last executing test programs: 6m12.377997124s ago: executing program 4 (id=1507): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x24048094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x87}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x24048094) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x87}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) (async) 6m12.342091006s ago: executing program 4 (id=1508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x5679, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x154}}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x44004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0, r8, 0x4000, r7}, 0x18) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r9, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x44050) recvmsg(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)}, 0x40000003) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r10, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d000005000900020000000c00088004"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12, r11}, 0xc) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000080), 0x0) 6m11.282883129s ago: executing program 4 (id=1513): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x1b}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4041) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001b80)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000400)=[{&(0x7f00000001c0)="9bdf6ae0a4fd4d", 0x7}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0xb910, 0x0, 0x4b6, 0x6}}, @init={0x18, 0x84, 0x0, {0x9, 0x5, 0x1}}], 0x58, 0x8045}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000f0601040000000000000000000900"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0x20000000) 6m11.157603963s ago: executing program 4 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018005b41918", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000008740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000066bb9565ffdbf0e9cf4c856f362c0800000000000000d737fbf0f6e8a40ac23cdf943aedcab791ccbe6757db104d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f00000087c0)={0xa, 0x4e22, 0x1f57, @mcast1, 0x2}, 0x1c) unshare(0x20000400) socket$inet6(0xa, 0x80803, 0x7) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f0000008700)={&(0x7f0000008540)=[&(0x7f0000000000)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000000040)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000000080)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000000100)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x3, 0x7}, {0x5, 0x100000001}, {0x8, 0x8001}, {0x8, 0x81}, {0x7ff, 0x1}, {0x10001, 0x10}, {0x4, 0x100000001}, {0x3, 0x8}, {0x0, 0x1000}, {0xb, 0x1c00000000000}, {0x9, 0x9}, {0x100000001, 0x9}, {0xffffffffffff1288, 0x100}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x401, 0xf2bf}, {0x7, 0x5}, {0x10, 0x6}, {0x5, 0xffffffffffffff8a}, {0xeec, 0x1000}, {0x2, 0x1854}, {0x4, 0x3a4}, {0x7, 0x7}, {0x6, 0x2}, {0x100000001, 0x952}, {0x4, 0x8}, {0x0, 0x5}, {0xffffffff80000000, 0x7}, {0x55e4, 0x8b}, {0x4, 0x401}, {0x81, 0xffffffffffffffff}, {0x2, 0x3}, {0xffffffffffffffff}, {0x1000, 0x6}, {0x8, 0xfffffffffffffff7}, {0xfffffffffffffffa, 0x402}, {0x3, 0x10000}, {0x6}, {0xffffffffffffff01, 0x1}, {0x3, 0x1}, {0x7, 0x89}, {0x0, 0x1}, {0x4, 0x8}, {0x6a0, 0x6}, {0x8, 0x10001}, {0xc65, 0xfff}, {0x3, 0x9}, {0x1, 0x9}, {0xfffffffffffff4a1, 0x2}, {0x9, 0xffffffffffffffff}, {0x698b5507, 0x1}, {0x8001, 0x5}, {0x447d, 0xffffffffffffff81}, {0xba, 0x40}, {0xffff, 0x1}, {0x7, 0x1}, {0xb7c2, 0x539}, {0x10}, {0xcd, 0x2532a101}, {0x3}, {0x7f, 0x2ee}, {0x2, 0x1}, {0x3}, {0x5, 0x3}, {0xfff, 0x3}, {0x0, 0x1}, {0x7ff, 0x7}, {0xfffffffffffffffc, 0x1}, {0x0, 0x9}, {0xa827, 0x4}, {0x4, 0x100000001}, {0x1, 0x89d5}, {0xfffffffffffffffe, 0xfffffffffffffffd}, {0xfffffffffffffff9, 0x7fffffff}, {0x4}, {0x200, 0x7}, {0x2, 0x8}, {0xb, 0x5}, {0x7ba2}, {0xb8d7, 0x4}, {0xc4fb, 0x2}, {0x1ff}, {0x4, 0x6}, {0x6, 0x2}, {0x68c, 0x101}, {0x6, 0x4}, {0x6c1, 0x16da}, {0x4b, 0x4}, {0x9, 0x9c}, {0xd}, {0x10001, 0x8000000000000001}, {0x4, 0x100}, {0x8000000000000001, 0x544}, {0xffff, 0x800}, {0x517d, 0xfffffffffffffff7}, {0x80000001, 0x6}, {0x8, 0x7}, {0x32d2, 0x81}, {0x7ff, 0x40}, {0x4, 0x10}, {0x100, 0x8c1f}, {0x3, 0x3}, {0xb17, 0x3}, {0x1, 0x8}, {0x6, 0x3}, {0x6, 0x4}, {0xfffffffffffffffb, 0x8001}, {0x2, 0x8}, {0x2, 0x2}, {0x7, 0x5}, {0x2, 0x1}, {0x6, 0x8}, {0x7d, 0x2}, {0x1, 0x8}, {0x10, 0xf}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0xb5}, {0x0, 0x1}, {0x9, 0x7a503dfa}, {0x7, 0x7}, {0x10001, 0x5}, {0x93e7, 0x5}, {0x3, 0x9}, {0xffffffff, 0x8000000000000001}, {0x1, 0xfff}, {0xfc, 0x100000000}, {0x80000000, 0x401}, {0xe4, 0x7fffffff}, {0x6, 0x5}, {0x6d8a, 0x3}, {0x8, 0xfffffffffffffc00}, {0x2, 0x101}, {0xffffffff8ff7e192, 0x5}, {0x8, 0xbe}, {0x6, 0x9}, {0x400, 0x8}, {0xa6, 0x2}, {0xffffffffffffffff, 0x2}, {0x4, 0x829}, {0x7, 0x8c3e}, {0x600, 0x2400000000000000}, {0x9}, {0xd, 0xe}, {0x6, 0xfffffffffffffffb}, {0xfffffffffffffff6, 0xc000000000000000}, {0xfffffffffffffff8, 0x4}, {0xfff, 0x58}, {0x87, 0xb8}, {0x3, 0x4}, {0x8f, 0x8}, {0x8, 0x100}, {0x1, 0x6e70}, {0x10, 0x6}, {0x5, 0x1}, {0x7ff, 0xda}, {0x6, 0x7fffffff}, {0x7f, 0x6}, {0xfffffffffffffffc, 0x8}, {0x4, 0x322}, {0x7, 0x81}, {0x5, 0x1}, {0x0, 0x4b}, {0x401}, {0x3, 0x2}, {0x7ff}, {0x6, 0x7fffffffffffffff}, {0xe0, 0x6}, {0x4, 0x7ff}, {0x8, 0xf}, {0x8, 0x8}, {0xa0, 0x4faf}, {0x3, 0x40}, {0x3, 0x8000000000000001}, {0x80000001, 0x3}, {0x3, 0x100000000}, {0xfffffffffffff937, 0x5}, {0x80, 0xff}, {0xffff, 0x2}, {0x1ff, 0x8}, {0x6, 0x3}, {0x6, 0x8}, {0x40, 0x9}, {0x3b, 0xffffffffffffffff}, {0x19b, 0x4}, {0x3, 0xe}, {0x7}, {0x8, 0x884}, {0x9, 0x400}, {0x200, 0x401}, {0x8, 0xff}, {0x8, 0x4}, {0x6000, 0x3}, {0x6, 0x7fffffff}, {0x4, 0x3}, {0x1, 0x3}, {0xfffffffffffffff7, 0xa43}, {0x100, 0x10}, {0x6, 0x7}, {0xfffffffffffffe00, 0xffffffffffffffff}, {0x5, 0x800}, {0x400, 0x5f}, {0xa3b0, 0x5}, {0x7, 0xb700}, {0xd2, 0xe5}, {0x8, 0x90}, {0x2, 0xc6}, {0x1, 0x8}, {0x4, 0x10000}, {0xa232, 0x6}, {0x0, 0xc1aa}, {0x3970, 0x1ab8}, {0x7, 0xfffffffffffffff8}, {0x3, 0x8000}, {0x6328, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x4}, {0x8, 0x4}, {0x0, 0x1}, {0x3930}, {0xfffffffffffffffd, 0x6}, {0x3, 0x8}, {0x2, 0x8}, {0xcc, 0xffffffffffffffff}, {0x2, 0x4}, {0x4, 0x101}, {0x6, 0x200}, {0x8a7}, {0x0, 0x8}, {0x0, 0x5}, {0x8, 0x4}, {0x9, 0x1}, {0x6}, {0x40, 0xa}, {0x10, 0x100000000}, {0x100000001, 0xffffffffffff4f50}, {0xa4f, 0x2}, {0x5, 0x3}, {0x5, 0x6}, {0x80000000, 0x5}, {0xffffffffffff8000, 0x9}, {0x1000, 0xffffffffffffffd1}, {0x7, 0x1}, {0x0, 0x1}, {0x101, 0x2}, {0x8}, {0x0, 0x8}, {0x40000000007f, 0x9e1e}, {0x0, 0x8}, {0x3, 0x1}, {0x7fffffff, 0x3}, {0xa, 0xfffffffffffffffd}]}, &(0x7f0000001140)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x9}, &(0x7f0000001280)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f00000012c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000001300)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000003}, [{}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0xead}, {0x9, 0x1}, {0x800, 0x2}, {0x9, 0xbc6}, {0x5c0, 0xb71ca5e}, {0x5, 0x51480000}, {0x3, 0x3}, {0x15, 0x6}, {0x8000000000000001, 0xffffffff80000001}, {0x3, 0xe}, {0xf074, 0xc1}, {0x8, 0x1}, {0x0, 0x8}, {0x81, 0x8}, {0x9, 0x8000000000000001}, {0xad77, 0x9}, {0x76, 0x8}, {0xd}, {0x3}, {0x9, 0x7}, {0x4, 0xe4de}, {0x4, 0x6}, {0x80, 0x3}, {0x53d, 0x8}, {0x4, 0x3ff}, {0x3, 0xffffffffffffffff}, {0xc2}, {0x665, 0x2}, {0x5, 0x5}, {0x0, 0x7aa}, {0x8, 0x9}, {0x5b8}, {0x0, 0x87ea}, {0x53}, {0xb563, 0x10}, {0x657, 0x9}, {0xb75e, 0x7}, {0x200, 0x4}, {0x358, 0x7fffffffffffffff}, {0x7, 0x8001}, {0x100, 0x9}, {0x7, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x6}, {0x1, 0xcd4}, {0x9, 0x7}, {0x2, 0x81}, {0x19f9, 0x3d5}, {0x3, 0xfffffffffffffff8}, {0x6, 0x3}, {0x400}, {0x2, 0x7}, {0x4, 0xc48}, {0xa, 0x8}, {0x1, 0x69}, {0x1, 0x200}, {0x27, 0xbca}, {0x3, 0x4c}, {0x480000000000000, 0x5}, {0x8, 0xffffffff}, {0x2c, 0x1}, {0x1ff, 0x1}, {0x5, 0x2000}, {0x8, 0x8}, {0x4, 0x1}, {0xffffffffffffffff, 0x1}, {0xc5, 0x8}, {0x5, 0xbd}, {0x100, 0x7}, {0x10001, 0x9}, {0x100000000, 0x9}, {0x10001, 0xe00000000}, {0x96, 0x1000000000000000}, {0x40, 0x7}, {0x1, 0x62}, {0x1000, 0xfffffffffffffff5}, {0x7, 0x6}, {0xfffffffffffffe89, 0x6}, {0x2, 0x5}, {0x5, 0xb}, {0x7f, 0x101}, {0x800, 0xfffffffffffff1e9}, {0x5, 0x278}, {0x2, 0x6}, {0x32b, 0x6}, {0x1, 0x8}, {0x8, 0x8}, {0x66c8ceab, 0x4447}, {0x80000001, 0x4}, {0x10, 0x209d}, {0xffffffff}, {0xfffffffffffffffd, 0x5}, {0x3, 0x9}, {}, {0x5f32}, {0xfffffffffffffffe, 0x10}, {0xbc68, 0x5}, {0x78, 0x9}, {0x4, 0x3}, {0x7, 0x1}, {0x3, 0x3}, {0x100000001, 0x8}, {0x9, 0x40}, {0x2, 0xfffffffffffffff8}, {0x0, 0x7}, {0xb145, 0x7}, {0xfff, 0x1047}, {0x3, 0xf}, {0x5, 0x4}, {0x5, 0x2}, {0xfffffffffffffff9, 0x80}, {0xffff, 0x8}, {0x5, 0x7fffffff}, {0x360, 0x6}, {0x3}, {0x6, 0x96}, {0x5, 0x7}, {0x27}, {0x3a, 0x9}, {0xffffffff, 0x4}, {0x9, 0xc42}, {0x1, 0x100000}, {0x5, 0xffffffff}, {0x2, 0x2}, {0xa173, 0x3142}, {0x9, 0x3}, {0x9, 0x6}, {0xb82}, {0x1f2d, 0x7}, {0x5b, 0x6}, {0x9, 0x5}, {0x1, 0x81}, {0x6b44, 0xffffffffffffffff}, {0x3, 0x8000000000000000}, {0x8000000000000001, 0xb}, {0x7, 0xffffffffa49763cb}, {0x3, 0x8}, {0x40, 0x80c9}, {0x8}, {0x540c, 0x4}, {0x401, 0xffff}, {0x200, 0x9}, {0x2, 0x1}, {0xbb, 0x90c}, {0x8, 0x10001}, {0xfffffffffffffffe, 0x7d3}, {0x359dc2d7, 0x80000000}, {0x4db91391, 0x2}, {0x4, 0x9b}, {0xfffffffffffff716, 0x6}, {0x81, 0x40}, {0x9, 0x4}, {0x4}, {0x3, 0x9}, {0x10000, 0x200}, {0x8}, {0x6, 0x7}, {0x4, 0x2}, {0xc, 0x6}, {0xff, 0x2}, {0x7ff, 0x4}, {0x7, 0xd}, {0x0, 0x2}, {0xffffffffffffff01, 0x7}, {0x1ff, 0x93}, {0x4, 0x9}, {0x3, 0x1}, {0x80000000, 0x80000000}, {0xffff}, {0x8}, {0x6, 0x72f}, {0x9, 0xfffffffffffffff9}, {0x5, 0xc8}, {0x7}, {0x7d, 0x4deb}, {0x5, 0x2}, {0x7fffffffffffffff, 0xfffffffffffffff9}, {0x1000, 0xe}, {0x6, 0x2}, {0x0, 0x9}, {0xfffffffffffffffb, 0xfff}, {0xd1, 0x400}, {0x1, 0xb5c1be1}, {0x2, 0x5}, {0x3, 0x4}, {0x292, 0x3}, {0xfffffffffffffffc, 0x3}, {0x1, 0x5}, {0xffffffffffffffff, 0x27a40962}, {0x1, 0x69188363}, {0x1}, {0x4, 0x3}, {0x5, 0x1000}, {0x6}, {0x9, 0xfffffffffffffff9}, {0x9813, 0x100}, {0x79, 0x8}, {0x0, 0x5}, {0xb9a0, 0x7}, {0x2, 0x2}, {0x3c7, 0x4}, {0x7, 0x5}, {0x7}, {0x7, 0x1}, {0xfff, 0x5}, {0x4}, {0xcde, 0x6}, {0x0, 0xffff}, {0x5, 0x8}, {0x3, 0xfffffffffffffffb}, {0x1ff, 0x1000}, {0x3, 0x1}, {0xffff}, {0x758, 0x4}, {0xffffffffffff0001, 0x2}, {0x8000, 0x1}, {0x4, 0x1}, {0x7fffffffffffffff, 0x3}, {0x2, 0x6}, {0x401, 0x81}, {0x7, 0x8}, {0x7f, 0x12b}, {0x276, 0xdc}, {0x6, 0x5}, {0x8, 0x800}, {0xfffffffffffffff5, 0xc9}, {0x8, 0xfffffffffffffffc}, {0x97cf, 0x81}, {0x3d9b05f5, 0x6}, {0x81, 0x5}, {0x1a, 0x80000000}, {0x6, 0x10}, {0x5, 0xffff}, {0x2400000, 0x37}, {0xb, 0x6}, {0x10001, 0x7fffffff}, {0x3ff, 0x3}, {0xb3, 0x1}, {0xffffffffffffffff, 0xb45}, {0x8001, 0x9}, {0x2, 0x2c8}, {0x8, 0xed98}, {0x7, 0x80000000}, {0x2, 0x4}, {0x0, 0x81}, {0x4, 0x3}, {0xc}, {0x2, 0x48f9}, {0x7ff, 0x80}, {0x7f, 0x400}, {0x7, 0x4}]}, &(0x7f0000002340)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000002380)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x983}, &(0x7f00000024c0)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002500)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000002540)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x8001}, &(0x7f0000002680)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x3, 0x9}, {0x6, 0x81}, {0x6, 0x9}, {0x2, 0x10}, {0xffffffffffffffef, 0x6}, {0x9, 0x9}, {0x0, 0x9}, {0x9, 0xe}, {0x3, 0x8000}, {0x9, 0xde3}, {0xe5c, 0x7}, {0x7, 0x8000}, {0x2, 0xd23}, {0x5, 0x3}, {}, {0x2, 0x100}, {0x4}, {0x9, 0x8}, {0x0, 0xf}, {0x1000, 0x3ff}, {0x8001, 0x7}, {0x7f, 0x800}, {0x6, 0x1}, {0x9, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x40000000, 0x669e}, {0x400}, {0x1, 0xc8cb}, {0xfffffffffffffffb, 0x4}, {0x101, 0x6}, {0x3, 0x4}, {0x8, 0x3}, {0xfffffffffffffff9, 0x1}, {0x0, 0x8f0}, {0xfffffffffffffff8, 0xffffffffffffff29}, {0x5, 0x4}, {0xb, 0xfffffffffffffffa}, {0x7, 0x9}, {0x10001, 0x100000000}, {0xb, 0x3}, {0x1000, 0x6}, {0x5, 0x2}, {0xfffffffeffffffff, 0x7}, {0x7fffffffffffffff, 0x7}, {0x6, 0x9}, {0x0, 0x5}, {0x8, 0x1}, {0x3e, 0x6}, {0x2, 0x40}, {0x7, 0xfffffffffffffff9}, {0x1, 0xa}, {0x6, 0x62b}, {0x80000003, 0x80}, {0xb571, 0x3df0}, {0xafc800, 0x7f7}, {0x4, 0x7fffffffffffffff}, {0x2, 0xa}, {0x5, 0x161}, {0x9, 0x80}, {0x6, 0x8}, {0xc, 0x3}, {0xfffffffffffffffa, 0x100}, {0x95, 0x4}, {0x10000, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x2, 0x2}, {0x8, 0x9}, {0x14000000000, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x3ff}, {0x2, 0x101}, {0x5, 0x6}, {0x1d4, 0x8}, {0xffffffffffffffff, 0x101}, {0x50, 0x8}, {0x8000000000000000, 0x5}, {0x9, 0x1ff}, {0x2, 0x1}, {0xef15, 0x6}, {0x0, 0x8000}, {0x3}, {0xe75}, {0x8000}, {0x7ff, 0x8b3}, {0x1, 0x7}, {0x9, 0xfffffffffffffffc}, {0x0, 0x100000000}, {0x9, 0xf6df}, {0x6, 0x1d}, {0xd, 0x3}, {0x4, 0x80000001}, {0x8, 0x1}, {0x0, 0x7}, {0x10000, 0x47f0bce7}, {0x6, 0x9d1}, {0x8, 0xfdac}, {0x400, 0x8d}, {0xbf, 0x5}, {0x3, 0x7ff}, {0x9, 0xcb}, {0x1, 0x1}, {0x8, 0x3}, {0x0, 0x4}, {0x5}, {0xc4, 0xe}, {0x2, 0x9}, {0x4, 0x8}, {0x1e, 0x3}, {0x0, 0x20000}, {0x3, 0x13f}, {0x1, 0x5}, {0x8, 0xbd}, {0x7, 0x5}, {0x6, 0x5}, {0x2554, 0x8000}, {0x7, 0x7}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x9, 0x4}, {0x8, 0x7}, {0x1, 0xffffffff}, {0x7fff, 0x4}, {0x7, 0x4}, {0x1942, 0x1}, {0xb3a, 0x8}, {0x7fb, 0x3}, {0x0, 0xa}, {0xffffffffffffffc0, 0x9}, {0x4, 0x1}, {0x0, 0x40}, {0x100, 0xd6}, {0x2, 0xfa}, {0x4, 0x5}, {0xca34, 0x7}, {0x7f, 0x6}, {0xa, 0x2}, {0x5, 0x2}, {0x0, 0x2}, {0x7, 0x80000001}, {0x7, 0x4}, {0xb6f0, 0xcad}, {0x4, 0xffffffff00000000}, {0x1, 0x10000}, {0x7cef, 0x5}, {0x6, 0x9}, {0x3, 0x4}, {0x5, 0x7fffffff}, {0x5e3, 0x2}, {0xfffffffffffffffa, 0x6}, {0x9, 0xc7}, {0x9, 0x9}, {0x80000000, 0x9}, {0x7ff, 0x7}, {0x81, 0x1}, {0x2, 0xe}, {0x1, 0xa64}, {0xffffffff, 0x7}, {0xe7, 0xfffffffffffffff7}, {0x7dd1, 0x2}, {0x2, 0x321}, {0x2, 0x7fffffff}, {0x8001, 0xb}, {0x1, 0xff}, {0xc, 0x7}, {0x2, 0x9}, {0x91, 0x7b}, {0xc}, {0x3, 0xe}, {0x10000, 0x10}, {0xa49c, 0x7d59}, {0xc, 0x6}, {0x6, 0x400000000000}, {0x5, 0x4}, {0xffffffffffffffff, 0x5}, {0x8, 0x1073}, {0x40000000, 0x4}, {0x8, 0x8}, {0x2, 0x6}, {0xb, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0xde0e, 0x8000000000000001}, {0xa584, 0x2}, {0xfffffffffffffffd, 0x4}, {0x8d, 0x80}, {0x3, 0x100000000}, {0x2e, 0x1000}, {0x185}, {0xffffffff, 0x2}, {0x9, 0x2}, {0x3ff, 0x7}, {0x7, 0x140000000000}, {0x2, 0x7}, {0x5850, 0x10001}, {0x73b, 0x6588}, {0x1, 0x7}, {0x8, 0x2}, {0xe63e, 0x100000001}, {0x8, 0x5}, {0x1, 0x8}, {0x8, 0x88}, {0x7, 0x9}, {0x3, 0x4}, {0xb, 0x4}, {0xf124, 0x2}, {0x9, 0xe}, {0x5, 0xc2}, {0x400, 0x80}, {0x4d, 0x3}, {0x4, 0x100000001}, {0x9, 0x4}, {0x6b5, 0x33000000000000}, {0x1c000000000000, 0x7fffffff}, {0x4}, {0x5, 0x5}, {0x1, 0x100}, {0x91, 0x8}, {0x80, 0x9}, {0x7, 0xff}, {0x1}, {0x6, 0x1}, {0x1, 0x1}, {0xf, 0x9}, {0x8000000000000000, 0x1}, {0x8, 0x2}, {0x3, 0xf}, {0x8, 0x10}, {0xde4, 0xb}, {0x1d82, 0x9}, {0x2, 0x2}, {0x2, 0x2}, {0x9b6}, {0x5d, 0xa}, {0x800, 0x4}, {0x5, 0x80000000}, {0x8000, 0x9}, {0x80000001, 0x1}, {0x199d3474, 0x5}, {0x9}, {0x47e, 0x7f}, {0xffffffffffffffc0}, {0x17e, 0x8}, {0xfffffffffffffffe}, {0x5}, {0x8, 0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x6}, {0x0, 0x2}, {0x9, 0x1a8}]}, &(0x7f00000036c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000003700)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000003740)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f00000037c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000003800)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000001}, [{0x9, 0x4}, {0x9, 0x400}, {0xfffffffffffffffb, 0x8000000000000001}, {0x6, 0x80}, {0xfff, 0x400000000000}, {0x401, 0xfffffffffffffffa}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x8000}, {0xffffffffdd00ff27, 0x3}, {0x9, 0x101}, {0x1, 0xe}, {0x80, 0x41d9}, {0x5, 0x3}, {0x9, 0x977a}, {0x3, 0x8}, {0x100000000, 0x4}, {0x5}, {0x9, 0x7}, {0x1, 0xeba2000000000000}, {0x8, 0x4}, {0x1, 0x9}, {0x3, 0xe3}, {0x1b1e, 0x7fffffff}, {0x2}, {0x0, 0xd}, {0x2, 0x2}, {0xf, 0x5}, {0xffff, 0x4ea}, {0x3, 0x10000}, {0x0, 0x5}, {0x4, 0x100}, {0x7, 0xa}, {0x7, 0xffffffffffffffff}, {0x6, 0x6}, {0x1, 0x2}, {0x101, 0x2}, {0x1, 0x4}, {0x7, 0x200}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x6c}, {0x8001, 0x7ff}, {0x6, 0xfffffffffffffffc}, {0x4, 0x7}, {0x6b6, 0x3}, {0x19, 0x1}, {0xaf7, 0x9fb}, {0x6, 0x4}, {0x7f, 0x9}, {0x1, 0x31b84fcd}, {0xffff, 0x90d}, {0x9, 0x9}, {0x2, 0x8d1d}, {0x1, 0x9}, {0x200, 0x4}, {0x80, 0xfffffffffffffffc}, {0x0, 0x1000}, {0x7, 0x3e1}, {0x80, 0x8}, {0x6, 0x7f}, {0xffffffffffffffff, 0x1}, {0x6, 0x91}, {0x6, 0x40}, {0x5, 0x2}, {0x6, 0x4}, {0x2, 0x100}, {0x7ff, 0x101}, {0x7fffffffffffffff, 0x5}, {0xc4ac, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x8}, {0xa7fc, 0x5}, {0x81, 0x7}, {0x17, 0x4}, {0x56a3, 0x5}, {0xa, 0x9}, {0x3, 0x8}, {0x8000000000000000, 0x4}, {0x75, 0x6}, {0x8000000000000000, 0x2}, {0x7fff, 0x3}, {0x80, 0x6}, {0x0, 0x8000000000000000}, {0x9, 0x1}, {0x4721}, {0x2, 0x6}, {0x6, 0x3}, {0x4, 0x100}, {0x5, 0xfff}, {0x2, 0xf7}, {0x3ff, 0x7}, {0x5, 0x4}, {0xffffffffffffffff, 0x6}, {0x4, 0xc1bf}, {0x1, 0xb}, {0x2, 0x9}, {0x2}, {0x4ea2, 0x5}, {0x6, 0x7fffffffffffffff}, {0x2, 0xffffffff}, {0x1000000000000, 0x1}, {0x7ff, 0x401}, {0x81, 0x8}, {0x1, 0xffffffff}, {0x5de, 0x100000001}, {0x9, 0x8}, {0x4e50, 0x40}, {0x9, 0x2}, {0x6, 0xa}, {0x3, 0x8d}, {0x80000000, 0x8}, {0x3, 0x4}, {0xc, 0x8}, {0x88ef, 0x7}, {0x8, 0x10001}, {0x101, 0xf000}, {0x2, 0x1}, {0xfff, 0x4}, {0x7fff, 0x7}, {0x5, 0x8001}, {0x1000, 0x1}, {0x9, 0x8000000000000000}, {0x2, 0x273e}, {0x90, 0xe00000000}, {0x73d70d72}, {0x7, 0x10001}, {0x3, 0x100000001}, {0x3, 0x7}, {0x5, 0x81}, {0xb1d, 0x6}, {0xa88, 0x5}, {0x9, 0x10000}, {0x2, 0x9}, {0x6d, 0x2}, {0x3, 0x81}, {0x8000000000000000, 0x4}, {0x9c, 0x3}, {0x0, 0x2}, {0xb1af, 0x5}, {0x2, 0x4}, {0x101, 0x2}, {0xed4e, 0x7}, {0x6, 0x1}, {0x1, 0x80000000}, {0x82, 0x3}, {0x1, 0xba89}, {0x0, 0x7}, {0x200, 0x6}, {0x484, 0x9}, {0x9, 0x7}, {0x5, 0xb61e}, {0x3, 0x7}, {0xffffffffffff0001, 0x7}, {0x2}, {0x9, 0x1}, {0x3, 0x7c7d5141}, {0x7fffffff, 0x3}, {0x200, 0x9}, {0x0, 0xffffffffffffffff}, {0x3, 0x2}, {0xfffffffffffffffa, 0x400}, {0xf59}, {0xe83, 0xfffffffffffffff4}, {0x4, 0x4}, {0x7fffffffffffffff, 0x99b1}, {0x9, 0xd0bc}, {0x0, 0x3}, {0x7, 0xc}, {0x3, 0x9}, {0xc, 0xa63}, {0x2, 0x8}, {0x7, 0x3}, {0x7, 0x7ff}, {0xfff, 0x6}, {0x8000, 0x5}, {0x0, 0x8000000000000000}, {0x9f4, 0x4000000000}, {0xb2b7, 0x7}, {0xbb73, 0x5}, {0x8, 0xfffffffffffffffb}, {0xff, 0xff}, {0x6, 0x8}, {0x2, 0x47c}, {0x9ebf, 0x69}, {0x10, 0xfffffffffffffffa}, {0x131f89f7, 0x3}, {0x3db3, 0x235}, {0x95fb, 0x3}, {0x2, 0x5000000000}, {0x9, 0x1}, {0x8000000000000000, 0xba8}, {0x1, 0x8}, {0xfff, 0xfff}, {0x1344, 0x80}, {0x1ff, 0x32}, {0x9, 0x8}, {0xff, 0xda2}, {0xcf9, 0x9}, {0x8, 0x2}, {0x2, 0x5}, {0x9, 0x8d}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x9}, {0x87cb, 0x4a}, {0x7, 0x3}, {0xc4e, 0x6}, {0x7, 0xf98b}, {0x8, 0x80}, {0xe000000, 0x6}, {0x8000000000000, 0x8000000000000000}, {0xe0ec, 0xfffffffffffffffc}, {0x6a13e405, 0x2}, {0xa1, 0x3}, {0x7fffffff, 0x9}, {0x1ff0000000000000, 0xd4e690a}, {0x9, 0x7fffffff}, {0x3, 0x80000000000}, {0x3}, {0x2, 0x10000}, {0x5, 0x5}, {0x0, 0xe4}, {0x1000, 0x8000000000000000}, {0x1, 0x4}, {0x2, 0xf9}, {0x9, 0x100000001}, {0x9, 0x7fffffffffffffff}, {0x8e, 0x7fffffffffffffff}, {0x3ff, 0x1}, {0x43e, 0x2}, {0x7, 0x7}, {0x7, 0x7fff}, {0x6, 0x8}, {0x7, 0x9}, {0x10, 0xffffffff}, {0x5, 0x80000000}, {0xc0, 0xb}, {0x3, 0x8}, {0x4, 0x9}, {0x8, 0x8}, {0x4, 0x7}, {0x9, 0x2}, {0x249a, 0xd85}, {0x8, 0x3}, {0xefe3, 0x3}, {0x0, 0xffffffffffffff71}, {0x9, 0x7fffffffffffffff}, {0x100, 0x401}, {0x100000001}, {0x4, 0x19f}]}, &(0x7f0000004840)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x355}, &(0x7f0000004980)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000049c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x5}, &(0x7f0000004b00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000004b40)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000004b80)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f0000004c00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x5ec0, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x2da}, {0x4, 0x8}, {0xaf7, 0x1}, {0xfffffffffffffe01, 0x9}, {0x0, 0x8}, {0x1000, 0x50d}, {0x6, 0x48}, {0x18e1, 0xc83}, {0x6, 0xf2000000}, {0xe5, 0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x81, 0x6}, {0xc5c, 0x5}, {0x80000000, 0xdc}, {0x800, 0x9}, {0x3, 0x1}, {0x7, 0x1ff}, {0x100000001, 0x10000}, {0xffff, 0x1}, {0x1, 0x2}, {0x8000000000000001, 0x8}, {0xffff, 0x5}, {0x8, 0x1800000000000000}, {0xb, 0x8}, {0x6, 0x6}, {0x2, 0x67}, {0x42c1, 0x4}, {0xb73, 0x9}, {0x5, 0x3}, {0xfffffffffffffff8, 0x6}, {0x200, 0x100000000}, {0x332, 0x1}, {0x10000, 0x77}, {0x10, 0x8}, {0x3, 0x9}, {0x5, 0x4}, {0xf, 0xffffffff}, {0x3, 0x1400}, {0x6, 0x4}, {0xd476, 0x84dd}, {0xfffffffffffffff7, 0x100}, {0x4, 0x11}, {0x8871, 0x340}, {0xff, 0x3}, {0x0, 0x8}, {0x7, 0x1}, {0x7, 0x4}, {0x7, 0x1}, {0x1, 0x8}, {0x19bacee0, 0x3ff}, {0x4, 0x4}, {0x100000000, 0x3}, {0x1ff, 0x8000000000000001}, {0x59e, 0x7fffffffffffffff}, {0x7, 0xffffffffffffff01}, {0x7, 0x283}, {0xfff, 0x2}, {0x8, 0x3}, {0xed, 0x5}, {0x4, 0xffffffffffffffff}, {0x62, 0x2}, {0x1, 0x40}, {0x3, 0xad}, {0x8, 0x1}, {0xc, 0x2}, {0x100, 0xd}, {0x9, 0xf}, {0x3, 0x85}, {0x0, 0x3ff}, {0x6}, {0x8, 0x8001}, {0x7f, 0x9}, {0x2, 0x9}, {0x280000000, 0x100}, {0x6, 0x4}, {0x6, 0xffffffff90e6b5fd}, {0xbcf, 0x5}, {0x1, 0x1000}, {0x1, 0x4}, {0xfb7, 0x3}, {0x9, 0x3}, {0x200, 0x200}, {0x6, 0x5}, {0x9, 0x9}, {0xfffffffffffffc00, 0x7}, {0x6, 0xabb5}, {0x2, 0x5}, {0x2}, {0x0, 0xd5}, {0xaa3d, 0x8}, {0xf4c, 0xff}, {0xf, 0x3}, {0x1, 0x6}, {0x0, 0xcd1}, {0x5, 0x7}, {0x2, 0x1ba6}, {0xa, 0xa9}, {0x4, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x6}, {0x6, 0x40}, {0xfffffffffffffff8, 0x4}, {0x3, 0xfffffffffffffffe}, {0x2, 0xffff}, {0x7, 0x3}, {0xa40, 0xfff}, {0x3, 0xffff}, {0x9, 0x2}, {0x7, 0x7f}, {0x8, 0x4}, {0x6, 0x2}, {0xfffffffffffffff7, 0xfffffffffffffff8}, {0x0, 0x2}, {0x7, 0x200}, {0x10, 0x8}, {0x1, 0x6}, {0x1, 0x5}, {0x3, 0x7ff}, {0x9, 0xa1c}, {0x8000000000000001, 0x6}, {0x1, 0x3}, {0x9, 0x6}, {0xfffffffffffffffa, 0x1}, {0x8, 0x2}, {0x2c8c30ca, 0x3}, {0x7}, {0x7, 0xa}, {0x7, 0x1}, {0x64, 0x3}, {0x6, 0x7}, {0xb3, 0x3}, {0x0, 0x101}, {0x100000001, 0x4}, {0x0, 0x9337}, {0x8, 0x5}, {0x7, 0x1}, {0x0, 0x6}, {0x4, 0xfff}, {0x6, 0x1}, {0x8, 0x7}, {0xfffffffffffffffa, 0x80000000}, {0x1, 0xc231}, {0x800, 0x1}, {0x2, 0x9}, {0x1, 0xffffffffffffff01}, {0x3, 0x1}, {0xf, 0x2}, {0x3, 0x3}, {0x6, 0x14b8c058}, {}, {0x1, 0x7}, {0x6, 0x4}, {0x4, 0x9}, {0x4e, 0x80000001}, {0x9, 0x1}, {0x1, 0x2}, {0x6, 0xcc41}, {0x6, 0x7}, {0x2, 0x4}, {0xffffffff, 0x7}, {0x1, 0x1}, {0x0, 0xb}, {0x7, 0x8}, {0x3, 0x7}, {0x9, 0x8}, {0x0, 0x800}, {0x81, 0x6}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x8000000000000000}, {0x10, 0x2}, {0x5, 0x8}, {0x1400000000000000, 0x5}, {0x68, 0x6}, {0xfffffffffffffffd, 0x7}, {0xffffffffffffffc0, 0x1}, {0xfffffffffffffff7}, {0x200, 0x1ff}, {0x1, 0x20000000000000}, {0x3, 0x7}, {0xe, 0x200}, {0x101, 0x3}, {0x9, 0x3925bd4c}, {0x9, 0x1}, {0xab1f, 0x8}, {0x9, 0x2}, {0x1, 0x2}, {0x42675e0b, 0xe}, {0x7, 0xa9}, {0xbb1, 0x2}, {0x2}, {0x5540000, 0xff}, {0x2, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0x8000000000000001}, {0x40, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x81, 0x4}, {0x6, 0x9}, {0x81}, {0x3, 0x3}, {0xbccd, 0x7fffffffffffffff}, {0x265, 0x4}, {0x9, 0x9}, {0x2, 0xfffffffffffffffa}, {0x86, 0x6e}, {0xbd55, 0x80000001}, {0xa, 0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x9}, {0x7286dacc, 0x3}, {0x800, 0xfffffffffffff5ae}, {0xe, 0x3}, {}, {0x0, 0x8}, {0x9, 0x30000}, {0x7fffffff, 0x10000}, {0x2, 0x7}, {0x1326, 0x6}, {0x10, 0x6}, {0x5, 0x7}, {0x7, 0x8}, {0x80, 0x100000001}, {0x7, 0xffffffffffffff43}, {0x2, 0x50cb}, {0x4, 0x4}, {0x7, 0x80000000}, {0x2, 0x7}, {0x2, 0x400}, {0x0, 0x8}, {0xd, 0x2}, {0x5, 0x2}, {0x7e, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x5, 0x3}, {0x100000000, 0x80000001}, {0x1e15d360, 0x40}, {0x2, 0x3}, {0x1ff, 0x1}, {0x100, 0x10001}, {0x42a6feca, 0x800}, {0x4eb, 0xffffffffffffffff}, {0x6, 0x9}, {0xc, 0x80000000}, {0x2, 0x1}, {0x1, 0x4}]}, &(0x7f0000005c40)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000005c80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xa0000001}}, &(0x7f0000005cc0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000005d00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000005d40)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x7f}, &(0x7f0000005e80)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005ec0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x175}, &(0x7f0000006000)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, 0x0, &(0x7f0000006080)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f00000060c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000006100)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000006140)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000006180)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000061c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xb54b568136a0af71}}, &(0x7f0000006200)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000006240)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x180000001}}, &(0x7f0000006280)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0xf229}, &(0x7f00000063c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000003}}, &(0x7f0000006400)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000006440)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x60000000}, [{0xfffffffffffffffa, 0x7901}, {0x7fffffffffffffff, 0xfffffffffffffff7}, {0x1, 0x3}, {0x100000000, 0x10001}, {0x400, 0x8}, {0x10000, 0x7e0d}, {0x16f, 0x145}, {0x1, 0x5}, {0x0, 0x2}, {0x8, 0x3}, {0x1, 0x9}, {0x10, 0xfffffffffffffffb}, {0x1, 0x10001}, {0x2, 0x7}, {0x7, 0x2}, {0x2, 0x187}, {0x4, 0x4}, {0x9, 0x8}, {0xffffffff, 0x2}, {0xce4, 0x4112}, {0xfffffffffffffffd, 0x8}, {0x8, 0x5}, {0x7ff, 0x4}, {0xd7, 0x10}, {0x2, 0x4}, {0xf, 0x7ff}, {0x1, 0x2}, {0x1, 0x100000001}, {0x7, 0x6}, {0xed1, 0x8000}, {0x81}, {0x6, 0xc}, {0x5d1, 0x3ff}, {0x2, 0x1}, {0x5, 0x7}, {0x8000000000000000, 0x5}, {0xfffffffffffffffb, 0x9}, {0x9, 0xffffffffffffffff}, {0x1be8, 0xde5a}, {0xfff, 0x7fff}, {0x8000, 0x8}, {0x10007ff, 0x8}, {0x6, 0x3ff}, {0x2, 0x200}, {0x3, 0xffffffffffffffff}, {0x1, 0x3}, {0x8, 0xffff}, {0x7, 