20fdecbc2eead35684b4ad090ec8f34a8e4f6ccc7d6c48a49cbceccd8de3a9282ef48926b9ed3a4a7273caf05f7b81e4a664c74eae16469dbee95a86ab9ae402f3f2f5c9a7d263b3d57325ca774f16cb618192165fc8d2080656880b3faccbe08db4f0b2eae2219847abc0d8e4e0532c7ed4db6658afa88bbc56d08d6c20c35ccc6829696554896b725ca4d29a04a9ca789a1ea3e85a8d9038766781de4e7b9164cbf259285da7368c41c940c467e0d465b4c90630778a746cd7d2f94ffbdbe923226cbf78c750c8365c9655abd25f83c50ac7886ef982a9c9ee19c74ede2e8469c9457bbddf21a6c7d66b72fba0d622cbdba3bb86ad333ed76509cee42cd3e07821ca49e79d0e95bb031dd23e8dbb1e4c1b25abe36b5873e579c042fc489854c7587d4f87ced709ad7d85f11fda54d0d4a35f5aafd1b0e2ac423e6c5a846dac2f2a684b8b375df49cc4482da62b1edf10b21da46b0caa9241795de4abf5e2e9556a4e7ac029cb3b92e658c84885d9b48f59272dabb3d751292c76664bce02e00639a7aaa9d11ce4f40b7a21ec7d4367dffb9c6019716aba2460d625a7edc81c79e370739c7af56e936a530e1373f743d8df266f830e864ba515309d7fb368696dcb2f5d0300da2fca3d90e90b5a4413989ecc0a82f8d4c364adcf0691845b7d50253ecf79743a068a2237a46724f74e361223d530f04af3eccb43797fa056c47e00752b5706cf0b84d2664760fcb17a26b14112581fb51b640b227d8699e3dbe6efab22a92eb2aecb94e6682d8829907a783109d9c2c188bdb305350417285467eacd3d26fdf84ad602fc8dbce9a15e09e870c723bcf3d1c751712caa38e93fddfd6e4c8f3e622e46ef836cad9e3f7038c137cce709ce67f77eb4e5acf2ad07a81880e11ae5fe49c5f31cd6e1ccb3a945ce8855c0ef6fdacd4e9125bcd07f375ad4c443337c253f2d4a2b4d74bdb8299e0bf9d03b6f83fbc41c7592bade5484f7c8921151a5a6cef766ed147dd3e0e63d4931880cac8c96859bcbfc09cfb7107bc107325f0c64461f097f690a3a4ed4176fc8272a0704727df2a316f3e3b55c1a296b4b33d826d635b60b08e16074bb794707a6a2e17b3ce357ccb6423be5d59c9270bad9a8e8ec77fb61ce4fe61ca8e5ad77191c2bd87b9de45b34475b0d925abff4efe9fb69885e282600d6da3af32f0ba653ea593ccfafdfd1e0b990c91a80d43158643151aed5e523b0b96657365a02a851b7e7b248a807327fb545f207c9b511be9bbe137ce57c6fd3c001c381aa07732fb2cbc8ab8c0360765a4f78e3d3ad19138d1ee40b9e167b3851dbb090e977793050dd0e67b98b2fd64357a60e94ed86bafa07aa15e11ce5be189493e3de1ff63dc428f6d0fa6dcc38e380b4e620e4f3da59299080a2ffbdb7794d37960c182221a4c9c688a6f62e2756d257c8b787e365a11f7698ddd100b78aeb278d3c4098ee5ab923cceb65538bbc49c9e186a9a40aa77d10457a7340d810874f7e73689df3b2ae6b4d994601f352ab636dce247df18e5632629dd489c3583eaa43a57d9524df34ee5553a2a2a5a02c9fb8f4a536fd5aba65c1a2162731dd6b0af0cbc2e78a781a4db6b9f763aa499c413d25062551806a967ddc8e6f5f08ded66d7ffabeeb815c46d02feab273ebe8552a6c7744992daa169fad88911c60fbae82cb44753ccf80efab5d104226703b1a8d8e57c4086fb30c55573cf8dc7583c7dfd0ccb96dc4c86ea293950192b0c59b3cfc5e001123c372bcc41743ae059729f9b5a83ab3cac9035ecf33257a88f984916ad05c569eca09f4d3d144a3e40efcf6d3b1571fd5241a3ab55364bb96de6f1f56ce51ea9400881a32d87ad15f9c30072ab831b1b6341495e1456f49a8c797cb407b9bfcff17f48b5719af0c2ea17f7bdc974ba7f993c9b05541eb7da60e9bc46d10c9c8fd060a240c5faa830614e718fffb4cd9dfd5f748186ecc6a6dc341a6833c7cc1326106c4b21bc6b290664527eb9d1f417d59e5346237c3b6bb1570302d74eaa8e6ebe4a5f955ea884e26dc853513cb2ff3697ac57f7f694bad2a162e56fd9cda6e212ec49180c0fc8cc771748f36a97bf021fbb55c89bbad22688a9194e18a542cd844531f0269c293734745446f8db3dceb6efec0248e9dfe7e7afda7cebbc7d2aed4a2744b6b765538896d08e301ac33ad31c28002a887fa8b1c91e35a6c5126803afc569a117c4f29c1"}) r3 = accept(r1, &(0x7f0000001100), &(0x7f0000001180)=0x80) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000011c0)={0x8, 0x40, 0x465, 0xb8, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={0x168, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x91}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x207}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff41dc}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x168}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) getpeername$ax25(r3, &(0x7f0000001480)={{}, [@null, @rose, @null, @null, @null, @default, @rose, @netrom]}, &(0x7f0000001500)=0x48) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000001780)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001580)={0x1a0, r5, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x14}, 0x54) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f00000017c0)=0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000001800), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r3) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x64, r7, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4045}, 0x4000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a00), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x80c1) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={0x1, 0x58, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000001d40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0x94, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000001) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000001e40)={&(0x7f0000001d80), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x40, 0x140b, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001e80)={0x0, @in6={{0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}}}, &(0x7f0000001f40)=0x84) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r11, 0x84, 0x12, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000002600)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002040)={0x568, r5, 0x400, 0x70bd2d, 0x2, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x119, 0x2a, [@dsss={0x3, 0x1, 0xae}, @preq={0x82, 0x5c, {{0x1}, 0x7f, 0x5, 0x4, @broadcast, 0x4, @void, 0x6, 0xd6, 0x6, [{{}, @device_a, 0x80000001}, {{0x1}, @broadcast, 0x4}, {{0x1}, @device_a, 0xa}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1}, @device_b, 0x6}, {{0x1}, @broadcast}]}}, @tim={0x5, 0xae, {0x16, 0xe4, 0x7, "7499ce53ad8a2042c41206d8bd627e2ec02302a9fc059b5888faf5ac8871740fdeab25b805f1bb664440e500efd44ed50893d695841605eb071fb39cfbcb3adf3ff16722110dda7571e3e86faa9ace74a1127f558a88a678eaa61d07791483902de781a4966f288fe8d5306bf98f0537a03bca78a6672aba9615ca9d41495938db495d855fdc51de3bbf43dafa1ab83a8d4b95edcd2ef07de600098d07c9ef0e172e851eb4d0e05448cc49"}}, @ibss={0x6, 0x2, 0x8688}]}, @NL80211_ATTR_BEACON_HEAD={0x307, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @initial, {0x0, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x8, @random=0x9, 0x1c21, @void, @void, @void, @val={0x4, 0x6, {0x6, 0x7, 0x1, 0x5c7f}}, @void, @val={0x5, 0xc0, {0x4a, 0x72, 0xe, "f5d8d39e7f8be0b92a425c3dea65d91c8530acf2597160b5d07e87f000a3ce7dba4c528dddeda40bb9761763f2673b87a005a4e03adc986e00260b645643c92a9c1e14716796459a648b9b1a2cca72e856a2bbd1ecec07e670fee6be37b13949b8566dd2a89e056c34ab6864943667c7eb933ef73b1ba30ab93473d7ae6d5530fcca815a6d6868b7790031f2b518c5b1cc055f354a182355d9750aef9ad1f1db8a69838f26d6ffc69d4e38e629a38d530c941f3129cdcba6e092085701"}}, @val={0x25, 0x3, {0x0, 0xad, 0x2}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x38, 0x1}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x2, 0x0, {0x5, 0x81, 0x0, 0x6, 0x0, 0x1}, 0x300, 0x10000, 0xa}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0xdf, 0x3f, 0x6}}, [{0xdd, 0x3e, "530115e0b22c4c5c0032a22b77529e654e018666550b09644f79b4c9ab625eeacedfa8808cac524bc80ee0f5792188ab8a3c247ce824634f488f2aae20ca"}, {0xdd, 0xe8, "242e02dce50e91fb7471e98428fe7e8217427a4beef30f0e52643b872854e298b36f24a7d45f3c717837b280a4bcffcf2a5601d638bbbcd82a48ef117d1598f0fa6517b262ab08870421f1f2d71338bb2d9f9b208e191552acb367f20cb452635af29b26f3423a51c0db4101d03bb123e35ed03b38e0b884bb1b9efc698af08bd73121f701615c0de3a85b859c1050631a12acae222c3b3ddb7c9cd4449958751fd113e89a2e58adaf4653029bdbb5a540b6ed222b6a40a1d5d1d7d05a75fe1bde3e85094bf5dc72c6e8abaa0b2025055cb39f0ddc414235d4d121b7580cc8a7aa3f70cb2e278f95"}, {0xdd, 0x15, "3a0c182e6956d0a8245b2a0d971b9cbde21e2d4121"}, {0xdd, 0x97, "e424ac0454ed6f658ab838059f46898446a610abaf0fe6d87fcac262091d316e44bed64ab1ca2350288e0ec4e17f72a7d6e11e1893de4be0508611f1aa388fea383dffa6501721830bb588cfcd63d214850893a7d2085f8f595a8e8c38ec2054b4e640e51ab1e2fd8015618dc76d498c6d18cfcca3d54f02170096d8005bca8774c88bec4da4ec456bc8106b82942e3351e1b565a90868"}]}}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0xcf4e375a5b48ee7d, 0x0, 0x3, 0x0, {0xf800000000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x6, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x1, 0x3, 0x2, 0x0, {0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0xe714, 0x5}}]}, @NL80211_ATTR_IE={0xc0, 0x2a, [@supported_rates={0x1, 0x7, [{0x18, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3}, {0x16}]}, @tim={0x5, 0x42, {0xf8, 0x2, 0x9, "565da0bf2f8564169594fec381600066e8ace096fdea3c69cbfa5a5337d5657324fc7b27f92e11ba8be3c698507c602463471faf226eb6bca27c6d9ac2abe2"}}, @measure_req={0x26, 0x6d, {0x2a, 0xe1, 0x57, "4556f5853135cf864cc235e724ece021ac9823a5632aaa788de261e89ac4d6fd4fc1afc63519852624158e93626c41c9ef7f42b8431f6856d90de5a535c40f067d20460b2e1726d096e9ba553518f3d538e5ae73f2b638e6d7bca3004fb6a0ddb8212f73cedccbb5e234"}}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@ht={0x2d, 0x1a, {0x4aa6a01d56e3fe0, 0x0, 0x5, 0x0, {0x6, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x3}, 0x400, 0x6, 0xf}}, @peer_mgmt={0x75, 0x8, {0x0, 0x619b, @val=0x7fff, @val=0x4, @void}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x568}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) 746.420765ms ago: executing program 0 (id=1831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="2237c7755851990009"], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10012, r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xffffffffffffff37, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r5, 0xffffe000) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000280)=0xee0, 0x4) 632.908036ms ago: executing program 4 (id=1832): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xfffffff5}, 0xc) ioctl(r0, 0x7f, &(0x7f0000000040)="e79840adb1a8595fe03fda52c8cd7dada023b0894f54c5605fc02dce40b44322629c0733988af3178ddaeaa20a481910d2b6f62327d6320ba9c1cabdaaaa21837b952c447e3d05fc481df3f70fdd9e28c7affffeada5e7b80bf3f5dac75f89a6dfccc4bd44a5ac9a4f1630b199e8823e4abc6648e2cf564e2ab8d9f2811647fadddd4d097942557cdc654f495c0fb78beba0145be5bfbf31e600a7efbb0634c5b6cce833295cb24784e76a9ac3ee722a8681d538bcc9669522beccc59e44c428f309bbbfb069c2776e35fa5a5fc281c0028a75f417c0328f966a0dc63ed6ff8236699ab15bb088f1984961a67773f9112041e7acc2a5") ppoll(&(0x7f0000000140)=[{r0, 0x350}, {r0, 0x10}], 0x2, &(0x7f0000000180), &(0x7f00000001c0)={[0x100000000]}, 0x8) readv(r0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/42, 0x2a}], 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'tunl0\x00', &(0x7f0000001300)={'tunl0\x00', 0x0, 0x80, 0x80, 0x7, 0x8, {{0x1a, 0x4, 0x0, 0x6, 0x68, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0xd, 0x1, [{0x7, 0x7, "33723452f2"}]}, @cipso={0x86, 0x46, 0x736a56c74818d977, [{0x6, 0xb, "9c30543e4e9a05652a"}, {0x2, 0x9, "c74560bc3ee6b2"}, {0x2, 0x9, "5e8985ac9b953f"}, {0x5, 0x11, "5a631cdb55fb562ee155fc345b5a45"}, {0x0, 0x7, "4b26cf3556"}, {0x7, 0xb, "8543352e03fef794af"}]}, @end]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001400)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000001500)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001580)=0x14) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)=@report={0x68, 0x20, 0x200, 0x70bd25, 0x25dfdbfd, {0x3c, {@in6=@loopback, @in=@private=0xa010100, 0x4e21, 0xfffe, 0x4e24, 0x4, 0xa, 0x20, 0x0, 0x2f, r2, r3}}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @offload={0xc, 0x1c, {r4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0xc890) ioctl(r1, 0x313, &(0x7f00000016c0)="c3875671cec46965b633df4bc205819af174968af827c359248a43d7e836489a863ce76c3bb90b03f19d264d97cb55e51c1a72db41ad68648d4fdc3f1dbf24e4794a839bee013c0c30ecab78bbe36a5071ea8611255b83aadb2ca802d3bbd547d6f7baa6f6f40258489d82061f6f1b96ab71bf091c6cb7547e6ac5f4f7aee171c5ae78eff29e432e67b38adbb1fbad2d87d523f4ceb2470f4eda351bdc51c38d17d940a783618d4795156259da5d1c2a93532b87fb6a1ef32991915e72e42433162055c92d14f4a6a5ced970054c5cba25611adffea8") ioctl(r0, 0x338689b7, &(0x7f00000017c0)="d31c181ea69decf1b15d55e39cfb54eb0d2c4fd989e4bbf27d378f46bc47909958edce930aa18454f890a2517e3abea4d08cb7dd582be7d8eefe14ff9ab5624d8c65f365c4c6947ef0307d65199dc3c1f2c765a22bcb43eaae9a52246e24ed3985e031ca5c47e85c24ba67ad1bd179242f1565ce2aff85b42e21f02cbf37853010640b650719c534c9f3e918a3425ab4de82d9679c455a4f08dfc4b16b4c345065d5555bbc29e0a70ef602b63d8ca3a9590a36b07b9bd775f5cc") ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000018c0)={'veth0_to_hsr\x00', &(0x7f0000001880)=@ethtool_test={0x1a, 0x1, 0x4, 0x5, [0x7, 0x6d, 0xd243, 0xfffffffffffffff9, 0x3]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000001f00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ec0)={&(0x7f00000019c0)={0x4d4, r6, 0x802, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_FRAME={0x486, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7f}, @initial, @device_a, @device_a, {0x7, 0x6}, "", @value={0xf, 0x0, 0x3, 0x0, 0x81}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @broadcast, 0x4, "cf7132f1"}, {@device_a, @device_b, 0x7a, "bb055fd4b0c1a04114731ae10d5af29191f1b77a99d4950482f194e6ec485f7cde5b3bb65f40ae5797c3fd5ba88645cd6a6bcae9b431c6c12e5f2bcfd425693f98c5c620a5e5be1477ce9370cc7fe8db945e19dd91d33b7974840e25bb5875134933cb1ea2a7dc5a932dd045d8772c443c059710db590605ba94"}, {@device_a, @broadcast, 0xea, "c24737e93c5b635a7e9d499089c5decd16689960055e64987c52006c2e41bb508dd44508a03c98beba4f725004a0882157084fe31a0f683c6b72783ef2e15c4b51476ab2488fab228f6a250f87a064ac1ab1caac2ef9e9c1b80703718074163c86cba970302908bc0fecb953ba8488753cc4469eb6cf1d0faeb800b930cea47ced177ac294703712b6a7fa3d76dcda11bc9f292a4c0d36a2d10c71ba033d3114593fadc3319fc9e9fbd3acf0199a1a6a50a89d92c0e76fa4b9bc9fdcc290717a2fe50dad259d92b49f29caa5851fdc052df00412fa710abb136f33f77417da75eb91d2eabd86eadd712a"}, {@broadcast, @device_a, 0xb0, "25abf37ce7309f503ccb9c1a8e8193ea3ba11a236180391b8046c06ed2af3a3208931cb088508faae631632ca449c32783399102fccc8d4dfd6b8fca8e3ece3210b5a6aad861a261110f3ad1bdb056a41da38d8ce4a60bb1caf64399012489781b86d064d1ec117ceafa3bcfb7d73461031866c2836bf99ccabdd9d98a076fe80b83e6237d31f9dbf9166eeff6198e5e8d4badd79c33d62271e24fbef0641eca074aa40a1e608aafc9afe173a925eb68"}, {@broadcast, @broadcast, 0xba, "21f7aa9ba10891d8b021ac408fb132fb60f7d84a23a7578a90c3df1639fc20246ba1c2e0ad58ef900e0022db54b6bcf270ef9783115bbcd0fc8957c0334fd8c3bb114ccf868a1505cf0a6c07dc494c84921bef5f63bed60c2efa2c04062f3346704da7d48f99763607d8b7a60ce40d16b2ffdcaea6eb3ea7d4a371a159e3d02d364dbf5efff79c71c8ab031797abdf8d9fc8c771f09eef4997434659e872c87b087ebba43d0a16962882e959a9249cc0ff11b7848b79dbb49d73"}, {@broadcast, @device_a, 0xa0, "2c4f6bfb8844cb587cb502786cb2c7c7e2d091191cbd4507ccc3c076dfc9efc3bacab8964888bef396a2afb5969b91f2ab9c138de45a8eb1d1c0691c4eb45653ae0cad3e33d5f0fb498a9782f6eace6c83a4e3b0b29f128906eeeda878eaffe25b031d06c4047661dc1306ffa35dd7b2ef417a4f7be06688bd348aee3955164b2c2a83a63e7e4ed199ab0e45f6e95d9ce6f95de25840418e5237e363abb5a07a"}, {@broadcast, @broadcast, 0xb, "54d87026984ad5a199f01b"}, {@broadcast, @broadcast, 0x6b, "5c06a882079cb4ba09aaa8669f05794b715d84d9d161a56cdd4238f1612f92f76cb44c3e9794ea826965787c3af16111848afabcee3ad6d0a268cb454a57becc8ca9806424037d0aa5d5db805877f35d2915e6a5075713460a2fd7369d5fb4e8141ba4393c096fae935430"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x4d4}}, 0xc080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)=@gettaction={0x6c, 0x32, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10000}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf72}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) recvmmsg(r1, &(0x7f0000004500)=[{{&(0x7f0000002080)=@ax25={{0x3, @default}, [@default, @null, @remote, @rose, @rose, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002100)=""/151, 0x97}, {&(0x7f00000021c0)=""/25, 0x19}, {&(0x7f0000002200)=""/191, 0xbf}, {&(0x7f00000022c0)=""/15, 0xf}, {&(0x7f0000002300)=""/148, 0x94}, {&(0x7f00000023c0)=""/16, 0x10}], 0x6, &(0x7f0000002480)=""/62, 0x3e}, 0x10}, {{&(0x7f00000024c0)=@can, 0x80, &(0x7f0000002540), 0x0, &(0x7f0000002580)=""/35, 0x23}, 0x5}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000025c0)=""/94, 0x5e}, {&(0x7f0000002640)=""/246, 0xf6}, {&(0x7f0000002740)=""/100, 0x64}], 0x3, &(0x7f0000002800)=""/95, 0x5f}, 0x7}, {{&(0x7f0000002880)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002900)=""/54, 0x36}, {&(0x7f0000002940)=""/108, 0x6c}, {&(0x7f00000029c0)=""/156, 0x9c}, {&(0x7f0000002a80)=""/183, 0xb7}, {&(0x7f0000002b40)=""/162, 0xa2}], 0x5, &(0x7f0000002c80)=""/138, 0x8a}, 0x7fff}, {{&(0x7f0000002d40)=@isdn, 0x80, &(0x7f0000003140)=[{&(0x7f0000002dc0)=""/84, 0x54}, {&(0x7f0000002e40)=""/25, 0x19}, {&(0x7f0000002e80)=""/246, 0xf6}, {&(0x7f0000002f80)=""/142, 0x8e}, {&(0x7f0000003040)=""/151, 0x97}, {&(0x7f0000003100)=""/8, 0x8}], 0x6, &(0x7f00000031c0)=""/14, 0xe}, 0x3ff}, {{&(0x7f0000003200)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003280)=""/11, 0xb}, {&(0x7f00000032c0)=""/177, 0xb1}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/27, 0x1b}], 0x4, &(0x7f0000004400)=""/244, 0xf4}, 0xe581}], 0x6, 0x40000000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000004680)={0x7, 'veth0_to_bond\x00', {0x6}, 0x7}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000005ec0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005e80)={&(0x7f0000004700)={0x175c, 0x0, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x9}, 0x9, 0x80, 0x7, 0x4, 0x6, 'syz1\x00', "618fd8077f022e31bbe89f2f2f3ed267da5dfcf12896070c951bb8688cdef273", "b6db52f5b1838ac96d8633d45977adb76e2d6a1143d480d7f4e172aa5367f5b1", [{0xe9, 0x3, {0x1}}, {0x3, 0x8, {0x3, 0x7}}, {0x800, 0x0, {0x1, 0x200}}, {0x6, 0x9, {0x3, 0x7}}, {0xa0, 0x4, {0x3, 0x9}}, {0x8000, 0xdd, {0x1, 0x7}}, {0x0, 0xcaf, {0x3, 0x10001}}, {0x40, 0x6, {0x0, 0xa}}, {0x6, 0x10, {0x0, 0x2}}, {0x5, 0xe, {0x1, 0x3}}, {0x200, 0x9, {0x0, 0x10001}}, {0x0, 0x8, {0x3, 0xd6}}, {0x2, 0x9, {0x1, 0x7}}, {0x1000, 0x10, {0x1, 0x9835}}, {0x6, 0x800, {0x3, 0x7682}}, {0xaa7, 0x2, {0x2, 0x7fffffff}}, {0xffff, 0x6, {0x0, 0x59}}, {0x0, 0xe, {0x3, 0x1014}}, {0x100, 0xe8e, {0x3, 0xb47b}}, {0xa, 0xba4b, {0x1}}, {0xce, 0x0, {0x2, 0x1}}, {0x0, 0xb, {0x3, 0x2}}, {0x7, 0x9, {0x3, 0xaee}}, {0x8000, 0x7, {0x1, 0x7c6}}, {0x401, 0x1, {0x2, 0x8}}, {0x0, 0x3, {0x2, 0x4}}, {0xff, 0x8000, {0x2}}, {0x6, 0x7, {0x3, 0x6ee6}}, {0xa0, 0x2, {0x1}}, {0x9, 0x6, {0x2, 0x8}}, {0x81, 0x7, {0x3, 0xa000}}, {0x8, 0x1, {0x3, 0x8}}, {0x2ff, 0xff, {0x1, 0x4c8}}, {0x47ac, 0x9, {0x0, 0x5}}, {0x7, 0x7, {0x2, 0xfffffff7}}, {0x822, 0x3, {0x3, 0x7}}, {0x0, 0x5, {0x1, 0x6}}, {0x7, 0xe75c, {0x0, 0xe96f}}, {0x7fff, 0xd8, {0x1, 0x4}}, {0x100, 0x3, {0x1, 0x1000}}]}}}, {{0x254, 0x1, {{0x2, 0x10000}, 0x3, 0x8, 0xe, 0x3, 0x23, 'syz0\x00', "1570e646d9b319673da17dc151abc7d9e3d068d35a748ba95ce71f56bff3ac23", "715dceca6ef919703f383ac74575c518898fcd23ee13a47ead1dc4275fac0ce3", [{0x2ea3, 0x1, {0x0, 0x8}}, {0x4, 0x4, {0x2, 0x3}}, {0xffff, 0x7, {0x2, 0x1000}}, {0x7c2, 0xac, {0x2, 0x4}}, {0x80, 0xf6fb, {0x1, 0x9}}, {0x5, 0x8, {0x0, 0x5}}, {0x4, 0x3, {0x2, 0x10}}, {0x6, 0x0, {0x3}}, {0x8000, 0xfff8, {0x3, 0x1}}, {0x9, 0x1, {0x0, 0x9}}, {0x3, 0x81, {0x2, 0x7}}, {0x8, 0x5, {0x0, 0x7f}}, {0x4, 0x9, {0x3, 0x9}}, {0xab4, 0xc675, {0x2, 0x4}}, {0x1, 0x9, {0x0, 0x4}}, {0xe6, 0x8, {0x1, 0x4}}, {0x1, 0x2, {0x1, 0x10001}}, {0x81, 0x1, {0x3, 0x8}}, {0xfee9, 0x7, {0x3, 0x1}}, {0x89f9, 0x480, {0x2, 0x3}}, {0x4, 0x0, {0x1, 0xdf}}, {0x101, 0x7, {0x2, 0x1ff}}, {0x8, 0x3, {0x1, 0x3}}, {0x241, 0xa6, {0x2, 0x8001}}, {0x7, 0x81, {0x3, 0x7}}, {0x9, 0x6, {0x0, 0x80000001}}, {0x4, 0xfb62, {0x2, 0x9}}, {0x5, 0x1, {0x0, 0x10001}}, {0x4, 0x80, {0x3}}, {0x97d6, 0x9, {0x3, 0x16}}, {0x6, 0x400, {0x1, 0xfffffff9}}, {0x7, 0x5, {0x7, 0x3}}, {0x3, 0x2d1f, {0x2, 0x3}}, {0xe, 0x100, {0x0, 0x3}}, {0x2, 0x1ff, {0x0, 0x10001}}, {0x0, 0x3, {0x2, 0x5}}, {0xc8f, 0x2, {0x2, 0xb}}, {0xfc01, 0x3, {0x3, 0x400}}, {0xffff, 0x4, {0x3, 0xa000}}, {0x6, 0x100, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0xe5, 0x0, 0x11, 0x9, 0xb, 'syz0\x00', "ff2b299d1c3f27613f9a70914d961f1d093774acb4c117a3cb1a1c468ea92b99", "f201afbc6821f9d3b071dca5e621279cd05c5db55f16c14ac995a0d86721b19d", [{0x0, 0x1, {0x2, 0xef3}}, {0x1ff, 0x80c5, {0x1, 0x472e}}, {0x5, 0x8000, {0x0, 0x3}}, {0x9, 0x1ff, {0x3}}, {0x7, 0xc7, {0x0, 0xa1e}}, {0x8, 0x101, {0x1, 0x40}}, {0x9, 0x0, {0x2}}, {0xfff8, 0x3, {0x1, 0x7}}, {0x9, 0x1, {0x3, 0xc92}}, {0x101, 0x8, {0x2, 0xb}}, {0xffff, 0xf3cd, {0x1, 0x6}}, {0x1, 0x400, {0x1, 0x81}}, {0xd, 0x9, {0x0, 0x80}}, {0x8, 0x8, {0x0, 0xb}}, {0xf4f, 0x8, {0x3, 0x2}}, {0x4, 0x8, {0x2, 0x200}}, {0x5, 0xcb6, {0x1, 0xe}}, {0x9, 0x5, {0x1, 0x7}}, {0x4, 0x5, {0x2, 0x8}}, {0x3, 0xbfc, {0x1, 0xfffff000}}, {0xbd5, 0xa30f, {0x3, 0x8}}, {0x1, 0x8, {0x0, 0x5}}, {0x0, 0x7, {0x0, 0x3}}, {0x3ff, 0x6, {0x1, 0x4}}, {0x0, 0xf106, {0x1, 0x7}}, {0x80, 0x8, {0x3, 0x10000}}, {0xe, 0x7, {0x2, 0x7}}, {0x9, 0x2, {0x2, 0xae03}}, {0x8b, 0x9, {0x1, 0xa0f9}}, {0x7fff, 0x9, {0x3, 0x3}}, {0x6, 0x68d, {0x1, 0x7}}, {0x9d5, 0x0, {0x1, 0xf}}, {0x2d, 0x13, {0x1, 0x7}}, {0x7ff, 0x1, {0x0, 0x7fff}}, {0xe, 0xc4, {0x0, 0x1}}, {0x4, 0x5, {0x2, 0xbc}}, {0x9, 0x1, {0x1, 0xbf72}}, {0xfffe, 0x9, {0x3, 0x6}}, {0xfff9, 0x7ef0}, {0x6, 0x2, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x28d920a05b48a3f3, 0x8001}, 0xc, 0x35, 0x6, 0xfffa, 0x22, 'syz0\x00', "3d2db8132309710e30d4e0eff149117d7915930b8524bc22f2b13e0007cd5d25", "84faf5842377492d859ef73febdbe4e629c2f245057690d7e8e7b2908dffe131", [{0x6, 