last executing test programs: 2m15.751946249s ago: executing program 32 (id=708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1371}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x17a, 0xa5, &(0x7f0000000340)=""/165, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x7, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x1], &(0x7f0000000400)=[{0x1, 0x3, 0x1, 0xb}, {0x2, 0x4, 0x10, 0xb}, {0x1, 0x3, 0xc, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r0, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f00000018c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x21, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r7, 0xffffffffffffffff, 0x17, 0x1, r8, @void, @value=r8, @void, @void, r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r5, r6, 0x34, 0x0, @val=@tcx={@void, @value=r11, @void, @void, r10}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b40)={r2, r3, 0x25, 0x11, @val=@tcx={@void, @value=r0, @void, @void, r10}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8}]}, 0x2c}}, 0x20000050) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x0, 0xab5a7dd7d6dae10e}, @val={0x3, 0x3, 0x3ff, 0x9, 0x697a, 0x7}, @ipv4=@gre={{0x1a, 0x4, 0x2, 0x3d, 0x122d, 0x64, 0x0, 0x10, 0x2f, 0x0, @remote, @private=0xa010102, {[@noop, @ssrr={0x89, 0xb, 0x7d, [@empty, @multicast1]}, @timestamp={0x44, 0xc, 0x9a, 0x0, 0x6, [0xff, 0x5]}, @timestamp={0x44, 0x18, 0x2e, 0x0, 0x3, [0x7fff, 0x4, 0x5, 0x7, 0x9]}, @timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0xc, [{@multicast2, 0xb}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@empty}, {@multicast2, 0xffff}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x9a, 0x3, [], "1ac57955042c50582982adc6b3f718bef0760bf838416563026a9628347cf69b18a7398b3dd668ee0097a8aa56fe63fa74ed052e5b982f9a47729ba784a003cdccf3c878f080ea39f256437be9585d2dc25b670fad24185d167ca7d9d024a426d4b3a40210bc82fab99a332009f51fd691496f45d35b65d8409590f72c973bb81c93f952c30bf659477ea9bb40d5ec418cfd2ce55d1c64b3a09a"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "aab331d2bf6c475a39274aed201a2d8636566db19beb2b1872f30afafa2010f9c35cc6c76aa5657e8cda117b77e0f94c4dc7576aabf20516f176a0f29399e333ab1b2b22c0b3c39722e8926643950b63aaca146bdf20487c4bdab741770a70fc759fb242661eff0ca6e5ffdaaa0cc57645a03ec187decad4925b46f64ad4eedf3075796d6edbc990c5a13abdaa880592c792f3df186c0cbd19ca538c6474f205105b0f05e965be1bc722d6f3c9aaba4b2b4ee8c673664af581d9289d765285a8edbfe2e86ae3ce4b19728693b715ff884f7cae9316912050296f1eaa51a3744f7a514868f4b52179a9affc6199517108c0ff6a05c1e653c3a8033c1b50399d83444ca96d71f8f6c940d629a1c37aa607cb49dc95e490f2e0b6d00bf37faf2024c5df93c81825ebf065d018efee133276b1abe6f65ce0c5cfc1e3fdf1cfd8e95f95cb7b515d7a0d216711eb196821b55b392bc9fd75e6f3e2682465998c5693399eab7680dce981e01103a3572adb24acfec1de49df46361dc3ff23ce2520cc1174d2c931f85cc6821b57738ec5b668b11b419b2132bb3d8137a8372f329eb0d4d2254bcd429e76a175185574e49d85dba02a21895bed910f74f0a483ba7ca2d20a1bc4f4bfaca8b0588343bec6aace7b4406671b74a7b9373919092e3e0e136382c469b3c271294feb71e2ba52d544771d464510e1e5350cb29b0640dd83a9ce36825bd2146f0a6b20be7fe3f4215e41aa18004d7081b479c3f9715dc2cd6fc5de5d934bdab7ec57b8f7659beaac465cdce1728c1adb30e249ac4fc1ab2fe91fb83da812dbbafd2a82617db4a8dba125996b52abf31f8c8e1140e6479d48225f0e6bfd896abd412d09b31185b4badcc98f0c5d116b0702f4d41bfd9e773ad4e809c58949ef45c4c3f7d47a9aaf1e6d19d8cc3d7523fd72b8f8bb490728a9ea13cc46635cd5f553606ac90e7bc53e025a9fe6912aee8b1ac