0x5}, {0x3, 0x2f3a}, {0x8, 0x9}, {0x1ff, 0x6}, {0x40, 0x4}, {0x1, 0x3dda1a8f}, {0x2, 0x35}, {0x8, 0x80000000}, {0x3, 0x101}, {0x6, 0x8}, {0x5, 0x7d4}, {0x9, 0x4}, {0xffff, 0xaa06}, {0x3, 0x9}, {0x1, 0x200}, {0x6, 0x7}, {0x6, 0x8}, {0x3, 0x8}, {0x1000100000000, 0x6}, {0x9ed9, 0x4}, {0x8001, 0x9}, {0x3, 0x1000}, {0xee, 0x9}, {0x7, 0x84d}, {0x4, 0x1}, {0x8, 0x101}, {0x1, 0xfffffffffffffff7}, {0xae03, 0x4}, {0x4, 0x2}, {0x6, 0x7fff}, {0x6, 0x7}, {0x3, 0x5}, {0xa, 0x6}, {0x1cd8}, {0x1, 0x4}, {0x6, 0x80000001}, {0x10, 0x38000}, {0x400, 0x8}, {0xfffffffffffffffc, 0x2ca}, {0x2, 0x9}, {0xf1f9}, {0x100000001, 0x9}, {0x8000000000000001, 0x1}, {0x401, 0x7fffffffffffffff}, {0x1000, 0x8}, {0x7ff}, {0xfffffffffffff001, 0x3}, {0x2, 0x2e}, {0xeb, 0x6}, {0x9, 0x1}, {0x10000, 0xffffffffffffffff}, {0x6, 0x9}, {0x3}, {0x7f, 0x7}, {0x81, 0x400}, {0x9, 0x1}, {0x100, 0x4}, {0x1, 0x5fd2}, {0x5, 0x42}, {0xa423, 0x2}, {0x2, 0x7}, {0x9, 0x85c3}, {0x80, 0x3}, {0x6, 0x11a7}, {0x8001, 0xd59}, {0x2, 0xfffffffffffffff9}, {0x9, 0x9}, {0x5, 0xf}, {0x0, 0x36}, {0x4, 0xbcac}, {0x8, 0xe}, {0x6cdd, 0x8e0}, {0x9, 0x81}, {0x7, 0x10001}, {0x1000}, {0x5, 0x5}, {0xffffffffffffffc0}, {0xcfb, 0xffffffffffff4ce5}, {0x1000000000, 0xe}, {0x6, 0x4}, {0xb0, 0x3}, {0x8e2, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x10001, 0xd95}, {0x9}, {0x7, 0x5}, {0x2, 0x18}, {0xfffffffffffffff9}, {0x0, 0x4}, {0x7fff}, {0x9, 0xffffffffffffffff}, {0x8, 0x1ff}, {0x5, 0x8000000000000001}, {0x689, 0x6}, {0xfa8, 0xe}, {0x10000, 0x109}, {0x9, 0x400}, {0x4422, 0x4}, {0xaff, 0x7939}, {0x3, 0x101}, {0x2, 0x3}, {0x1, 0x9}, {0x5, 0x1}, {0x8, 0x3}, {0xc, 0x5}, {0x1}, {0xffffffffffffffff, 0x9}, {0x6, 0x9}, {0x4, 0x7ff}, {0x8, 0xfff}, {0x5, 0x6}, {0x9c, 0x9}, {0x3, 0xf4}, {0xfff, 0x9}, {0x4}, {0xfa4, 0x77}, {0x8, 0x100000001}, {0xc800000000000000}, {0x0, 0x4b8bdc5c}, {0x8000000000000000, 0x7}, {0x800000}, {0x2, 0xf}, {0x80000000, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x80000001, 0x8}, {0x698, 0x40}, {0xebd, 0x96b8}, {0x0, 0x2}, {0xdd, 0xb5ce}, {0x2b, 0xfffffffffffffff7}, {0x0, 0x847a}, {0xc, 0x8}, {0x8, 0x1}, {0xfff, 0xb1}, {0x7, 0x752}, {0xffff, 0x9}, {0xfffffffffffffffa, 0x3}, {0x3, 0x7}, {0x27c, 0x40}, {0x7}, {0xfffffffffffffffd, 0x9}, {0x1, 0x4}, {0x9, 0xe}, {0x71000000, 0x7fffffff}, {0xd, 0x7f}, {0x4436, 0x1}, {0x1, 0xfffffffffffffff8}, {0x3, 0xffffffffffffffff}, {0x80000000, 0x5}, {0xe7, 0x5}, {0x2623, 0x9}, {0x8, 0x6}, {0xfffffffffffffffc, 0x5}, {0x3ff, 0xe0}, {0x8000000000000001, 0x851}, {0xffffffffffffffff, 0x1000}, {0x40, 0x8}, {0x9, 0x3}, {0xfba0, 0x7}, {0x9, 0x3}, {0x49, 0x7fff}, {0x7, 0xdf87}, {0xc0, 0x4}, {0x80, 0x9}, {0x160, 0xd49}, {0x2, 0x2}, {0x7f, 0x3}, {0xc1a, 0x2}, {0xa80f, 0x8000000000000001}, {0x9, 0xd2}, {0x6, 0x1ff}, {0x4, 0xc6}, {0x7f, 0x9}, {0x8, 0x200}, {0x1, 0x80000000}, {0x7, 0xf}, {0xb, 0x35}, {0x3, 0x1ff}, {0xb08f, 0x10000}, {0x5, 0x785bdae1}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x7e989e9c}, {0x9, 0x8001}, {0x6, 0xfffffffffffffffa}, {0x401, 0x100000001}, {0xb64000000000000, 0xb0f}, {0x8}, {0x5, 0xd67}, {0xfe9, 0x446}, {0x1, 0xc}, {0x9, 0x187}, {0x7, 0x7}, {0x8, 0x4}, {0x7f, 0x7}, {0xa, 0x80000001}, {0xee, 0x5f}, {0x1}, {0x7fffffff, 0x8}, {0x9, 0x6}, {0x7}, {0xc, 0x100000001}, {0xcdc1, 0xffffffffffff7fff}, {0x7ba, 0x9}, {0x4, 0x8}, {0x3, 0x100}]}, &(0x7f0000007480)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x5, 0x8000000000000001}, {0xffffffffffffffff, 0xd7d9}, {0x7fffffffffffffff, 0x4}, {0xfdb1, 0x9}, {0x7, 0x2}, {0x7ff, 0x7}, {0xdf0, 0x8}, {0x1000, 0x7}, {0xb, 0x5}, {0x8, 0x9}, {0x2, 0x2ae}, {0x344, 0xbc}, {0xb75, 0x8000000000000001}, {0x2, 0x2}, {0x3, 0x20000}, {0x4, 0x1ff}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x4e74}, {0x5, 0x1}, {0x400, 0xfffffffffffffdbd}, {0x8000000000000000, 0x8}, {0x200000000008}, {0x647, 0x1}, {0x9, 0x4}, {0x40, 0x4}, {0xd, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0xed3}, {0x9, 0x3f}, {0x7ff, 0x8}, {0x6, 0xffffffffffffffff}, {0x19, 0x9}, {0x7, 0xff}, {0xa, 0x1000}, {0x9}, {0x6d3d, 0x689}, {0x3, 0x5}, {0x3767348e, 0x80000001}, {0xfffffffffffffffe, 0x100000001}, {0x80000000, 0xffffffffffffff01}, {0x97, 0x8000000000000000}, {0x7, 0x2}, {0x7ff, 0xffffffff}, {0x2, 0x10001}, {0x0, 0xd}, {0x9, 0x80}, {0x2, 0x5}, {0x7, 0x4}, {0xfffffffffffff000, 0xc2b1}, {0x8, 0xa8}, {0x2, 0x31dc204f}, {0x8000, 0x6}, {0x9, 0x40}, {0xf79b, 0x4}, {0x10001, 0x7}, {0x626b, 0x80000001}, {0x10, 0x3}, {0x2, 0x4}, {0xa, 0x1}, {0x10001, 0x3bcb}, {0x401, 0x1}, {0xcb44, 0x8000000000000000}, {0xe9cd, 0x1}, {0x0, 0xae92}, {0x745e, 0x7fffffff}, {0x6}, {0x4, 0x9}, {0x1c00000000000, 0x780000000}, {0x6, 0xd79f}, {0x8, 0x9}, {0xab0, 0x130c}, {0x1, 0x9}, {0xffff, 0x7f}, {0x2, 0x9}, {0x8, 0x800}, {0x8, 0xa99c}, {0x9}, {0xb7, 0x1}, {0x8, 0x6}, {0x2, 0x5}, {0x8, 0x7ff}, {0x6, 0x8}, {0xa, 0xf}, {0x9, 0x7}, {0x4, 0x800}, {0x80000001, 0xfff}, {0x7, 0x3}, {0x3, 0xfffffffffffffff8}, {0x0, 0x1}, {0x9, 0x5}, {0x0, 0x5}, {0xfffffffffffff164, 0xdbd}, {0x0, 0xd}, {0x634, 0xfb7}, {0x43fa454d, 0x2}, {0xffffffffffffff00, 0x8f}, {0x4, 0x8}, {0x2, 0x6}, {0x4, 0x7fffffffffffffff}, {0x10001, 0x6}, {0x2, 0x7}, {0x800, 0xf45}, {0x7, 0xb}, {0x8, 0x30000000000000}, {0x9, 0x401}, {0x1, 0x6}, {0x4, 0x7}, {0x8, 0xf}, {0xfffffffffffffffa, 0x9}, {0x1ff, 0x1000}, {0x80000000, 0x8}, {0x1ff, 0x3}, {0x2, 0x3}, {0x7, 0x100000000}, {0x3, 0x7}, {0x1000, 0x1}, {0x0, 0x8000000000000001}, {0xa, 0x8}, {0x8000, 0x100000000}, {0x62, 0x7ff}, {0x8001, 0x2}, {0x6c6, 0xb01d}, {0x400, 0x8}, {0x5}, {0x2, 0xfffffffffffff800}, {0xffffffffffffff2b, 0xd}, {0x7fffffff, 0x9}, {0x5, 0x9}, {0x7d17, 0x6}, {0x6, 0x1}, {0x8, 0x5}, {0x9, 0x25d48a15}, {0x5}, {0x213, 0x5}, {0x3, 0x10}, {0x1, 0x1}, {0xa2e7}, {0x9, 0x9}, {0x10, 0xf2}, {0xa5, 0x401}, {0x100000000000, 0x47a5}, {0x6, 0x3}, {0xfffffffffffffffd, 0x4}, {0x1, 0x6}, {0x550}, {0xa8a, 0xfffffffffffffff8}, {0x8001, 0x2}, {0x8}, {0x6ccad2df, 0x3}, {0xea2, 0x9}, {0x2, 0x8000000000000000}, {0x9411, 0x7fffffff}, {0x1}, {0x6, 0x8}, {0x8, 0x81}, {0x8, 0xffffffffffffffff}, {0x7, 0x8}, {0x100, 0x7}, {0x5, 0x36}, {0x3, 0xd}, {0xffffffff, 0x4}, {0x1, 0x1ff}, {0x78d, 0xad0d}, {0x2fc5, 0x1}, {0xfffffffffffffffb, 0xffffffffffffffff}, {0x5, 0x8}, {0x9, 0x40}, {0x9, 0x4}, {0x0, 0x3}, {0x3ff, 0x3}, {0x100, 0xc}, {0x8, 0xee000000}, {0xffffffffffffffff, 0x9}, {0x5, 0x2}, {0x9, 0xfffffffffffff1ae}, {0x1, 0x2}, {}, {0x3, 0x200}, {0xb, 0x7ff}, {0x3, 0xd5}, {0x0, 0x9}, {0x9, 0x3}, {0x9, 0x5}, {0x2441, 0xd7}, {0xff, 0xffffffffffffffff}, {0x4, 0x8}, {0x6, 0x4}, {0x10, 0x5}, {0x3, 0xe}, {0x40, 0x200}, {0x4, 0xf5c5}, {0x2, 0x9}, {0xf, 0x1}, {0x1}, {0x8, 0x81}, {0x14000000, 0x800}, {0x81, 0x1ab400000000}, {0xa, 0xffffffffffffffff}, {0xff2, 0x9}, {0x3, 0x7}, {0x5a50, 0x20000006}, {0xd9, 0x7}, {0x2, 0x1}, {0x0, 0xfffffffffffffffb}, {0x6, 0xfffffffffffffff8}, {0x6, 0x5b}, {0x2, 0x2}, {0xffffffff, 0x5}, {0x4, 0x2}, {0x2, 0x3}, {0x3, 0x100000001}, {0x5, 0x8000}, {0x8aa9, 0x7fffffff}, {0x1, 0xe72}, {0x6d, 0x3}, {0x7f, 0x1}, {0x5, 0x2}, {0x0, 0x683}, {0x4}, {0x4}, {0x5, 0xd1e9}, {0x9}, {0x7fff, 0x8}, {0xffff, 0x9}, {0x0, 0xfff}, {0x8000, 0x9}, {0x80, 0x10}, {0x8000000000000000, 0x4}, {0x5, 0x5}, {0x7, 0xfffffffffffff000}, {0xc, 0xf3382c3}, {0x2, 0x3}, {0x8000000000000000, 0x80000000}, {0x4, 0x4}, {0x6, 0xb}, {0x9, 0x10}, {0x4f7, 0x9}, {0x5, 0x9}, {0x1000, 0x200}, {0x0, 0x1}, {0x6, 0x1}, {0x7fffffff, 0x8}, {0x8, 0x3c06}, {0xd, 0xfffffffffffffff8}, {0x5, 0x7}, {0x1, 0x193}, {0xfffffffffffffff8, 0x1}, {0x8000000000000001}, {0x3fd6, 0xf51e}, {0x401, 0x8}, {0x1, 0x20aa}, {0x6, 0x81}, {0x7fff, 0x240000000}]}, &(0x7f00000084c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x100000000}}, &(0x7f0000008500)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}], 0x32}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) unshare(0x20380) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028000000240fffffff80800014000000016080003400000000008000440ffffffff0900010073797a30000000000900020073797a32000000001400000011000100000000000000006813000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYRES8=r6, @ANYRES8, @ANYRESHEX], 0x33) sendfile(r7, r6, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) 6m8.414959953s ago: executing program 4 (id=1519): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='-\x00', 0x480600, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x7]}, {0x1, 0x7fff, 0x4, 0x40}}, 0xdd, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000180)=0x700}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) 6m7.982365561s ago: executing program 4 (id=1525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002b86614e348a1b830600000000000000df251000000006b182d8ab087472993b1886a9af230681bd7e57819eebc136b7cedff003ec630f4deadb5f59b8ffeb00000000000000c69c3d5d81"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20054000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800850000004e3100004050005f1095000026277edb054665294dced30e29a02921fac24110000000000000000000000000f1384752a6c4fec04f7fc6e44b32ee53bbd70ee2e7fd5744987d4b060ac1a47fb2df5b4981ef0ff1626afd30958c2f60b0d765490fe9698843"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x10, 0x0, &(0x7f0000000800)="cc2a29af0dea4454e6c06ea422de2e90", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b00)="b3", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) 5m52.788849908s ago: executing program 32 (id=1525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002b86614e348a1b830600000000000000df251000000006b182d8ab087472993b1886a9af230681bd7e57819eebc136b7cedff003ec630f4deadb5f59b8ffeb00000000000000c69c3d5d81"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20054000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800850000004e3100004050005f1095000026277edb054665294dced30e29a02921fac24110000000000000000000000000f1384752a6c4fec04f7fc6e44b32ee53bbd70ee2e7fd5744987d4b060ac1a47fb2df5b4981ef0ff1626afd30958c2f60b0d765490fe9698843"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x10, 0x0, &(0x7f0000000800)="cc2a29af0dea4454e6c06ea422de2e90", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b00)="b3", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) 2m38.854046263s ago: executing program 1 (id=3139): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x100000001}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x1f, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x100000001}) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x1f, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) 2m38.658727874s ago: executing program 1 (id=3140): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x1, 0x1000, 0x1000, &(0x7f0000002440)="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", 0xfffffffffffffcc0, 0x0, &(0x7f0000001340)="541b786cd52f6c256d83c0e1aa02b028799763300fad4a14016ff605b08e6179480d1035d8302dbc79a63e740c8590720726c3ac0d49f64085b118e0d75cb610d20723edb15083c4363f395be4"}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x10001, 0x68}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r9 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r10}, 0x38) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@local, 0x40, r11}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, 0x0, 0x0) write$tun(r8, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x19, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/25}}}, 0x41) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a003400050202020202008a1822adfe3ad0062efe000a540600080211000000"], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 2m36.749648682s ago: executing program 1 (id=3149): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/173, 0xad, 0x0, &(0x7f0000000280)=""/122, 0x7a}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x101, 0x0, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x101, 0x0, 0x1}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETGROUP(r2, 0x541b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001800)={'ip6tnl0\x00', &(0x7f0000001780)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xe1, 0x8, 0x50, @private2, @local, 0x7800, 0xff5f, 0x1, 0x74}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001800)={'ip6tnl0\x00', &(0x7f0000001780)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xe1, 0x8, 0x50, @private2, @local, 0x7800, 0xff5f, 0x1, 0x74}}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000700), 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, 0x13, 0x400, 0x70bd28, 0x25dfdbfb, {0x8, 0x3e, 0x8, 0x4, {0x4e22, 0x4e22, [0x7, 0xa, 0x10a, 0x3], [0x6, 0x1, 0x9, 0x5], r6, [0x69a7, 0x400]}, 0x4, 0x10}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "ed9a97c2255af68e0de1f6f338ae7b4bc9fd0bba794be64185466877c075f376383e76f856cd4b2a058d25d56369f201590a6dbce0a3d1bc7082bd94d0b221b6"}]}, 0x90}, 0x1, 0x0, 0x0, 0x480c}, 0x40080) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000700), 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x90, 0x13, 0x400, 0x70bd28, 0x25dfdbfb, {0x8, 0x3e, 0x8, 0x4, {0x4e22, 0x4e22, [0x7, 0xa, 0x10a, 0x3], [0x6, 0x1, 0x9, 0x5], r6, [0x69a7, 0x400]}, 0x4, 0x10}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "ed9a97c2255af68e0de1f6f338ae7b4bc9fd0bba794be64185466877c075f376383e76f856cd4b2a058d25d56369f201590a6dbce0a3d1bc7082bd94d0b221b6"}]}, 0x90}, 0x1, 0x0, 0x0, 0x480c}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @alu={0x7, 0x1, 0x4, 0x6, 0xc, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x10, 0x1, 0xca7}, 0x10, r0, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[r1, r5, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0x4, 0x8}, {0x0, 0x5, 0x2, 0x1}, {0x5, 0x5, 0xa}, {0x3, 0x4, 0x1, 0xc}, {0x5, 0x3, 0x3, 0xc}], 0x10, 0x853}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0xcb}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}, {0x85, 0x0, 0x0, 0xd2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0xcb}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}, {0x85, 0x0, 0x0, 0xd2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2m36.338028182s ago: executing program 1 (id=3150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$sock(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)="a8bc60ef16c7", 0x6}, {&(0x7f0000000380)="ebf9", 0x2}], 0x2}}], 0x1, 0x80) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x10, 0x8, 0x7ff, 0xc4e, {{0x14, 0x4, 0x0, 0x25, 0x50, 0x68, 0x0, 0x98, 0x0, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x5d, 0xc6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @remote, @remote]}, @ssrr={0x89, 0x1f, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}, @end]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000002ddc000000240000000400000009ce0976f70000051308000005000000040000006b4b000008000000010000000500000000000000"], &(0x7f0000000540)=""/87, 0x40, 0x57, 0x1}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000000000000000000000400000000080000", @ANYRES32=r7, @ANYBLOB="01000000feff0000000000000000000000000021", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="040000000500"/28], 0x50) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r12, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000300004000401"], 0x28}, 0x4004004) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000180)=0xc9c0, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000cef851e40e08000000b70300000000000085000000750000", @ANYRES32=r10], 0xffffffffffffffff, 0x7fbfffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e21, 0x8, @private0}}}, 0x84) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r13}, 0xc) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r4, 0x701, 0x70bd36, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2m36.033626953s ago: executing program 1 (id=3152): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x46, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010426bd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600fffff7ffffff00001c008100050002000e00000005000100064000000500020002000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 2m35.789898066s ago: executing program 1 (id=3154): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f00003c9000/0x4000)=nil, 0x4000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x28040880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000002569114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000001480)=""/198, 0xc6}], 0x6}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20008000) 2m20.483246015s ago: executing program 33 (id=3154): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f00003c9000/0x4000)=nil, 0x4000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x28040880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000002569114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000001480)=""/198, 0xc6}], 0x6}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20008000) 1m10.128207438s ago: executing program 3 (id=3639): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000000000000000000000000000000000abd500"], 0x48) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x8805) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x50, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1m8.221977665s ago: executing program 3 (id=3647): unshare(0x26020480) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x94c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 1m7.645406439s ago: executing program 3 (id=3651): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffff9, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 1m6.622712912s ago: executing program 3 (id=3654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002c80)={0x60, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r2, 0x1, 0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x6, 0x0, 0x0, 0x2, 0x1}}) sendto$inet6(r0, &(0x7f0000000040)="1027b03f0cb2cdd85fe2a217617a648a9f9648dc9c7048299ce7753101617bd4e4b78fa2239d29f294b3108163f5ca78fc655a426da0c4f60adf3c8b47381693b52ac9f7380c023cff194efc70bfe46b89079c3f9b6faafa85adea22836330e0afbd2cac01ff9c0207b38070c492c672aba998e8509e3c799ce9ca9701a5260c7c0d1d174db0a949995793b591b3d9a94d6497e70828c34ea40443518012ab97af4a0e4ee36e2d2afa56fe347b44f5b7", 0xb0, 0x4800, &(0x7f0000000100)={0xa, 0x4e23, 0x1000, @mcast2, 0xbf93}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0xcc, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000640)={r6, @in6={{0xa, 0x4e24, 0x2ef6df95, @empty, 0xfffffff6}}}, 0x90) 1m5.747993569s ago: executing program 3 (id=3659): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaa0010000000000000000000000000ef286991b49d9d38bbc9cd435a53f2ae03d6e50de5b966dcc18a7b45742487e0f34c3518c99db28c53a7343df94ae3cf7e1fa18e701910ad50370946c9ac07d011271905bdd6a9218360ff4475d05d14984ece48d52bd855a643a9c3d74bf9922626e0d9"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x20000084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {}, {0x9, 0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000440)={'tunl0\x00', r5, 0x8000, 0x7, 0x7, 0x4, {{0x20, 0x4, 0x2, 0x0, 0x80, 0x64, 0x0, 0x7f, 0x2f, 0x0, @empty, @empty, {[@noop, @cipso={0x86, 0x4b, 0x0, [{0x1, 0xe, "b49b83a0052a693fd0f57a61"}, {0x0, 0x12, "1f8b08998f81b170badf31d99af4b8bb"}, {0x7, 0x7, "e1f0da7201"}, {0x0, 0x9, "1dbc54984fae99"}, {0x1, 0xb, "23d4bdf80f75c23c08"}, {0x1, 0xa, "4bfb80d55388d467"}]}, @lsrr={0x83, 0x1f, 0xc1, [@remote, @local, @broadcast, @loopback, @multicast1, @local, @local]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="3f438d30f2c0e8f5686fd5f5916eed8e30117753f18e0d20cdea99094b5f2034bf50d043d506b79c0966b12924d17ed9c75f7de84a36", 0x36, 0x4040050, &(0x7f0000000540)={0x11, 0x1a, r12, 0x1, 0x7, 0x6, @remote}, 0x14) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r13) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m4.892400712s ago: executing program 3 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0xfffffffc, 0x30000, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/137, 0x89, 0x0, &(0x7f0000000600)=""/115, 0x73}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000100000000000000000018470000fdffffff000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xc7, 0x0, 0x2, [0x8, 0x8]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x50}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000020000000000000900000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000feffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r7 = socket(0x400000000010, 0x2, 0x0) r8 = accept$alg(r7, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @local}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtclass={0x40, 0x28, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6, 0xffe0}, {0xd, 0xfff3}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xc8, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @tclass_kind_options=@c_cake={0x9}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xa0, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xd, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x70, 0x2, [@TCA_BASIC_EMATCHES={0x6c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b8dd05eb5dc418", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9571, 0xd1}, {0x7, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0xf}, {0x6, 0x9}}}]}}]}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x28040880) 49.801457423s ago: executing program 34 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x1c, 0x15, 0x1, 0xfffffffc, 0x30000, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/137, 0x89, 0x0, &(0x7f0000000600)=""/115, 0x73}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000100000000000000000018470000fdffffff000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xc7, 0x0, 0x2, [0x8, 0x8]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x50}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000020000000000000900000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000feffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r7 = socket(0x400000000010, 0x2, 0x0) r8 = accept$alg(r7, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @local}, &(0x7f00000003c0)=0xc) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtclass={0x40, 0x28, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x6, 0xffe0}, {0xd, 0xfff3}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xc8, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @tclass_kind_options=@c_cake={0x9}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xa0, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xd, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x70, 0x2, [@TCA_BASIC_EMATCHES={0x6c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b8dd05eb5dc418", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9571, 0xd1}, {0x7, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x81, 0xf}, {0x6, 0x9}}}]}}]}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x28040880) 4.366112859s ago: executing program 7 (id=3893): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x46, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010426bd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600fffff7ffffff00001c008100050002000e0000000500010006400000050002"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) (fail_nth: 7) 4.112596963s ago: executing program 6 (id=3895): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ipvlan1\x00', 0x400}) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000005c0)=""/248, &(0x7f00000006c0)=0xf8) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xff98, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES8=r3], 0xc4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x41100, 0x25, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) 3.509346338s ago: executing program 7 (id=3896): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x400}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@empty, @loopback, 0x0}, &(0x7f0000000480)=0xc) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1a, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9f28}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x10, 0xb4, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x1, 0x4, 0xa}, {0x3, 0x1, 0x7, 0xc}, {0x0, 0x2, 0xc, 0x4}, {0x5, 0x4, 0xb, 0x2}], 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1a, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9f28}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x10, 0xb4, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x1, 0x4, 0xa}, {0x3, 0x1, 0x7, 0xc}, {0x0, 0x2, 0xc, 0x4}, {0x5, 0x4, 0xb, 0x2}], 0x10, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r9, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0x7}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffdcc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1e, 0x3}}, @TCA_FW_MASK={0x8, 0x5, 0x65a}, @TCA_FW_MASK={0x8, 0x5, 0xfffffffa}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_MASK={0x8, 0x5, 0xff5}, @TCA_FW_MASK={0x8}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_hsr\x00'}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3.498700265s ago: executing program 5 (id=3897): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010426bd7000fedbdf251200000008000300", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 3.163433045s ago: executing program 6 (id=3899): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000daaaaaaaaaa3f86dd6100272400383afffc020000000300000000000000000001ff0200000000000000000000000000010200907825a6f5b3f21c4000009379663a794500023a00fc020000000000000000000000000005fe8000000000000000000000000000bb80"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.027388767s ago: executing program 7 (id=3901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) tee(r1, r1, 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000010025bd70f4fedbdf2500000000b2a06e2df82de6fb155aad2e147fc9afc12c0cd105b7a65683103f1e9fd0445bae20acb9185165fe82aa90114176d18baf5f140000000000003a66c5e373e3803f708d2b48cdf982531d7b9c42ea0db6ca99db82c3ae05fb9637d2e02d1d9b1bd5f4ba5d4f7980715c71fa1d2d0c8d6e755e41697e9895554c789fe573b5c5255f66cd4451b25c7ec4e9b4f0", @ANYRES32=0x0, @ANYBLOB="0db20200305b01001400030076657468305f6d616376746170000000050011000700000008000400ff010000140003006261746164765f736c6176655f30000005001000040000000c001980"], 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x84) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000040)=""/3, 0x3, 0x40000060, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 3.025314395s ago: executing program 5 (id=3902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb0000000000"], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x80, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff2, 