0x8, {0x0, 0x5375a5df}}, {0x0, 0x0, {0x2, 0x5}}, {0x7f, 0x7, {0x1, 0x200}}, {0x3, 0x8, {0x2, 0x8000}}, {0x8, 0xe3, {0x1, 0x800}}, {0x81, 0xfff, {0x2, 0x10000}}, {0xb8, 0x3, {0x1, 0x8}}, {0x7, 0x5, {0x2, 0x2}}, {0x8, 0x4, {0x3, 0x7f}}, {0x5, 0x6, {0x2, 0xc3d5}}, {0x40, 0x5, {0x3, 0x7}}, {0x1, 0x401, {0x3, 0x2}}, {0x4, 0x6, {0x1, 0x3}}, {0x4, 0x80, {0x0, 0x4514}}, {0xfffc, 0x200, {0x0, 0x6}}, {0x1000, 0x1, {0x2, 0x4a34}}, {0x2, 0x1, {0x2, 0x6}}, {0x0, 0x9, {0x1, 0x4}}, {0x3, 0xf000, {0x1, 0x8}}, {0x9, 0x0, {0x3, 0x2}}, {0x7ff, 0xa6, {0x2, 0x3}}, {0x100, 0x0, {0x3, 0x6}}, {0x8, 0x1, {0x1, 0x80}}, {0x9, 0x7, {0x1, 0x8}}, {0x1ff, 0x9, {0x0, 0x5}}, {0xd, 0x4, {0x2, 0x50}}, {0x0, 0x230, {0x3, 0x4}}, {0x1, 0x2, {0x1, 0xfdb}}, {0xb, 0xfff8, {0x3, 0x6}}, {0xf06, 0xffff, {0x3, 0x2}}, {0x9, 0xfff7, {0x3, 0x3}}, {0x8, 0x100, {0x3, 0xfffffffb}}, {0x8001, 0x800, {0x1, 0x1000}}, {0xfff, 0x20d1, {0x0, 0x7}}, {0x5, 0x6, {0x1, 0x800}}, {0x1, 0xe, {0x1, 0x7b6}}, {0x3, 0x1, {0x2, 0x400}}, {0x4ef, 0x0, {0x3, 0x7}}, {0xcfeb, 0x446, {0x3}}, {0x5, 0x1, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x1, 0xfd, 0x1391, 0x5, 0x27, 'syz1\x00', "1bb4582793c77e353bef2008800ae21b864272e01649d341df167283e6f631d0", "8502f75f62afa2793a56fe7ae52b4ea6d0da659257597bfd65498b7995f8161b", [{0x8c0e, 0x9, {0x1, 0x6}}, {0x2, 0x0, {0x2, 0x8}}, {0x6a1, 0x7ff, {0x2, 0x7}}, {0x3, 0x7f, {0x1, 0x9}}, {0x335c, 0x9, {0x1, 0x108}}, {0x3, 0x5, {0x1, 0xfffeffff}}, {0x4, 0x2, {0x2}}, {0xe, 0x1, {0x0, 0xe4}}, {0x4, 0x5, {0x3, 0x5a}}, {0x400, 0x2, {0x1, 0x1}}, {0x7, 0x3, {0x2, 0xb01}}, {0x2c, 0x1, {0x3, 0x10000}}, {0x3, 0x4, {0x0, 0x6}}, {0x2, 0x9, {0x3, 0x5}}, {0x3, 0x6, {0x2, 0xffffffff}}, {0x2, 0xb, {0x1, 0x100}}, {0xccc8, 0x200, {0x1, 0x4}}, {0xfff7, 0x7, {0x0, 0x2}}, {0x8, 0x5, {0x0, 0xffffffff}}, {0x2, 0x1000, {0x2, 0x1}}, {0x400, 0x40, {0x1, 0x1}}, {0xdeb5, 0xf, {0x3, 0x255b}}, {0x2, 0x0, {0x0, 0x6}}, {0x5, 0x1, {0x1, 0x7fffffff}}, {0x8000, 0x5, {0x3, 0xff}}, {0x2, 0x9, {0x0, 0x162}}, {0x0, 0x9, {0x0, 0x800}}, {0xcd2, 0x4, {0x2, 0x5}}, {0x4, 0x4, {0x1, 0x4}}, {0xb, 0x5, {0x2, 0x2}}, {0x5, 0x6, {0x2, 0x3}}, {0x3, 0x0, {0x0, 0xa}}, {0xd97, 0x7ff, {0x0, 0xffffffff}}, {0x744, 0xb, {0x0, 0x7f}}, {0x9, 0x4, {0x2}}, {0xe, 0x5424, {0x3, 0xe5}}, {0x4, 0x4, {0x3, 0x7}}, {0xc, 0x1, {0x0, 0x8001}}, {0x0, 0x7, {0x1, 0xe}}, {0x0, 0x6, {0x0, 0x25}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x5, 0xc, 0x1, 0xdc1, 0x21, 'syz0\x00', "a617fbf3cc476eeb94551f98f235f9b352977ea37e38f99d23a4f188fe805fca", "2ada1ca5f13561ffc06df374567d1e48b968ef4b65d75fe7ae8fa0d9292f9827", [{0x4, 0x100, {0x3, 0xfffff047}}, {0x0, 0x400, {0x1, 0x6}}, {0x8, 0x5, {0x2, 0x1}}, {0x81, 0x2, {0x2, 0x1}}, {0x800, 0x4}, {0x1, 0x8, {0x1}}, {0x7, 0x1, {0x0, 0x4}}, {0xcf95, 0x9, {0x2, 0x5}}, {0x7, 0x0, {0x0, 0x7}}, {0x5, 0x8000, {0x2, 0x7ea}}, {0x7, 0xe66, {0x2, 0x7}}, {0x2, 0x5, {0x0, 0x2}}, {0x1000, 0x5, {0x0, 0x1}}, {0x10, 0x8, {0x1, 0x9}}, {0x1, 0xd, {0x3, 0x80}}, {0x8000, 0xc, {0x3, 0x6}}, {0x1d, 0xb8, {0x3, 0x2}}, {0x9, 0x8, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x10001}}, {0x1000, 0x9, {0x2, 0x76}}, {0x93d1, 0x400, {0x0, 0x400}}, {0x3, 0x8001, {0x3}}, {0x10, 0x5, {0x1, 0x40}}, {0x100, 0x50fe, {0x2, 0x982}}, {0x1, 0x9, {0x0, 0xfd04}}, {0x7ff, 0x7f, {0x3, 0x251}}, {0x0, 0xbd, {0x1, 0x8000}}, {0x1, 0xfffa, {0x0, 0x7}}, {0x4, 0x7, {0x3}}, {0x4, 0x6, {0x3, 0x4}}, {0x90da, 0xc, {0x3, 0x6}}, {0x5, 0x0, {0x1, 0xa}}, {0x5, 0x10, {0x1, 0x401}}, {0x100, 0x6, {0x1, 0xd81}}, {0x8, 0x3, {0x0, 0x6}}, {0xa, 0x4, {0x1, 0x5}}, {0x7, 0x8, {0x1, 0xb}}, {0x0, 0x7e, {0x2, 0xb}}, {0x5, 0x7, {0x3, 0xffff}}, {0x1, 0x7, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0xffff}, 0x64, 0x0, 0x5, 0x3ff, 0x28, 'syz0\x00', "39d0d6a58e2e73487552b33bd94e9a5e20a03132dafad7d13f9297ab0a349def", "d840f87a78703eb1570b11ebba194cc57eeda976233c5cd237762ed258f02df5", [{0x8, 0x42cb, {0x3, 0x1ff}}, {0x1ff, 0x2, {0x0, 0x6}}, {0x8, 0xd0e, {0x0, 0x27a4}}, {0x1, 0x7, {0x2, 0x5}}, {0xff, 0x401, {0x2, 0x2}}, {0x9, 0x5, {0x0, 0x8}}, {0xb1b, 0x6, {0x3, 0x2}}, {0x5ba5, 0xffff, {0x3, 0x10001}}, {0x0, 0x9, {0x3, 0x904}}, {0x7fff, 0x5, {0x0, 0x7}}, {0x9, 0x7ff, {0x1, 0x1}}, {0x6, 0xe0b, {0x3, 0x6}}, {0x9c95, 0x7, {0x0, 0x4}}, {0x8, 0xfffd, {0x2, 0x4}}, {0x6, 0x3, {0x2, 0x9}}, {0x8001, 0x2, {0x0, 0x80}}, {0x9, 0x0, {0x2, 0x2}}, {0x4, 0x2, {0x4, 0x10001}}, {0x4, 0x8, {0x2, 0x9015}}, {0x7, 0xdd4, {0x1, 0xf7}}, {0x2, 0xb0, {0x2, 0xc13d}}, {0xffff, 0x80, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x7}}, {0x6395, 0xff, {0x0, 0x6}}, {0x3578, 0x12da, {0x2, 0x4ade}}, {0x9, 0x100, {0x2, 0xb5d}}, {0x4, 0xfff8, {0x0, 0x3}}, {0x5, 0x8, {0x2, 0x1}}, {0x80, 0x7, {0x3, 0xb}}, {0x9, 0x5f8, {0x0, 0x5a90}}, {0x5, 0xf058, {0x3, 0xffffffc2}}, {0x4, 0x4, {0x3, 0x7f}}, {0xffff, 0x446, {0x2, 0x4}}, {0x0, 0x7, {0x3, 0x37f2e521}}, {0x7, 0x9, {0x3, 0x1ff}}, {0xdc62, 0x4, {0x2}}, {0xfffa, 0x4a, {0x3, 0x1de7}}, {0xece7, 0x1, {0x3, 0x4b606464}}, {0x99d5, 0x9, {0x0, 0x2}}, {0x8, 0x407e, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0xd}, 0x1, 0x9, 0x80, 0xf, 0xc, 'syz1\x00', "7e934b1ef803978b3fc95989ed1eb58855d2251719615edff748befec1269293", "141a88284ae371faf2d16425bffc57de76862ff1901d88dbb93edf2b015725c0", [{0x0, 0x4, {0x3, 0x2}}, {0x1, 0x81}, {0xff4c, 0x2, {0x0, 0xfa}}, {0x0, 0x401, {0x3, 0x3}}, {0x3, 0x1, {0x2, 0x3}}, {0xff53, 0x4b, {0x0, 0x6}}, {0x4, 0x7fff, {0x1, 0x80}}, {0xbc, 0x4, {0x3, 0xfffffff1}}, {0x204, 0x8001, {0x2, 0x2}}, {0x3, 0x6, {0x0, 0xcd5}}, {0xfff9, 0xd764, {0x1, 0xc76}}, {0x400, 0xd, {0x1, 0x5}}, {0x9, 0xc000, {0x3, 0x7ff}}, {0x6, 0x9, {0x3, 0x5}}, {0x8, 0x7, {0x0, 0x1}}, {0xa7c8, 0x6}, {0x6, 0x8000, {0x2, 0x9}}, {0x8f37, 0x0, {0x3, 0x4}}, {0x0, 0xdca7, {0x2, 0x1e26de42}}, {0xa, 0x8, {0x3, 0x7}}, {0x10, 0x9, {0x2, 0x6}}, {0x50, 0x0, {0x1, 0x39ac}}, {0xa0, 0x2, {0x2, 0x941}}, {0xee5e, 0x1, {0x3, 0x3e5e}}, {0x9, 0x6, {0x2, 0x9}}, {0x1ff, 0x2, {0x3, 0x400}}, {0x3, 0x1, {0x0, 0x1}}, {0x101, 0x1, {0x3, 0x7}}, {0x400, 0x8, {0x0, 0xd}}, {0x8, 0x4, {0x0, 0x1}}, {0x5e84, 0x7, {0x2, 0x6}}, {0x401, 0x9, {0x2, 0x3}}, {0x3, 0x5, {0x1, 0xe9b}}, {0x28ba, 0x2, {0x2, 0xc6}}, {0x8a, 0x101, {0x0, 0x3}}, {0x94, 0x400, {0x0, 0x5cbf}}, {0x7, 0x3, {0x2, 0x4}}, {0x0, 0x1, {0x3, 0x1}}, {0x3765, 0xf0, {0x2, 0x8}}, {0x4, 0xb9, {0x3, 0x1ec1}}]}}}, {{0x254, 0x1, {{0x0, 0x784}, 0x33, 0x1, 0x1, 0x1c8, 0x11, 'syz0\x00', "64e77115e5239d96ac6dc2290b709fed8e5da3c179b1f2088e959ebd034165b1", "52f16bda88604a571fcf9ac862d8f8389536511a68073d3bfa4be90dd5619ef9", [{0x4e, 0x47e0, {0x0, 0x19}}, {0x8, 0x4, {0x3, 0x3}}, {0x2, 0xe5, {0x0, 0xff}}, {0x3, 0x800, {0x2, 0x7f}}, {0x2, 0x5, {0x1, 0x4b}}, {0x7, 0x6990, {0x1, 0x8}}, {0x2, 0x6c1, {0x3, 0x7}}, {0x8, 0x9, {0x3, 0x1}}, {0xfff, 0x7, {0x1, 0x8001}}, {0x0, 0xab9c, {0x1, 0xe8b5}}, {0x800, 0x3, {0x0, 0x3}}, {0x7ff, 0x0, {0x1, 0x100}}, {0x1000, 0x7, {0x1, 0x1}}, {0x9, 0x9f, {0x2, 0x70ef}}, {0x8001, 0xa9, {0x3, 0x10001}}, {0x3, 0x800, {0x0, 0xffffffff}}, {0x8, 0x5d4, {0x0, 0x6a7}}, {0x1ff, 0xf, {0x1, 0x2}}, {0x2, 0x3, {0x3, 0x7}}, {0x1, 0x2}, {0xb0d, 0x1, {0x3, 0x7}}, {0x7f, 0xa00}, {0x3b, 0x2, {0x0, 0x2000000}}, {0x2, 0x9, {0x3, 0x75}}, {0x3ff, 0x10, {0x0, 0x5}}, {0x1, 0x101, {0x2, 0x3}}, {0x0, 0x101, {0x3, 0xb645}}, {0x8, 0xfff8, {0x1, 0x6}}, {0x9, 0x5, {0x3, 0x9}}, {0x4, 0x5, {0x0, 0x5}}, {0x1e6, 0xd}, {0xcef, 0x3, {0x3, 0x9}}, {0xd815, 0x3, {0x3, 0xfc6}}, {0xfa, 0x2f, {0x0, 0x8}}, {0x0, 0x8, {0x3, 0x10}}, {0x2800, 0x8000, {0x3, 0x8}}, {0x5, 0x6, {0x1, 0x3}}, {0xda, 0x7, {0x0, 0x6}}, {0x7, 0xe8b, {0x1, 0x5}}, {0xef3b, 0x2, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x7, 0x7ff}, 0xfe, 0x4, 0x6000, 0x1, 0x8, 'syz0\x00', "4566540de86920ccfb74b751e58f930be96678bc759e30d666142ba8dcb2e91e", "eef4840847d83322a992cd6a6ed12f838aa00f7ac9ea6f4f926869fdca7fc827", [{0x8, 0xce, {0x0, 0x7}}, {0xff, 0x3ff, {0x1, 0x90a9}}, {0x5, 0x5, {0x0, 0x6}}, {0x7, 0x14a, {0x1, 0x8cb5}}, {0x1, 0x4, {0x3, 0x3}}, {0xf, 0xef05, {0x3}}, {0x9, 0x3, {0x2, 0x9}}, {0xff, 0xf, {0x2, 0x6}}, {0x8, 0x9, {0x3, 0x401}}, {0x4, 0x5, {0x2, 0x5d2}}, {0x1, 0x232c, {0x0, 0x100}}, {0x7, 0x3, {0x0, 0x7}}, {0x10, 0x6, {0x1}}, {0x5, 0xbaa, {0x2, 0x1}}, {0xd6dd, 0x4, {0x1, 0xc}}, {0x9, 0x2, {0x0, 0xec}}, {0xf, 0xf684, {0x1, 0x6}}, {0x8, 0xc56, {0x1, 0xfff}}, {0xff01, 0x7fff, {0x1, 0x4}}, {0x1, 0x3, {0x0, 0xd}}, {0x4, 0x0, {0x0, 0xfffffff5}}, {0x2, 0x8001, {0x2, 0x8}}, {0x0, 0x9, {0x1, 0x7}}, {0x1, 0x7ff, {0x1, 0xa73}}, {0x1, 0x4, {0x3, 0xffffff3a}}, {0x1ff, 0x8, {0x2}}, {0x4, 0x8001, {0x3}}, {0x0, 0x3, {0x0, 0x2}}, {0xff, 0x3, {0x2, 0xa}}, {0x0, 0xb98c, {0x0, 0x6}}, {0x4, 0x17d, {0x3, 0x169f}}, {0x0, 0x6, {0x3, 0x4}}, {0x0, 0x996, {0x3, 0x800}}, {0x9, 0x67, {0x0, 0x8}}, {0x8, 0xff, {0x0, 0x7}}, {0xfff, 0xbf, {0x2, 0x9}}, {0x0, 0x0, {0x3, 0xfffff801}}, {0x31d, 0x1f, {0x2, 0x40}}, {0x200, 0x8, {0x3, 0xc11}}, {0x7, 0x1, {0x0, 0x2}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r10 = accept4(r5, 0x0, &(0x7f0000005f00), 0x80800) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000005f40)=@gcm_128={{0x303}, "25995e13f5daaefe", "0f879bb2611156588636ba88aba6da1e", "50bc823f", "31b0be022df447d6"}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000005f80)={r8, 0x2, 0x8, 0x7ff}) setsockopt$rose(r11, 0x104, 0x7, &(0x7f0000005fc0)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f0000006140)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006100)={&(0x7f0000006040)={0xac, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x10) connect$phonet_pipe(r10, &(0x7f0000006180)={0x23, 0x4, 0x7, 0xfc}, 0x10) getsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f00000061c0), &(0x7f0000006200)=0x4) 624.488536ms ago: executing program 5 (id=1833): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x800000a) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.max\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) ppoll(&(0x7f00000000c0)=[{r1, 0x40c5}, {r0, 0x88}, {r0, 0x100}, {r0, 0x1254}, {r0, 0xc243}, {r0, 0x4010}, {r2, 0x2000}, {r0, 0x1}, {r3, 0x194}, {r0, 0x100}], 0xa, &(0x7f0000000140), &(0x7f0000000180)={[0x5]}, 0x8) syz_init_net_socket$rose(0xb, 0x5, 0x0) 582.191843ms ago: executing program 5 (id=1834): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, 0x0, 0x4}, 0x94) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv4={0x8864, @igmp={{0x5, 0x4, 0x3, 0x9, 0x1c, 0x65, 0x0, 0x2, 0x2, 0x0, @broadcast, @rand_addr=0x64010102}, {0x16, 0xf, 0x0, @local}}}}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x40}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x0}) (rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, @xdp={0x2c, 0x3, r3, 0x1d}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x2, 0x0, 0x0, 0x0, 0xff81, &(0x7f0000000000)='veth1_to_hsr\x00', 0x6, 0x2, 0x5}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x268}, 0x8000) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x803, r6}, 0x38) (async) write$tun(r4, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 535.164436ms ago: executing program 1 (id=1835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x20040000) 482.28955ms ago: executing program 0 (id=1836): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x2000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0xe000, @void}}}}}}}}, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x2000012, 0x10, r2, 0x819d3000) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) 454.069048ms ago: executing program 5 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 372.878058ms ago: executing program 5 (id=1838): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) (async) close(0xffffffffffffffff) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000406e"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000400)={'wlan1\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x30, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x28}}, 0x0) 286.282921ms ago: executing program 0 (id=1839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x1, 0x80, 0x9, 0x0, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x68, 0x0, 0x10, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote, {[@timestamp={0x44, 0x14, 0x19, 0x0, 0x1, [0xffffff7c, 0x400, 0x6, 0x0]}, @generic={0x7, 0x5, '\b\ac'}]}}}}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @local}, 0x10) 285.415694ms ago: executing program 5 (id=1840): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dvmrp1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x3, 0x6, [0x8]}}) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000000c0), 0x4) read(r0, &(0x7f0000000100)=""/170, 0xaa) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) splice(r1, &(0x7f00000001c0)=0x101, r2, &(0x7f0000000200)=0x8, 0x5, 0x710347f009089625) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={r4, 0x1}, 0x8) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r6, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="692245fb35b7"}, @NL80211_ATTR_SSID={0x10, 0x34, @random="693b05317ce420a17880f1d5"}]}, 0x44}}, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000005c0)={0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) recvfrom$packet(r8, &(0x7f0000000600)=""/189, 0xbd, 0x22, &(0x7f0000000700)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @random="b4b351c5b8d9"}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r0, 0x9, 0x101, 0x97f}) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000780)=0x4) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f00000007c0)={0x3, 0x5, 0x8001, 0xffffffff, 0x81ee}) shutdown(r0, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000800)={'veth1_to_hsr\x00', {0x2, 0x0, @remote}}) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x168, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x0) 277.833112ms ago: executing program 1 (id=1841): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40008c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000002070000000000000950000000000000093c0a69f978da471d8fafaaf490a1f0d10b62be479a4c3106099f36cde42eb373e2d930b32e88fb274fb640395591a1674d3fff8a7bef7960231962966661e810089da6c3d209bc9c13f2f68fbaa22225bdceb7c23fb9ed6df5a261d8910f182c75f20fa677ca6a6eed12c588a1e1933362daf4a6b074e5f4528df59947086296d1d1cb74d0bcb1ec2ea39f0cdcdfa86a8e8"], &(0x7f0000000480)='GPL\x00'}, 0x90) 267.27522ms ago: executing program 0 (id=1842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x200008c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0xa1c, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x51d6756c3e477b}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x8c}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5d}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf2b}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0xf7}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4ca}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x75}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x4}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x4}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}]}, 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x48000) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xe4140810}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r3, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004095}, 0x8061) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000009c0)={@mcast2, 0x0}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xe9, 0x9, 0x6, @empty, @loopback, 0x40, 0x8, 0xc8, 0x401}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000c00)={0x0, 0x0, 0x30}, &(0x7f0000000c40)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000c80)={r11, 0xd032}, &(0x7f0000000cc0)=0x8) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r5) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r12, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, r13, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x7f}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001a80)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a40)={&(0x7f0000000fc0)={0xa80, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x48}}}}, [@NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x177f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf2}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x41}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x61}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x180, 0x11d, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x0, 0x0, 0x80, 0x8000, 0x80, 0x2973, 0x2ba3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0xa, 0x4, 0x7, 0x40, 0xa, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0x100, 0xd05, 0x1ff, 0x3, 0xfffc, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x6, 0x731, 0x8, 0x1, 0x3, 0x1, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xba8, 0x8000, 0xc, 0x8, 0x1, 0xd0d, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x1, 0x101, 0x8, 0xf, 0x4, 0x800]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x28, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x4, 0x75c, 0x3, 0x23c0, 0xf3, 0x91a]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x58}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xae}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}]}]}, @NL80211_ATTR_TID_CONFIG={0x2dc, 0x11d, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0xe996, 0x3, 0x4, 0x5, 0x2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x2}, {0x5}, {0x7, 0x2}, {0x6, 0x4}, {0x6, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0xa}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x7, 0x8}, {0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {}, {0x4, 0x5}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x3}, {0x2, 0x5}, {0x6, 0xa}, {0x3, 0x5}, {0x7, 0x8}, {0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x5, 0xa}, {0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x8}, {0x4, 0x8}, {0x7, 0x3}, {0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x101, 0x100, 0xc, 0x3ff, 0x3, 0x6, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x4423, 0x5, 0xff, 0xdc, 0x8001, 0x401]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x9}, {}, {0x0, 0x3}, {0x3}, {0x7, 0x2}, {0x5}, {0x3, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x4, 0x8}, {0x2}, {0x1, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x7}, {}, {0x3}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x7}, {0x5}, {0x7}, {}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x12, 0x30, 0x1b, 0x1b, 0x60, 0x1, 0x6, 0x1b, 0xc, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff2b, 0x7, 0x9, 0x40, 0x2, 0x9d, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0xe7d, 0x400, 0x200, 0x9, 0x6, 0x5, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xd, 0x4, 0xffff, 0x9, 0x4, 0x4, 0x9]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca, 0x8, 0x2, 0x1ff, 0x5, 0x4, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x48, 0x5e6b645e96d86815, 0xc, 0x48, 0x24, 0x0, 0x9, 0x6c, 0x9, 0xb, 0x60, 0x6, 0x6c, 0x6c, 0x0, 0x24, 0x6c]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x2}, {0x4}, {0x4, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x4}, {0x2, 0x5}, {0x3, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2cb9eb3103241185}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0x7}, {0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x1}, {0x4, 0x4}, {0x4, 0x2}, {0x6, 0x6}, {0x0, 0x3}, {0x5, 0x1}, {0x5, 0x5}, {0x3}, {0x3, 0x6}, {0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x3, 0x8}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x3, 0x9}, {0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x5, 0xa}, {0x5, 0x2}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x4}, {0x6}, {0x6}, {0x6, 0x5}, {0x0, 0x8}, {0x6, 0x7}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x6, 0x6, 0x480, 0x800, 0x3, 0xade9]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4b4, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x454, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3e, 0x1000, 0xfe00, 0x8000, 0x7, 0xfcb, 0xfffc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x1, 0x2, 0x5, 0x1, 0x2, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x8eef2e23e9269da8, 0x36, 0x18, 0x2, 0x4, 0x5, 0x1, 0x6c, 0x60, 0x30, 0x12]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x24, 0x36, 0x60, 0xc, 0x30]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x40, 0x4, 0x4, 0x7, 0x6, 0x101, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x36, 0xc, 0x1b, 0xc, 0x6c, 0x18, 0x9, 0xb, 0xc, 0x1d, 0x5, 0x12, 0x36, 0x60, 0x4, 0x3, 0xc, 0x1, 0x60, 0x6c, 0x9, 0x36, 0x2, 0x36, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x0, 0x14, 0x36, 0x4, 0x2, 0x0, 0x6b, 0x60, 0x6, 0x9, 0x9, 0x1, 0xc, 0x36, 0x48, 0x48, 0x12, 0x3a, 0xb, 0xb, 0x4, 0x1, 0x18]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x3, 0xd78f, 0x2, 0x1, 0x8, 0x7f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x16, 0xc, 0x36, 0xe, 0x6, 0xb, 0x9, 0x3, 0x1, 0x2, 0x0, 0x6f, 0x1, 0x44, 0x36, 0x2, 0x3, 0xb, 0x6c, 0x1, 0x4, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x5, 0x1, 0x6, 0x9, 0x30, 0x30, 0x9, 0x18, 0x24, 0x60, 0x12, 0x1, 0x36, 0x30, 0x4, 0x3, 0x5, 0x24, 0x48, 0x16, 0x16, 0xc, 0x16, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0x17e, 0x41, 0x3, 0x8001, 0x9a, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x5, 0x3}, {0x7, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x6, 0x7}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfa0, 0x9, 0x8, 0x7, 0xb5, 0x6, 0x5, 0x6]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x5}, {0x6, 0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x258, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x1, 0x7}, {0x3}, {0x6, 0x5}, {0x7, 0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x2}, {0x1}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x5}, {}, {0x7, 0x7}, {0x5, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x4, 0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x5, 0x5}, {0x7, 0x2}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x1}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x2, 0x3, 0x400, 0x3, 0x100, 0x8]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x5}, {0x6}, {0x0, 0xa}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x7}, {0x3}, {0x0, 0x1}, {0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x7, 0xa}, {0x6, 0xa}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x6}, {0x4, 0x2}, {0x7, 0x5}, {0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x5, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x4, 0x4, 0x4, 0x9, 0x0, 0x3]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x4, 0x60, 0x9, 0x5, 0x12, 0x60, 0x1, 0xb, 0x3, 0x6, 0x60, 0x6c, 0x2, 0x5, 0x24, 0x2]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x82, 0x2, 0x3, 0x0, 0x1, 0x1, 0xca0]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x9, 0x3, 0x5, 0x9, 0x6, 0x46, 0xc, 0x5, 0x9, 0x80abf504af3b68e7, 0x6, 0x9, 0x36, 0x5, 0x6c, 0x2, 0x24, 0xb, 0x16, 0x30, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x48, 0xc, 0x18, 0x12, 0x4, 0x1, 0x30, 0x2, 0x36, 0x13, 0x48, 0x76, 0x9, 0x1, 0x6, 0x1b, 0x0, 0x12, 0x6, 0x7]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x78, 0xb, 0xe2bc, 0x0, 0x30, 0x9, 0x800]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x65, 0xb, 0x18, 0x16, 0x12, 0x60, 0x30, 0xc, 0x5, 0x1b, 0x1, 0xb, 0x3, 0x9, 0x4, 0x16, 0xb, 0x6, 0x4, 0x6, 0x48, 0x30, 0x30, 0x30, 0x9, 0x5, 0x4]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0xa}, {0x7, 0x4}, {0x7, 0x2}, {0x7, 0x4}, {0x4, 0x9}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0x2}, {0x6, 0x4}, {0x3, 0x7}, {0x7, 0x9}, {0x3, 0xa}, {0x3, 0x7}, {0x1}, {0x2, 0x3}, {0x3, 0xa}, {0x6, 0x7}, {0x7, 0x3}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0xa}, {0x5, 0x3}, {0x0, 0x6}, {}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x2, 0x8}, {0x5, 0x1a}, {0x5, 0x4}, {0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x7, 0x3}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x5, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x5}, {0x4}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x4}, {0x4, 0x7}, {0x4, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x1b, 0x18, 0x1b, 0x60, 0xc, 0x60, 0x16, 0x5, 0x3, 0x7de510a5eeca2a59, 0x36, 0x30, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xa, 0x5e, 0xc3e8, 0x7b5e, 0x0, 0xfc, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x34}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x88}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6b74}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x65}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xa80}, 0x1, 0x0, 0x0, 0x90}, 0x4000046) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002d00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002cc0)={&(0x7f0000001b00)={0x11ac, r13, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x58}, @void, @val={0xc, 0x99, {0xaac, 0x78}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1184, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x18, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x4}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1158, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5af}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1004, 0xa, "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"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x85, 0x8, {0x0, 0x3, "6edcc78c4d21d859134b3ae1a786d18f171ea918c08fc7a3e5097f4dcca5e09ec853fe45a523f434bd3e1aadf7660cf9b5b43f481477e7b4b5f0a8d34edfd216a9d4b3497cc098e2d86cbed7467bcae65fad6607de54e95335eb5cf01597314cd83d6f0eb7d10d38cf26e2c36670d3545a6d3ef0718a7bbf54"}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbf, 0xa, "32594ab0205228f5251bcc69a5bee387984634577a8f4286894dd3d6dbb4e37c00e3e875c19d594a991d44e7a4bfdf747d912dc875b38047c3fe17112217f942ab5dc4c3dc8ac256bde0c3a9b556378d8286f981fde6473b9ecf9a096641260cd3920fc3f948e82658c05d5373169ce54f1503fd337353c5b8f6b758ed2449ee173484559f608db6a545e63a9b22d2d058f28cf40b26a7010c67ce67553090de797843ac67e3ddc05e039f74bf6b2b1075aca23f1439c518452f15"}]}]}]}, 0x11ac}}, 0x40880) syz_genetlink_get_family_id$batadv(&(0x7f0000002d40), r0) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000002dc0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x24, r14, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 126.296099ms ago: executing program 0 (id=1843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000002c00)={0x0, 0x6, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x38}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f", 0x3}], 0x1, 0x0, 0x0, 0x4048848}], 0x1, 0x0) recvmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x100000001}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2}, 0x10003) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10002}]}, 0x48}}, 0x20000000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000080)) 121.970017ms ago: executing program 1 (id=1844): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff04, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r6, 0x0, 0xfffbffff) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = accept(r8, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r9}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x1, 0x8}, 0xc) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r12, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000006000000889e00000400000027220c000000000085000000470000001848000003000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x29, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x40, '\x00', r3, 0x25, r5, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xe, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r6, r10, r11, r12, r13], &(0x7f0000001440)=[{0x3, 0x5, 0x1, 0x8}, {0x3, 0x1, 0x4, 0x5}, {0x2, 0x1, 0xe, 0xa}, {0x4, 0x2, 0x1, 0x1}, {0x3, 0x4, 0xe, 0x2}, {0x4, 0x2, 0xc, 0xc}], 0x10, 0x2}, 0x94) 40.531799ms ago: executing program 2 (id=1845): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000040026bd7000ffffffff0a142040030000070000000014de0100ff02000000000000000000000000000114000200fc0200000000000000009c846aeff323"], 0x44}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x5c}}, 0x4000040) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x24}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7f19}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x30}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000280)=0x45bbab7f, 0x4) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) 0s ago: executing program 2 (id=1846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x22, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x200}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES64=r2, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x800) sendto$packet(r6, &(0x7f00000000c0), 0x0, 0x4008080, &(0x7f0000000100)={0x11, 0x10, r5, 0x1, 0x5, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): adv: batadv0: Adding interface: batadv_slave_1 [ 78.041757][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.067947][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.179030][ T5866] hsr_slave_0: entered promiscuous mode [ 78.185487][ T5866] hsr_slave_1: entered promiscuous mode [ 78.191938][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 78.197710][ T5866] Cannot create hsr debugfs directory [ 78.262434][ T5876] hsr_slave_0: entered promiscuous mode [ 78.269183][ T5876] hsr_slave_1: entered promiscuous mode [ 78.275232][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 78.281406][ T5876] Cannot create hsr debugfs directory [ 78.293429][ T5865] hsr_slave_0: entered promiscuous mode [ 78.300874][ T5865] hsr_slave_1: entered promiscuous mode [ 78.307313][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 78.313039][ T5865] Cannot create hsr debugfs directory [ 78.804348][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.831775][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.850785][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.869642][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.914517][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.929299][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.941438][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.951226][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.042347][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.061516][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.072548][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.085592][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.224648][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.247377][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.257973][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.272827][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.361267][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.400421][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.414894][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.431404][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.442602][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.478180][ T5879] Bluetooth: hci0: command tx timeout [ 79.484837][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.500669][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.542570][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.551697][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.558976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.563949][ T5879] Bluetooth: hci1: command tx timeout [ 79.571721][ T5184] Bluetooth: hci4: command tx timeout [ 79.572092][ T5864] Bluetooth: hci3: command tx timeout [ 79.578394][ T5184] Bluetooth: hci2: command tx timeout [ 79.591878][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.599010][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.646154][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.653331][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.690847][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.701636][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.708809][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.769481][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.828818][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.835931][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.874819][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.882014][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.024156][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.046109][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.103236][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.151805][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.164961][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.172190][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.223640][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.230862][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.242377][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.249633][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.261703][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.268898][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.304368][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.410183][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.572948][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.633296][ T5860] veth0_vlan: entered promiscuous mode [ 80.671726][ T5872] veth0_vlan: entered promiscuous mode [ 80.705813][ T5860] veth1_vlan: entered promiscuous mode [ 80.729299][ T5872] veth1_vlan: entered promiscuous mode [ 80.763712][ T5866] veth0_vlan: entered promiscuous mode [ 80.824087][ T5872] veth0_macvtap: entered promiscuous mode [ 80.845945][ T5866] veth1_vlan: entered promiscuous mode [ 80.872180][ T5872] veth1_macvtap: entered promiscuous mode [ 80.915582][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.925971][ T5860] veth0_macvtap: entered promiscuous mode [ 80.943414][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.965170][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.974773][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.986748][ T5860] veth1_macvtap: entered promiscuous mode [ 80.999381][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.010532][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.056609][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.083453][ T5866] veth0_macvtap: entered promiscuous mode [ 81.101331][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.122855][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.161798][ T5866] veth1_macvtap: entered promiscuous mode [ 81.207088][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.263257][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.296441][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.304326][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.315644][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.345105][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.360526][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.368962][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.382279][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.436443][ T5876] veth0_vlan: entered promiscuous mode [ 81.443209][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.455739][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.501374][ T5876] veth1_vlan: entered promiscuous mode [ 81.511420][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.526254][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.557159][ T5184] Bluetooth: hci0: command tx timeout [ 81.566489][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.584396][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.637328][ T5184] Bluetooth: hci1: command tx timeout [ 81.638238][ T5864] Bluetooth: hci4: command tx timeout [ 81.645698][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.648404][ T5879] Bluetooth: hci3: command tx timeout [ 81.648459][ T5879] Bluetooth: hci2: command tx timeout [ 81.685662][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.728004][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.814809][ T5876] veth0_macvtap: entered promiscuous mode [ 81.880751][ T5876] veth1_macvtap: entered promiscuous mode [ 81.912993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.935210][ T5865] veth0_vlan: entered promiscuous mode [ 81.941385][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.988302][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.034553][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.081570][ T5865] veth1_vlan: entered promiscuous mode [ 82.088538][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.101430][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.109531][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.134873][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.263190][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.283193][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.322218][ T5989] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 82.352549][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.361009][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.376708][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.385418][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.412456][ T5865] veth0_macvtap: entered promiscuous mode [ 82.434129][ T5991] Zero length message leads to an empty skb [ 82.458986][ T5865] veth1_macvtap: entered promiscuous mode [ 82.530571][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.551508][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.609881][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.669952][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.678747][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 82.734855][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.744607][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.791066][ T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.806475][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.817951][ T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.839972][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.903364][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 83.047908][ T6010] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 83.142378][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.205497][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.235190][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.372460][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.405486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.638615][ T5184] Bluetooth: hci0: command tx timeout [ 83.717109][ T5184] Bluetooth: hci4: command tx timeout [ 83.719161][ T5879] Bluetooth: hci3: command tx timeout [ 83.727347][ T5184] Bluetooth: hci1: command tx timeout [ 83.728154][ T5864] Bluetooth: hci2: command tx timeout [ 83.984790][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 84.068493][ T6030] hsr_slave_0: left promiscuous mode [ 84.092637][ T6030] hsr_slave_1: left promiscuous mode [ 84.206292][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 84.254603][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 84.264408][ T6031] warning: `syz.4.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.308658][ T6037] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.514243][ T6044] netlink: 'syz.3.20': attribute type 1 has an invalid length. [ 84.734494][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.782099][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 84.901389][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 85.189466][ T6076] tipc: Started in network mode [ 85.194383][ T6076] tipc: Node identity 7e2d752b3da9, cluster identity 4711 [ 85.227216][ T6076] tipc: Enabled bearer , priority 0 [ 85.345548][ T6088] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 85.367762][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.32'. [ 85.382008][ T6076] tipc: Disabling bearer [ 85.467337][ T6088] team0: Port device geneve0 added [ 85.726261][ T6112] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 85.746477][ T6113] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 85.832747][ T6113] netlink: 'syz.0.39': attribute type 11 has an invalid length. [ 85.904995][ T6113] netlink: 224 bytes leftover after parsing attributes in process `syz.0.39'. [ 86.424122][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.432638][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.779059][ T24] cfg80211: failed to load regulatory.db [ 86.851860][ T6152] IPv6: sit1: Disabled Multicast RS [ 87.185782][ T6168] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 87.592347][ T6180] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 87.682491][ T6184] team0: No ports can be present during mode change [ 87.932024][ T6206] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 87.952225][ T6202] __nla_validate_parse: 2 callbacks suppressed [ 87.952242][ T6202] netlink: 56 bytes leftover after parsing attributes in process `syz.4.64'. [ 88.058473][ T6206] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.079000][ T6201] netlink: 164 bytes leftover after parsing attributes in process `syz.4.64'. [ 88.144258][ T6206] bond0: (slave team0): Enslaving as an active interface with an up link [ 88.445716][ T6225] tipc: Started in network mode [ 88.467398][ T6225] tipc: Node identity ea6235b958e4, cluster identity 4711 [ 88.495720][ T6225] tipc: Enabled bearer , priority 0 [ 88.524894][ T6231] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 88.535216][ T6234] syzkaller0: entered promiscuous mode [ 88.544729][ T6235] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 88.553211][ T6234] syzkaller0: entered allmulticast mode [ 88.569051][ T6231] netlink: 'syz.1.72': attribute type 3 has an invalid length. [ 88.629043][ T6235] bond1 (unregistering): Released all slaves [ 88.739841][ T6225] veth1_vlan: mtu less than device minimum [ 88.802612][ T6224] tipc: Resetting bearer [ 88.840456][ T6224] tipc: Disabling bearer [ 88.925471][ T6251] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:b07c:8bff:fe20:bc1b error=-28 [ 88.952315][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'. [ 88.977190][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'. [ 88.986017][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.78'. [ 89.418726][ T6281] sctp: [Deprecated]: syz.4.86 (pid 6281) Use of int in max_burst socket option. [ 89.418726][ T6281] Use struct sctp_assoc_value instead [ 90.269815][ T6251] infiniband syz!: set active [ 90.280314][ T6251] infiniband syz!: added team_slave_0 [ 90.298821][ T6251] syz!: rxe_create_cq: returned err = -12 [ 90.316170][ T6251] infiniband syz!: Couldn't create ib_mad CQ [ 90.329113][ T6340] validate_nla: 1 callbacks suppressed [ 90.329130][ T6340] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 90.347590][ T6251] infiniband syz!: Couldn't open port 1 [ 90.374631][ T6340] netlink: 236 bytes leftover after parsing attributes in process `syz.0.93'. [ 90.420421][ T6346] netlink: 'syz.2.95': attribute type 5 has an invalid length. [ 90.432353][ T6340] syzkaller1: entered promiscuous mode [ 90.442493][ T6251] RDS/IB: syz!: added [ 90.450252][ T6340] syzkaller1: entered allmulticast mode [ 90.456676][ T6251] smc: adding ib device syz! with port count 1 [ 90.468544][ T6251] smc: ib device syz! port 1 has pnetid [ 90.487661][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.93'. [ 90.642929][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 90.723022][ T6360] netlink: 'syz.4.96': attribute type 1 has an invalid length. [ 90.915901][ T6366] !: renamed from dummy0 (while UP) [ 90.930773][ T5955] IPVS: starting estimator thread 0... [ 90.983302][ T6372] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 91.067097][ T6368] IPVS: using max 27 ests per chain, 64800 per kthread [ 91.090019][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 91.199792][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.265323][ T6379] bridge_slave_1 (unregistering): left allmulticast mode [ 91.285699][ T6379] bridge_slave_1 (unregistering): left promiscuous mode [ 91.303202][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.330036][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'. [ 91.386976][ T6391] veth1_macvtap: left promiscuous mode [ 91.536153][ T6389] syzkaller0: entered promiscuous mode [ 91.549806][ T6389] syzkaller0: entered allmulticast mode [ 91.571278][ T6403] netlink: 'syz.4.108': attribute type 9 has an invalid length. [ 93.155903][ T6409] tipc: Enabling of bearer rejected, failed to enable media [ 93.185484][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 93.332043][ T6426] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 93.343861][ T6426] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.113'. [ 93.489737][ T59] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 93.768506][ T6446] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 93.785878][ T6446] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 94.379341][ T6461] tipc: Started in network mode [ 94.390070][ T6461] tipc: Node identity f2d28ebcc0db, cluster identity 4711 [ 94.400360][ T6461] tipc: Enabled bearer , priority 0 [ 94.419060][ T6461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.432018][ T6468] tipc: Started in network mode [ 94.440376][ T6468] tipc: Node identity 7a90f522dc2a, cluster identity 4711 [ 94.448544][ T6468] tipc: Enabled bearer , priority 0 [ 94.458875][ T6461] sch_fq: defrate 1026 ignored. [ 94.466048][ T6461] tipc: Resetting bearer [ 94.509549][ T6460] tipc: Disabling bearer [ 94.616434][ T6471] tipc: Disabling bearer [ 94.662703][ T6476] tipc: Started in network mode [ 94.667853][ T6476] tipc: Node identity c64fa7c227c8, cluster identity 4711 [ 94.675139][ T6476] tipc: Enabled bearer , priority 0 [ 94.682648][ T6477] tipc: Enabling of bearer rejected, already enabled [ 94.708189][ T6476] syzkaller0: entered promiscuous mode [ 94.714012][ T6476] syzkaller0: entered allmulticast mode [ 94.789604][ T6476] tipc: Resetting bearer [ 94.830690][ T6491] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 94.861482][ T6475] tipc: Resetting bearer [ 94.879412][ T6475] tipc: Disabling bearer [ 95.304141][ T6511] tipc: New replicast peer: 255.255.255.255 [ 95.315061][ T6511] tipc: Enabled bearer , priority 10 [ 95.343128][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 95.538645][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 95.554170][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 95.564919][ T6528] bridge1: entered promiscuous mode [ 95.574972][ T6528] bridge1: entered allmulticast mode [ 95.582671][ T6524] tipc: Enabled bearer , priority 0 [ 95.594369][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 95.643039][ T6528] bridge2: entered promiscuous mode [ 95.667719][ T6528] bridge2: entered allmulticast mode [ 95.682536][ T6524] syzkaller0: entered promiscuous mode [ 95.688515][ T6524] syzkaller0: entered allmulticast mode [ 95.714624][ T6533] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 95.795664][ T6537] sch_fq: defrate 1026 ignored. [ 95.820889][ T6522] tipc: Resetting bearer [ 95.879997][ T6522] tipc: Disabling bearer [ 95.913367][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 95.928591][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 96.093071][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'. [ 96.112071][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'. [ 96.314352][ T5947] tipc: Node number set to 1132754219 [ 96.405205][ T6581] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 96.412964][ T6580] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.442416][ T6581] IPVS: set_ctl: invalid protocol: 44 172.30.0.5:20001 [ 96.497911][ T6584] tipc: Enabled bearer , priority 0 [ 96.526013][ T6584] syzkaller0: entered promiscuous mode [ 96.548223][ T6584] syzkaller0: entered allmulticast mode [ 96.578741][ T6584] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 96.672968][ T6593] sch_fq: defrate 1026 ignored. [ 96.706374][ T6599] netlink: 'syz.2.163': attribute type 2 has an invalid length. [ 96.726358][ T6583] tipc: Resetting bearer [ 96.743302][ T6599] nbd: must specify a device to reconfigure [ 96.762464][ T6583] tipc: Disabling bearer [ 97.292982][ T6647] net veth1_virt_wifi .: renamed from virt_wifi0 [ 97.359026][ T6652] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 97.448753][ T6652] team0: Port device dummy0 added [ 97.555132][ T6658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.563974][ T6661] netem: incorrect gi model size [ 97.575152][ T6661] netem: change failed [ 97.611843][ T6658] vlan2: entered allmulticast mode [ 97.618214][ T6658] bond1: entered allmulticast mode [ 97.655579][ T6673] openvswitch: netlink: IPv4 tun info is not correct [ 97.732858][ T6662] tipc: Enabled bearer , priority 0 [ 97.770179][ T6676] syzkaller0: entered promiscuous mode [ 97.775873][ T6676] syzkaller0: entered allmulticast mode [ 97.805804][ T6662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.843915][ T6668] sch_fq: defrate 1026 ignored. [ 97.870508][ T6656] tipc: Resetting bearer [ 97.905409][ T6656] tipc: Disabling bearer [ 98.073932][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.248125][ T6713] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 98.261876][ T6713] __nla_validate_parse: 4 callbacks suppressed [ 98.261892][ T6713] netlink: 244 bytes leftover after parsing attributes in process `syz.4.196'. [ 98.324269][ T6722] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 98.343602][ T6722] netlink: 244 bytes leftover after parsing attributes in process `syz.4.196'. [ 98.450557][ T6721] netlink: 476 bytes leftover after parsing attributes in process `syz.1.199'. [ 98.672806][ T6737] tipc: Enabled bearer , priority 0 [ 98.680686][ T6737] syzkaller0: entered promiscuous mode [ 98.686178][ T6737] syzkaller0: entered allmulticast mode [ 98.719965][ T6737] tipc: Resetting bearer [ 98.738965][ T6736] tipc: Resetting bearer [ 98.795347][ T6736] tipc: Disabling bearer [ 98.831038][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 98.843535][ T6746] netlink: 'syz.3.209': attribute type 5 has an invalid length. [ 99.074487][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 99.108869][ T6757] bridge: RTM_NEWNEIGH with invalid ether address [ 99.366066][ T6774] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.218'. [ 99.390597][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 99.562762][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.222'. [ 99.613799][ T6789] vlan2: entered promiscuous mode [ 99.633212][ T6789] bridge0: entered promiscuous mode [ 99.786596][ T6796] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 100.240771][ T6801] Illegal XDP return value 1238976374 on prog (id 70) dev N/A, expect packet loss! [ 100.271763][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.229'. [ 100.297836][ T6800] delete_channel: no stack [ 100.314396][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 100.458856][ T6811] netlink: 'syz.1.234': attribute type 10 has an invalid length. [ 100.479270][ T6811] team0: Device hsr_slave_0 failed to register rx_handler [ 100.643162][ T6824] tipc: Enabled bearer , priority 0 [ 100.659729][ T6824] syzkaller0: entered promiscuous mode [ 100.680097][ T6824] syzkaller0: entered allmulticast mode [ 100.741469][ T6829] bond0: (slave bond_slave_1): Releasing backup interface [ 101.065520][ T6843] tipc: Resetting bearer [ 101.091241][ T6823] tipc: Resetting bearer [ 101.182946][ T6855] netlink: 'syz.2.243': attribute type 58 has an invalid length. [ 101.202793][ T6823] tipc: Disabling bearer [ 101.265136][ T6853] pim6reg1: entered promiscuous mode [ 101.272141][ T6853] pim6reg1: entered allmulticast mode [ 102.195878][ T6902] trusted_key: syz.1.257 sent an empty control message without MSG_MORE. [ 102.217468][ T6905] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 102.256952][ T6905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.257589][ T6902] netlink: 'syz.1.257': attribute type 25 has an invalid length. [ 102.417382][ T6909] Bluetooth: MGMT ver 1.23 [ 102.493945][ T6912] syzkaller0: entered promiscuous mode [ 102.510492][ T6912] syzkaller0: entered allmulticast mode [ 102.539228][ T6909] tipc: Enabled bearer , priority 0 [ 102.569286][ T6909] tipc: Resetting bearer [ 102.588000][ T6912] xfrm1: entered allmulticast mode [ 102.622398][ T6908] tipc: Resetting bearer [ 102.647584][ T6908] tipc: Disabling bearer [ 102.694529][ T6922] !: renamed from dummy0 (while UP) [ 103.568291][ T6974] __nla_validate_parse: 16 callbacks suppressed [ 103.568310][ T6974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.279'. [ 103.619657][ T5869] IPVS: starting estimator thread 0... [ 103.665264][ T6976] lo: entered promiscuous mode [ 103.694175][ T6976] netlink: 'syz.2.280': attribute type 2 has an invalid length. [ 103.715161][ T6976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.731695][ T6979] IPVS: using max 39 ests per chain, 93600 per kthread [ 103.919038][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 103.985818][ T7000] bridge1: entered promiscuous mode [ 104.003381][ T7000] bridge1: entered allmulticast mode [ 104.142165][ T7000] bridge1: entered promiscuous mode [ 104.155282][ T7000] bridge1: entered allmulticast mode [ 104.291811][ T7000] bridge1: entered promiscuous mode [ 104.298293][ T7000] bridge1: entered allmulticast mode [ 104.386563][ T6333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.437137][ T5864] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 104.438282][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.455215][ T7000] bridge1: entered promiscuous mode [ 104.462316][ T7000] bridge1: entered allmulticast mode [ 104.556343][ T6333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.613852][ T7000] bridge1: entered promiscuous mode [ 104.632242][ T7000] bridge1: entered allmulticast mode [ 104.712318][ T6333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.783604][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.800222][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.821538][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.844820][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.871731][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.902754][ T6333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.952884][ T7024] netlink: 240 bytes leftover after parsing attributes in process `syz.1.296'. [ 104.977337][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.296'. [ 104.990527][ T7029] netlink: 'syz.2.298': attribute type 4 has an invalid length. [ 105.060145][ T7029] netlink: 'syz.2.298': attribute type 4 has an invalid length. [ 105.267622][ T6333] bridge_slave_0: left allmulticast mode [ 105.287635][ T6333] bridge_slave_0: left promiscuous mode [ 105.294588][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.759769][ T7059] netlink: 64 bytes leftover after parsing attributes in process `syz.2.306'. [ 105.930773][ T6333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.942547][ T6333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.952881][ T6333] bond0 (unregistering): Released all slaves [ 106.035899][ T6333] bond1 (unregistering): Released all slaves [ 106.147833][ T7061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.306'. [ 106.236909][ T6333] tipc: Disabling bearer [ 106.258828][ T6333] tipc: Left network mode [ 106.801961][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 106.881437][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 106.890930][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 106.917151][ T5879] Bluetooth: hci2: command tx timeout [ 106.937499][ T7113] macvlan2: entered promiscuous mode [ 106.942830][ T7113] macvlan2: entered allmulticast mode [ 106.950771][ T7113] bond1: entered promiscuous mode [ 106.957980][ T7113] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.976712][ T7113] bond1: left promiscuous mode [ 107.053937][ T7016] chnl_net:caif_netlink_parms(): no params data found [ 107.080911][ T7123] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 107.127112][ T7124] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 107.389901][ T6333] hsr_slave_0: left promiscuous mode [ 107.418699][ T6333] hsr_slave_1: left promiscuous mode [ 107.434651][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.442439][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.453205][ T6333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.461710][ T6333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.490874][ T7140] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 107.504465][ T7140] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 107.514648][ T7140] netlink: 224 bytes leftover after parsing attributes in process `syz.1.324'. [ 107.515368][ T6333] veth1_macvtap: left promiscuous mode [ 107.534195][ T6333] veth0_macvtap: left promiscuous mode [ 107.542431][ T6333] veth1_vlan: left promiscuous mode [ 107.561515][ T6333] veth0_vlan: left promiscuous mode [ 108.153040][ T6333] team0 (unregistering): Port device team_slave_1 removed [ 108.186399][ T6333] team0 (unregistering): Port device team_slave_0 removed [ 108.504006][ T7152] veth0: entered promiscuous mode [ 108.533111][ T7155] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 108.563292][ T7155] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.580169][ T7156] veth0: left promiscuous mode [ 108.841801][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.853128][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.861982][ T7016] bridge_slave_0: entered allmulticast mode [ 108.871571][ T7016] bridge_slave_0: entered promiscuous mode [ 108.942243][ T7176] tipc: Can't bind to reserved service type 1 [ 109.001132][ T5879] Bluetooth: hci2: command tx timeout [ 109.003906][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.014127][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.021740][ T7016] bridge_slave_1: entered allmulticast mode [ 109.029833][ T7016] bridge_slave_1: entered promiscuous mode [ 109.070437][ T7183] netlink: 'syz.4.337': attribute type 2 has an invalid length. [ 109.078678][ T7183] __nla_validate_parse: 2 callbacks suppressed [ 109.078695][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 109.104496][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.337'. [ 109.106075][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.125065][ T7183] netlink: 104 bytes leftover after parsing attributes in process `syz.4.337'. [ 109.164046][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.203664][ T6333] IPVS: stop unused estimator thread 0... [ 109.235620][ T7016] team0: Port device team_slave_0 added [ 109.254765][ T7016] team0: Port device team_slave_1 added [ 109.315256][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.334969][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.363182][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.381015][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.390375][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.417170][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.492721][ T7016] hsr_slave_0: entered promiscuous mode [ 109.500465][ T7016] hsr_slave_1: entered promiscuous mode [ 109.506675][ T7016] debugfs: 'hsr0' already exists in 'hsr' [ 109.514457][ T7016] Cannot create hsr debugfs directory [ 109.582890][ T7189] netlink: 252 bytes leftover after parsing attributes in process `syz.4.337'. [ 110.835910][ T7200] syzkaller0: entered promiscuous mode [ 110.842795][ T7200] syzkaller0: entered allmulticast mode [ 110.850367][ T7205] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 111.078871][ T5879] Bluetooth: hci2: command tx timeout [ 111.149045][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 111.232485][ T7016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.270207][ T7016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.304923][ T7016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.354508][ T7016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.376263][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 111.451910][ T7240] netlink: 'syz.0.347': attribute type 3 has an invalid length. [ 111.471227][ T7240] nft_compat: unsupported protocol 0 [ 111.543113][ T7249] netlink: 808 bytes leftover after parsing attributes in process `syz.1.352'. [ 111.663740][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.705717][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.762131][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.769943][ T6317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.811101][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.818318][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.840376][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 111.840415][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 112.066508][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 112.113548][ T7277] netlink: 'syz.0.362': attribute type 5 has an invalid length. [ 112.217906][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.376474][ T7328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.514121][ T7016] veth0_vlan: entered promiscuous mode [ 112.552813][ T7016] veth1_vlan: entered promiscuous mode [ 112.657488][ T7016] veth0_macvtap: entered promiscuous mode [ 112.681465][ T7016] veth1_macvtap: entered promiscuous mode [ 112.745100][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.816874][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.859801][ T6317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.885042][ T6317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.911591][ T7368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.923624][ T7364] tipc: Enabling of bearer rejected, failed to enable media [ 112.954201][ T6317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.975918][ T6317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.168091][ T5879] Bluetooth: hci2: command tx timeout [ 113.310088][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.329834][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.387751][ T7393] bridge_slave_1: left allmulticast mode [ 113.411196][ T7393] bridge_slave_1: left promiscuous mode [ 113.422750][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.520264][ T7393] bridge_slave_0: left allmulticast mode [ 113.541940][ T7393] bridge_slave_0: left promiscuous mode [ 113.549440][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.038757][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.053057][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.221012][ T7402] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 114.277013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.292382][ T7406] __nla_validate_parse: 9 callbacks suppressed [ 114.292399][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 114.478433][ T7422] netlink: 'syz.1.392': attribute type 24 has an invalid length. [ 115.855772][ T7422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.038993][ T7438] tipc: Enabled bearer , priority 0 [ 116.061253][ T7438] syzkaller0: entered promiscuous mode [ 116.071263][ T7438] syzkaller0: entered allmulticast mode [ 116.105771][ T7438] tipc: Resetting bearer [ 116.120750][ T7435] tipc: Resetting bearer [ 116.202164][ T7441] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 116.218758][ T7435] tipc: Disabling bearer [ 116.251744][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.403'. [ 116.644507][ T6333] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.686053][ T6333] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.719344][ T6333] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.760340][ T6333] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.993589][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.020059][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.224710][ T7493] netlink: 104 bytes leftover after parsing attributes in process `syz.0.413'. [ 117.464343][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.418'. [ 117.813700][ T7536] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 117.948571][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.426'. [ 118.055918][ T7538] netlink: 'syz.4.426': attribute type 10 has an invalid length. [ 118.087064][ T7538] batman_adv: batadv0: Adding interface: team0 [ 118.094558][ T7538] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.121948][ T7538] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 118.178241][ T7549] netlink: 5 bytes leftover after parsing attributes in process `syz.0.428'. [ 118.209090][ T7549] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 118.248621][ T7549] 0ªî{X¹¦: entered allmulticast mode [ 118.273668][ T7549] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 118.311783][ T7552] netlink: 132 bytes leftover after parsing attributes in process `syz.4.429'. [ 118.344300][ T7554] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 118.538936][ T7573] netlink: 56 bytes leftover after parsing attributes in process `syz.5.431'. [ 118.748748][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.435'. [ 118.935622][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 119.971540][ T7591] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 119.996089][ T7593] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 120.020947][ T7593] netlink: 'syz.0.439': attribute type 2 has an invalid length. [ 120.155554][ T7603] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 120.166710][ T7603] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.181928][ T7603] gretap1: entered promiscuous mode [ 120.187344][ T7603] gretap1: entered allmulticast mode [ 120.204589][ T7605] netlink: 'syz.5.444': attribute type 1 has an invalid length. [ 120.246077][ T7605] gretap1: entered allmulticast mode [ 132.839667][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.846133][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.046908][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 143.051882][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 143.072316][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 143.088850][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 143.126950][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.448'. [ 143.163025][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.448'. [ 143.163459][ T7619] vlan0: entered promiscuous mode [ 143.249718][ T7619] team0: Port device vlan0 added [ 143.631458][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.455'. [ 143.887431][ T5869] IPVS: starting estimator thread 0... [ 143.905482][ T7652] tipc: Started in network mode [ 143.924285][ T7652] tipc: Node identity ac1414aa, cluster identity 4711 [ 143.956275][ T7652] tipc: Enabled bearer , priority 10 [ 143.986864][ T7654] IPVS: using max 30 ests per chain, 72000 per kthread [ 144.571863][ T7696] batman_adv: batadv0: Adding interface: dummy0 [ 144.578905][ T7696] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.614877][ T7696] batman_adv: batadv0: Interface activated: dummy0 [ 144.671367][ T7689] batadv0: mtu less than device minimum [ 144.684197][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.696298][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.708207][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.720153][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.732161][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.744125][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.756086][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.768059][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.780009][ T7689] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 145.079870][ T5955] tipc: Node number set to 2886997162 [ 145.150393][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 145.260160][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.480'. [ 145.336172][ T7734] netlink: 'syz.4.480': attribute type 12 has an invalid length. [ 145.371409][ T7728] syz.1.479 (7728) used greatest stack depth: 17864 bytes left [ 145.445330][ T7742] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 145.616456][ T7748] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 145.758499][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'. [ 145.814453][ T7742] veth3: entered promiscuous mode [ 145.844813][ T7742] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 145.896010][ T7748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.918599][ T7772] netlink: 'syz.4.492': attribute type 11 has an invalid length. [ 146.467595][ T7802] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 146.479493][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.507252][ T7802] bridge_slave_1: left allmulticast mode [ 146.531732][ T7802] bridge_slave_1: left promiscuous mode [ 146.555191][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.628233][ T7802] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 146.756217][ T7825] netlink: 'syz.5.504': attribute type 10 has an invalid length. [ 146.773067][ T7825] bridge0: port 3(team0) entered blocking state [ 146.793607][ T7825] bridge0: port 3(team0) entered disabled state [ 146.839539][ T7825] team0: entered allmulticast mode [ 146.845364][ T7828] netlink: 'syz.5.504': attribute type 10 has an invalid length. [ 146.864090][ T7825] team_slave_0: entered allmulticast mode [ 146.879504][ T7825] team_slave_1: entered allmulticast mode [ 146.888219][ T7825] team0: entered promiscuous mode [ 146.893385][ T7825] team_slave_0: entered promiscuous mode [ 146.900995][ T7825] team_slave_1: entered promiscuous mode [ 146.909895][ T7825] bridge0: port 3(team0) entered blocking state [ 146.916321][ T7825] bridge0: port 3(team0) entered forwarding state [ 147.851655][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.920709][ T7880] netlink: 'syz.5.515': attribute type 1 has an invalid length. [ 148.477305][ T7890] __nla_validate_parse: 10 callbacks suppressed [ 148.477327][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 148.515384][ T7891] netlink: 96 bytes leftover after parsing attributes in process `syz.0.518'. [ 148.521140][ T7895] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 148.531238][ T7896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.519'. [ 148.606169][ T7895] bond3: entered promiscuous mode [ 148.611829][ T7895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.635327][ T7900] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 148.647534][ T7900] netlink: 172 bytes leftover after parsing attributes in process `syz.1.521'. [ 148.668247][ T7900] netlink: 72 bytes leftover after parsing attributes in process `syz.1.521'. [ 148.686856][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 148.702661][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.520'. [ 148.704259][ T7898] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.721249][ T7906] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 148.731293][ T7898] bond3: (slave bond4): making interface the new active one [ 148.739300][ T7906] netlink: 224 bytes leftover after parsing attributes in process `syz.1.521'. [ 148.743739][ T7898] bond4: entered promiscuous mode [ 148.755396][ T7898] bond3: (slave bond4): Enslaving as an active interface with an up link [ 148.943622][ T7914] netlink: 'syz.2.525': attribute type 10 has an invalid length. [ 148.964026][ T7914] batman_adv: batadv0: Adding interface: team0 [ 148.973833][ T7914] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.013680][ T7914] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 149.360676][ T7931] ve: renamed from veth0_vlan (while UP) [ 149.659101][ T7951] netlink: 40 bytes leftover after parsing attributes in process `syz.5.539'. [ 149.734597][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.539'. [ 150.215234][ T7984] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 150.281419][ T7991] 8021q: VLANs not supported on ip6_vti0 [ 150.700205][ T8021] lo speed is unknown, defaulting to 1000 [ 150.721459][ T8021] lo speed is unknown, defaulting to 1000 [ 150.732821][ T8021] lo speed is unknown, defaulting to 1000 [ 150.766101][ T8021] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.803305][ T8021] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.865479][ T8029] validate_nla: 3 callbacks suppressed [ 150.865497][ T8029] netlink: 'syz.0.567': attribute type 33 has an invalid length. [ 150.952807][ T8029] bridge0: port 3(vlan2) entered blocking state [ 150.973029][ T8029] bridge0: port 3(vlan2) entered disabled state [ 151.000661][ T8029] vlan2: entered allmulticast mode [ 151.010826][ T8029] bridge0: entered allmulticast mode [ 151.024936][ T8029] vlan2: left allmulticast mode [ 151.030074][ T8029] bridge0: left allmulticast mode [ 151.032295][ T8044] netlink: 'syz.1.570': attribute type 4 has an invalid length. [ 151.051389][ T8021] lo speed is unknown, defaulting to 1000 [ 151.073614][ T8021] lo speed is unknown, defaulting to 1000 [ 151.148759][ T8021] lo speed is unknown, defaulting to 1000 [ 151.179055][ T8021] lo speed is unknown, defaulting to 1000 [ 151.214040][ T8021] lo speed is unknown, defaulting to 1000 [ 151.232892][ T8049] netlink: 'syz.0.573': attribute type 7 has an invalid length. [ 151.234902][ T8021] lo speed is unknown, defaulting to 1000 [ 151.570366][ T8071] tipc: Enabled bearer , priority 0 [ 152.200535][ T8106] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 152.216346][ T8106] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 152.435230][ T8121] net_ratelimit: 15 callbacks suppressed [ 152.435249][ T8121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.687100][ T10] tipc: Node number set to 839487164 [ 153.133321][ T8168] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002 [ 153.220097][ T8174] openvswitch: netlink: EtherType 50a is less than min 600 [ 153.294370][ T8176] af_packet: tpacket_rcv: packet too big, clamped from 4604 to 3944. macoff=96 [ 153.565328][ T8195] __nla_validate_parse: 22 callbacks suppressed [ 153.565344][ T8195] netlink: 81 bytes leftover after parsing attributes in process `syz.2.615'. [ 153.597093][ T8197] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 153.625750][ T8197] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 153.701799][ T8205] tipc: Resetting bearer [ 153.880469][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 153.926026][ T8225] netlink: 260 bytes leftover after parsing attributes in process `syz.0.622'. [ 153.957578][ T8225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.023229][ T8205] tipc: Disabling bearer [ 154.144485][ T8205] team0: Port device vlan0 removed [ 154.243570][ T8226] xfrm1: entered allmulticast mode [ 154.312181][ T8239] netlink: 14 bytes leftover after parsing attributes in process `syz.1.625'. [ 154.595949][ T8260] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.633'. [ 154.693398][ T59] tipc: Subscription rejected, illegal request [ 154.815062][ T8275] netlink: 'syz.2.636': attribute type 12 has an invalid length. [ 154.853627][ T8278] netlink: 'syz.5.637': attribute type 1 has an invalid length. [ 155.077838][ T8293] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 155.085789][ T8293] netlink: 224 bytes leftover after parsing attributes in process `syz.0.642'. [ 155.169709][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 155.182986][ T8296] veth0_macvtap: left promiscuous mode [ 155.245140][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'. [ 155.245140][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'. [ 155.311727][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.646'. [ 155.327925][ T8308] openvswitch: netlink: Flow actions attr not present in new flow. [ 155.444402][ T5947] IPVS: starting estimator thread 0... [ 155.514023][ T8322] tipc: Enabled bearer , priority 0 [ 155.521883][ T8322] syzkaller0: entered promiscuous mode [ 155.527598][ T8322] syzkaller0: entered allmulticast mode [ 155.536569][ T8323] 8021q: VLANs not supported on ip6tnl0 [ 155.544606][ T8322] syzkaller0: mtu less than device minimum [ 155.547630][ T8319] IPVS: using max 31 ests per chain, 74400 per kthread [ 155.563941][ T8321] tipc: Resetting bearer [ 155.612942][ T8321] tipc: Disabling bearer [ 155.668429][ T8328] bridge_slave_1: left allmulticast mode [ 155.679435][ T8328] bridge_slave_1: left promiscuous mode [ 155.695607][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.726017][ T8328] bridge_slave_0: left allmulticast mode [ 155.744290][ T8328] bridge_slave_0: left promiscuous mode [ 155.753465][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.693697][ T8389] veth0_to_team: entered promiscuous mode [ 156.700512][ T8389] veth0_to_team: entered allmulticast mode [ 156.703255][ T8391] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 156.798517][ T8399] netlink: 'syz.5.672': attribute type 1 has an invalid length. [ 157.227456][ T8425] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 157.266509][ T8425] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 157.312501][ T8432] netlink: 'syz.1.683': attribute type 21 has an invalid length. [ 157.792607][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 157.804767][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 157.814312][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 157.824848][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 157.833081][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 157.842155][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 157.850299][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 157.859400][ T8469] netlink: 'syz.5.695': attribute type 1 has an invalid length. [ 158.147442][ T8487] bond0: Error: Cannot enslave bond to itself. [ 158.244014][ T8496] Bluetooth: MGMT ver 1.23 [ 158.428084][ T8500] bridge0: port 3(team0) entered disabled state [ 158.435703][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.444007][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.484179][ T8500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 158.500824][ T5923] lo speed is unknown, defaulting to 1000 [ 158.566666][ T5923] syz2: Port: 1 Link DOWN [ 158.941312][ T8531] bond1: (slave bridge1): making interface the new active one [ 158.954741][ T8531] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 158.972329][ T8535] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 159.061328][ T8537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.091364][ T8537] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 159.116155][ T8537] vlan2: entered allmulticast mode [ 159.121988][ T8537] veth1: entered allmulticast mode [ 159.129853][ T8537] veth1: entered promiscuous mode [ 159.135422][ T8537] veth1: left promiscuous mode [ 159.143583][ T8537] bond2: (slave vlan2): making interface the new active one [ 159.151366][ T8537] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 159.170667][ T8537] veth1: entered promiscuous mode [ 159.178546][ T8537] vlan2: entered promiscuous mode [ 159.184399][ T8537] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 159.502358][ T8562] __nla_validate_parse: 52 callbacks suppressed [ 159.502371][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.721'. [ 159.584551][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 159.652932][ T8568] xt_socket: unknown flags 0x50 [ 159.659543][ T8568] xt_socket: unknown flags 0x50 [ 159.666175][ T8568] xt_socket: unknown flags 0x50 [ 159.679031][ T8568] xt_socket: unknown flags 0x50 [ 159.684411][ T8568] xt_socket: unknown flags 0x50 [ 159.691249][ T8568] xt_socket: unknown flags 0x50 [ 159.696556][ T8568] xt_socket: unknown flags 0x50 [ 159.840428][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 160.076279][ T8583] netlink: 168 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.166444][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.176206][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.185517][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.221747][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.253443][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.287337][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 160.886612][ T8640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 161.100589][ T8653] veth0: entered promiscuous mode [ 161.220152][ T8656] tipc: Enabling of bearer rejected, already enabled [ 161.240387][ T8667] batadv_slave_1: entered allmulticast mode [ 161.266043][ T8667] dvmrp8: entered allmulticast mode [ 161.313159][ T8666] batadv_slave_1: left allmulticast mode [ 161.624716][ T8686] tipc: Enabled bearer , priority 0 [ 161.643542][ T8686] syzkaller0: entered promiscuous mode [ 161.661397][ T8686] syzkaller0: entered allmulticast mode [ 161.699821][ T8686] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 161.727686][ T8686] tipc: Resetting bearer [ 161.741056][ T8685] tipc: Resetting bearer [ 161.773890][ T8685] tipc: Disabling bearer [ 161.904846][ T30] audit: type=1107 audit(1757531960.714:2): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='BtR´ÝTz#†ú^8' [ 162.236201][ T8724] validate_nla: 31 callbacks suppressed [ 162.236218][ T8724] netlink: 'syz.2.773': attribute type 2 has an invalid length. [ 162.476660][ T8742] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 162.476964][ T8741] tipc: Enabled bearer , priority 0 [ 162.511945][ T8741] syzkaller0: entered promiscuous mode [ 162.536109][ T8741] syzkaller0: entered allmulticast mode [ 162.610220][ T8748] tipc: Resetting bearer [ 162.646118][ T8752] xt_socket: unknown flags 0xe4 [ 162.966546][ T8768] netlink: 'syz.4.790': attribute type 5 has an invalid length. [ 163.116227][ T8778] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 163.123971][ T8778] netlink: 'syz.4.793': attribute type 4 has an invalid length. [ 163.264644][ T8785] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 163.290046][ T8785] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 163.301809][ T8739] tipc: Resetting bearer [ 163.332480][ T8739] tipc: Disabling bearer [ 163.735752][ T8824] pimreg: entered allmulticast mode [ 164.045901][ T8847] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 164.226494][ T8870] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 164.234628][ T8870] netlink: 'syz.0.820': attribute type 11 has an invalid length. [ 164.243073][ T8848] veth5: entered promiscuous mode [ 164.271574][ T8850] veth5: entered promiscuous mode [ 164.521047][ T8885] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 164.601612][ T8887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.723197][ T8892] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 164.764522][ T8892] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 164.991904][ T8915] __nla_validate_parse: 15 callbacks suppressed [ 164.991923][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 165.337178][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 165.401076][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 165.798689][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 165.930767][ T8971] netlink: 'syz.2.854': attribute type 3 has an invalid length. [ 166.049928][ T8980] netlink: 56 bytes leftover after parsing attributes in process `syz.5.855'. [ 166.422208][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 166.521332][ T9006] netlink: 116 bytes leftover after parsing attributes in process `syz.0.865'. [ 166.602385][ T9014] openvswitch: netlink: Flow key attr not present in new flow. [ 166.794322][ T9029] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 166.824934][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 166.861865][ T9032] netlink: 284 bytes leftover after parsing attributes in process `syz.0.872'. [ 166.909792][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 167.250244][ T9049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.286406][ T9053] validate_nla: 64 callbacks suppressed [ 167.286424][ T9053] netlink: 'syz.1.877': attribute type 16 has an invalid length. [ 167.303006][ T9053] netlink: 'syz.1.877': attribute type 17 has an invalid length. [ 167.368533][ T9053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.436682][ T9044] lo speed is unknown, defaulting to 1000 [ 167.451211][ T9044] lo speed is unknown, defaulting to 1000 [ 167.461060][ T9044] lo speed is unknown, defaulting to 1000 [ 167.899152][ T9084] sctp: [Deprecated]: syz.4.888 (pid 9084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.899152][ T9084] Use struct sctp_sack_info instead [ 168.064107][ T9092] netlink: 'syz.4.892': attribute type 10 has an invalid length. [ 168.084490][ T9044] infiniband syz0: set active [ 168.089673][ T10] lo speed is unknown, defaulting to 1000 [ 168.095714][ T9044] infiniband syz0: added lo [ 168.101712][ T9044] syz0: rxe_create_cq: returned err = -12 [ 168.116519][ T9044] infiniband syz0: Couldn't create ib_mad CQ [ 168.123616][ T9044] infiniband syz0: Couldn't open port 1 [ 168.149068][ T9092] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 