0x9}, {0x4, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x4000050) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000041000701fefdfffffeffffffdc8550f2ed29ec6e6c7e57f7efab017c0000040042800c00018006000600800a00001800028012001480801213ac5864edc828da0b656b97c6ff05dd7e481716177d1f5f"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r4, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x14, 0x51, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0xfffffffd, @mcast2, 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d10", 0x3}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x880) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x3}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x40c3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r8 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x1}, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 2.906878724s ago: executing program 6 (id=3903): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005cc0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x10000}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r1, &(0x7f0000000080)="c3a3ecf5a67f1b75d81e5a35af572bbb5e6462ab0ecd36b78ac0ce224b4b2dd481cff56fed79edf8429a31b4ee1c75c6698362a4064fb284f83356ab", 0x3c, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$can_bcm(r2, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x46, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010426bd7000fedbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a000600fffff7ffffff00001c008100050002000e0000000500010006400000050002"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 2.798402367s ago: executing program 2 (id=3904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x26, 0x101, 0x70bd2c, 0xfffffffc, {0x1d}, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x1c, 0xda}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) 2.73635983s ago: executing program 2 (id=3905): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x200}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x5f, 0x61, 0x30, 0x61, 0x61, 0x61]}}, 0x0, 0x45}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 2.546891565s ago: executing program 2 (id=3906): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x46, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010426bd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600fffff7ffffff00001c008100050002000e0000000500010006400000050002"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) (fail_nth: 8) 2.426787245s ago: executing program 7 (id=3907): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="010000002420000000000000", @ANYRES32=0x0, @ANYBLOB="788a22ce0505d3b22386a046df28856120bbf37e39964d0894650ce6a4a61dbe38645c005ecdbce9be13dd081729f01ef921541a2a4fe37e8af54ceeff222df99c24c743b58b12c5d4490f54b7fa376b9949cda66b523ff779747700a7989002f42e5e651f3bc4bff5d04ca1dc9928c3f588904e9518b2", @ANYRES64=0x0], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @enum64={0xf, 0x2, 0x0, 0x13, 0x1, 0xb, [{0x10, 0x4, 0x9}, {0x10, 0x5, 0x5}]}, @ptr={0x4}, @struct={0xf, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x4, 0x1, 0xa}, {0xc, 0x4, 0x800}, {0xc, 0x5, 0x9}, {0x1, 0x2, 0x6}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0xc970b707a32c59d0]}}, &(0x7f0000000280)=""/4, 0x97, 0x4, 0x0, 0x51273d0a}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5ec, 0x0, r5, 0x9, '\x00', r6, r7, 0x5, 0x0, 0x4}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="c4187c44299b4e6647aee1165505111f1233fe67f440438f80eb6275e1", @ANYRES64=0x0], 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000003c0)=0x4, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 2.426322829s ago: executing program 5 (id=3908): ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x7f) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000000c0)='\x00', 0x1) sendmsg$sock(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="e3d65a603f838a37d9b87e1e080d8dc8", 0x10}], 0x1, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xd45c}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff01}}], 0xc0}, 0x2095) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000380)={0x3, 0x1, 0xe7, &(0x7f0000000280)=""/231}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000003c0)={{0x0, @private=0xa010100, 0x4e23, 0x1, 'lblcr\x00', 0x24, 0x7ff, 0x16}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4e22, 0x2000, 0x2, 0x1000, 0x4}}, 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@broadcast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @broadcast, @local, @local, @empty}}}}, &(0x7f0000000480)={0x0, 0x1, [0xbd9, 0x54f, 0x19, 0xa48]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@loopback, @multicast2, 0x10, 0x1e}}) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000540)={@broadcast, @private=0xa010101, 0x1, "59f9adb0e644bee389340759672cfe598dc3decb9a6820c001402ed9b3b03150", 0x9, 0x5e5, 0x4, 0x10000}, 0x3c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000d40)={{r2, &(0x7f0000000580)='lblcr\x00', 0x3070c0, &(0x7f00000005c0)={@align=0xfffffffffffffffa, {0x3, 0x100, 0x7fff, 0x80000000}}, 0x2, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x9}, 0x8, &(0x7f0000000c40)=[{0x2, 0x7, &(0x7f0000000680)=',(\x00', &(0x7f00000006c0)="7bff105209858ea05f7aac3ee5a2924c5be74ca91fc28aadaaec628e3c3721b22fbfb7cb8b353f6cba", 0x29, 0x12}, {0x2, 0x7f, &(0x7f0000000700)='sit0\x00', &(0x7f0000000740)="6f40927702658229bc7c7be374607b3dd1b98cd25863486e4b779e7dd98ea6d94ea48cbec563d1", 0x27, 0x20}, {0x1, 0xd, &(0x7f0000000780)=',\x00', &(0x7f00000007c0)="701f4d99", 0x4, 0x8}, {0x1, 0x5, &(0x7f0000000800)='*9.\x00', &(0x7f0000000840)="6133ffd54469a620aa40996da9153abcd19aa22c647470b90ba596e50ba5d1292701ca36ebf07bffe2705a181f96be34b7b1cb9eb97dde55cc40cdb8c21d935dc3f13b3e9bc04f9a387d33396ab180f2f41c4a903621277b1a44c4c1659ce8387359b3550e1069a6bb439507", 0x6c, 0x2a}, {0x1, 0x101, &(0x7f00000008c0)='sit0\x00', &(0x7f0000000900)="e946cac0068214847084956cec0fa71170a286f44c5ea7ba56e1df4b39ccacf938ce6d11401952d12d6f57b9ee1acdb30b75a9582aa7d588b9019e2bbb3eb0fb45c15d5689f518f817c20e252b7ead6b6ff066961dbf043f4e86aa21a4d381ff0afa01e918ef2ab8dbde7963245b9742469ee4e32b0ffafb074259cff1198c65682422a2b06ea1e9d0f430ef433f0b222c669825397f84d959528ac6cbdb6c3448b0cb5e9c03f7da55373ce1b32bf70690f44e425c8e79207e8c7d", 0xbb, 0x22}, {0x2, 0xa5c, &(0x7f00000009c0)='a$#\x00', &(0x7f0000000a00)="3032341346da2e2f1c", 0x9, 0x22}, {0x3, 0x4b, &(0x7f0000000a40)='lblcr\x00', &(0x7f0000000a80)="bee7ec20fa1bf6312754c60ae59ff8742ba721185519fb591abc2d7ce00e649009e9add2993e41b41612fa986feb65288e94d377e7a08c444f8b57a23415041235956b11246ed47390539a3ae8b4ae", 0x4f, 0x3a}, {0x2, 0x8e, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="44811d42c3ac7623d4e8aa91e3b07046271ddcdb87310b88fd3f8cf7ea2aa99fd273f48165c1a794ac2b5e9f2e63351db00513717abc686519962368751bc8f0ac1f54d0e6ad43192fb39c323e0e859721cf22283ad15c6ea60aa26c86c7f80187e1195c28a1d3b239f1e471fb9b94e614285965a6311979cb2ff0324a7e29083007bca5f081ce4bc40e679acd16edf0f0226ed2e9b8a1952bbe6db679bf37506b5a2dd760288ea7639022d763ab449955e65cd32d72110861404ca0222c00473de2404305bebfa7de99", 0xca, 0x2}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000007, 0x50, r0, 0x279e000) connect$pppl2tp(r5, &(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x0, 0x2, {0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x350}}}, 0x32) pread64(r2, &(0x7f0000000e80)=""/148, 0x94, 0x7ff) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000f40)="6b7add7e9a0da2c7a5064cd25ad96ce02704", 0x12) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x3, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0x14, 0x17, [0x9, 0x5, 0x1, 0x9]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001140)={'gretap0\x00', &(0x7f0000001100)={'syztnl2\x00', 0x0, 0x20, 0x40, 0xfff, 0xfffffff7, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0xb, 0x2b, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@delneigh={0x1c, 0x1d, 0x100, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x20, 0x8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000001240), &(0x7f0000001280)=0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)=@upd={0x118, 0x12, 0x100, 0x70bd28, 0x25dfdbff, {{'lrw-twofish-avx\x00'}}, [{0x8}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0xffffff7f}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0xa8}, {0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000014c0)={'vcan0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r5) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20060041) 2.405574893s ago: executing program 6 (id=3909): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="000000000000000010010c8013000c800c", @ANYRES32], 0x270}, 0x1, 0x0, 0x0, 0x20048014}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 1.786294023s ago: executing program 0 (id=3910): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db2020041000000140003006e657464657673696d30000000000000480016804400018040000c803c00010000f8ffff61080000040000008100000014000100010000007b050000090000008100000014000100e60a00003d0d00000300000088a80000140014"], 0x90}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) 1.785586544s ago: executing program 2 (id=3911): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="2200000006000000000000000000008001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="004e243aafaad3ead04b00"/25], 0x50) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x70bd27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x31) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff00fc040000000000000000000000000000ff02000000000000000000000000000100000000ff00000000002000000000000400"], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x702, 0x1b, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29da", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x1d, 0x1, 0x6, &(0x7f0000000b80)=[0x0], 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000b80), &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x150, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_TUPLE_ORIG={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x42}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x946}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_LABELS_MASK={0x4}, @CTA_NAT_SRC={0xac, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xf}]}, 0x150}, 0x1, 0x0, 0x0, 0x54}, 0x20000880) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="90ffffff", @ANYRES16=0x0, @ANYBLOB="010025ad7000ffdbdf2506b1307d53e1d171b205b9d50089000ae57ddd00000d004000000000000e00a00000000000000000000e0084", @ANYRES32=0x0, @ANYBLOB="00000e0040000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) 1.783716232s ago: executing program 5 (id=3912): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb88a8"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5fffff7e}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x70}, 0x1, 0x7}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r9, &(0x7f0000000680), &(0x7f0000000780)=@tcp6=r6, 0x1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x114, r10, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8e3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r11 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)={[{0x2d, 'cpuset'}]}, 0x8) 1.686817621s ago: executing program 0 (id=3913): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c00018008000100"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x60}], 0x1}, 0x7fff}], 0x1, 0x10000, 0x0) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8085}, 0x40080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x2b07a000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') openat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x4000014) unshare(0x28000600) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'wg1\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x4b, 0x18, "db519d218bb01e18a7b6a0000100"/24}}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.656410196s ago: executing program 6 (id=3914): r0 = socket(0x2, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x96703023c714694c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x28, &(0x7f0000000140)=""/40, 0x40f00, 0x24, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x7, 0x7fff, 0xab}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x4, 0x2, 0x10, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r0, 0x24, 0x0, 0x35bd, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000e00), 0x12) bind$x25(r7, &(0x7f0000000080), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c00018008000100"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$cgroup_type(r8, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000540)={r9}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r5) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000e40)={0x234, r11, 0x10, 0x70bd29, 0x35c, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xcde, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6330}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1319}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xab43}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x29}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8004) openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@cgroup=r8, r4, 0x10, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r6}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x22) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4020010) 1.522438502s ago: executing program 0 (id=3915): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, &(0x7f0000000540)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x8, 0xc000000000000000, 0x9, 0x8, 0x4}, {0x3, 0x0, 0x80, 0x2, 0x0, 0x3, 0x1, 0xf}, {0x0, 0x0, 0x6, 0x4, 0xfffffffffffffff7, 0xa, 0xba, 0xffffffff}, {0x2, 0x0, 0x8, 0xbd8, 0x7fffffffffffffff, 0xffffffff, 0x0, 0x2}], 0x4, 0x38, 0x0, 0x9}) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r2, @ANYRES16=r1], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x9143a1958b2c0a8a) (rerun: 32) writev(r1, &(0x7f0000001680)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="521ed9ffb2bacae2211b05a52ea55b1a555eef9439101213d99c0f075ec25b3fee2b3f1cb5b27041a01d4b0ac62b36440b4d3fc26e31b007748dae959ca53dfeff7b13009dd9281be63e753c46f6ad1d1ad05187b6ac738762c6b60f7e4c00b5f3ccf56effd37793e4772e6a8b9887e5b7757277a39de3d98790e1ab379b706cf05dd7d29ac0b4be75de8c0a88dc", 0x8e}, {&(0x7f0000001640)="4ef5b3b82e2d259c804c0869a290b2830ef5c70e6807", 0x16}], 0x3) 1.478660691s ago: executing program 7 (id=3916): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x9, 0x3, {{0x36, 0x4, 0x1, 0x1, 0xd8, 0x67, 0x0, 0x4, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@timestamp_addr={0x44, 0x2c, 0xbe, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x3}, {@loopback, 0x5}, {@empty, 0x90000}, {@broadcast, 0x7}, {@empty, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xfc, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x2c, 0x2f, 0x1, 0x8, [{@multicast2, 0x4d28}, {@empty, 0xfffffffe}, {@private=0xa010101, 0x87}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x10000}]}, @end, @timestamp={0x44, 0xc, 0x50, 0x0, 0x1, [0x9, 0x1]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x4c, 0x31, 0x3, 0x8, [{@loopback, 0x5}, {@rand_addr=0x64010102, 0x4}, {@empty, 0x2}, {@multicast1, 0x18000}, {@loopback, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff6e4}, {@multicast2, 0x5b59}, {@multicast2, 0x7}, {@rand_addr=0x64010100, 0x400}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0xe9ab, 0x0}, 0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fbffffff00000000ffff00000627040006000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x7a, &(0x7f00000004c0)=""/122, 0x41000, 0x1, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0xd, 0x2000, 0xfdb9}, 0x10, r6, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x5, 0x3, 0x9, 0x6}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000)=r7, 0x4) recvmsg$unix(r2, &(0x7f0000000700)={0x0, 0x5f, 0x0, 0x0, &(0x7f0000000180), 0x1400}, 0x2) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='=', 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x4048844) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf0900000000000055090100000000009500000000000000d509040001000000bf91000000000000b7020000010000007500000000000010bf0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) close(r0) 1.295670897s ago: executing program 0 (id=3917): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000081}], 0x1, 0x24041410) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4080, 0xff0}], 0x1}, 0x40012143) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000040)={0x8, 0x100, 0x0, 0x0, 0x2}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r8, 0x10e, 0x4, 0x0, &(0x7f0000000200)) socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.066839987s ago: executing program 2 (id=3918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x2, 0x1}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@deltfilter={0x0, 0x2d, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xd}, {0x2, 0xf}, {0x5, 0xa}}, [@TCA_CHAIN={0x0, 0xb, 0x3ff}, @TCA_CHAIN={0x0, 0xb, 0x6}, @TCA_CHAIN={0x0, 0xb, 0x4183}]}, 0x170}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000380)={0x4, 0x18, '\x00', 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0xc3f, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast2, 0x1, 0x0, 0x1, 0x1}}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890c, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207a0af8ff000000002fa000000000000007010000f8ffffffb702000008000000b703000000000000850000000601030095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x90, &(0x7f0000000100)=""/144, 0x40f00, 0xb}, 0x94) 1.065611376s ago: executing program 5 (id=3919): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x804) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a80200004"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x18, 0x110, 0x2, "0100004a"}], 0x30}, 0x2004040) 833.284313ms ago: executing program 7 (id=3920): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000012c0)={{0xffffffffffffffff, &(0x7f0000001000)='!\x00', 0x50040, &(0x7f0000001080)={@_ha_fsid={[0x4, 0x6]}, {0x7, 0x40, 0x81, 0x8}}, 0x1, &(0x7f00000010c0), &(0x7f0000001100)=0xfffffffd}, 0x2, &(0x7f0000001280)=[{0x2, 0x32, &(0x7f0000001180)='nl80211\x00', &(0x7f00000011c0)="7767e6dc40deae9746079f51bf53fb40e14b5f9b23cf625ed6", 0x19, 0x2a}, {0x3, 0x5, &(0x7f0000001200)='nl80211\x00', &(0x7f0000001240)="5758de4a0eb5416a3df3ba1195dcb8c044fc682c03e4636d99db0d50a2", 0x1d, 0x2}]}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r4, 0x24, 0x0, 0xfff2, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000027c0)={0xffffffffffffffff, 0x20, &(0x7f0000002780)={&(0x7f0000002600)=""/118, 0x76, 0x0, &(0x7f0000002680)=""/193, 0xc1}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b00)=@bpf_tracing={0x1a, 0x21, &(0x7f0000002800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3cd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002940)='GPL\x00', 0x800, 0x55, &(0x7f0000002980)=""/85, 0x40f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000002a00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000002a40)={0x1, 0xa, 0x913, 0x8}, 0x10, 0x26db1, 0xffffffffffffffff, 0x4, &(0x7f0000002a80)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002ac0)=[{0x3, 0x2, 0x10, 0xb}, {0x1, 0x3, 0x6, 0xb}, {0x5, 0x3, 0xa, 0xa}, {0x0, 0x3, 0xc, 0xa}], 0x10, 0x93a}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7b47, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000d3080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000005100000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0xd, 0xd, &(0x7f0000001340)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x6, 0x0, 0x5, 0x10, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x74}, @exit, @exit, @exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000013c0)='GPL\x00', 0x3ff00, 0x6e, &(0x7f00000014c0)=""/110, 0x41000, 0x6, '\x00', r3, @fallback=0x20, r4, 0x8, &(0x7f0000001540)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000025c0)={0x5, 0x2, 0x0, 0xffff0001}, 0x10, r5, r6, 0x5, &(0x7f0000002cc0)=[r7, r8, r9], &(0x7f0000002d00)=[{0x4, 0x4, 0xd, 0xb}, {0x2, 0x9, 0xc, 0x5}, {0x0, 0x1, 0x7, 0x1}, {0x3, 0x5}, {0x0, 0x3, 0xd}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002e40)) r10 = socket(0x10, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r13, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000010000000000000000000100da"], 0x0, 0x52}, 0x28) recvmmsg$unix(r13, &(0x7f000000b240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000063, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r14, 0x900, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x66}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x18, 0xac, "c22571f83cf585e3b247348b4f294e2b6b2f4a21"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1800}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 697.638069ms ago: executing program 0 (id=3921): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x46, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010426bd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600fffff7ffffff00001c008100050002000e0000000500010006400000050002"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) (fail_nth: 9) 466.982843ms ago: executing program 5 (id=3922): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000340)={0x2, 0x1}, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) socketpair(0x29, 0x5, 0x7fff, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xcb42, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40844) 464.992268ms ago: executing program 6 (id=3923): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001600010324bd7004fcffffff2e"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000200)=@framed={{0x18, 0xa}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xff58, 0xffffffffffffffff, 0x40f00}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4080) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={r0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000024c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x250c6fb538b22c8d}, 0xc, &(0x7f0000002480)={&(0x7f0000001300)={0x1144, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@NL80211_ATTR_TID_CONFIG={0x880, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x224, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x4, 0x28, 0x9, 0x8, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x19, 0x3, 0xb, 0x36, 0xc, 0x30, 0x9, 0x1b, 0xc, 0x6, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3431, 0xf0, 0x7, 0x1, 0x9, 0xef11, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7a4, 0x2, 0x2, 0x7, 0x81, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x4, 0x8}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x5}, {0x4, 0x5}, {0x1, 0x1}, {0x6, 0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x7}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x7}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x1}, {0x7}, {0x7, 0x3}, {0x7}, {0x6, 0x8}, {0x2, 0xa}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x5, 0x9}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x9, 0x3, 0x1, 0x18, 0x60, 0xc, 0x9, 0x30, 0x30, 0x12, 0x1, 0x1, 0x30, 0x20, 0x18, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x9, 0xfff7, 0x8, 0x4, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x16e8, 0x8, 0x6, 0x4, 0x0, 0x435d, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0xb, 0x9, 0x4, 0x30, 0x0, 0x24, 0x48, 0x6, 0x60, 0x9, 0x5, 0x6c, 0x24, 0x24, 0x6, 0x2, 0x18, 0x1, 0x36, 0xc, 0x30, 0x48, 0x24, 0x0, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x48, 0x1b, 0x1b, 0x6, 0x2, 0x16, 0x12, 0x36]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x4, 0x1}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x4}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x8, 0x1000, 0xa85, 0x9, 0x8, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x1ff, 0x8, 0x88, 0x8000, 0x3, 0x2, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x12, 0x24, 0x9, 0x18, 0x1, 0x36, 0xc, 0x48, 0x2, 0x48]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x2, 0x4, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x5, 0x4, 0xd9fb, 0x2, 0x6, 0x3606, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x80, 0x5, 0x8, 0x400, 0xe, 0x1, 0x45cf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xb, 0x2, 0x5, 0x3, 0x5, 0x9, 0x5, 0xc, 0x12, 0x24, 0x6c, 0x2, 0x12, 0x2, 0x30, 0x12, 0x1b, 0x60, 0xb, 0x6, 0x72, 0x60]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x98}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x594, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x260, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xfffc, 0xde53, 0x9, 0x3, 0x37d, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff00, 0x3ff, 0xc3e, 0x9, 0xfff, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x3}, {0x7, 0x5}, {0x1, 0x8}, {0x5, 0x5}, {0x6}, {0x6}, {0x2, 0x9}, {0x3, 0xa}, {0x3, 0x1}, {0x2}, {0x2, 0x6}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x2}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {}, {0x2, 0x1}, {0x1, 0x5}, {0x2, 0x6}, {}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x7}, {}, {0x4, 0x9}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x19}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9b, 0x9, 0x0, 0x400, 0x5, 0x3, 0xffff]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0x9}, {0x7, 0x6}, {0x3, 0x8}, {0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x5, 0x4}, {0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x1}, {0x3, 0x9}, {0x4, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0x8}]}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x36, 0x0, 0x3, 0x3, 0x6, 0x1, 0x1a, 0xb, 0xb, 0x36, 0x30, 0x6, 0x1b, 0x48, 0x60, 0x30, 0x4, 0x60, 0x6, 0x48, 0x16, 0x9, 0x6c, 0x4, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x65, 0xfaf5, 0x81, 0x7, 0x5, 0x10, 0x0, 0x48]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x7}, {0x3, 0x8}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x2}, {0x1}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x4}, {0x4}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0xa}, {0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0xa}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x6}, {0x1, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0x2}, {0x7, 