168.176426][ T9044] RDS/IB: syz0: added [ 168.194209][ T9044] smc: adding ib device syz0 with port count 1 [ 168.196791][ T9092] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 168.205356][ T9044] smc: ib device syz0 port 1 has pnetid [ 168.279420][ T9092] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.293731][ T10] lo speed is unknown, defaulting to 1000 [ 168.337282][ T9044] lo speed is unknown, defaulting to 1000 [ 168.794811][ T9124] netlink: zone id is out of range [ 168.802367][ T9124] netlink: zone id is out of range [ 168.807905][ T9124] netlink: zone id is out of range [ 168.813107][ T9124] netlink: zone id is out of range [ 168.818728][ T9124] netlink: get zone limit has 8 unknown bytes [ 168.890070][ T9044] lo speed is unknown, defaulting to 1000 [ 168.965179][ T9130] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 169.352585][ T9044] lo speed is unknown, defaulting to 1000 [ 169.496347][ T9156] netlink: 'syz.2.907': attribute type 10 has an invalid length. [ 169.540270][ T9156] team0: Device veth1_macvtap failed to register rx_handler [ 169.915273][ T9175] tipc: Enabled bearer , priority 0 [ 169.948770][ T9175] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 169.978772][ T9175] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 170.017981][ T9175] tipc: Resetting bearer [ 170.041134][ T9180] __nla_validate_parse: 15 callbacks suppressed [ 170.041153][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 170.118335][ T9044] lo speed is unknown, defaulting to 1000 [ 170.418376][ T6321] vlan2: left promiscuous mode [ 170.481828][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 170.714084][ T9044] lo speed is unknown, defaulting to 1000 [ 171.109274][ T9224] netlink: 56 bytes leftover after parsing attributes in process `syz.2.927'. [ 171.132524][ T9224] tipc: Enabled bearer , priority 0 [ 171.152722][ T9224] syzkaller0: entered promiscuous mode [ 171.163579][ T9224] syzkaller0: entered allmulticast mode [ 171.198365][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 171.242644][ T9224] tipc: Resetting bearer [ 171.266961][ T9223] tipc: Resetting bearer [ 171.363446][ T9223] tipc: Disabling bearer [ 171.392696][ T9240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.637884][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.936'. [ 171.684575][ T9260] tipc: Enabling of bearer rejected, already enabled [ 171.698466][ T9260] sch_fq: defrate 1026 ignored. [ 172.162243][ T9292] wg1: entered promiscuous mode [ 172.391242][ T9309] tipc: Enabled bearer , priority 0 [ 172.414490][ T9309] syzkaller0: entered promiscuous mode [ 172.429950][ T9309] syzkaller0: entered allmulticast mode [ 172.449331][ T9309] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 172.493186][ T9313] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.955'. [ 172.504115][ T9314] sch_fq: defrate 1026 ignored. [ 172.524503][ T9309] tipc: Resetting bearer [ 172.537917][ T9306] tipc: Resetting bearer [ 172.616692][ T9306] tipc: Disabling bearer [ 172.676149][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 172.717841][ T9322] netlink: 'syz.5.958': attribute type 75 has an invalid length. [ 172.857180][ T9331] syz_tun: entered allmulticast mode [ 172.991912][ T9336] syz_tun: left allmulticast mode [ 173.429910][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 173.455901][ T9375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.971'. [ 173.522127][ T6311] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.522231][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.971'. [ 173.617602][ T9386] 0ªî{X¹¦: left allmulticast mode [ 173.774978][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.791355][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.005452][ T6311] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.023421][ T6311] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.046073][ T9401] pimreg: left allmulticast mode [ 174.062808][ T9401] dvmrp8: left allmulticast mode [ 174.184897][ T6311] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.213419][ T6311] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.242768][ T6311] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.309188][ T6311] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.318964][ T6311] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.682522][ T9449] netlink: 'syz.4.984': attribute type 10 has an invalid length. [ 174.883850][ T9461] tipc: Enabled bearer , priority 0 [ 174.892653][ T9461] syzkaller0: entered promiscuous mode [ 174.898920][ T9461] syzkaller0: entered allmulticast mode [ 174.941877][ T9461] tipc: Resetting bearer [ 174.953395][ T9460] tipc: Resetting bearer [ 175.028714][ T9460] tipc: Disabling bearer [ 175.143248][ T9479] __nla_validate_parse: 7 callbacks suppressed [ 175.143265][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 175.176613][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 175.361489][ T9494] netlink: 'syz.1.997': attribute type 12 has an invalid length. [ 175.385608][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'. [ 175.422323][ T6311] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.452111][ T6311] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.485179][ T6311] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.514212][ T6311] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.585558][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1000'. [ 175.605741][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1000'. [ 175.607187][ T9508] erspan0: entered promiscuous mode [ 175.635403][ T9508] erspan0: entered allmulticast mode [ 175.652636][ T9505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1001'. [ 175.722719][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.732695][ T9514] netlink: 'syz.1.1003': attribute type 16 has an invalid length. [ 175.745762][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.766914][ T9514] netlink: 'syz.1.1003': attribute type 17 has an invalid length. [ 175.793480][ T9517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.818284][ T9515] syz0: rxe_newlink: already configured on lo [ 175.896394][ T9514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.944509][ T24] lo speed is unknown, defaulting to 1000 [ 176.150009][ T9543] netlink: 'syz.4.1012': attribute type 11 has an invalid length. [ 176.192631][ T9543] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1012'. [ 176.782592][ T9597] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 176.971132][ T9613] netlink: 'syz.2.1032': attribute type 1 has an invalid length. [ 176.983487][ T9613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1032'. [ 177.156653][ T9555] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 177.167599][ T9621] netlink: ct family unspecified [ 177.188693][ T9621] openvswitch: netlink: Actions may not be safe on all matching packets [ 177.298052][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 177.565709][ T9640] sctp: [Deprecated]: syz.4.1042 (pid 9640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.565709][ T9640] Use struct sctp_sack_info instead [ 177.701907][ T9647] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1045'. [ 177.718239][ T9606] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.725865][ T9607] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.822194][ T9652] hsr_slave_0: left promiscuous mode [ 177.839483][ T9652] hsr_slave_1: left promiscuous mode [ 178.500782][ T9702] netlink: 'syz.1.1062': attribute type 15 has an invalid length. [ 178.624787][ T9706] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 178.637219][ T9706] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 178.663142][ T9706] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 178.706812][ T9706] netlink: 'syz.4.1064': attribute type 2 has an invalid length. [ 179.003758][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.123505][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.139072][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.271625][ T9732] tipc: Enabled bearer , priority 0 [ 179.328154][ T9733] veth1_to_hsr: entered allmulticast mode [ 179.335815][ T6321] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.386855][ T6321] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.397982][ T6321] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.425008][ T6321] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.453304][ T9736] syzkaller0: entered promiscuous mode [ 179.459583][ T9736] syzkaller0: entered allmulticast mode [ 179.481559][ T9732] tipc: Resetting bearer [ 179.488246][ T6321] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.497318][ T6321] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.506220][ T6321] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.515406][ T6321] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.566983][ T9717] tipc: Resetting bearer [ 179.624163][ T9717] tipc: Disabling bearer [ 179.782963][ T6311] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 179.892381][ T9779] syzkaller1: entered promiscuous mode [ 179.901023][ T9779] syzkaller1: entered allmulticast mode [ 180.654868][ T9801] __nla_validate_parse: 12 callbacks suppressed [ 180.654886][ T9801] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1090'. [ 180.711972][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 180.726173][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 180.814774][ T9819] delete_channel: no stack [ 180.922654][ T9823] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 180.924944][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'. [ 181.141879][ T9835] lo: entered promiscuous mode [ 181.151698][ T9835] tunl0: entered promiscuous mode [ 181.159262][ T9835] gre0: entered promiscuous mode [ 181.165023][ T9835] gretap0: entered promiscuous mode [ 181.176152][ T9835] erspan0: left allmulticast mode [ 181.182660][ T9835] ip_vti0: entered promiscuous mode [ 181.253362][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 181.460135][ T9840] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 181.519577][ T9844] netlink: 'syz.0.1102': attribute type 4 has an invalid length. [ 181.791655][ T9864] netlink: 'syz.5.1111': attribute type 5 has an invalid length. [ 181.814895][ T9864] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1111'. [ 182.023876][ T9877] tipc: Enabled bearer , priority 0 [ 182.045256][ T9877] syzkaller0: entered promiscuous mode [ 182.066829][ T9877] syzkaller0: entered allmulticast mode [ 182.068689][ T9879] netlink: 'syz.4.1116': attribute type 3 has an invalid length. [ 182.104579][ T9877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 182.143329][ T9877] sch_fq: defrate 1026 ignored. [ 182.164067][ T9881] C: renamed from lo [ 182.182011][ T9877] tipc: Resetting bearer [ 182.214173][ T9885] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1119'. [ 182.226507][ T9876] tipc: Resetting bearer [ 182.258760][ T9876] tipc: Disabling bearer [ 182.609596][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1128'. [ 182.623190][ T9909] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 182.737735][ T9919] netlink: 'syz.2.1131': attribute type 15 has an invalid length. [ 182.799839][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 182.856220][ T9927] tipc: Enabling of bearer rejected, already enabled [ 183.054196][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 183.424880][ T9971] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 183.779422][ T9991] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 183.898802][ T9996] netlink: 'syz.0.1158': attribute type 11 has an invalid length. [ 184.144186][T10018] xt_socket: unknown flags 0x50 [ 184.750757][T10049] netlink: 'syz.4.1173': attribute type 29 has an invalid length. [ 184.788622][T10050] tipc: Enabled bearer , priority 0 [ 184.805887][T10049] tipc: Enabling of bearer rejected, already enabled [ 184.817072][T10050] syzkaller0: entered promiscuous mode [ 184.822821][T10050] syzkaller0: entered allmulticast mode [ 184.833156][T10049] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.863240][T10050] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.877780][T10040] netlink: 'syz.5.1170': attribute type 3 has an invalid length. [ 184.889513][T10050] tipc: Resetting bearer [ 184.901657][T10054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.910918][T10047] tipc: Resetting bearer [ 184.975576][T10047] tipc: Disabling bearer [ 185.020247][T10061] netlink: 'syz.0.1176': attribute type 11 has an invalid length. [ 185.049929][T10061] netlink: 'syz.0.1176': attribute type 11 has an invalid length. [ 185.462621][T10091] netlink: 'syz.1.1184': attribute type 2 has an invalid length. [ 185.508628][T10097] netlink: 'syz.5.1186': attribute type 49 has an invalid length. [ 185.530918][T10097] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 185.720515][T10107] __nla_validate_parse: 13 callbacks suppressed [ 185.720534][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1190'. [ 185.848970][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 185.873319][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 186.006875][T10121] bridge0: port 2(vlan0) entered blocking state [ 186.023066][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1197'. [ 186.026937][T10121] bridge0: port 2(vlan0) entered disabled state [ 186.079451][T10121] vlan0: entered allmulticast mode [ 186.108342][T10121] bridge0: entered allmulticast mode [ 186.130952][T10121] vlan0: left allmulticast mode [ 186.135467][T10142] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 186.135851][T10121] bridge0: left allmulticast mode [ 186.155583][T10142] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1200'. [ 186.195047][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1199'. [ 186.228842][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 186.385727][T10160] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 186.412863][T10160] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 186.485255][T10151] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 186.548624][T10151] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 186.562973][T10151] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 186.589682][T10151] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 186.594355][T10174] raw_sendmsg: syz.4.1209 forgot to set AF_INET. Fix it! [ 186.623310][T10160] bond0: (slave team0): Releasing backup interface [ 186.636368][T10160] batman_adv: batadv0: Interface deactivated: dummy0 [ 186.643613][T10160] batman_adv: batadv0: Removing interface: dummy0 [ 186.662088][T10160] bond0: (slave bond_slave_0): Releasing backup interface [ 186.689991][T10160] team0: Port device team_slave_0 removed [ 186.709926][T10160] team0: Port device team_slave_1 removed [ 186.716576][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.724579][T10160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.733386][T10160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.740983][T10160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.762773][T10160] team0: Port device geneve0 removed [ 186.771481][T10160] bond0: (slave wlan1): Releasing backup interface [ 186.785436][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1207'. [ 186.800335][ T9405] syz!: Port: 1 Link DOWN [ 186.804265][ T6321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.825381][ T6321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.933247][T10186] delete_channel: no stack [ 187.128622][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 187.139170][T10208] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 187.191710][T10208] bond1: (slave gretap2): making interface the new active one [ 187.201040][T10208] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 187.212969][T10208] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1219'. [ 187.222981][T10208] netlink: zone id is out of range [ 187.232769][T10208] netlink: zone id is out of range [ 187.239443][T10208] netlink: zone id is out of range [ 187.240355][T10210] vlan2: entered promiscuous mode [ 187.244739][T10208] netlink: zone id is out of range [ 187.255662][T10208] netlink: get zone limit has 8 unknown bytes [ 187.257503][T10210] team0: entered promiscuous mode [ 187.435713][T10224] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 188.101270][T10262] netlink: 'syz.1.1238': attribute type 23 has an invalid length. [ 188.499905][T10280] sctp: [Deprecated]: syz.4.1244 (pid 10280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.499905][T10280] Use struct sctp_sack_info instead [ 188.650357][T10292] tipc: Invalid UDP bearer configuration [ 188.650422][T10292] tipc: Enabling of bearer rejected, failed to enable media [ 188.676471][T10294] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 188.920236][T10307] tipc: Enabled bearer , priority 0 [ 188.937618][T10308] syzkaller0: entered promiscuous mode [ 188.946924][T10308] syzkaller0: entered allmulticast mode [ 188.986962][T10308] tipc: Resetting bearer [ 189.027628][T10308] tipc: Disabling bearer [ 189.054708][T10314] syzkaller1: entered promiscuous mode [ 189.060401][T10314] syzkaller1: entered allmulticast mode [ 189.075615][T10314] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.083134][T10314] team0: Cannot enslave team device to itself [ 189.611631][T10350] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 189.786226][T10363] validate_nla: 3 callbacks suppressed [ 189.786242][T10363] netlink: 'syz.5.1274': attribute type 8 has an invalid length. [ 190.130466][T10388] netlink: 'syz.0.1280': attribute type 3 has an invalid length. [ 190.182541][T10394] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 190.188462][T10388] macvtap1: entered allmulticast mode [ 190.195292][T10388] veth0_macvtap: entered allmulticast mode [ 190.372045][T10408] netlink: 'syz.5.1289': attribute type 1 has an invalid length. [ 190.426627][T10408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.471847][T10418] netlink: 'syz.2.1291': attribute type 11 has an invalid length. [ 190.502895][T10408] bond3: (slave geneve2): making interface the new active one [ 190.516562][T10408] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 190.797999][T10439] netlink: 'syz.1.1301': attribute type 28 has an invalid length. [ 190.806012][T10439] netlink: 'syz.1.1301': attribute type 3 has an invalid length. [ 190.817637][T10439] __nla_validate_parse: 22 callbacks suppressed [ 190.817650][T10439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1301'. [ 190.849566][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 190.900737][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'. [ 191.113352][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'. [ 191.137441][T10457] hsr_slave_0: left promiscuous mode [ 191.154480][T10457] hsr_slave_1: left promiscuous mode [ 191.212047][T10463] bridge1: entered promiscuous mode [ 191.218053][T10463] bridge1: entered allmulticast mode [ 191.264306][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 191.276038][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 191.316204][T10465] vlan0: entered allmulticast mode [ 191.322322][T10465] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 191.453499][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 191.487442][T10474] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 191.512416][T10474] netlink: 'syz.2.1311': attribute type 2 has an invalid length. [ 191.560666][T10482] vlan0: entered promiscuous mode [ 191.609287][T10482] team0: Port device vlan0 added [ 191.694325][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1316'. [ 191.706110][T10490] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 191.812162][T10499] netlink: 'syz.5.1318': attribute type 3 has an invalid length. [ 191.833940][T10499] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1318'. [ 192.058617][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1322'. [ 192.279574][T10526] netlink: 'syz.4.1331': attribute type 3 has an invalid length. [ 192.319263][T10528] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 193.746689][T10533] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 193.761787][T10494] C speed is unknown, defaulting to 1000 [ 193.812535][T10494] lo speed is unknown, defaulting to 1000 [ 194.110236][T10563] sock: sock_set_timeout: `syz.0.1341' (pid 10563) tries to set negative timeout [ 194.290313][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.392498][T10577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.409195][T10574] macvlan0: entered promiscuous mode [ 194.414721][T10574] macvlan0: entered allmulticast mode [ 194.423733][T10574] bond2: entered promiscuous mode [ 194.431085][T10574] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 194.441119][T10574] bond2: left promiscuous mode [ 195.088909][T10604] validate_nla: 4 callbacks suppressed [ 195.088928][T10604] netlink: 'syz.0.1355': attribute type 12 has an invalid length. [ 195.745206][T10637] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.065509][T10649] vxcan1: entered allmulticast mode [ 196.197235][T10654] syzkaller1: entered promiscuous mode [ 196.226101][T10654] syzkaller1: entered allmulticast mode [ 196.485557][T10673] __nla_validate_parse: 4 callbacks