0x3}, {0x1, 0x8}, {0x5}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x6, 0xba9, 0xd129, 0x6, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0xaa9, 0xda9, 0x7ca, 0x800, 0x8, 0x4]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x1b, 0x30, 0x48, 0xc, 0x30, 0x16]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x8, 0x3ff, 0x6, 0x400, 0x400, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xf, 0x2, 0x5, 0x5, 0x4d51, 0x2, 0x6]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0xfff8, 0x8, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x7, 0x6, 0x5, 0x3, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x16]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x9, 0x1, 0x8, 0x6d58, 0xff81, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1000, 0x5, 0x5, 0xc9, 0x100, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x310, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x30, 0x1b, 0x19, 0x36, 0x30, 0x78, 0x5, 0x24, 0x1b, 0x1e, 0x6, 0x1]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x1}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xff, 0x4, 0x80, 0xfa, 0x8, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x18, 0x60, 0xb, 0x3, 0x78, 0x6c, 0x36, 0x1b, 0x60, 0x6c, 0xb83cfe149654c01, 0x0, 0x60, 0x36, 0x18, 0x5, 0xc, 0x24, 0x6c, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x48, 0x2]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfac4, 0x4, 0x1000, 0x6, 0x2fd, 0x4, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x5, 0x65e, 0xfff9, 0x7, 0xff, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x1, 0x9, 0x6c, 0x60, 0x24, 0x48, 0x30, 0x6c, 0x60, 0x36, 0x60, 0x18, 0x1b, 0x1, 0x2, 0x5, 0x18, 0x48, 0x60, 0x16]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0xa}, {0x1, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x6}, {0x3, 0x9}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0x8}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x6, 0x6}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x6, 0x4}, {0x3, 0x7}, {0x4, 0x7}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x6}, {0x1, 0x1}, {}, {0x4, 0x6}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x3, 0x7}, {0x4}, {0x6, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xdee7, 0x80, 0x9, 0x4, 0x0, 0x1, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x5, 0x7, 0x8, 0x401, 0xf, 0x7, 0x17]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x7fff, 0x4, 0x6, 0x3, 0x7, 0x8000]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x7}, {0x1}, {0x3}, {0x3, 0x3}, {0x6, 0x1}, {0x6, 0x3}, {0x5, 0x9}, {0x0, 0x4}, {0x4, 0x12}, {0x6, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x8}, {0x4, 0x4}, {0x4, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x6, 0x4}, {0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x1}, {0x6}, {0x3, 0x4}, {0x5, 0x4}, {0x1, 0x5}, {0x5}, {0x7, 0x7}, {0x4, 0xd}, {0x1, 0x7}, {0x6, 0x3}, {0x7, 0x1}, {0x7, 0x3}, {}, {0x4, 0x5}, {0x1, 0x7}, {0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x5}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x9}, {0x7}, {0x6, 0x5}, {0x6, 0x5}, {0x6}, {0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x800, 0x8, 0xf, 0x1a6, 0x2, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x400, 0x6, 0xfc01, 0x5, 0x2, 0x4, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff5, 0x6, 0x2, 0x1, 0x0, 0xe, 0x401]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x1, 0xa}, {0x1}, {0x3, 0x9}, {0x7, 0x6}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x5, 0xd}, {0x2, 0x1}, {0x7, 0x3}, {0x7, 0x5}, {0x4, 0x8}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x6}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x3, 0x8, 0x200, 0xd02c, 0x5, 0xd, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x4, 0x0, 0x0, 0x4, 0x6, 0x4c, 0x789]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe779, 0xfffa, 0x8, 0x1000, 0x7, 0x40, 0xe, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x16, 0x4, 0x6c, 0x60, 0x18, 0x60, 0xc, 0x3, 0x48, 0x18, 0x1, 0x2, 0x12, 0x2, 0xdfbf0f8c600c5f54, 0x18, 0x6, 0x1, 0x3, 0x3, 0x6c, 0x2, 0x2, 0x30, 0xa, 0x30, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x1b, 0x36, 0x16, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x61, 0x2, 0x18, 0x12, 0x1b, 0xc, 0x1, 0x0, 0x1, 0x18, 0x6, 0x43, 0x48, 0x1, 0x6, 0x6, 0x36, 0x6c, 0x1, 0xb, 0x18, 0xc, 0x60, 0x24, 0x6c]}, @NL80211_TXRATE_GI={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x90, 0x11d, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x38, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x8f, 0x8, 0x7, 0xcdc9, 0x5, 0x7fff, 0xda4]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a0, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd982}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe595}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x5, 0x2}, {0x3}, {0x7, 0x8}, {0x4}, {0x0, 0xa}, {0x6}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x7}, {0x5, 0x2}, {0x1}, {0x7, 0x1}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x2}, {0x4, 0x9}, {0x7}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x9}, {0x7, 0x9}, {0x4, 0x6}, {0x2}, {0x5, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x8}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x5, 0x9}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x6, 0x6}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {}, {0x4, 0x3}, {0x6, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x6c, 0x1b, 0x48, 0x0, 0x12, 0x5, 0x9, 0x30, 0xb, 0x60, 0x6, 0x33, 0x12]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x8}, {0x2, 0x8}, {0x2, 0x2}, {0x6, 0x5}, {0x3, 0x9}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x6, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x9}, {0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x81, 0x1, 0x7fff, 0x5, 0xa1, 0xe729]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x8, 0x9, 0xcebd, 0x1, 0x2, 0x8]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x1}, {0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x5, 0x2, 0x9b7, 0x3ff, 0xfdb, 0x101]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x2, 0x40, 0x1, 0xa2, 0x47]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff8, 0x3, 0x2, 0x2, 0x401, 0xf3e2, 0xfff7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7fff, 0x7ff, 0xf2, 0x0, 0xc85f, 0x401, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x1, 0x24, 0x48, 0x30, 0x5, 0x24, 0x9, 0x16, 0x6, 0xc, 0x60, 0x6c, 0x12, 0x4]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x9, 0x3, 0x30, 0x6, 0x24, 0x9, 0x2, 0x44, 0x24, 0x6c, 0x24, 0x5, 0x2, 0x30, 0x3, 0x6, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x510, 0x11d, 0x0, 0x1, [{0x3fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x90000000000000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3d4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x3, 0x5, 0x9, 0x4d, 0x24, 0x6, 0xc, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x7, 0x884, 0x7, 0x5, 0x200, 0xc, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x5, 0xd5, 0x100, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {}, {0x1, 0x9}, {0x3, 0x8}, {}, {0x0, 0x6}, {0x6, 0x6}, {0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x1}, {0x3}, {0x3, 0x4}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0xa}, {}, {0x7, 0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x14}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x3}, {0x3, 0x6}, {0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc, 0x59, 0x56, 0x7, 0x345, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x7ff, 0x4, 0x5, 0xc4, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x713b, 0x2, 0x1, 0x101, 0x3, 0xa64]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x3}, {0x0, 0x2}, {0x3, 0x4}, {0x6, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x7}, {0x6, 0xa}, {0x3, 0x1}, {0x6, 0x7}, {0x4, 0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0x8}, {0x4, 0x2}, {0x2, 0x7}, {0x4}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x1, 0x2, 0x7fff, 0x5f, 0x1, 0x3, 0x81]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2078, 0x93, 0x1ff, 0x81, 0xb3, 0xc, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8, 0x196, 0x0, 0x4, 0x4, 0x3ff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x6}, {0x7, 0x8}, {0x1}, {0x5, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {}, {0x7, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x1, 0x9}, {0x7, 0x8}, {0x4, 0x6}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x2}, {0x1}, {0x7, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0x4}, {0x1}, {0x2, 0x9}, {0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x3}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x2}, {0x1}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x3}, {}, {0x0, 0x6}, {0x1}, {0x7}, {0x1, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x7}, {0x0, 0x7}, {0x2, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0x7}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x16, 0x6c, 0x60, 0x1b, 0x5, 0x60, 0x9, 0x5, 0x6, 0x3, 0x2, 0xc, 0x36, 0x1b, 0x1, 0x6, 0x1b, 0x18, 0x6c, 0x48, 0x60, 0x18, 0x1, 0x2, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x4}, {0x5, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x9}, {0x3, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x2, 0x1}, {0x3, 0x3}, {0x2, 0x3}, {0x7, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x7}, {0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x5, 0x5}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x2}, {0x4, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x6}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x3}, {0x5, 0x1}, {0x4}, {0x4, 0x8}, {0x6, 0x2}, {0x1, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x4, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x2}, {0x6}, {0x2, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x400, 0x4, 0x800, 0x7, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x3}, {0x7, 0x3}, {0x7, 0x7}, {0x0, 0x6}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x6, 0x5}, {0x6, 0x1}, {0x1, 0x8}, {0x3, 0x2}, {0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x3, 0xa}, {0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x3, 0x6}, {0x5, 0x7}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x5, 0x7}, {0x6, 0x9}, {0x6, 0x7}, {0x2}, {0x0, 0xa}, {0x1, 0x4}, {0x6}, {0x0, 0x1}, {0x5}, {0x3}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x7}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x8}, {0x2, 0x7}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x3}, {0x7}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0xa}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x6c, 0x6c, 0x79, 0xb, 0x30, 0x2, 0x6, 0x18, 0x6, 0x9, 0x79, 0x16, 0x1b, 0x1, 0x5, 0x2, 0x5, 0xc, 0x0, 0x18, 0x3, 0x0, 0x1, 0x1, 0x4]}]}, @NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfb0, 0xf000, 0x9, 0xd489, 0x4, 0xfffe, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x0, 0x3, 0x8, 0x5, 0x6, 0xfff9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x4, 0x1b, 0x0, 0x0, 0x20, 0x36, 0x60, 0x95d321bcb988c224, 0x0, 0x9, 0x2, 0x6, 0x3, 0x6, 0x18, 0x1, 0x24, 0x3, 0x36, 0x3, 0x2, 0x6c, 0x2, 0x16, 0xf]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x3, 0x6, 0x5, 0x6, 0xc51f, 0x2]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x48, 0x2, 0x30, 0x12, 0xb, 0x1b, 0xb, 0x60, 0x2, 0x12, 0x6c, 0x5, 0xc, 0x3, 0x60, 0x6, 0x48, 0x5, 0x0, 0x6, 0x24, 0x60, 0xb, 0x36, 0x18, 0x6, 0x1b, 0x4, 0x9, 0x60, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x3}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0x5}, {0x2}, {0x2, 0xa}, {0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x2}, {0x2, 0xa}, {0x4, 0x6}, {0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x2, 0x8}, {0x2}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x8}, {0x4, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x7}, {0x7, 0x4}, {0x1, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x58a2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2e}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x39}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x10}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}]}]}]}, 0x1144}, 0x1, 0x0, 0x0, 0x400c050}, 0x20000880) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7af5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 40.727146ms ago: executing program 0 (id=3924): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/132, 0x84}, {&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/47, 0x2f}, {&(0x7f00000011c0)=""/111, 0x6f}, {&(0x7f0000001240)=""/96, 0x60}], 0x6}, 0x40000000) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd25, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x4002810) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) 0s ago: executing program 2 (id=3925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000007c0)={r1, &(0x7f00000004c0)='^\x00', 0x2f0002, &(0x7f0000000500)={@_ha_fsid={[0xfffffff7, 0x2]}, {0x7ff, 0x2a, 0x2, 0x7}}, 0xd6, &(0x7f0000000740), &(0x7f0000000780)=0x6}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000004c0)=""/16, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x2, @loopback, 0x80}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000003c0)=0x9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r8, @ANYBLOB="400096040a000200aaaaaaaaaa0c000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x3c, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008087}, 0x4e040) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r12, 0x25, 0x8, @val=@iter={&(0x7f0000000080)=@cgroup={0x3, r2, 0x9}, 0x10}}, 0x20) r13 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r13, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) recvmsg$kcm(r13, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)=""/218, 0xda}], 0x1}, 0x10000) sendmsg$inet(r13, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="5a93cf", 0x3}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffffe0ff00"], 0x50) kernel console output (not intermixed with test programs): g): Released all slaves [ 409.882247][ T1112] bond2 (unregistering): Released all slaves [ 409.908051][ T1112] bond3 (unregistering): Released all slaves [ 409.934109][ T1112] bond4 (unregistering): Released all slaves [ 409.960460][ T1112] bond5 (unregistering): Released all slaves [ 409.987992][ T1112] bond6 (unregistering): Released all slaves [ 410.011984][ T1112] bond7 (unregistering): Released all slaves [ 410.037926][ T1112] bond8 (unregistering): Released all slaves [ 410.057936][ T1112] bond9 (unregistering): Released all slaves [ 410.082551][ T1112] bond10 (unregistering): Released all slaves [ 410.094048][ T5609] Bluetooth: hci3: command tx timeout [ 410.282230][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 410.389199][T17703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2966'. [ 410.452614][ T1112] : left promiscuous mode [ 410.625682][T17709] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2967'. [ 410.839468][ T1112] tipc: Left network mode [ 410.927137][T17720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2969'. [ 410.959357][T17720] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2969'. [ 411.101533][T17727] sctp: [Deprecated]: syz.5.2970 (pid 17727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.101533][T17727] Use struct sctp_sack_info instead [ 411.218683][T17556] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.238425][T17556] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.246741][T17556] bridge_slave_0: entered allmulticast mode [ 411.254771][T17556] bridge_slave_0: entered promiscuous mode [ 411.274238][T17556] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.281619][T17556] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.328869][T17556] bridge_slave_1: entered allmulticast mode [ 411.370761][T17556] bridge_slave_1: entered promiscuous mode [ 411.563166][T17556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.622393][T17556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.641962][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 411.678182][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 411.692332][T17741] can: request_module (can-proto-5) failed. [ 411.698848][T17746] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 411.941865][T17556] team0: Port device team_slave_0 added [ 411.983104][T17556] team0: Port device team_slave_1 added [ 412.138492][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2977'. [ 412.174672][ T5609] Bluetooth: hci3: command tx timeout [ 412.249968][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 412.320098][T17556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.337922][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.493784][T17556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.748954][T17770] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2979'. [ 412.817181][T17556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.835109][T17773] netlink: zone id is out of range [ 412.851012][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.896844][T17773] netlink: zone id is out of range [ 412.916060][T17773] netlink: zone id is out of range [ 412.963950][T17556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.171669][T17772] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2979'. [ 413.221412][T17772] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2979'. [ 413.291635][T17785] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 413.831145][T17556] hsr_slave_0: entered promiscuous mode [ 413.900003][T17556] hsr_slave_1: entered promiscuous mode [ 413.932834][T17556] debugfs: 'hsr0' already exists in 'hsr' [ 413.969705][T17556] Cannot create hsr debugfs directory [ 414.254149][ T50] Bluetooth: hci3: command tx timeout [ 415.749696][T17841] syzkaller0: entered promiscuous mode [ 415.779550][T17841] syzkaller0: entered allmulticast mode [ 416.334049][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 416.582342][T17880] __nla_validate_parse: 2 callbacks suppressed [ 416.582363][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 419.059013][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 419.420677][ T1112] mac80211_hwsim hwsim4 wlan0 (unregistering): left promiscuous mode [ 419.462184][ T1112] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode [ 419.511721][ T1112] team0: Port device wlan0 removed [ 419.567667][T17891] netlink: 'syz.5.3001': attribute type 13 has an invalid length. [ 419.591837][T17891] netlink: 'syz.5.3001': attribute type 27 has an invalid length. [ 420.209795][T17896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3002'. [ 421.433908][T17934] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3010'. [ 421.793514][ T1112] hsr_slave_0: left promiscuous mode [ 421.908091][ T1112] veth1_macvtap: left promiscuous mode [ 421.921632][ T1112] veth0_macvtap: left promiscuous mode [ 421.938452][ T1112] veth1_vlan: left promiscuous mode [ 422.597413][T17959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3014'. [ 422.746021][T17961] can: request_module (can-proto-3) failed. [ 423.280664][ T1112] team_slave_1 (unregistering): left promiscuous mode [ 423.290675][ T1112] team_slave_1 (unregistering): left allmulticast mode [ 423.301428][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 423.368779][ T1112] team_slave_0 (unregistering): left promiscuous mode [ 423.384373][ T1112] team_slave_0 (unregistering): left allmulticast mode [ 423.402688][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 424.556625][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3020'. [ 424.937511][T18000] netlink: 'syz.5.3023': attribute type 1 has an invalid length. [ 424.954400][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 425.277548][T18000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.798061][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3028'. [ 425.884669][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3028'. [ 425.898600][ T1112] IPVS: stop unused estimator thread 0... [ 426.396997][T18049] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000 [ 426.477303][T17556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.562892][T17556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.597774][T17556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.687527][T17556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.726589][T17556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.749524][T18058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.810074][T17556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.827026][T18063] netlink: 'syz.5.3035': attribute type 1 has an invalid length. [ 426.843567][T17556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.862395][T18063] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3035'. [ 426.893456][T17556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.282425][T18085] FAULT_INJECTION: forcing a failure. [ 427.282425][T18085] name failslab, interval 1, probability 0, space 0, times 0 [ 427.327947][T18085] CPU: 1 UID: 0 PID: 18085 Comm: syz.5.3039 Not tainted syzkaller #0 PREEMPT(full) [ 427.327978][T18085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 427.327991][T18085] Call Trace: [ 427.327999][T18085] [ 427.328010][T18085] dump_stack_lvl+0xe8/0x150 [ 427.328046][T18085] should_fail_ex+0x40c/0x560 [ 427.328075][T18085] should_failslab+0xa8/0x100 [ 427.328116][T18085] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 427.328142][T18085] ? skb_clone+0x212/0x3a0 [ 427.328167][T18085] ? skb_clone+0x212/0x3a0 [ 427.328199][T18085] skb_clone+0x212/0x3a0 [ 427.328227][T18085] __netlink_deliver_tap+0x413/0x860 [ 427.328267][T18085] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.328294][T18085] netlink_deliver_tap+0x19c/0x1b0 [ 427.328322][T18085] netlink_unicast+0x77f/0x940 [ 427.328357][T18085] netlink_sendmsg+0x813/0xb40 [ 427.328394][T18085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.328437][T18085] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.328475][T18085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.328498][T18085] sock_sendmsg_nosec+0x13a/0x180 [ 427.328531][T18085] ____sys_sendmsg+0x54e/0x850 [ 427.328561][T18085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.328595][T18085] ? import_iovec+0x73/0xa0 [ 427.328627][T18085] ___sys_sendmsg+0x2a5/0x360 [ 427.328650][T18085] ? __lock_acquire+0x683/0x2cf0 [ 427.328682][T18085] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.328744][T18085] ? __fget_files+0x2a/0x420 [ 427.328771][T18085] ? __fget_files+0x3a2/0x420 [ 427.328808][T18085] __x64_sys_sendmsg+0x1b1/0x290 [ 427.328835][T18085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.328880][T18085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.328904][T18085] do_syscall_64+0x174/0x580 [ 427.328934][T18085] ? trace_irq_disable+0x3b/0x140 [ 427.328959][T18085] ? clear_bhb_loop+0x70/0xc0 [ 427.328984][T18085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.329004][T18085] RIP: 0033:0x7fc18ed9e0d9 [ 427.329023][T18085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.329040][T18085] RSP: 002b:00007fc18cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.329062][T18085] RAX: ffffffffffffffda RBX: 00007fc18f025fa0 RCX: 00007fc18ed9e0d9 [ 427.329076][T18085] RDX: 0000000020004000 RSI: 0000200000000100 RDI: 0000000000000003 [ 427.329089][T18085] RBP: 00007fc18cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 427.329124][T18085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.329135][T18085] R13: 00007fc18f026038 R14: 00007fc18f025fa0 R15: 00007ffce6734d78 [ 427.329170][T18085] [ 427.612787][T17556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.631446][T17556] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.671100][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.678324][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.691780][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.699047][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.111945][T18093] netlink: 'syz.1.3040': attribute type 2 has an invalid length. [ 428.812789][T18120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3045'. [ 428.851756][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3045'. [ 429.045935][T18120] veth1: entered allmulticast mode [ 429.060905][T18133] xt_l2tp: invalid flags combination: 8 [ 429.100786][T18133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'. [ 429.717456][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3051'. [ 430.300882][T17556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.517213][T18160] netlink: 'syz.3.3054': attribute type 1 has an invalid length. [ 430.622382][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3054'. [ 430.747297][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3054'. [ 430.775115][T18165] IPVS: set_ctl: invalid protocol: 54 10.1.1.2:20002 [ 430.841516][T18160] 8021q: adding VLAN 0 to HW filter on device bond11 [ 431.047484][T18178] wireguard: wg2: Could not create IPv4 socket [ 431.216990][T18185] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3057'. [ 431.282194][T17556] veth0_vlan: entered promiscuous mode [ 431.499642][T17556] veth1_vlan: entered promiscuous mode [ 431.877864][T17556] veth0_macvtap: entered promiscuous mode [ 431.902719][T18197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.942807][T17556] veth1_macvtap: entered promiscuous mode [ 432.029176][T18197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.061757][T18206] netlink: 'syz.3.3063': attribute type 1 has an invalid length. [ 432.090856][T17556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.106373][T18206] netlink: 'syz.3.3063': attribute type 2 has an invalid length. [ 432.145543][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 432.161626][T17556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.315040][ T1103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.371661][ T1103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.609307][ T736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.710355][ T736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.750508][T18217] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 432.889297][T14247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.929705][T14247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.112387][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.159559][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.712392][T18253] netlink: 'syz.1.3071': attribute type 1 has an invalid length. [ 433.833892][T18253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.493551][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.510113][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.523139][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.539353][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.551089][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.799823][T18288] xt_hashlimit: size too large, truncated to 1048576 [ 434.908147][T18293] sctp: [Deprecated]: syz.3.3078 (pid 18293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.908147][T18293] Use struct sctp_sack_info instead [ 435.036828][T18287] sctp: [Deprecated]: syz.3.3078 (pid 18287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.036828][T18287] Use struct sctp_sack_info instead [ 435.590326][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'. [ 435.697022][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'. [ 435.905741][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3082'. [ 436.182733][T18313] xfrm0 speed is unknown, defaulting to 1000 [ 436.581073][ T5609] Bluetooth: hci1: command tx timeout [ 436.819513][T18340] tipc: Enabling of bearer rejected, failed to enable media [ 436.923694][T18342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3088'. [ 436.965655][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3088'. [ 437.325175][T18357] netlink: zone id is out of range [ 437.364517][T18357] netlink: zone id is out of range [ 437.413430][T18357] netlink: zone id is out of range [ 437.563172][T18273] xfrm0 speed is unknown, defaulting to 1000 [ 437.960384][T18367] bond3: option primary_reselect: invalid value (6) [ 438.092990][T18367] bond3 (unregistering): Released all slaves [ 438.654231][ T5609] Bluetooth: hci1: command tx timeout [ 438.891322][T18387] tipc: Enabling of bearer rejected, failed to enable media [ 438.999195][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 439.068354][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3095'. [ 439.256051][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 439.337120][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3095'. [ 439.493946][T18405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3098'. [ 439.854222][ T1112] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.052673][T18418] netlink: 'syz.2.3099': attribute type 21 has an invalid length. [ 440.279718][T18404] syzkaller0: entered promiscuous mode [ 440.293995][T18404] syzkaller0: entered allmulticast mode [ 440.735016][ T5609] Bluetooth: hci1: command tx timeout [ 442.824635][ T5609] Bluetooth: hci1: command tx timeout [ 445.222506][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 446.254684][ T6093] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.263544][ T6093] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.315025][ T1112] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.604193][T18475] __nla_validate_parse: 2 callbacks suppressed [ 446.604214][T18475] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3103'. [ 446.712990][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.720619][T18475] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.758595][T18479] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3103'. [ 447.161125][T18489] xt_hl: Unknown Hop Limit match mode: 206 [ 447.640418][T18273] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.664374][T18511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 447.677088][T18273] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.719694][T18273] bridge_slave_0: entered allmulticast mode [ 447.764991][T18273] bridge_slave_0: entered promiscuous mode [ 447.883501][T18273] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.934789][T18273] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.963279][T18273] bridge_slave_1: entered allmulticast mode [ 447.993286][T18273] bridge_slave_1: entered promiscuous mode [ 448.017836][T18522] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3110'. [ 448.032777][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 448.319235][T18273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.368727][T18273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.418255][T18511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 448.599549][T18273] team0: Port device team_slave_0 added [ 448.641980][T18273] team0: Port device team_slave_1 added [ 448.836386][T18273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.887847][T18273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.961140][T18273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.109071][T18273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.157101][T18273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.308375][T18273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.648289][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 449.669208][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 452.387576][T18559] batadv1: left allmulticast mode [ 452.412737][T18559] batadv2: left allmulticast mode [ 452.484761][T18559] ip6tnl2: left allmulticast mode [ 452.521087][T18559] ip6gre1: left allmulticast mode [ 452.634500][T18559] hsr1: left promiscuous mode [ 452.713397][T18559] bond1: left promiscuous mode [ 452.723312][T18559] bridge2: left promiscuous mode [ 452.974715][ T1103] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.998137][ T1103] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.046853][ T5720] xfrm0 speed is unknown, defaulting to 1000 [ 453.055790][T14241] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.113078][T14241] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.129333][ T5720] syz0: Port: 1 Link DOWN [ 453.234456][ T9333] xfrm0 speed is unknown, defaulting to 1000 [ 453.291746][T18597] xfrm0 speed is unknown, defaulting to 1000 [ 453.319985][T18273] hsr_slave_0: entered promiscuous mode [ 453.340957][T18273] hsr_slave_1: entered promiscuous mode [ 453.383518][T18273] debugfs: 'hsr0' already exists in 'hsr' [ 453.421015][T18273] Cannot create hsr debugfs directory [ 454.011636][T18627] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3135'. [ 454.066672][T18627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3135'. [ 454.258623][T18637] netlink: 'syz.5.3138': attribute type 1 has an invalid length. [ 454.674052][ T1103] IPVS: starting estimator thread 0... [ 454.796763][T18645] IPVS: using max 30 ests per chain, 72000 per kthread [ 454.943900][ T1112] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.983484][ T1112] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.018665][T18643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3140'. [ 455.034182][T14247] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.088649][T14247] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.174440][T18662] netlink: 'syz.2.3143': attribute type 1 has an invalid length. [ 455.204345][T18660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.447355][T18273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.494419][T18273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.887352][T18273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.910857][T18273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 456.065446][T18273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.087729][T18273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 456.473525][T18273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.488896][T18675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3146'. [ 456.503773][T18273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 456.770129][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3146'. [ 457.056932][T18694] sock: sock_timestamping_bind_phc: sock not bind to device [ 457.715405][T18273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.765107][T18273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.792201][T18273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.800604][T18709] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3156'. [ 457.834856][T18273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.843001][T18273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 457.870162][T18273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.898316][T18709] ªªªªªª: renamed from vlan0 [ 457.911110][T18713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3158'. [ 457.929448][T18273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 457.939727][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 457.950511][T18713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3158'. [ 457.970772][T18273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.990001][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'. [ 458.723187][T18273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.838969][T18273] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.876823][T18745] netlink: 'syz.2.3165': attribute type 39 has an invalid length. [ 458.906726][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.913980][T14241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.991043][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.998341][T14241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.239796][T18752] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 459.649646][T18763] __nla_validate_parse: 1 callbacks suppressed [ 459.649669][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3170'. [ 459.812700][T18763] veth3: entered allmulticast mode [ 459.873162][T18766] 8021q: VLANs not supported on nlmon0 [ 460.194619][T18780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3174'. [ 460.360858][T18273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.608601][T18273] veth0_vlan: entered promiscuous mode [ 460.646346][T18273] veth1_vlan: entered promiscuous mode [ 460.699457][T18273] veth0_macvtap: entered promiscuous mode [ 460.716124][T18273] veth1_macvtap: entered promiscuous mode [ 460.758427][T18791] sock: sock_timestamping_bind_phc: sock not bind to device [ 460.772427][T18273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.799660][T18273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.836398][T14243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.861728][T14243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.031503][T14243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.114224][ T1103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.236725][T14241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.270548][T14241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.411182][T14241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.449491][T14241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.047823][T18816] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 462.089323][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3181'. [ 462.285802][T18816] bond1 (unregistering): Released all slaves [ 462.827018][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3181'. [ 463.347489][T18848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.429378][T18856] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3184'. [ 463.442462][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.456986][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 463.466143][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 463.475650][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 463.489205][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 463.699097][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 463.718160][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3183'. [ 464.131644][T18869] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3186'. [ 464.169198][T18869] syzkaller0: entered promiscuous mode [ 464.190203][T18869] syzkaller0: entered allmulticast mode [ 464.227470][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3186'. [ 464.246357][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3186'. [ 464.267301][T18869] netlink: 'syz.5.3186': attribute type 20 has an invalid length. [ 464.489330][T18855] xfrm0 speed is unknown, defaulting to 1000 [ 465.253682][T18895] __nla_validate_parse: 1 callbacks suppressed [ 465.298186][T18895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3192'. [ 465.599284][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'. [ 465.616128][ T5609] Bluetooth: hci2: command tx timeout [ 465.684768][T18907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3195'. [ 466.181547][T18916] netlink: 'syz.0.3197': attribute type 210 has an invalid length. [ 466.451809][T18855] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.500933][T18855] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.516594][T18855] bridge_slave_0: entered allmulticast mode [ 466.532850][T18855] bridge_slave_0: entered promiscuous mode [ 466.550282][T18855] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.576333][T18855] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.606005][T18855] bridge_slave_1: entered allmulticast mode [ 466.627365][T18855] bridge_slave_1: entered promiscuous mode [ 466.779134][T18855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.799320][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3203'. [ 466.822225][T18855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.845438][T18940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3203'. [ 466.949952][T18855] team0: Port device team_slave_0 added [ 466.970692][T18855] team0: Port device team_slave_1 added [ 467.140159][T18952] netlink: 530 bytes leftover after parsing attributes in process `syz.5.3205'. [ 467.187461][T18855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.227657][T18855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.259986][T18855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.276790][T18855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.299024][T18855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.353993][T18855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.623505][T18855] hsr_slave_0: entered promiscuous mode [ 467.649838][T18855] hsr_slave_1: entered promiscuous mode [ 467.661992][T18855] debugfs: 'hsr0' already exists in 'hsr' [ 467.669688][T18855] Cannot create hsr debugfs directory [ 467.694945][ T5609] Bluetooth: hci2: command tx timeout [ 467.777448][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3209'. [ 467.846878][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 467.862722][T18969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.888308][T18969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3210'. [ 467.913177][T18969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3210'. [ 468.595666][T18976] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 468.611211][T18977] ip_tables: iptables: counters copy to user failed while replacing table [ 468.697472][T18976] netlink: 'syz.2.3212': attribute type 39 has an invalid length. [ 469.366607][T18994] xfrm0 speed is unknown, defaulting to 1000 [ 469.518459][T18855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.567699][T18855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.585190][T18855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.609176][T18855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.628994][T18855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.680097][T18855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.720134][T18855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.740903][T18855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.774042][ T5609] Bluetooth: hci2: command tx timeout [ 470.038968][T19015] syzkaller0: entered promiscuous mode [ 470.054051][T19015] syzkaller0: entered allmulticast mode [ 470.161145][T19015] netlink: 'syz.2.3222': attribute type 29 has an invalid length. [ 470.533308][T18855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.634243][T18855] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.702101][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.709380][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.803324][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.810598][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.517999][T19044] __nla_validate_parse: 1 callbacks suppressed [ 471.518045][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 471.743658][T19044] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 471.828522][T19047] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 471.854103][ T5609] Bluetooth: hci2: command tx timeout [ 471.947109][T19050] xfrm0 speed is unknown, defaulting to 1000 [ 473.022312][T18855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.217489][T19049] xfrm0 speed is unknown, defaulting to 1000 [ 473.238877][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.256541][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.267630][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.281233][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.290023][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.326132][T18855] veth0_vlan: entered promiscuous mode [ 473.342679][T18855] veth1_vlan: entered promiscuous mode [ 473.386503][T18855] veth0_macvtap: entered promiscuous mode [ 473.398609][T18855] veth1_macvtap: entered promiscuous mode [ 473.511782][T19081] netlink: 'syz.2.3237': attribute type 4 has an invalid length. [ 473.542524][T19081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3237'. [ 473.571309][T19081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.578663][T19081] IPv6: NLM_F_CREATE should be set when creating new route [ 473.586004][T19081] IPv6: NLM_F_CREATE should be set when creating new route [ 473.959601][T18855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.273683][T18855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.374127][ T1112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.494900][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.532190][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.604078][ T1103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.859997][T14245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.901179][T14245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.110114][T19080] xfrm0 speed is unknown, defaulting to 1000 [ 475.201489][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.234675][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.539283][ T50] Bluetooth: hci0: command tx timeout [ 475.797376][T19113] sctp: [Deprecated]: syz.2.3242 (pid 19113) Use of int in max_burst socket option. [ 475.797376][T19113] Use struct sctp_assoc_value instead [ 476.742142][T19144] IPv6: addrconf: prefix option has invalid lifetime [ 476.824068][T19147] netlink: 'syz.2.3250': attribute type 12 has an invalid length. [ 477.331541][T14247] tipc: Subscription rejected, illegal request [ 477.600749][T19162] xt_hashlimit: size too large, truncated to 1048576 [ 477.614737][ T50] Bluetooth: hci0: command tx timeout [ 478.743244][T19080] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.793139][T19080] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.831197][T19080] bridge_slave_0: entered allmulticast mode [ 478.921802][T19080] bridge_slave_0: entered promiscuous mode [ 478.978287][T19211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3265'. [ 479.056909][T19080] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.109588][T19080] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.180144][T19080] bridge_slave_1: entered allmulticast mode [ 479.233443][T19080] bridge_slave_1: entered promiscuous mode [ 479.703362][ T50] Bluetooth: hci0: command tx timeout [ 479.777835][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3266'. [ 479.872212][T19080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.916354][T19080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.062603][T19189] netlink: 'syz.5.3258': attribute type 12 has an invalid length. [ 480.218055][T19080] team0: Port device team_slave_0 added [ 480.246982][T19080] team0: Port device team_slave_1 added [ 480.425976][T19080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.448973][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 480.465405][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.502682][T19080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.544638][T19080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.565090][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.641269][T19080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.905795][T19080] hsr_slave_0: entered promiscuous mode [ 480.942926][T19080] hsr_slave_1: entered promiscuous mode [ 480.962533][T19080] debugfs: 'hsr0' already exists in 'hsr' [ 480.985101][T19080] Cannot create hsr debugfs directory [ 481.479874][T19260] xfrm0 speed is unknown, defaulting to 1000 [ 481.770406][T19271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3277'. [ 481.783782][ T50] Bluetooth: hci0: command tx timeout [ 482.061674][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3279'. [ 482.793239][T19299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3284'. [ 482.923336][T19080] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 482.970892][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.002256][T19080] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.061222][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.112018][T19080] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.135412][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.144549][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.154476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.189297][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.249863][T19080] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 483.318994][T19080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.698550][T19329] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 483.856665][T19080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.913757][T19336] netlink: 'syz.3.3293': attribute type 10 has an invalid length. [ 483.944342][T19336] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.993668][T19336] bond0: (slave team0): Enslaving as an active interface with an up link [ 484.029628][T19080] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.197088][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.205763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.241526][T19339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.267326][T19339] bridge0: port 3(bond1) entered blocking state [ 484.282548][T19339] bridge0: port 3(bond1) entered disabled state [ 484.309746][T19339] bond1: entered allmulticast mode [ 484.330317][T19339] bond1: entered promiscuous mode [ 484.367119][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.374435][T14247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.459212][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.466493][T14247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.585769][T19348] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3296'. [ 484.702539][T19351] syzkaller0: entered promiscuous mode [ 484.708506][T19351] syzkaller0: entered allmulticast mode [ 484.801227][T19351] macsec1: entered allmulticast mode [ 484.807084][T19351] dummy0: entered allmulticast mode [ 484.825848][T19351] dummy0: entered promiscuous mode [ 484.835545][T19351] dummy0: left allmulticast mode [ 484.872833][ T9333] dummy0: left promiscuous mode [ 485.217854][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.226383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.345708][T19080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.977736][T19080] veth0_vlan: entered promiscuous mode [ 486.001121][T19080] veth1_vlan: entered promiscuous mode [ 486.050500][T19080] veth0_macvtap: entered promiscuous mode [ 486.063505][T19080] veth1_macvtap: entered promiscuous mode [ 486.090888][T19080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.118667][T19080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.179004][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.189614][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.198428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.216272][T14247] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.235633][T14247] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.260526][T14247] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.301997][T14247] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.601641][T19332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.610774][T19329] tipc: Started in network mode [ 486.635844][T19329] tipc: Node identity ac14140f, cluster identity 4711 [ 486.656085][T19329] tipc: New replicast peer: 255.255.255.255 [ 486.676319][T19329] tipc: Enabled bearer , priority 10 [ 486.939855][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.980571][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.016651][T19380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3301'. [ 487.113739][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.163252][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.196168][T19388] geneve2: entered allmulticast mode [ 487.302590][T19375] xfrm0 speed is unknown, defaulting to 1000 [ 487.328366][T19392] bridge: RTM_NEWNEIGH with invalid ether address [ 487.724382][T19406] netlink: 'syz.6.3234': attribute type 2 has an invalid length. [ 487.813797][ T8893] tipc: Node number set to 2886997007 [ 488.414670][ T9333] net_ratelimit: 4 callbacks suppressed [ 488.414761][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.428960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.747546][T19430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3311'. [ 489.276669][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.455245][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.463662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.932462][T19460] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3316'. [ 490.505568][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.514018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.659185][T19475] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3321'. [ 490.676333][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.686850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.799594][T19478] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 