suppressed [ 196.485575][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1374'. [ 196.522652][T10676] netlink: 'syz.5.1374': attribute type 30 has an invalid length. [ 196.635680][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 196.714767][T10675] batman_adv: batadv0: Removing interface: team0 [ 196.755414][T10675] team0: Port device dummy0 removed [ 196.780328][T10675] bridge_slave_0: left allmulticast mode [ 196.786100][T10675] bridge_slave_0: left promiscuous mode [ 196.792036][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.812505][T10675] bridge_slave_1: left allmulticast mode [ 196.818674][T10675] bridge_slave_1: left promiscuous mode [ 196.825230][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.838922][T10675] bond0: (slave bond_slave_0): Releasing backup interface [ 196.865873][T10675] bond0: (slave bond_slave_1): Releasing backup interface [ 196.903227][T10675] team0: Port device team_slave_0 removed [ 196.925603][T10675] team0: Port device team_slave_1 removed [ 196.948799][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.956221][T10675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.016065][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.045589][T10675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.115501][T10698] netlink: 'syz.0.1381': attribute type 11 has an invalid length. [ 197.124093][T10675] bond2: (slave ip6gretap1): Removing an active aggregator [ 197.131301][T10698] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1381'. [ 197.145108][T10675] bond2: (slave ip6gretap1): Releasing backup interface [ 197.152966][T10675] bond2: (slave ip6gretap1): the permanent HWaddr of slave - f6:7d:06:61:4d:b5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 197.184275][T10675] bond2: (slave veth3): Releasing backup interface [ 197.201555][T10675] bond3: (slave bond4): Releasing backup interface [ 197.209730][T10675] bond4: left promiscuous mode [ 197.235155][T10705] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.814956][ T9409] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0 [ 197.863047][ T9409] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 197.936999][T10750] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1397'. [ 198.681467][T10774] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 198.698973][T10774] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1401'. [ 198.708359][T10774] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 198.718722][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1401'. [ 199.935379][T10792] netlink: 'syz.5.1406': attribute type 1 has an invalid length. [ 200.043875][T10798] netlink: 'syz.2.1407': attribute type 12 has an invalid length. [ 200.155953][T10808] tipc: Enabling of bearer rejected, already enabled [ 200.641222][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 200.985277][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 201.481974][ T5879] Bluetooth: hci4: command 0x0406 tx timeout [ 201.488146][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 201.494172][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 201.496556][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1423'. [ 201.558438][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1423'. [ 201.574675][T10857] tipc: Enabled bearer , priority 0 [ 201.587817][T10857] syzkaller0: entered promiscuous mode [ 201.593489][T10857] syzkaller0: entered allmulticast mode [ 201.606677][T10857] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.643693][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 201.685638][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 201.747242][T10869] tipc: Resetting bearer [ 201.761553][T10853] tipc: Resetting bearer [ 201.813503][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1427'. [ 201.831408][T10853] tipc: Disabling bearer [ 201.867607][T10875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1429'. [ 202.194432][T10894] netlink: 'syz.5.1434': attribute type 2 has an invalid length. [ 202.218216][T10894] netlink: 'syz.5.1434': attribute type 2 has an invalid length. [ 202.986070][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 203.008678][T10927] netlink: 'syz.4.1443': attribute type 1 has an invalid length. [ 203.023463][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 203.074180][T10936] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 203.112196][T10939] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1447'. [ 203.123462][T10934] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.137464][T10934] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 203.148024][T10934] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 203.252164][T10936] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.462072][T10962] netlink: 'syz.4.1450': attribute type 1 has an invalid length. [ 203.483890][T10962] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1450'. [ 203.639444][ T51] block nbd1: Receive control failed (result -32) [ 203.740720][T10978] tipc: Enabled bearer , priority 0 [ 203.817686][T10978] tipc: Resetting bearer [ 203.947384][T10972] tipc: Disabling bearer [ 204.331143][T11038] bridge2: entered promiscuous mode [ 204.336397][T11038] bridge2: entered allmulticast mode [ 204.848866][T11067] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 204.858982][ T6333] tipc: Subscription rejected, illegal request [ 205.080116][T11076] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 205.108116][T11076] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.353716][T11091] tipc: Enabled bearer , priority 0 [ 205.376390][T11091] syzkaller0: entered promiscuous mode [ 205.393679][T11091] syzkaller0: entered allmulticast mode [ 205.422014][T11091] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 205.441977][T11091] tipc: Resetting bearer [ 205.449786][T11090] tipc: Resetting bearer [ 205.464388][T11090] tipc: Disabling bearer [ 205.508291][T11097] ipvlan2: entered promiscuous mode [ 205.715414][T11102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.752009][T11102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.772675][T11102] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 205.787688][T11102] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 205.799248][T11102] bond0 (unregistering): Released all slaves [ 205.834988][T11111] tipc: Enabled bearer , priority 0 [ 205.859562][T11105] syzkaller0: entered promiscuous mode [ 205.865115][T11105] syzkaller0: entered allmulticast mode [ 205.914455][T11105] tipc: Resetting bearer [ 205.942150][T11104] tipc: Resetting bearer [ 205.983919][T11104] tipc: Disabling bearer [ 206.191824][T11132] tipc: Enabled bearer , priority 0 [ 206.199655][T11132] syzkaller0: entered promiscuous mode [ 206.205238][T11132] syzkaller0: entered allmulticast mode [ 206.224600][T11132] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 206.257428][T11132] tipc: Resetting bearer [ 206.270216][T11131] tipc: Resetting bearer [ 206.316094][T11131] tipc: Disabling bearer [ 206.515167][T11153] netlink: 'syz.5.1509': attribute type 1 has an invalid length. [ 206.568699][T11153] bond5: entered promiscuous mode [ 206.574257][T11153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.588918][T11163] __nla_validate_parse: 17 callbacks suppressed [ 206.588936][T11163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1511'. [ 206.619896][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1511'. [ 206.628903][T11153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.629260][T11153] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 206.629280][T11153] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 206.648863][T11167] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1512'. [ 206.670740][T11153] bond5: (slave wireguard0): making interface the new active one [ 206.685082][T11153] wireguard0: entered promiscuous mode [ 206.699599][T11153] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 206.889465][T11179] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 206.912673][T11179] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 207.004750][T11192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1519'. [ 207.045862][T11194] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1520'. [ 207.153875][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'. [ 207.253705][T11209] blkio.reset_stats is deprecated [ 207.264285][T11209] netlink: 'syz.5.1525': attribute type 4 has an invalid length. [ 207.449808][T11227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1529'. [ 207.464636][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 207.477858][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 207.665418][T11241] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 207.690861][T11241] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1534'. [ 207.787950][T11249] netlink: 'syz.2.1538': attribute type 10 has an invalid length. [ 207.942232][T11260] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 208.003735][T11260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.073314][T11264] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.099671][T11267] veth7: entered promiscuous mode [ 208.111191][T11267] bond4: (slave veth7): Enslaving as an active interface with an up link [ 208.139982][T11271] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 208.372683][T11289] FAULT_INJECTION: forcing a failure. [ 208.372683][T11289] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 208.425797][T11289] CPU: 0 UID: 0 PID: 11289 Comm: syz.1.1549 Not tainted syzkaller #0 PREEMPT(full) [ 208.425823][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.425840][T11289] Call Trace: [ 208.425848][T11289] [ 208.425855][T11289] dump_stack_lvl+0x189/0x250 [ 208.425880][T11289] ? __pfx____ratelimit+0x10/0x10 [ 208.425904][T11289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.425921][T11289] ? __pfx__printk+0x10/0x10 [ 208.425942][T11289] ? __might_fault+0xb0/0x130 [ 208.425973][T11289] should_fail_ex+0x414/0x560 [ 208.426001][T11289] _copy_from_user+0x2d/0xb0 [ 208.426020][T11289] ___sys_sendmsg+0x158/0x2a0 [ 208.426042][T11289] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.426094][T11289] ? __fget_files+0x2a/0x420 [ 208.426109][T11289] ? __fget_files+0x3a0/0x420 [ 208.426132][T11289] __x64_sys_sendmsg+0x19b/0x260 [ 208.426153][T11289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.426181][T11289] ? __pfx_ksys_write+0x10/0x10 [ 208.426198][T11289] ? rcu_is_watching+0x15/0xb0 [ 208.426220][T11289] ? do_syscall_64+0xbe/0x3b0 [ 208.426240][T11289] do_syscall_64+0xfa/0x3b0 [ 208.426253][T11289] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.426274][T11289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.426289][T11289] ? clear_bhb_loop+0x60/0xb0 [ 208.426307][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.426323][T11289] RIP: 0033:0x7f25b4f8eba9 [ 208.426339][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.426351][T11289] RSP: 002b:00007f25b31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.426375][T11289] RAX: ffffffffffffffda RBX: 00007f25b51d5fa0 RCX: 00007f25b4f8eba9 [ 208.426394][T11289] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 208.426405][T11289] RBP: 00007f25b31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 208.426415][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.426424][T11289] R13: 00007f25b51d6038 R14: 00007f25b51d5fa0 R15: 00007ffef31a5d68 [ 208.426452][T11289] [ 208.929709][T11316] netlink: 'syz.0.1558': attribute type 16 has an invalid length. [ 208.954026][T11316] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 209.006095][T11316] netlink: 'syz.0.1558': attribute type 1 has an invalid length. [ 209.023521][T11318] tipc: Enabling of bearer rejected, failed to enable media [ 209.159495][T11335] netlink: 'syz.4.1564': attribute type 10 has an invalid length. [ 209.301316][T11343] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 209.764329][T11371] geneve3: entered promiscuous mode [ 209.776934][T11371] geneve3: entered allmulticast mode [ 209.787134][T11374] tap0: tun_chr_ioctl cmd 2148553947 [ 209.997071][T11387] nbd: must specify a device to reconfigure [ 210.270289][T11403] nbd: must specify at least one socket [ 210.855558][T11424] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 210.885538][T11424] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.771066][T11467] FAULT_INJECTION: forcing a failure. [ 211.771066][T11467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.783605][T11469] __nla_validate_parse: 20 callbacks suppressed [ 211.783623][T11469] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1606'. [ 211.822387][T11467] CPU: 1 UID: 0 PID: 11467 Comm: syz.1.1605 Not tainted syzkaller #0 PREEMPT(full) [ 211.822413][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.822424][T11467] Call Trace: [ 211.822431][T11467] [ 211.822439][T11467] dump_stack_lvl+0x189/0x250 [ 211.822464][T11467] ? __pfx____ratelimit+0x10/0x10 [ 211.822488][T11467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.822507][T11467] ? __pfx__printk+0x10/0x10 [ 211.822529][T11467] ? __might_fault+0xb0/0x130 [ 211.822563][T11467] should_fail_ex+0x414/0x560 [ 211.822589][T11467] _copy_from_iter+0x1de/0x1790 [ 211.822614][T11467] ? rcu_is_watching+0x15/0xb0 [ 211.822633][T11467] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 211.822657][T11467] ? __pfx__copy_from_iter+0x10/0x10 [ 211.822676][T11467] ? __build_skb_around+0x257/0x3e0 [ 211.822697][T11467] ? netlink_sendmsg+0x642/0xb30 [ 211.822712][T11467] ? skb_put+0x11b/0x210 [ 211.822731][T11467] netlink_sendmsg+0x6b2/0xb30 [ 211.822757][T11467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.822776][T11467] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.822795][T11467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.822813][T11467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.822830][T11467] __sock_sendmsg+0x219/0x270 [ 211.822856][T11467] ____sys_sendmsg+0x505/0x830 [ 211.822881][T11467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.822909][T11467] ? import_iovec+0x74/0xa0 [ 211.822930][T11467] ___sys_sendmsg+0x21f/0x2a0 [ 211.822952][T11467] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.823007][T11467] ? __fget_files+0x2a/0x420 [ 211.823029][T11467] ? __fget_files+0x3a0/0x420 [ 211.823054][T11467] __x64_sys_sendmsg+0x19b/0x260 [ 211.823076][T11467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.823104][T11467] ? __pfx_ksys_write+0x10/0x10 [ 211.823122][T11467] ? rcu_is_watching+0x15/0xb0 [ 211.823144][T11467] ? do_syscall_64+0xbe/0x3b0 [ 211.823164][T11467] do_syscall_64+0xfa/0x3b0 [ 211.823179][T11467] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.823200][T11467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.823217][T11467] ? clear_bhb_loop+0x60/0xb0 [ 211.823237][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.823254][T11467] RIP: 0033:0x7f25b4f8eba9 [ 211.823270][T11467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.823284][T11467] RSP: 002b:00007f25b31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.823303][T11467] RAX: ffffffffffffffda RBX: 00007f25b51d5fa0 RCX: 00007f25b4f8eba9 [ 211.823316][T11467] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 211.823327][T11467] RBP: 00007f25b31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.823337][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.823347][T11467] R13: 00007f25b51d6038 R14: 00007f25b51d5fa0 R15: 00007ffef31a5d68 [ 211.823376][T11467] [ 212.192139][T11475] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1608'. [ 212.434184][T11494] netlink: 'syz.4.1611': attribute type 1 has an invalid length. [ 212.542918][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 212.604052][T11513] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.613766][ T5955] IPVS: starting estimator thread 0... [ 212.706812][T11518] IPVS: using max 31 ests per chain, 74400 per kthread [ 212.714580][T11522] FAULT_INJECTION: forcing a failure. [ 212.714580][T11522] name failslab, interval 1, probability 0, space 0, times 0 [ 212.735967][T11522] CPU: 1 UID: 0 PID: 11522 Comm: syz.5.1619 Not tainted syzkaller #0 PREEMPT(full) [ 212.735992][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.736002][T11522] Call Trace: [ 212.736009][T11522] [ 212.736016][T11522] dump_stack_lvl+0x189/0x250 [ 212.736041][T11522] ? __pfx____ratelimit+0x10/0x10 [ 212.736065][T11522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.736084][T11522] ? __pfx__printk+0x10/0x10 [ 212.736108][T11522] ? __lock_acquire+0xab9/0xd20 [ 212.736139][T11522] should_fail_ex+0x414/0x560 [ 212.736166][T11522] should_failslab+0xa8/0x100 [ 212.736190][T11522] kmem_cache_alloc_noprof+0x73/0x3c0 [ 212.736211][T11522] ? skb_clone+0x212/0x3a0 [ 212.736241][T11522] skb_clone+0x212/0x3a0 [ 212.736264][T11522] __netlink_deliver_tap+0x404/0x850 [ 212.736300][T11522] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.736325][T11522] netlink_deliver_tap+0x19c/0x1b0 [ 212.736349][T11522] netlink_unicast+0x7fa/0x9e0 [ 212.736379][T11522] ? __pfx_netlink_unicast+0x10/0x10 [ 212.736403][T11522] ? netlink_sendmsg+0x642/0xb30 [ 212.736416][T11522] ? skb_put+0x11b/0x210 [ 212.736434][T11522] netlink_sendmsg+0x805/0xb30 [ 212.736454][T11522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.736471][T11522] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.736489][T11522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.736507][T11522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.736524][T11522] __sock_sendmsg+0x219/0x270 [ 212.736547][T11522] ____sys_sendmsg+0x505/0x830 [ 212.736571][T11522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.736598][T11522] ? import_iovec+0x74/0xa0 [ 212.736621][T11522] ___sys_sendmsg+0x21f/0x2a0 [ 212.736642][T11522] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.736697][T11522] ? __fget_files+0x2a/0x420 [ 212.736711][T11522] ? __fget_files+0x3a0/0x420 [ 212.736736][T11522] __x64_sys_sendmsg+0x19b/0x260 [ 212.736756][T11522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.736784][T11522] ? __pfx_ksys_write+0x10/0x10 [ 212.736801][T11522] ? rcu_is_watching+0x15/0xb0 [ 212.736824][T11522] ? do_syscall_64+0xbe/0x3b0 [ 212.736844][T11522] do_syscall_64+0xfa/0x3b0 [ 212.736858][T11522] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.736879][T11522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.736894][T11522] ? clear_bhb_loop+0x60/0xb0 [ 212.736915][T11522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.736931][T11522] RIP: 0033:0x7fdb3ed8eba9 [ 212.736946][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.736960][T11522] RSP: 002b:00007fdb3fbfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.736978][T11522] RAX: ffffffffffffffda RBX: 00007fdb3efd5fa0 RCX: 00007fdb3ed8eba9 [ 212.736991][T11522] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 212.737002][T11522] RBP: 00007fdb3fbfa090 R08: 0000000000000000 R09: 0000000000000000 [ 212.737012][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.737022][T11522] R13: 00007fdb3efd6038 R14: 00007fdb3efd5fa0 R15: 00007ffd50cb6788 [ 212.737052][T11522] [ 245.024257][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 245.103833][T11555] FAULT_INJECTION: forcing a failure. [ 245.103833][T11555] name failslab, interval 1, probability 0, space 0, times 0 [ 245.149870][T11555] CPU: 1 UID: 0 PID: 11555 Comm: syz.5.1630 Not tainted syzkaller #0 PREEMPT(full) [ 245.149896][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.149918][T11555] Call Trace: [ 245.149925][T11555] [ 245.149934][T11555] dump_stack_lvl+0x189/0x250 [ 245.149959][T11555] ? __pfx____ratelimit+0x10/0x10 [ 245.149983][T11555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.150002][T11555] ? __pfx__printk+0x10/0x10 [ 245.150029][T11555] ? __pfx___might_resched+0x10/0x10 [ 245.150045][T11555] ? fs_reclaim_acquire+0x7d/0x100 [ 245.150072][T11555] should_fail_ex+0x414/0x560 [ 245.150099][T11555] should_failslab+0xa8/0x100 [ 245.150123][T11555] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 245.150146][T11555] ? __alloc_skb+0x112/0x2d0 [ 245.150167][T11555] __alloc_skb+0x112/0x2d0 [ 245.150188][T11555] netlink_ack+0x146/0xa50 [ 245.150229][T11555] netlink_rcv_skb+0x28c/0x470 [ 245.150253][T11555] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 245.150276][T11555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.150310][T11555] ? bpf_lsm_capable+0x9/0x20 [ 245.150330][T11555] ? security_capable+0x7e/0x2e0 [ 245.150360][T11555] nfnetlink_rcv+0x26a/0x2520 [ 245.150385][T11555] ? __dev_queue_xmit+0x1d79/0x3b50 [ 245.150414][T11555] ? __dev_queue_xmit+0x27b/0x3b50 [ 245.150445][T11555] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 245.150466][T11555] ? __pfx___dev_queue_xmit+0x10/0x10 [ 245.150498][T11555] ? ref_tracker_free+0x63a/0x7d0 [ 245.150520][T11555] ? __asan_memcpy+0x40/0x70 [ 245.150537][T11555] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.150576][T11555] ? skb_clone+0x246/0x3a0 [ 245.150597][T11555] ? __netlink_deliver_tap+0x807/0x850 [ 245.150620][T11555] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.150649][T11555] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.150679][T11555] netlink_unicast+0x82c/0x9e0 [ 245.150710][T11555] ? __pfx_netlink_unicast+0x10/0x10 [ 245.150733][T11555] ? netlink_sendmsg+0x642/0xb30 [ 245.150747][T11555] ? skb_put+0x11b/0x210 [ 245.150773][T11555] netlink_sendmsg+0x805/0xb30 [ 245.150799][T11555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.150819][T11555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.150837][T11555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.150855][T11555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.150875][T11555] __sock_sendmsg+0x219/0x270 [ 245.150900][T11555] ____sys_sendmsg+0x505/0x830 [ 245.150924][T11555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.150952][T11555] ? import_iovec+0x74/0xa0 [ 245.150974][T11555] ___sys_sendmsg+0x21f/0x2a0 [ 245.150995][T11555] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.151049][T11555] ? __fget_files+0x2a/0x420 [ 245.151064][T11555] ? __fget_files+0x3a0/0x420 [ 245.151089][T11555] __x64_sys_sendmsg+0x19b/0x260 [ 245.151111][T11555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.151139][T11555] ? __pfx_ksys_write+0x10/0x10 [ 245.151158][T11555] ? rcu_is_watching+0x15/0xb0 [ 245.151180][T11555] ? do_syscall_64+0xbe/0x3b0 [ 245.151199][T11555] do_syscall_64+0xfa/0x3b0 [ 245.151213][T11555] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.151235][T11555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.151251][T11555] ? clear_bhb_loop+0x60/0xb0 [ 245.151271][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.151286][T11555] RIP: 0033:0x7fdb3ed8eba9 [ 245.151302][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.151316][T11555] RSP: 002b:00007fdb3fbfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.151335][T11555] RAX: ffffffffffffffda RBX: 00007fdb3efd5fa0 RCX: 00007fdb3ed8eba9 [ 245.151348][T11555] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 245.151359][T11555] RBP: 00007fdb3fbfa090 R08: 0000000000000000 R09: 0000000000000000 [ 245.151370][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.151380][T11555] R13: 00007fdb3efd6038 R14: 00007fdb3efd5fa0 R15: 00007ffd50cb6788 [ 245.151409][T11555] [ 245.217374][T11556] can: request_module (can-proto-0) failed. [ 245.254480][T11561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1631'. [ 245.776042][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 245.833331][T11589] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1639'. [ 245.854206][T11590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.229952][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'. [ 246.363645][T11628] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1650'. [ 246.377157][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 246.942642][T11666] openvswitch: netlink: Message has 4 unknown bytes. [ 246.957003][T11666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.990944][T11664] gtp0: entered promiscuous mode [ 247.007486][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'. [ 247.023102][T11673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1664'. [ 247.075295][T11677] sctp: [Deprecated]: syz.1.1666 (pid 11677) Use of int in max_burst socket option. [ 247.075295][T11677] Use struct sctp_assoc_value instead [ 247.360319][T11693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.489787][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 247.663462][T11692] C speed is unknown, defaulting to 1000 [ 247.671039][T11692] lo speed is unknown, defaulting to 1000 [ 247.687054][T11705] netlink: 'syz.2.1673': attribute type 1 has an invalid length. [ 248.231393][T11739] netlink: 'syz.4.1686': attribute type 142 has an invalid length. [ 248.279587][T11746] netlink: 'syz.5.1687': attribute type 10 has an invalid length. [ 248.336487][T11749] netlink: 'syz.4.1686': attribute type 142 has an invalid length. [ 248.445433][T11739] geneve2: entered promiscuous mode [ 248.470092][T11739] geneve2: entered allmulticast mode [ 248.492433][T11746] team0: left allmulticast mode [ 248.498006][T11746] team_slave_0: left allmulticast mode [ 248.507431][T11746] team_slave_1: left allmulticast mode [ 248.517112][T11746] team0: left promiscuous mode [ 248.521913][T11746] team_slave_0: left promiscuous mode [ 248.533501][T11746] team_slave_1: left promiscuous mode [ 248.540401][T11746] bridge0: port 3(team0) entered disabled state [ 248.578395][T11746] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.653723][T11746] bond0: (slave team0): Enslaving as an active interface with an up link [ 248.689474][ T6317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.775327][ T6317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.832162][T11760] syzkaller1: entered promiscuous mode [ 248.837933][T11760] syzkaller1: entered allmulticast mode [ 248.848038][ T6317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.893030][ T6317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.522432][T11792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.612341][T11792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.983172][T11799] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (65485) ! [ 250.062948][ T6311] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.103704][ T6311] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.145015][ T6311] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.183788][T11837] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 250.191620][ T6311] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.191710][ T6311] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.191735][ T6311] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.191768][ T6311] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.191791][ T6311] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.248268][T11835] netlink: 'syz.4.1707': attribute type 12 has an invalid length. [ 250.250422][T11834] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 250.266027][T11837] netlink: 'syz.1.1709': attribute type 2 has an invalid length. [ 250.291450][T11837] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 250.322498][T11841] __nla_validate_parse: 6 callbacks suppressed [ 250.322516][T11841] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1711'. [ 250.333415][T11846] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1709'. [ 250.379292][T11846] xt_socket: unknown flags 0xd0 [ 250.546254][T11861] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 250.590995][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'. [ 250.617379][T11861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1716'. [ 250.635344][T11867] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1718'. [ 250.699397][T11870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.125848][T11896] ip6gre1: entered allmulticast mode [ 251.296664][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1737'. [ 251.470443][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1738'. [ 251.509598][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 251.542943][T11926] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1741'. [ 251.860968][T11951] IPVS: Unknown mcast interface: vcan0 [ 251.861845][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 252.095033][T11963] netlink: 'syz.4.1756': attribute type 1 has an invalid length. [ 252.130743][T11963] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 252.149180][T11965] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 252.174265][T11965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.736784][T11995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.307235][T12038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.326978][T12042] validate_nla: 2 callbacks suppressed [ 253.326998][T12042] netlink: 'syz.0.1776': attribute type 24 has an invalid length. [ 253.660827][T12049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.671759][T12049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.682581][T12049] bond0 (unregistering): (slave team0): Releasing backup interface [ 253.696120][T12049] bond0 (unregistering): Released all slaves [ 253.775992][T12053] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 253.809374][T12053] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 253.824272][T12032] C speed is unknown, defaulting to 1000 [ 253.834418][T12053] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 253.858870][T12032] lo speed is unknown, defaulting to 1000 [ 254.016044][ T59] tipc: Subscription rejected, illegal request [ 255.018518][T12115] C: entered promiscuous mode [ 255.023419][T12115] netlink: 'syz.5.1792': attribute type 2 has an invalid length. [ 255.096185][T12122] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.107533][T12115] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 255.727627][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.244584][T12180] IPv6: sit1: Disabled Multicast RS [ 256.268240][T12187] __nla_validate_parse: 70 callbacks suppressed [ 256.268260][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 256.450575][T12193] netlink: 'syz.5.1817': attribute type 58 has an invalid length. [ 256.476981][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1817'. [ 256.679932][T12196] netlink: 'syz.2.1818': attribute type 10 has an invalid length. [ 256.736408][T12196] syzkaller1: entered promiscuous mode [ 256.751411][T12196] syzkaller1: entered allmulticast mode [ 256.808351][T12200] sctp: [Deprecated]: syz.5.1820 (pid 12200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.808351][T12200] Use struct sctp_sack_info instead [ 256.849039][T12198] netlink: 'syz.0.1819': attribute type 15 has an invalid length. [ 256.973839][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1821'. [ 256.985566][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 256.997768][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1823'. [ 257.053381][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 257.242462][T12226] syzkaller1: entered promiscuous mode [ 257.253708][T12226] syzkaller1: entered allmulticast mode [ 257.398621][T12234] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1831'. [ 257.598005][T12249] tipc: Enabled bearer , priority 0 [ 257.645065][T12253] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1837'. [ 257.655277][T12250] syzkaller0: entered promiscuous mode [ 257.661125][T12250] syzkaller0: entered allmulticast mode [ 257.686309][T12250] tipc: Resetting bearer [ 257.719882][T12250] tipc: Disabling bearer [ 257.966471][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 258.081216][T12279] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1846'. [ 258.099075][T12270] [ 258.101439][T12270] ====================================================== [ 258.108453][T12270] WARNING: possible circular locking dependency detected [ 258.115465][T12270] syzkaller #0 Not tainted [ 258.119857][T12270] ------------------------------------------------------ [ 258.126850][T12270] syz.0.1843/12270 is trying to acquire lock: [ 258.132899][T12270] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 258.142482][T12270] [ 258.142482][T12270] but task is already holding lock: [ 258.149847][T12270] ffff888024fdd8f8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 258.160120][T12270] [ 258.160120][T12270] which lock already depends on the new lock. [ 258.160120][T12270] [ 258.170520][T12270] [ 258.170520][T12270] the existing dependency chain (in reverse order) is: [ 258.179524][T12270] [ 258.179524][T12270] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 258.188118][T12270] lock_acquire+0x120/0x360 [ 258.193132][T12270] blk_alloc_queue+0x538/0x620 [ 258.198404][T12270] __blk_mq_alloc_disk+0x15c/0x340 [ 258.204018][T12270] nbd_dev_add+0x46c/0xae0 [ 258.208945][T12270] nbd_init+0x168/0x1f0 [ 258.213606][T12270] do_one_initcall+0x233/0x820 [ 258.218877][T12270] do_initcall_level+0x104/0x190 [ 258.224321][T12270] do_initcalls+0x59/0xa0 [ 258.229158][T12270] kernel_init_freeable+0x334/0x4b0 [ 258.234861][T12270] kernel_init+0x1d/0x1d0 [ 258.239694][T12270] ret_from_fork+0x3fc/0x770 [ 258.244788][T12270] ret_from_fork_asm+0x1a/0x30 [ 258.250059][T12270] [ 258.250059][T12270] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 258.257255][T12270] lock_acquire+0x120/0x360 [ 258.262269][T12270] fs_reclaim_acquire+0x72/0x100 [ 258.267721][T12270] prepare_alloc_pages+0x153/0x610 [ 258.273337][T12270] __alloc_frozen_pages_noprof+0x123/0x370 [ 258.279643][T12270] __alloc_pages_noprof+0xa/0x30 [ 258.285093][T12270] pcpu_populate_chunk+0x182/0xb30 [ 258.290732][T12270] pcpu_alloc_noprof+0xcbf/0x16b0 [ 258.296274][T12270] bpf_map_alloc_percpu+0xbc/0x1b0 [ 258.301904][T12270] prealloc_init+0x225/0x630 [ 258.307011][T12270] htab_map_alloc+0x6ce/0xc70 [ 258.312195][T12270] map_create+0xaa0/0x14d0 [ 258.317204][T12270] __sys_bpf+0x60f/0x870 [ 258.321953][T12270] __x64_sys_bpf+0x7c/0x90 [ 258.326871][T12270] do_syscall_64+0xfa/0x3b0 [ 258.331876][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.338274][T12270] [ 258.338274][T12270] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 258.345992][T12270] validate_chain+0xb9b/0x2140 [ 258.351263][T12270] __lock_acquire+0xab9/0xd20 [ 258.356453][T12270] lock_acquire+0x120/0x360 [ 258.361464][T12270] __mutex_lock+0x187/0x1350 [ 258.366562][T12270] pcpu_alloc_noprof+0x286/0x16b0 [ 258.372099][T12270] sbitmap_init_node+0x1e1/0x630 [ 258.377543][T12270] sbitmap_queue_init_node+0x3e/0x4d0 [ 258.383422][T12270] blk_mq_init_tags+0x110/0x280 [ 258.388782][T12270] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 258.394753][T12270] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 258.401069][T12270] nbd_start_device+0x17f/0xb10 [ 258.406430][T12270] nbd_genl_connect+0x135b/0x18f0 [ 258.411978][T12270] genl_family_rcv_msg_doit+0x212/0x300 [ 258.418047][T12270] genl_rcv_msg+0x60e/0x790 [ 258.423061][T12270] netlink_rcv_skb+0x208/0x470 [ 258.428338][T12270] genl_rcv+0x28/0x40 [ 258.432825][T12270] netlink_unicast+0x82c/0x9e0 [ 258.438093][T12270] netlink_sendmsg+0x805/0xb30 [ 258.443360][T12270] __sock_sendmsg+0x219/0x270 [ 258.448545][T12270] ____sys_sendmsg+0x505/0x830 [ 258.453816][T12270] ___sys_sendmsg+0x21f/0x2a0 [ 258.458995][T12270] __x64_sys_sendmsg+0x19b/0x260 [ 258.464433][T12270] do_syscall_64+0xfa/0x3b0 [ 258.469438][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.475844][T12270] [ 258.475844][T12270] other info that might help us debug this: [ 258.475844][T12270] [ 258.486063][T12270] Chain exists of: [ 258.486063][T12270] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 258.486063][T12270] [ 258.499703][T12270] Possible unsafe locking scenario: [ 258.499703][T12270] [ 258.507137][T12270] CPU0 CPU1 [ 258.512482][T12270] ---- ---- [ 258.517827][T12270] lock(&q->q_usage_counter(io)#51); [ 258.523188][T12270] lock(fs_reclaim); [ 258.529670][T12270] lock(&q->q_usage_counter(io)#51); [ 258.537547][T12270] lock(pcpu_alloc_mutex); [ 258.542037][T12270] [ 258.542037][T12270] *** DEADLOCK *** [ 258.542037][T12270] [ 258.550158][T12270] 6 locks held by syz.0.1843/12270: [ 258.555334][T12270] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 258.563504][T12270] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 258.572455][T12270] #2: ffff888025007188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 258.583839][T12270] #3: ffff8880250070d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 258.594787][T12270] #4: ffff888024fdd8f8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 258.605489][T12270] #5: ffff888024fdd930 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 258.616447][T12270] [ 258.616447][T12270] stack backtrace: [ 258.622321][T12270] CPU: 0 UID: 0 PID: 12270 Comm: syz.0.1843 Not tainted syzkaller #0 PREEMPT(full) [ 258.622337][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.622347][T12270] Call Trace: [ 258.622354][T12270] [ 258.622361][T12270] dump_stack_lvl+0x189/0x250 [ 258.622381][T12270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.622396][T12270] ? __pfx__printk+0x10/0x10 [ 258.622415][T12270] ? print_lock_name+0xde/0x100 [ 258.622434][T12270] print_circular_bug+0x2ee/0x310 [ 258.622451][T12270] check_noncircular+0x134/0x160 [ 258.622468][T12270] validate_chain+0xb9b/0x2140 [ 258.622489][T12270] __lock_acquire+0xab9/0xd20 [ 258.622510][T12270] ? pcpu_alloc_noprof+0x286/0x16b0 [ 258.622529][T12270] lock_acquire+0x120/0x360 [ 258.622547][T12270] ? pcpu_alloc_noprof+0x286/0x16b0 [ 258.622575][T12270] __mutex_lock+0x187/0x1350 [ 258.622588][T12270] ? pcpu_alloc_noprof+0x286/0x16b0 [ 258.622606][T12270] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 258.622625][T12270] ? kasan_save_track+0x4f/0x80 [ 258.622642][T12270] ? kasan_save_track+0x3e/0x80 [ 258.622656][T12270] ? __kasan_kmalloc+0x93/0xb0 [ 258.622672][T12270] ? blk_mq_init_tags+0x85/0x280 [ 258.622688][T12270] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 258.622707][T12270] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 258.622720][T12270] ? pcpu_alloc_noprof+0x286/0x16b0 [ 258.622737][T12270] ? nbd_genl_connect+0x135b/0x18f0 [ 258.622755][T12270] ? genl_family_rcv_msg_doit+0x212/0x300 [ 258.622771][T12270] ? genl_rcv_msg+0x60e/0x790 [ 258.622786][T12270] ? __pfx___mutex_lock+0x10/0x10 [ 258.622798][T12270] ? ____sys_sendmsg+0x505/0x830 [ 258.622813][T12270] ? do_syscall_64+0xfa/0x3b0 [ 258.622826][T12270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.622845][T12270] pcpu_alloc_noprof+0x286/0x16b0 [ 258.622869][T12270] sbitmap_init_node+0x1e1/0x630 [ 258.622884][T12270] ? __kasan_kmalloc+0x93/0xb0 [ 258.622901][T12270] sbitmap_queue_init_node+0x3e/0x4d0 [ 258.622917][T12270] blk_mq_init_tags+0x110/0x280 [ 258.622934][T12270] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 258.622956][T12270] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 258.622969][T12270] ? kfree+0x18e/0x440 [ 258.622987][T12270] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 258.623007][T12270] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 258.623028][T12270] ? sysfs_add_file_mode_ns+0x259/0x300 [ 258.623050][T12270] nbd_start_device+0x17f/0xb10 [ 258.623071][T12270] ? device_create_file+0xf4/0x1c0 [ 258.623085][T12270] nbd_genl_connect+0x135b/0x18f0 [ 258.623107][T12270] ? __pfx_nbd_genl_connect+0x10/0x10 [ 258.623129][T12270] ? __nla_parse+0x40/0x60 [ 258.623149][T12270] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 258.623168][T12270] genl_family_rcv_msg_doit+0x212/0x300 [ 258.623187][T12270] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 258.623208][T12270] ? stack_trace_save+0x9c/0xe0 [ 258.623225][T12270] genl_rcv_msg+0x60e/0x790 [ 258.623242][T12270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.623257][T12270] ? __pfx_nbd_genl_connect+0x10/0x10 [ 258.623280][T12270] netlink_rcv_skb+0x208/0x470 [ 258.623298][T12270] ? __lock_acquire+0xab9/0xd20 [ 258.623316][T12270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 258.623331][T12270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.623355][T12270] ? down_read+0x1ad/0x2e0 [ 258.623369][T12270] genl_rcv+0x28/0x40 [ 258.623383][T12270] netlink_unicast+0x82c/0x9e0 [ 258.623403][T12270] ? __pfx_netlink_unicast+0x10/0x10 [ 258.623420][T12270] ? netlink_sendmsg+0x642/0xb30 [ 258.623432][T12270] ? skb_put+0x11b/0x210 [ 258.623446][T12270] netlink_sendmsg+0x805/0xb30 [ 258.623461][T12270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.623475][T12270] ? aa_sock_msg_perm+0xf1/0x1d0 [ 258.623489][T12270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.623504][T12270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.623516][T12270] __sock_sendmsg+0x219/0x270 [ 258.623535][T12270] ____sys_sendmsg+0x505/0x830 [ 258.623551][T12270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.623573][T12270] ? import_iovec+0x74/0xa0 [ 258.623589][T12270] ___sys_sendmsg+0x21f/0x2a0 [ 258.623604][T12270] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.623629][T12270] ? __fget_files+0x2a/0x420 [ 258.623641][T12270] ? __fget_files+0x3a0/0x420 [ 258.623655][T12270] __x64_sys_sendmsg+0x19b/0x260 [ 258.623670][T12270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.623688][T12270] ? rcu_is_watching+0x15/0xb0 [ 258.623703][T12270] ? do_syscall_64+0xbe/0x3b0 [ 258.623717][T12270] do_syscall_64+0xfa/0x3b0 [ 258.623728][T12270] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.623746][T12270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.623759][T12270] ? clear_bhb_loop+0x60/0xb0 [ 258.623774][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.623788][T12270] RIP: 0033:0x7f5a62f8eba9 [ 258.623801][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.623814][T12270] RSP: 002b:00007f5a63eb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.623829][T12270] RAX: ffffffffffffffda RBX: 00007f5a631d5fa0 RCX: 00007f5a62f8eba9 [ 258.623840][T12270] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 258.623849][T12270] RBP: 00007f5a63011e19 R08: 0000000000000000 R09: 0000000000000000 [ 258.623858][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.623866][T12270] R13: 00007f5a631d6038 R14: 00007f5a631d5fa0 R15: 00007fff6febd678 [ 258.623882][T12270] [ 259.182681][ T51] block nbd2: Receive control failed (result -32) [ 259.189605][ T5184] block nbd2: Receive control failed (result -32) [ 259.208631][T12270] nbd2: detected capacity change from 0 to 128