490.855334][T19478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3323'. [ 491.125158][T19487] netlink: 'syz.5.3329': attribute type 32 has an invalid length. [ 491.586240][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.700966][T19507] IPv6: Can't replace route, no match found [ 491.711799][T19498] bridge_slave_0: left allmulticast mode [ 491.746276][T19507] IPv6: Can't replace route, no match found [ 491.755130][T19498] bridge_slave_0: left promiscuous mode [ 491.785143][T19498] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.818904][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3335'. [ 491.916905][T19498] bridge_slave_1: left allmulticast mode [ 491.936974][T19498] bridge_slave_1: left promiscuous mode [ 491.966237][T19498] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.030293][T19498] bond0: (slave bond_slave_0): Releasing backup interface [ 492.072596][T19498] bond0: (slave bond_slave_1): Releasing backup interface [ 492.148544][T19498] team0: Port device team_slave_0 removed [ 492.162361][T19498] team0: Port device team_slave_1 removed [ 492.170878][T19498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.186779][T19498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.202188][T19498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.211550][T19498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.257912][T19505] team0: Port device xfrm0 added [ 492.263467][T19514] tc_dump_action: action bad kind [ 493.128846][T19554] Cannot find add_set index 4 as target [ 493.497314][T19565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3352'. [ 493.532175][T19565] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3352'. [ 493.707141][ T9333] net_ratelimit: 7 callbacks suppressed [ 493.707161][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.721266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.017732][T19563] bridge_slave_0: left allmulticast mode [ 494.041513][T19563] bridge_slave_0: left promiscuous mode [ 494.064608][T19563] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.140709][T19563] bridge_slave_1: left allmulticast mode [ 494.169506][T19563] bridge_slave_1: left promiscuous mode [ 494.185848][T19563] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.196135][T19572] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3353'. [ 494.226397][T19563] bond0: (slave bond_slave_0): Releasing backup interface [ 494.264853][T19563] bond0: (slave bond_slave_1): Releasing backup interface [ 494.326873][T19563] team0: Port device team_slave_0 removed [ 494.399517][T19563] team0: Port device team_slave_1 removed [ 494.426500][T19563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.447789][T19563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.463594][T19563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.472623][T19563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.489672][T19563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 494.633195][T19575] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3354'. [ 494.735716][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.744274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.754797][T19575] netlink: 'syz.3.3354': attribute type 2 has an invalid length. [ 494.792166][T19575] netlink: 'syz.3.3354': attribute type 2 has an invalid length. [ 494.809983][T19579] TCP: TCP_TX_DELAY enabled [ 495.089114][T19594] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3359'. [ 495.284682][T19596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3360'. [ 495.304636][T19599] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 495.379119][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.401878][T19600] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 495.474497][T19607] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 495.709588][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3365'. [ 495.777343][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.785827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.861356][T19613] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3365'. [ 495.929971][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 495.983212][T19625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3367'. [ 496.058368][T19627] sctp: [Deprecated]: syz.3.3370 (pid 19627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.058368][T19627] Use struct sctp_sack_info instead [ 496.481900][T19645] pim6reg: entered allmulticast mode [ 496.581367][T19649] IPVS: set_ctl: invalid protocol: 148 224.0.0.2:20004 [ 496.582544][T19645] pim6reg: left allmulticast mode [ 496.863601][T19659] : renamed from dummy0 (while UP) [ 497.016823][T19669] netlink: 'syz.5.3380': attribute type 9 has an invalid length. [ 497.417629][T19682] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 497.492918][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'. [ 497.529155][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3384'. [ 497.646125][T19690] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3386'. [ 498.151625][T19702] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3389'. [ 498.496242][ T5609] Bluetooth: hci5: command 0x0405 tx timeout [ 498.955441][ T9335] net_ratelimit: 8 callbacks suppressed [ 498.955466][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.970465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.037484][T19734] netlink: 'syz.6.3397': attribute type 3 has an invalid length. [ 499.913107][T19758] netlink: 'syz.2.3405': attribute type 1 has an invalid length. [ 500.015282][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.023676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.185153][T19779] __nla_validate_parse: 8 callbacks suppressed [ 500.185171][T19779] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3406'. [ 500.229295][T19758] bond2: entered promiscuous mode [ 500.267389][T19758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.456529][T19772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.518474][T19787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3404'. [ 500.537279][T19772] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 500.598373][T19772] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 500.667788][T19772] bond2: (slave xfrm1): making interface the new active one [ 500.699365][T19772] xfrm1: entered promiscuous mode [ 500.735404][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.778205][T19772] xfrm1: left promiscuous mode [ 500.908028][T19779] 0·: renamed from hsr0 [ 500.925812][T19779] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.970658][T19779] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.990802][T19779] 0·: entered allmulticast mode [ 500.999300][T19779] hsr_slave_0: entered allmulticast mode [ 501.006897][T19779] hsr_slave_1: entered allmulticast mode [ 501.015935][T19779] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 501.039966][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3411'. [ 501.055170][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.063558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.115028][T19796] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 501.291329][T19803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3412'. [ 501.530790][T19815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.541677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.689742][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3416'. [ 501.772523][T19820] netlink: 'syz.2.3416': attribute type 7 has an invalid length. [ 501.818253][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 502.808453][T19858] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3425'. [ 503.280745][T19871] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 503.373024][T19877] netlink: 'syz.2.3431': attribute type 1 has an invalid length. [ 504.174973][ T5720] net_ratelimit: 9 callbacks suppressed [ 504.174993][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.189652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.533350][T19907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3438'. [ 504.632548][T19901] syzkaller0: entered promiscuous mode [ 504.647342][T19901] syzkaller0: entered allmulticast mode [ 505.215663][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.224642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.235842][T19924] openvswitch: netlink: Actions may not be safe on all matching packets [ 505.986734][T19932] netlink: Conntrack attr has 4 unknown bytes [ 506.006468][T19932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.099387][T19933] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 506.265292][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.273749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.823587][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.042051][T19916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.812565][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 508.852541][T19928] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 508.877063][T19933] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 508.891916][T19937] lo: entered allmulticast mode [ 508.947347][T19940] lo: left allmulticast mode [ 508.977403][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 508.993313][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 509.052363][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 509.090872][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 509.112977][T19946] netlink: 'syz.3.3446': attribute type 1 has an invalid length. [ 509.135963][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 509.172154][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3446'. [ 509.206052][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 509.280384][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 509.300755][T19953] syz_tun: entered allmulticast mode [ 509.361345][T19953] netlink: 'syz.0.3448': attribute type 12 has an invalid length. [ 509.365235][T19942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3445'. [ 509.385161][ T5720] net_ratelimit: 7 callbacks suppressed [ 509.385179][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.399277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.580036][T19952] syz_tun: left allmulticast mode [ 510.077381][T19973] netlink: 'syz.5.3451': attribute type 21 has an invalid length. [ 510.418019][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.427156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.806084][T19992] bond0: (slave bond_slave_1): Releasing backup interface [ 510.985436][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.459232][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.468433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.431670][T20030] syzkaller1: entered promiscuous mode [ 512.445959][T20030] syzkaller1: entered allmulticast mode [ 512.494133][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.502560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.939526][T20061] netlink: 'syz.6.3470': attribute type 1 has an invalid length. [ 512.966000][T20052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.008325][T20052] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.072729][T20052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.384073][T20052] veth1_vlan: left promiscuous mode [ 513.436008][T20052] veth0_vlan: left promiscuous mode [ 513.503960][T20052] veth0_vlan: entered promiscuous mode [ 513.602095][T20052] veth1_vlan: entered promiscuous mode [ 513.614619][T14226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.677466][T20052] veth1_macvtap: left promiscuous mode [ 513.724638][T20052] veth0_macvtap: left promiscuous mode [ 513.760541][T20052] veth0_macvtap: entered promiscuous mode [ 513.792796][T20052] veth1_macvtap: entered promiscuous mode [ 513.858912][T20052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.906862][T20052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.945289][T20052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.977488][T20052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.058900][T20052] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 514.091645][T20052] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 514.178768][T20058] vlan2: entered promiscuous mode [ 514.224106][ T62] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.270758][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.315467][ T62] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.359539][ T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.552935][ T9732] xfrm0 speed is unknown, defaulting to 1000 [ 514.559877][T20078] __nla_validate_parse: 68 callbacks suppressed [ 514.559895][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3475'. [ 514.578691][T14245] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.615694][ T9732] syz0: Port: 1 Link ACTIVE [ 514.622067][T14245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.657325][ T9333] net_ratelimit: 5 callbacks suppressed [ 514.657342][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.671374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.376247][ T1103] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.396016][ T1103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.438446][T20093] vlan0: entered allmulticast mode [ 515.450088][T20093] bond0: entered allmulticast mode [ 515.478707][ T9732] xfrm0 speed is unknown, defaulting to 1000 [ 515.562206][T20104] dummy0: entered allmulticast mode [ 515.594361][ T736] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.712319][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.721017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.747904][ T736] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.787815][ T62] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 515.820701][ T62] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 515.830662][ T9335] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 515.962686][T20114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3483'. [ 516.028157][T14245] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.105693][T20118] Bluetooth: MGMT ver 1.23 [ 516.111805][ T62] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.338922][T20125] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 516.689767][T20143] syzkaller1: entered promiscuous mode [ 516.735147][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.739195][T20143] syzkaller1: entered allmulticast mode [ 516.743973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.810272][T20150] netlink: 'syz.5.3490': attribute type 1 has an invalid length. [ 516.828550][ T9333] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.852119][ T9335] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 516.992734][T20150] syzkaller1: entered promiscuous mode [ 517.041210][T20150] syzkaller1: entered allmulticast mode [ 517.075459][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.209520][T20164] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3493'. [ 517.232877][T20163] ipvlan2: entered promiscuous mode [ 517.279691][T20163] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.349814][T20163] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 517.417726][T20163] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 517.778740][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.787503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.859754][T20162] ipvlan2: entered promiscuous mode [ 517.879088][T20162] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.915909][T20162] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 517.992279][T20162] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 518.113348][T20164] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 518.185678][T20164] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 518.284053][T20164] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 518.606732][T20191] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 518.696201][T20191] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 518.830803][T14247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.249489][T20208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3502'. [ 519.409338][T20217] netlink: 'syz.3.3504': attribute type 11 has an invalid length. [ 519.685853][T20227] net_ratelimit: 3 callbacks suppressed [ 519.685873][T20227] openvswitch: netlink: Tunnel attr 12555 out of range max 16 [ 519.929720][ T50] Bluetooth: hci0: link tx timeout [ 519.940755][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 519.951024][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.959778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.997747][T20230] Bluetooth: hci0: link tx timeout [ 520.003664][T20230] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 520.110193][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.251128][T20233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3507'. [ 520.260593][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 520.642144][T20248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.705662][T20248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.746406][T20248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.772268][T20248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.793102][T20248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.975084][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.018452][T20230] Bluetooth: hci0: command 0x0406 tx timeout [ 523.005827][T20301] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3527'. [ 523.057807][T20304] Cannot find add_set index 2 as target [ 523.234149][T20300] xfrm0 speed is unknown, defaulting to 1000 [ 523.709791][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3531'. [ 523.895372][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3531'. [ 523.959022][T20305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 523.987931][T20318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3531'. [ 524.034240][T20305] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 524.514327][T20305] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 524.567283][T20305] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 525.219499][ T9731] net_ratelimit: 10 callbacks suppressed [ 525.219518][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.234154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.250664][T20305] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 525.328552][T20305] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 525.963128][T20305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.998971][T20305] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 526.068270][ T29] audit: type=1800 audit(1786294636.595:6): pid=20355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3541" name="memory.events" dev="tmpfs" ino=273 res=0 errno=0 [ 526.100320][T20354] gretap1: entered promiscuous mode [ 526.117675][ T29] audit: type=1804 audit(1786294636.625:7): pid=20355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3541" name="/newroot/50/memory.events" dev="tmpfs" ino=273 res=1 errno=0 [ 526.161216][T20355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 526.182936][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.256252][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.264878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.403048][T20360] netlink: 'syz.0.3543': attribute type 1 has an invalid length. [ 526.616210][T20360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.728788][T20305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.743011][T20305] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 526.760551][T20362] bond1: (slave dummy0): making interface the new active one [ 526.788440][T20362] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 526.822516][T20363] bond1: entered promiscuous mode [ 526.834298][T20363] dummy0: entered promiscuous mode [ 526.843077][T20363] bond1: entered allmulticast mode [ 526.849897][T20363] dummy0: entered allmulticast mode [ 526.949501][T20305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.972418][T20305] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 527.058815][T20305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 527.087078][T20305] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 527.196411][T20382] Bluetooth: MGMT ver 1.23 [ 527.300342][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.308830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.338817][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.347343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.720482][T20411] syzkaller1: entered promiscuous mode [ 528.758996][T20411] syzkaller1: entered allmulticast mode [ 528.804759][T20414] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3550'. [ 529.245170][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.477912][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 529.694815][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 530.379494][T14245] net_ratelimit: 2 callbacks suppressed [ 530.379513][T14245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.393486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.421889][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.430370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.471338][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.479710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.562583][T20505] Bluetooth: MGMT ver 1.23 [ 531.639951][T20507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3570'. [ 531.668544][T20505] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 531.708028][T20507] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3570'. [ 531.809167][T20515] netlink: 'syz.5.3571': attribute type 1 has an invalid length. [ 531.833829][T20515] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.3571'. [ 531.892904][T20515] netlink: 'syz.5.3571': attribute type 1 has an invalid length. [ 531.945398][T20515] netlink: 2016 bytes leftover after parsing attributes in process `syz.5.3571'. [ 532.135738][T20525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.144851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.260483][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.494257][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.596019][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 532.703823][T20553] netlink: 'syz.2.3579': attribute type 29 has an invalid length. [ 532.823835][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3579'. [ 532.876003][T20560] netlink: 'syz.2.3579': attribute type 29 has an invalid length. [ 532.950668][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3579'. [ 533.251397][T20570] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 533.388141][T20570] netlink: 'syz.0.3584': attribute type 21 has an invalid length. [ 533.434125][T20570] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3584'. [ 533.472793][T20576] sit0: entered promiscuous mode [ 533.620849][T20576] netlink: 'syz.6.3585': attribute type 1 has an invalid length. [ 533.926498][T20592] __nla_validate_parse: 3 callbacks suppressed [ 533.926518][T20592] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3589'. [ 534.122995][T20593] bond4: entered allmulticast mode [ 534.230142][T20598] macvlan2: entered promiscuous mode [ 534.267726][T20598] macvlan2: entered allmulticast mode [ 534.297220][T20598] bond4: entered promiscuous mode [ 534.332863][T20598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 534.386540][T20598] bond4: left promiscuous mode [ 535.624718][ T9333] net_ratelimit: 13 callbacks suppressed [ 535.624740][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.638991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.095442][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.103955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.356252][T20650] bridge0: port 1(batadv1) entered blocking state [ 536.407098][T20650] bridge0: port 1(batadv1) entered disabled state [ 536.424470][T20650] batadv1: entered allmulticast mode [ 536.452319][T20650] batadv1: entered promiscuous mode [ 536.545021][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3600'. [ 536.655702][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.664155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.795298][ T1112] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 536.805247][ T1112] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 536.873428][T20668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3601'. [ 537.327617][T20684] netlink: 'syz.6.3605': attribute type 1 has an invalid length. [ 537.343390][T20683] SET target dimension over the limit! [ 537.380275][T20685] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3605'. [ 537.694261][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.702671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.849344][T20703] netlink: 'syz.5.3610': attribute type 26 has an invalid length. [ 537.977357][T20708] sit0: entered promiscuous mode [ 538.029664][T20708] netlink: 'syz.3.3611': attribute type 1 has an invalid length. [ 538.078306][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3612'. [ 538.090115][T20708] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3611'. [ 538.129366][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3612'. [ 538.308655][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3614'. [ 538.355695][T20710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'. [ 538.379361][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3614'. [ 538.565023][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.739250][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.937063][T20730] __nla_validate_parse: 2 callbacks suppressed [ 538.937082][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 539.102271][T20730] block nbd3: Unsupported socket: should be TCP or UNIX. [ 539.682727][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3618'. [ 539.755972][T20752] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3622'. [ 539.765801][T20755] netlink: 'syz.3.3618': attribute type 11 has an invalid length. [ 540.393311][T20766] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 540.517070][T20766] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3623'. [ 540.573188][T20766] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 540.629404][T20766] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3623'. [ 540.684269][T20766] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 540.727384][T20766] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3623'. [ 540.814160][ T9333] net_ratelimit: 5 callbacks suppressed [ 540.814176][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.828527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.843297][T20766] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 540.911341][T20766] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3623'. [ 540.991531][T20766] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 541.058438][T20766] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3623'. [ 541.136025][T20766] netlink: 'syz.3.3623': attribute type 1 has an invalid length. [ 541.198605][T20766] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3623'. [ 541.654423][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.857553][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.866040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.883501][T14245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.891975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.957439][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3633'. [ 542.894173][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.902576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.492180][T20851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.615218][T20851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.789547][T20851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.980990][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.026200][T20860] __nla_validate_parse: 2 callbacks suppressed [ 544.026220][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3642'. [ 544.146072][T20860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3642'. [ 544.949286][T20870] ip6gre1: entered promiscuous mode [ 544.983965][T20870] ip6gre1: entered allmulticast mode [ 545.898086][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'. [ 545.966017][T20886] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.096327][ T9731] net_ratelimit: 4 callbacks suppressed [ 546.096346][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.110725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.183575][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3650'. [ 546.283433][T20899] tipc: Enabled bearer , priority 0 [ 546.428306][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804da8f400: rx timeout, send abort [ 546.974907][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 547.134225][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.142588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.250563][T20921] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3656'. [ 547.622006][ T736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.632529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.703425][T20931] tipc: Enabled bearer , priority 0 [ 547.740358][T20931] tipc: Resetting bearer [ 547.774435][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.871218][T20930] tipc: Disabling bearer [ 547.935177][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3660'. [ 548.177551][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.186056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.523112][T20939] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.559472][T20953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.634384][T20939] bond6 (unregistering): Released all slaves [ 548.903491][T20950] xfrm0 speed is unknown, defaulting to 1000 [ 549.331508][T20976] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3667'. [ 549.901688][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3670'. [ 549.926659][T20993] netlink: 'syz.0.3671': attribute type 10 has an invalid length. [ 550.000022][T20993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.051038][T20994] netlink: 'syz.0.3671': attribute type 10 has an invalid length. [ 550.095665][T20993] team0: Device netdevsim1 is of different type [ 550.197694][ T5271] veth1_vlan: left promiscuous mode [ 550.262325][T20994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.318811][T20994] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 551.377641][ T9732] net_ratelimit: 10 callbacks suppressed [ 551.377660][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.391753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.571797][T21040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3679'. [ 552.058673][T21049] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3681'. [ 552.279747][T21053] netlink: 'syz.5.3682': attribute type 30 has an invalid length. [ 552.444009][ T9333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.452398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.476770][T21041] sit0: left promiscuous mode [ 553.381629][T14247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.390127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.478727][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.487450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.854314][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.899022][T21041] vlan2: left promiscuous mode [ 553.928124][T21041] gretap1: left promiscuous mode [ 553.944189][T21041] ip6gre1: left promiscuous mode [ 553.950720][T21041] ip6gre1: left allmulticast mode [ 553.971351][T21053] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 553.973563][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.104532][T14226] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.160873][T14226] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.262870][T14226] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.305439][T21069] netlink: 'syz.0.3687': attribute type 4 has an invalid length. [ 554.404162][T21071] netlink: 'syz.0.3687': attribute type 4 has an invalid length. [ 554.496143][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.901893][T21086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3691'. [ 555.576630][T21113] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3696'. [ 555.598697][T21113] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3696'. [ 555.618142][T21113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3696'. [ 556.575725][ T9335] net_ratelimit: 3 callbacks suppressed [ 556.575767][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.589954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.974454][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.614041][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.622410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.024534][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.032791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.607744][T21134] netlink: 'syz.6.3701': attribute type 1 has an invalid length. [ 558.646275][T21134] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3701'. [ 558.656652][T21138] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3703'. [ 558.669460][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.677861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.697662][T21138] syzkaller1: entered promiscuous mode [ 558.704020][T21138] syzkaller1: entered allmulticast mode [ 559.111990][T21156] netlink: 'syz.6.3708': attribute type 39 has an invalid length. [ 559.161179][ T736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.189953][T21156] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3708'. [ 559.457975][T21167] netlink: 'syz.6.3712': attribute type 1 has an invalid length. [ 559.562316][T21167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 560.366790][T21190] set match dimension is over the limit! [ 560.427454][T21178] "syz.6.3715" (21178) uses obsolete ecb(arc4) skcipher [ 560.438135][T21185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3716'. [ 560.492938][T21189] xfrm0 speed is unknown, defaulting to 1000 [ 561.787874][ T9335] net_ratelimit: 6 callbacks suppressed [ 561.787895][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.801888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.821213][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.829786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.935873][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 563.054465][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.646663][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3733'. [ 563.801822][T21294] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 563.859771][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.868230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.002269][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 564.021910][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 564.033652][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 564.043466][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 564.051446][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 564.220899][T20230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 564.278395][T20230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 564.293415][T21314] xt_hashlimit: size too large, truncated to 1048576 [ 564.341878][T20230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 564.356989][T20230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 564.385889][T20230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 564.566145][T21319] geneve1: entered promiscuous mode [ 564.606125][T21319] geneve1: entered allmulticast mode [ 564.927930][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.936424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.126283][ T9732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.158722][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3740'. [ 566.495108][T20230] Bluetooth: hci7: command tx timeout [ 566.911037][T21401] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3751'. [ 567.645158][T21381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.696320][T21381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.004802][ T1112] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.046687][ T1112] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.076908][ T1112] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.127837][ T1112] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.155542][ T1112] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.262321][ T1112] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.276122][T21431] syz_tun: entered allmulticast mode [ 568.305655][T14226] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.326003][T14226] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.358200][T21309] xfrm0 speed is unknown, defaulting to 1000 [ 568.399608][T21429] syz_tun: left allmulticast mode [ 568.585965][T20230] Bluetooth: hci7: command tx timeout [ 568.650130][T21421] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 569.052195][T21449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3761'. [ 570.213295][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3770'. [ 570.215946][T21486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3768'. [ 570.272918][T21492] netlink: 'syz.0.3770': attribute type 4 has an invalid length. [ 570.351691][T21492] xt_CT: No such helper "syz0" [ 570.654544][ T50] Bluetooth: hci7: command tx timeout [ 571.213604][T21309] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.235096][T21309] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.254059][T21309] bridge_slave_0: entered allmulticast mode [ 571.270667][T21309] bridge_slave_0: entered promiscuous mode [ 571.294084][T21516] hsr0: entered promiscuous mode [ 571.317586][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3775'. [ 571.362880][T21523] hsr_slave_0: left promiscuous mode [ 571.399622][T21523] hsr_slave_1: left promiscuous mode [ 571.437440][T21523] hsr0 (unregistering): left promiscuous mode [ 571.504432][T21309] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.534728][T21309] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.552951][T21309] bridge_slave_1: entered allmulticast mode [ 571.571691][T21309] bridge_slave_1: entered promiscuous mode [ 571.699146][T21309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.734869][T21309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.876439][T21309] team0: Port device team_slave_0 added [ 571.904879][T21309] team0: Port device team_slave_1 added [ 572.066966][T21309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.092631][T21309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.258122][T21309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.332395][T21309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.368053][T21309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.433403][T21309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.596267][T21309] hsr_slave_0: entered promiscuous mode [ 572.610291][T21309] hsr_slave_1: entered promiscuous mode [ 572.627643][T21309] debugfs: 'hsr0' already exists in 'hsr' [ 572.643971][T21309] Cannot create hsr debugfs directory [ 572.735723][ T50] Bluetooth: hci7: command tx timeout [ 572.981245][T21570] netlink: 'syz.0.3781': attribute type 9 has an invalid length. [ 573.040541][T21570] netlink: 'syz.0.3781': attribute type 6 has an invalid length. [ 573.079057][T21570] netlink: 'syz.0.3781': attribute type 7 has an invalid length. [ 573.127462][T21570] netlink: 'syz.0.3781': attribute type 8 has an invalid length. [ 573.522617][T21586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3783'. [ 574.231372][T21518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.269814][T21309] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 574.324490][T21309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.340166][T21309] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 574.416380][T21309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 574.467712][T21309] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 574.524959][T21309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 574.555923][T21592] bridge_slave_0: left allmulticast mode [ 574.567701][T21592] bridge_slave_0: left promiscuous mode [ 574.589570][T21592] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.619879][T21592] bridge_slave_1: left allmulticast mode [ 574.629665][T21592] bridge_slave_1: left promiscuous mode [ 574.636478][T21592] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.686836][T21592] bond0: (slave bond_slave_0): Releasing backup interface [ 574.741379][T21592] team0: Port device team_slave_0 removed [ 574.775506][T21592] team0: Port device team_slave_1 removed [ 574.798777][T21592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.834237][T21592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.856466][T21592] bond1: left allmulticast mode [ 574.868398][T21592] bond1: left promiscuous mode [ 574.877084][T21592] bridge0: port 3(bond1) entered disabled state [ 574.890676][T21309] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 574.918725][T21309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 574.946984][T21610] batadv_slave_1: entered promiscuous mode [ 575.274259][T21309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.332257][T21309] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.340166][T21607] batadv_slave_1: left promiscuous mode [ 575.397004][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.404275][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.482629][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.489866][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.650715][T21637] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3792'. [ 576.214491][T21659] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 576.658522][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3798'. [ 576.767519][T21668] net_ratelimit: 2 callbacks suppressed [ 576.767538][T21668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.171557][T21309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.979046][T21686] ªªªªªª: renamed from vlan0 [ 578.009504][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3802'. [ 578.043873][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3802'. [ 578.227569][T21690] openvswitch: netlink: IP tunnel dst address not specified [ 578.300255][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 578.324827][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 578.356951][T21705] netlink: 'syz.2.3804': attribute type 13 has an invalid length. [ 578.373758][T21705] netlink: 'syz.2.3804': attribute type 17 has an invalid length. [ 578.415594][T21698] syzkaller0: entered promiscuous mode [ 578.432367][T21698] syzkaller0: entered allmulticast mode [ 578.464032][T21701] netlink: 'syz.2.3804': attribute type 13 has an invalid length. [ 578.516096][T21701] netlink: 'syz.2.3804': attribute type 17 has an invalid length. [ 578.768936][T21705] ip6gretap0: entered promiscuous mode [ 579.103221][T21705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.138113][T21705] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.178472][T21711] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3806'. [ 579.219452][T21705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.276180][T14247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.286986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.296559][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.326923][T14247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.335384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.353931][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.413748][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.424966][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.502742][T21705] veth1_vlan: left promiscuous mode [ 579.532159][T21705] veth0_vlan: left promiscuous mode [ 579.551697][T21705] veth0_vlan: entered promiscuous mode [ 579.560643][T21705] veth1_vlan: entered promiscuous mode [ 579.579807][T21705] veth1_macvtap: left promiscuous mode [ 579.588103][T21705] veth0_macvtap: left promiscuous mode [ 579.596229][T21705] veth0_macvtap: entered promiscuous mode [ 579.613190][T21705] veth1_macvtap: entered promiscuous mode [ 579.630534][T21705] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 579.642544][T21705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.661004][T21705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.675458][T21705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.689908][T21705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.722219][T21705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.731110][T21705] geneve2: left allmulticast mode [ 579.742171][T21705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.756842][T21705] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.766849][T21705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.804944][ T9732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.889731][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3806'. [ 579.914631][ T9732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 580.354407][ T9335] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.060097][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 581.538500][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 582.500662][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.087862][T21711] dummy0 (unregistering): left allmulticast mode [ 583.184419][T14226] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.231502][T14226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.271972][T21724] batman_adv: batadv0: Adding interface: ip6gretap1 [ 583.300075][T21724] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.356660][T21724] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 583.416347][ T1165] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 583.537900][T14241] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.596839][T14241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.684164][ T1165] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.740669][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.820435][T21309] veth0_vlan: entered promiscuous mode [ 583.881824][ T1112] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.946189][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.978733][T21746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3815'. [ 584.048225][T21746] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3815'. [ 584.186806][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.260212][T21754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3816'. [ 584.391476][T21309] veth1_vlan: entered promiscuous mode [ 584.493368][ T1112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 584.558648][ T1112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 584.744605][ T9333] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 584.756740][ T736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.765345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.773501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.781913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.797379][T14245] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.818997][T14245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.930634][T21309] veth0_macvtap: entered promiscuous mode [ 585.023102][T21309] veth1_macvtap: entered promiscuous mode [ 585.128997][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'. [ 585.169189][T21309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.241046][T21309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.435473][ T1112] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.453737][ T1112] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.506303][T21786] syzkaller0: entered promiscuous mode [ 585.534436][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.550584][T21786] syzkaller0: entered allmulticast mode [ 585.665434][ T1103] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.912913][T21802] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3827'. [ 586.185544][T21803] smc: removing ib device syz0 [ 586.295659][ T1112] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.428958][T21815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.437903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.628951][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3830'. [ 586.658255][T21810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.775335][ T1165] batman_adv: batadv1: IGMP Querier appeared [ 586.781482][ T1165] batman_adv: batadv1: MLD Querier appeared [ 586.958600][T14226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.971015][T21822] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3829'. [ 587.007348][T14226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.127718][T21803] smbdirect: ib_dev[syz0] removed [ 587.286631][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.343182][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.483472][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3834'. [ 587.774346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.864352][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 588.013861][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 588.584493][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.653915][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 588.656480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.858915][ T736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.867355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.497754][ T736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.506192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.614296][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.655323][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.614328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.627438][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.636239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.650985][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.659627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.255336][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 596.895631][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.534221][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.539824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.694305][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.737353][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.378835][T14226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.387279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.396343][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.404716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.697545][T21870] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3839'. [ 602.996067][T21883] dummy0: entered promiscuous mode [ 603.713202][T21897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.736660][T21883] dummy0: left promiscuous mode [ 603.774549][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.784258][T21897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.811952][T21897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.845980][T21898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.991479][T21887] dummy0: entered promiscuous mode [ 604.002712][T21898] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3845'. [ 604.039432][T21887] dummy0: left promiscuous mode [ 604.471068][T21910] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3848'. [ 604.729938][T21922] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3852'. [ 605.284152][T21950] netlink: 'syz.0.3862': attribute type 3 has an invalid length. [ 605.304131][T21950] netlink: 'syz.0.3862': attribute type 3 has an invalid length. [ 605.358301][T21955] FAULT_INJECTION: forcing a failure. [ 605.358301][T21955] name failslab, interval 1, probability 0, space 0, times 0 [ 605.393759][T21955] CPU: 0 UID: 0 PID: 21955 Comm: syz.7.3863 Not tainted syzkaller #0 PREEMPT(full) [ 605.393786][T21955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.393799][T21955] Call Trace: [ 605.393839][T21955] [ 605.393914][T21955] dump_stack_lvl+0xe8/0x150 [ 605.394078][T21955] should_fail_ex+0x40c/0x560 [ 605.394167][T21955] should_failslab+0xa8/0x100 [ 605.394224][T21955] __kmalloc_noprof+0xfe/0x720 [ 605.394261][T21955] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 605.394408][T21955] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 605.394448][T21955] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 605.394487][T21955] genl_family_rcv_msg_doit+0xda/0x340 [ 605.394525][T21955] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 605.394563][T21955] ? apparmor_capable+0x126/0x170 [ 605.394656][T21955] ? bpf_lsm_capable+0x9/0x20 [ 605.394700][T21955] ? security_capable+0x7e/0x2c0 [ 605.394778][T21955] genl_rcv_msg+0x614/0x7a0 [ 605.394814][T21955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.394849][T21955] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 605.394942][T21955] ? __pfx_nl80211_set_station+0x10/0x10 [ 605.394983][T21955] ? __pfx_nl80211_post_doit+0x10/0x10 [ 605.395007][T21955] ? __pfx_ref_tracker_free+0x10/0x10 [ 605.395073][T21955] netlink_rcv_skb+0x226/0x4a0 [ 605.395097][T21955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.395128][T21955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.395166][T21955] ? down_read+0x2be/0x330 [ 605.395238][T21955] genl_rcv+0x28/0x40 [ 605.395264][T21955] netlink_unicast+0x7bb/0x940 [ 605.395296][T21955] netlink_sendmsg+0x813/0xb40 [ 605.395330][T21955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.395359][T21955] ? aa_sock_msg_perm+0xf1/0x1b0 [ 605.395393][T21955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.395416][T21955] sock_sendmsg_nosec+0x13a/0x180 [ 605.395490][T21955] ____sys_sendmsg+0x54e/0x850 [ 605.395519][T21955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.395551][T21955] ? import_iovec+0x73/0xa0 [ 605.395632][T21955] ___sys_sendmsg+0x2a5/0x360 [ 605.395652][T21955] ? __lock_acquire+0x683/0x2cf0 [ 605.395703][T21955] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.395764][T21955] ? __fget_files+0x2a/0x420 [ 605.395799][T21955] ? __fget_files+0x3a2/0x420 [ 605.395843][T21955] __x64_sys_sendmsg+0x1b1/0x290 [ 605.395870][T21955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.395911][T21955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.395952][T21955] do_syscall_64+0x174/0x580 [ 605.396025][T21955] ? trace_irq_disable+0x3b/0x140 [ 605.396065][T21955] ? clear_bhb_loop+0x70/0xc0 [ 605.396091][T21955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.396112][T21955] RIP: 0033:0x7fc3d4b9e0d9 [ 605.396158][T21955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.396176][T21955] RSP: 002b:00007fc3d5aac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.396225][T21955] RAX: ffffffffffffffda RBX: 00007fc3d4e25fa0 RCX: 00007fc3d4b9e0d9 [ 605.396240][T21955] RDX: 0000000000008854 RSI: 0000200000000780 RDI: 0000000000000007 [ 605.396253][T21955] RBP: 00007fc3d5aac090 R08: 0000000000000000 R09: 0000000000000000 [ 605.396264][T21955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.396275][T21955] R13: 00007fc3d4e26038 R14: 00007fc3d4e25fa0 R15: 00007ffc51944f28 [ 605.396307][T21955] [ 605.833457][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3864'. [ 606.092774][T21969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3866'. [ 606.501291][T14245] net_ratelimit: 8 callbacks suppressed [ 606.501314][T14245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.515502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.609981][T21986] 8021q: VLANs not supported on team0 [ 606.662706][T21990] xt_hashlimit: size too large, truncated to 1048576 [ 606.688420][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3871'. [ 606.699344][T21993] netlink: 'syz.7.3874': attribute type 15 has an invalid length. [ 606.720145][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3871'. [ 606.765720][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3871'. [ 606.797266][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3871'. [ 606.820469][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.136097][T14245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.144766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.374645][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.514628][T22010] block nbd3: server does not support multiple connections per device. [ 607.542341][T22010] block nbd3: shutting down sockets [ 607.763045][T22025] __nla_validate_parse: 2 callbacks suppressed [ 607.763068][T22025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3882'. [ 607.779869][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.867502][T22028] x_tables: ip_tables: ah match: only valid for protocol 51 [ 608.097259][T22040] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3885'. [ 608.145534][T22040] vlan0: entered promiscuous mode [ 608.209874][T22040] bridge0: port 1(batadv1) entered blocking state [ 608.238940][T22040] bridge0: port 1(batadv1) entered disabled state [ 608.252461][T22042] netlink: 'syz.2.3887': attribute type 2 has an invalid length. [ 608.273533][T22040] batadv1: entered allmulticast mode [ 608.289460][T22042] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3887'. [ 608.306825][T22040] batadv1: entered promiscuous mode [ 608.426823][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.694660][T14226] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 608.704632][T14226] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 608.804257][T22056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3891'. [ 608.833949][T22048] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3889'. [ 609.006444][T22062] FAULT_INJECTION: forcing a failure. [ 609.006444][T22062] name failslab, interval 1, probability 0, space 0, times 0 [ 609.060385][T22062] CPU: 1 UID: 0 PID: 22062 Comm: syz.7.3893 Not tainted syzkaller #0 PREEMPT(full) [ 609.060417][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.060431][T22062] Call Trace: [ 609.060440][T22062] [ 609.060451][T22062] dump_stack_lvl+0xe8/0x150 [ 609.060486][T22062] should_fail_ex+0x40c/0x560 [ 609.060516][T22062] should_failslab+0xa8/0x100 [ 609.060550][T22062] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 609.060575][T22062] ? local_lock_release+0x9c/0x160 [ 609.060695][T22062] ? __alloc_skb+0x1d7/0x7a0 [ 609.060713][T22062] ? __alloc_skb+0x1d7/0x7a0 [ 609.060741][T22062] __alloc_skb+0x1d7/0x7a0 [ 609.060767][T22062] netlink_ack+0x136/0xb30 [ 609.060796][T22062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.060828][T22062] ? __pfx_nl80211_post_doit+0x10/0x10 [ 609.060855][T22062] ? __pfx_ref_tracker_free+0x10/0x10 [ 609.060892][T22062] netlink_rcv_skb+0x2a4/0x4a0 [ 609.060919][T22062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 609.060951][T22062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.060999][T22062] ? down_read+0x2be/0x330 [ 609.061026][T22062] genl_rcv+0x28/0x40 [ 609.061055][T22062] netlink_unicast+0x7bb/0x940 [ 609.061090][T22062] netlink_sendmsg+0x813/0xb40 [ 609.061127][T22062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.061159][T22062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 609.061198][T22062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.061223][T22062] sock_sendmsg_nosec+0x13a/0x180 [ 609.061257][T22062] ____sys_sendmsg+0x54e/0x850 [ 609.061288][T22062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.061323][T22062] ? import_iovec+0x73/0xa0 [ 609.061365][T22062] ___sys_sendmsg+0x2a5/0x360 [ 609.061391][T22062] ? __lock_acquire+0x683/0x2cf0 [ 609.061425][T22062] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.061490][T22062] ? __fget_files+0x2a/0x420 [ 609.061516][T22062] ? __fget_files+0x3a2/0x420 [ 609.061556][T22062] __x64_sys_sendmsg+0x1b1/0x290 [ 609.061582][T22062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 609.061628][T22062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.061653][T22062] do_syscall_64+0x174/0x580 [ 609.061685][T22062] ? trace_irq_disable+0x3b/0x140 [ 609.061711][T22062] ? clear_bhb_loop+0x70/0xc0 [ 609.061739][T22062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.061761][T22062] RIP: 0033:0x7fc3d4b9e0d9 [ 609.061782][T22062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.061802][T22062] RSP: 002b:00007fc3d5aac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.061825][T22062] RAX: ffffffffffffffda RBX: 00007fc3d4e25fa0 RCX: 00007fc3d4b9e0d9 [ 609.061841][T22062] RDX: 0000000000008854 RSI: 0000200000000780 RDI: 0000000000000007 [ 609.061855][T22062] RBP: 00007fc3d5aac090 R08: 0000000000000000 R09: 0000000000000000 [ 609.061868][T22062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.061881][T22062] R13: 00007fc3d4e26038 R14: 00007fc3d4e25fa0 R15: 00007ffc51944f28 [ 609.061916][T22062] [ 609.455033][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.598061][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.817761][T22075] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3896'. [ 609.972456][T22079] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3897'. [ 610.228770][T22082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 610.278876][T22091] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3901'. [ 610.322319][T22092] netlink: 'syz.5.3902': attribute type 13 has an invalid length. [ 610.385120][T22082] bond2: Invalid ad_actor_system MAC address. [ 610.392564][T22082] bond2: option ad_actor_system: invalid value (7) [ 610.494793][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 610.530025][T22082] bond2 (unregistering): Released all slaves [ 610.900560][T22106] FAULT_INJECTION: forcing a failure. [ 610.900560][T22106] name failslab, interval 1, probability 0, space 0, times 0 [ 611.004566][T22106] CPU: 1 UID: 0 PID: 22106 Comm: syz.2.3906 Not tainted syzkaller #0 PREEMPT(full) [ 611.004596][T22106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.004608][T22106] Call Trace: [ 611.004617][T22106] [ 611.004627][T22106] dump_stack_lvl+0xe8/0x150 [ 611.004664][T22106] should_fail_ex+0x40c/0x560 [ 611.004693][T22106] should_failslab+0xa8/0x100 [ 611.004726][T22106] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 611.004751][T22106] ? skb_clone+0x212/0x3a0 [ 611.004871][T22106] ? skb_clone+0x212/0x3a0 [ 611.004903][T22106] skb_clone+0x212/0x3a0 [ 611.004931][T22106] __netlink_deliver_tap+0x413/0x860 [ 611.004970][T22106] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.004997][T22106] netlink_deliver_tap+0x19c/0x1b0 [ 611.005027][T22106] netlink_sendskb+0x68/0x140 [ 611.005052][T22106] netlink_rcv_skb+0x2a4/0x4a0 [ 611.005077][T22106] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.005110][T22106] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.005163][T22106] ? down_read+0x2be/0x330 [ 611.005188][T22106] genl_rcv+0x28/0x40 [ 611.005213][T22106] netlink_unicast+0x7bb/0x940 [ 611.005253][T22106] netlink_sendmsg+0x813/0xb40 [ 611.005286][T22106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.005315][T22106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 611.005350][T22106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.005390][T22106] sock_sendmsg_nosec+0x13a/0x180 [ 611.005423][T22106] ____sys_sendmsg+0x54e/0x850 [ 611.005452][T22106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.005487][T22106] ? import_iovec+0x73/0xa0 [ 611.005519][T22106] ___sys_sendmsg+0x2a5/0x360 [ 611.005541][T22106] ? __lock_acquire+0x683/0x2cf0 [ 611.005573][T22106] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.005637][T22106] ? __fget_files+0x2a/0x420 [ 611.005662][T22106] ? __fget_files+0x3a2/0x420 [ 611.005700][T22106] __x64_sys_sendmsg+0x1b1/0x290 [ 611.005728][T22106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.005773][T22106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.005797][T22106] do_syscall_64+0x174/0x580 [ 611.005827][T22106] ? trace_irq_disable+0x3b/0x140 [ 611.005853][T22106] ? clear_bhb_loop+0x70/0xc0 [ 611.005879][T22106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.005900][T22106] RIP: 0033:0x7fbfa6d9e0d9 [ 611.005921][T22106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.005938][T22106] RSP: 002b:00007fbfa7c61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.005961][T22106] RAX: ffffffffffffffda RBX: 00007fbfa7025fa0 RCX: 00007fbfa6d9e0d9 [ 611.005977][T22106] RDX: 0000000000008854 RSI: 0000200000000780 RDI: 0000000000000007 [ 611.005989][T22106] RBP: 00007fbfa7c61090 R08: 0000000000000000 R09: 0000000000000000 [ 611.006002][T22106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.006014][T22106] R13: 00007fbfa7026038 R14: 00007fbfa7025fa0 R15: 00007ffc67437538 [ 611.006048][T22106] [ 611.482467][T22115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.654014][ T9] net_ratelimit: 4 callbacks suppressed [ 611.654036][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.844049][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.862790][T22117] erspan0: entered promiscuous mode [ 611.881870][T22117] erspan0: entered allmulticast mode [ 611.923592][T22126] netlink: 'syz.6.3914': attribute type 1 has an invalid length. [ 611.982906][T22126] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3914'. [ 612.070499][T22126] netlink: 'syz.6.3914': attribute type 1 has an invalid length. [ 612.254710][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 612.264670][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.273019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.531255][T22141] netlink: 'syz.5.3919': attribute type 10 has an invalid length. [ 612.544414][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.716658][T22150] FAULT_INJECTION: forcing a failure. [ 612.716658][T22150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.840958][T22150] CPU: 1 UID: 0 PID: 22150 Comm: syz.0.3921 Not tainted syzkaller #0 PREEMPT(full) [ 612.840989][T22150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.841010][T22150] Call Trace: [ 612.841020][T22150] [ 612.841029][T22150] dump_stack_lvl+0xe8/0x150 [ 612.841067][T22150] should_fail_ex+0x40c/0x560 [ 612.841096][T22150] _copy_from_user+0x2d/0xb0 [ 612.841220][T22150] kstrtouint_from_user+0xd6/0x180 [ 612.841248][T22150] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 612.841292][T22150] proc_fail_nth_write+0x8e/0x210 [ 612.841340][T22150] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 612.841380][T22150] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 612.841410][T22150] vfs_write+0x296/0xba0 [ 612.841459][T22150] ? __pfx_vfs_write+0x10/0x10 [ 612.841493][T22150] ? __fget_files+0x2a/0x420 [ 612.841526][T22150] ? __fget_files+0x3a2/0x420 [ 612.841552][T22150] ? __fget_files+0x2a/0x420 [ 612.841589][T22150] ksys_write+0x150/0x270 [ 612.841625][T22150] ? __pfx_ksys_write+0x10/0x10 [ 612.841667][T22150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.841691][T22150] do_syscall_64+0x174/0x580 [ 612.841724][T22150] ? trace_irq_disable+0x3b/0x140 [ 612.841752][T22150] ? clear_bhb_loop+0x70/0xc0 [ 612.841779][T22150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.841802][T22150] RIP: 0033:0x7f9316d5e90e [ 612.841822][T22150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 612.841841][T22150] RSP: 002b:00007f9317cb0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 612.841864][T22150] RAX: ffffffffffffffda RBX: 00007f9317cb16c0 RCX: 00007f9316d5e90e [ 612.841880][T22150] RDX: 0000000000000001 RSI: 00007f9317cb10a0 RDI: 000000000000000a [ 612.841893][T22150] RBP: 00007f9317cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 612.841906][T22150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.841919][T22150] R13: 00007f9317026038 R14: 00007f9317025fa0 R15: 00007fff96cb7b78 [ 612.841955][T22150] [ 613.049774][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.119744][ T9731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.139229][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.147781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.167680][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.184988][ T30] INFO: task syz.1.3154:18706 blocked for more than 143 seconds. [ 613.241474][ T30] Not tainted syzkaller #0 [ 613.246917][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.255728][ T30] task:syz.1.3154 state:D stack:25864 pid:18706 tgid:18701 ppid:16854 task_flags:0x400140 flags:0x00080002 [ 613.267866][ T30] Call Trace: [ 613.271230][ T30] [ 613.274313][ T30] __schedule+0x17d9/0x56c0 [ 613.279018][ T30] ? __lock_acquire+0x683/0x2cf0 [ 613.290405][ T30] ? __lock_acquire+0x683/0x2cf0 [ 613.296597][ T30] ? __pfx___schedule+0x10/0x10 [ 613.302141][ T30] ? schedule+0x90/0x2b0 [ 613.306884][ T30] schedule+0x164/0x2b0 [ 613.311154][ T30] schedule_preempt_disabled+0x13/0x30 [ 613.348950][T22159] __nla_validate_parse: 4 callbacks suppressed [ 613.348970][T22159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3923'. [ 613.421654][ T30] __mutex_lock+0x7bf/0x1550 [ 613.442640][ T30] ? __mutex_lock+0x5d4/0x1550 [ 613.464266][ T30] ? nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 613.477528][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 613.501971][ T30] ? net_generic+0x1e/0x240 [ 613.515651][ T30] ? net_generic+0x1e/0x240 [ 613.526508][ T30] ? net_generic+0x1e/0x240 [ 613.533870][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 613.563917][ T30] ? net_generic+0x1e/0x240 [ 613.579049][ T30] nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 613.600117][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 613.636149][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 613.658046][ T30] ? bpf_lsm_capable+0x9/0x20 [ 613.674668][ T30] ? security_capable+0x7e/0x2c0 [ 613.705197][ T30] genl_rcv_msg+0x614/0x7a0 [ 613.735720][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.756462][ T30] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 613.787293][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 613.810845][ T30] netlink_rcv_skb+0x226/0x4a0 [ 613.833627][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.855425][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.873747][ T30] ? down_read+0x2be/0x330 [ 613.885180][ T30] genl_rcv+0x28/0x40 [ 613.895216][ T30] netlink_unicast+0x7bb/0x940 [ 613.905857][ T30] netlink_sendmsg+0x813/0xb40 [ 613.917720][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.939735][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.954858][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.967192][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 614.007994][ T30] ____sys_sendmsg+0x54e/0x850 [ 614.019298][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.025500][ T30] ? import_iovec+0x73/0xa0 [ 614.030293][ T30] ___sys_sendmsg+0x2a5/0x360 [ 614.035751][ T30] ? __lock_acquire+0x683/0x2cf0 [ 614.040983][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.052849][ T30] ? futex_wake+0x51b/0x5f0 [ 614.062331][ T30] ? __fget_files+0x2a/0x420 [ 614.068637][ T30] ? __fget_files+0x3a2/0x420 [ 614.073974][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 614.079111][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.085579][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.091833][ T30] do_syscall_64+0x174/0x580 [ 614.098370][ T30] ? trace_irq_disable+0x3b/0x140 [ 614.103595][ T30] ? clear_bhb_loop+0x70/0xc0 [ 614.109100][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.115855][ T30] RIP: 0033:0x7f5dd7d9e0d9 [ 614.120624][ T30] RSP: 002b:00007f5dd8c99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.129646][ T30] RAX: ffffffffffffffda RBX: 00007f5dd8026090 RCX: 00007f5dd7d9e0d9 [ 614.138826][ T30] RDX: 0000000028040880 RSI: 0000200000000100 RDI: 0000000000000006 [ 614.149014][ T30] RBP: 00007f5dd7e35024 R08: 0000000000000000 R09: 0000000000000000 [ 614.162066][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.173087][ T30] R13: 00007f5dd8026128 R14: 00007f5dd8026090 R15: 00007ffdc62bfa18 [ 614.198506][ T30] [ 614.203175][ T30] [ 614.203175][ T30] Showing all locks held in the system: [ 614.268488][ T30] 3 locks held by kworker/0:1/10: [ 614.280652][ T30] 1 lock held by khungtaskd/30: [ 614.292748][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 614.309982][ T30] 2 locks held by getty/5365: [ 614.342085][ T30] #0: ffff8880335e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 614.377140][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 614.410571][ T30] 2 locks held by syz.4.1525/11857: [ 614.430258][ T30] 3 locks held by kworker/u8:31/14247: [ 614.437258][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 614.449593][ T30] #1: ffffc90005c97c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 614.461952][ T30] #2: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 614.471821][ T30] 1 lock held by syz.1.3154/18706: [ 614.477444][ T30] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 614.489338][ T30] 2 locks held by syz.6.3923/22156: [ 614.496709][ T30] #0: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 614.507440][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 614.518909][ T30] 1 lock held by syz.6.3923/22159: [ 614.524423][ T30] #0: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 614.533948][ T30] 2 locks held by syz.2.3925/22158: [ 614.539264][ T30] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.548298][ T30] #1: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_doit+0x6c4/0x15c0 [ 614.559335][ T30] 1 lock held by syz.2.3925/22161: [ 614.565114][ T30] #0: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 614.575461][ T30] 2 locks held by syz.2.3925/22166: [ 614.580798][ T30] #0: ffffffff900987a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.590062][ T30] #1: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x854/0x1080 [ 614.600638][ T30] 1 lock held by syz.2.3925/22169: [ 614.609655][ T30] #0: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 614.620377][ T30] [ 614.623053][ T30] ============================================= [ 614.623053][ T30] [ 614.696518][ T30] NMI backtrace for cpu 1 [ 614.696542][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 614.696565][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.696578][ T30] Call Trace: [ 614.696587][ T30] [ 614.696597][ T30] dump_stack_lvl+0xe8/0x150 [ 614.696634][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 614.696749][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 614.696793][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 614.696822][ T30] sys_info+0x135/0x170 [ 614.696843][ T30] watchdog+0xfd7/0x1030 [ 614.696883][ T30] ? watchdog+0x1c7/0x1030 [ 614.696914][ T30] kthread+0x388/0x470 [ 614.696944][ T30] ? __pfx_watchdog+0x10/0x10 [ 614.696965][ T30] ? __pfx_kthread+0x10/0x10 [ 614.696994][ T30] ret_from_fork+0x514/0xb70 [ 614.697038][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 614.697066][ T30] ? __switch_to+0xc89/0x1420 [ 614.697093][ T30] ? __pfx_kthread+0x10/0x10 [ 614.697121][ T30] ret_from_fork_asm+0x1a/0x30 [ 614.697167][ T30] [ 614.697175][ T30] Sending NMI from CPU 1 to CPUs 0: [ 614.809962][ C0] NMI backtrace for cpu 0 [ 614.809985][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 614.810005][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.810016][ C0] RIP: 0010:__lock_acquire+0x64a/0x2cf0 [ 614.810063][ C0] Code: ba 05 00 00 00 eb 30 85 c9 74 17 31 ed 4c 89 f7 4c 89 ee 31 d2 e8 d6 44 00 00 85 c0 0f 84 64 0d 00 00 41 83 be 84 0b 00 00 00 <74> 18 4c 89 f7 4c 89 ee ba 04 00 00 00 e8 b4 44 00 00 85 c0 0f 84 [ 614.810078][ C0] RSP: 0018:ffffc90000147988 EFLAGS: 00000002 [ 614.810094][ C0] RAX: 00000000000428eb RBX: 0000000000000000 RCX: 0000000000000000 [ 614.810105][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000000000000000 [ 614.810115][ C0] RBP: 0000000000000001 R08: ffffffff89cdc2db R09: 0000000000000000 [ 614.810126][ C0] R10: 0000000000000000 R11: ffff888057201c98 R12: ffffffffffffff03 [ 614.810137][ C0] R13: ffff88801deeaaa0 R14: ffff88801dee9f00 R15: ffff88801deeaaa0 [ 614.810150][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 614.810164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.810175][ C0] CR2: 00002000000a1000 CR3: 0000000074ff6000 CR4: 00000000003526f0 [ 614.810191][ C0] Call Trace: [ 614.810197][ C0] [ 614.810211][ C0] ? __lock_acquire+0x683/0x2cf0 [ 614.810238][ C0] ? gate_timer_func+0x2b/0x450 [ 614.810334][ C0] lock_acquire+0x106/0x350 [ 614.810355][ C0] ? gate_timer_func+0x2b/0x450 [ 614.810380][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 614.810415][ C0] ? __pfx_gate_timer_func+0x10/0x10 [ 614.810433][ C0] _raw_spin_lock+0x2e/0x40 [ 614.810482][ C0] ? gate_timer_func+0x2b/0x450 [ 614.810498][ C0] gate_timer_func+0x2b/0x450 [ 614.810514][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 614.810537][ C0] ? __pfx_gate_timer_func+0x10/0x10 [ 614.810555][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 614.810579][ C0] hrtimer_run_softirq+0x17a/0x240 [ 614.810599][ C0] handle_softirqs+0x225/0x840 [ 614.810620][ C0] ? run_ksoftirqd+0x36/0x60 [ 614.810643][ C0] run_ksoftirqd+0x36/0x60 [ 614.810661][ C0] smpboot_thread_fn+0x57c/0xa80 [ 614.810683][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 614.810705][ C0] kthread+0x388/0x470 [ 614.810728][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 614.810746][ C0] ? __pfx_kthread+0x10/0x10 [ 614.810768][ C0] ret_from_fork+0x514/0xb70 [ 614.810792][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 614.810814][ C0] ? __switch_to+0xc89/0x1420 [ 614.810834][ C0] ? __pfx_kthread+0x10/0x10 [ 614.810856][ C0] ret_from_fork_asm+0x1a/0x30 [ 614.810889][ C0] [ 615.093481][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 615.100418][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 615.109567][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 615.119665][ T30] Call Trace: [ 615.122980][ T30] [ 615.125954][ T30] vpanic+0x56c/0xa60 [ 615.129978][ T30] ? __pfx___schedule+0x10/0x10 [ 615.134902][ T30] ? __pfx_vpanic+0x10/0x10 [ 615.139454][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 615.145664][ T30] panic+0xc5/0xd0 [ 615.149433][ T30] ? __pfx_panic+0x10/0x10 [ 615.153900][ T30] ? preempt_schedule_common+0x82/0xd0 [ 615.159410][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 615.164814][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 615.171009][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 615.177213][ T30] watchdog+0x1030/0x1030 [ 615.181608][ T30] ? watchdog+0x1c7/0x1030 [ 615.186080][ T30] kthread+0x388/0x470 [ 615.190199][ T30] ? __pfx_watchdog+0x10/0x10 [ 615.194912][ T30] ? __pfx_kthread+0x10/0x10 [ 615.199550][ T30] ret_from_fork+0x514/0xb70 [ 615.204188][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 615.209344][ T30] ? __switch_to+0xc89/0x1420 [ 615.214057][ T30] ? __pfx_kthread+0x10/0x10 [ 615.218696][ T30] ret_from_fork_asm+0x1a/0x30 [ 615.223557][ T30] [ 615.227269][ T30] Kernel Offset: disabled [ 615.231642][ T30] Rebooting in 86400 seconds..