17c2d59cd7f549afb7a536d88a75afa37f574ca4f8f7ff3e77348dd4bd289803a0b9f798d92b489fff0bd74d5f63d377ed874d7b4b743a0dbf576a38220cf2e43193efd462e45db55d32d4c2e75a000fc2e898fcfeb98ced51c1e48ce385f658c45495cf6367aca4b018c016a303fcccdeb4a8d2872c155bf418cf0a9ddfb0815c7d6a1b63f5ffbc1ae244a67413c55d991460ee8121c38a91e22426af82e7da62dbf7dcdee465ee57242d9c3a3e9e8cc653ae1a9c2444feea9ea00e2195c9df7fd15a69134d5dfa2a922d4753656f868c5ec0becb2aab18693efbce52ab51585a6f4c54a72987e02e5541d9aef311fdac9e3d5b128dd04243f9644d842c9d8bb84cf639bd15877a10515666d146f6b2bc4208484a8a40099bc599c4dcede78bd371842f0705c9067ba3c79d5a7980b9b917f2e3f44fa65a4418cdfa69134bf6e2710a40953671872004144e6209671a45c6fb3e1e4b4207b80f5b6a71c07af75ecd30c494b8d6ad9f0e012087be10fbe0f880722a005f50e5268a87511e97606e7f578cb368524d883ab3fb31a064af386a990f48c84d61907f3352c4c774908759786ec6bbcea6f2b79f557da039a9e65ada371ef4c8808fe729049455863abc6d797a37631092d4b3c36db9905b455ee62b1903d7b32bb841bafef516739411514aeb71c9bc96ac33b0198a028df98e623a96e2514be186e37ff11b97bc0301baf2b73f94a3c138f3d1fae9683f6e26e96541855ae2106ad6327d27517643f47c2befcbf7d8c0a5e46a38b9392a26f92b2b2f20fdd756833f8b19dd31a500457da8656e82f0e32eba4e8b49ce4942938368b694856c2b759916c32713a57edd1b53c32357eaf9bcfed7e5e02163fa4e9b7239cc93e75de21ce2ce592fc1c1b5d89169ad62a04e6cbc63e9fb248684f7bbea9300ed7601a4e272d6083494a643184f0bf3968d9aa465422abcc4c737791046772843a91078d74482db63f90dfe7c1a3d9ebb9978995ffdcc08812264ff553ff0965ccf04aba3ce613d6a11b7c2c9019f1ef393ce0e0cf82f12ca740cb8823fdc1d35445e88d05a6fac71dce0d5764f197b584fa305b47fba3fba148256afd59edb74839e5fd901f390b337bf4f8142889ed3450ca2982d95d296d7f292c53ae70a671031ff91b2cce40a818486458fc258a8de05bbc5092a0cef3f51ae82d8caf33ed534dc9307d2b7d74a019f99cd15dc1bff7c8ccbfff80a2dd661c0d553ae5d636176cf56b3b4c3d7ad476bc2ca793f959a62f1a9ba4d47d9e97ad9a8cc85b953ccf4672aa6dd0d372b78f5f1fc8fd98274a615b920d4df6f4eea6d4e565d47359e459a0fcfc3eb37bc1604b9e4eb3ffef1482e8a07dc30fc5fd9f68eee444dee1c8eaf23d75edaafe190d446e1f368f8aa474f6faef01192194a225bc84a675c65243d316fbce6875afb5630e10697dbec37162825c80fe61bb34bbfad5e1e33d8df8a3eb9141fc5e4d0efc02a1d01fc0768422336bb93fc0896a57a9a5650420f0d5e6d9722ac462af943eda0aca0c70dbc65bfab3ccf62040ff6c0ec7223a49a64e93bc624c1c8e2310ca14a085fa7000e38be8df13ae74570faf4eb4270be3c6a52bf3917598061daddecb52f962634076b398f7cedfdfea67286f1eb6716fc2d928cc3878eecea2ef8821e2b08ba36ebaea5b5f09b4689cefc5ea8810535adea3f3c7c57e884ee1c05c11179b5323f5b3471e5bfe55f21fab176e3b17f275cd355014850fc02be15b287f89bb6ee3c893b131dc2836124e94ccee9f2d0ef0a4f39b235a724b6486c626157cbe0e4e719898f6c2c71bdced41baca8195a40fc551e6abb013bf8e40a2f55fd4c19b7bc722f87fab195322ad4362fc0c069c100b31c00847425a5a3cb5fa709a959f4000d1a469ca9ed1052d37b83b9bdd1f525968cc01f57ae9c52e98635ea57ca6347901968f605dee64b38e0d230257ce3356fd73aa22ea472a694f24d7d8a25c5caef0270451bbe3173049018d3cf96b65823a91df673876f7284ec02595a84451ca7e2abb6d066be4e88b1c15d0169ddff137eb6786dd7e5481958b97474ad04a22ab63f248685cee6bef1696f6eed26b90ea1e836b98792a69dcd7bf02347098a5e8d0f4e803ad57d97be7f0db1ef73d293b3e1e01b09aeda2adb394ec375458510085a9715167390a5aab8ceaef18f2a8119594347542dd3c38df087d8084b892adf2636fbfd8bc2da991daa3b2a36366b9606d6d56186c30f2b281339b904184012baf096164effd61727f170f5bf284d4e89f38321481bb9046c8a5199ce3c3bceb2981f3dba5f9e992393f89ba332d1ced27d05cbb3c73b090aff4211745b77931df6361abd194c0f8c93ddcc24d3194c9992f161d92ac6e240c574969462cdd3444ac5e58b7f7945c8747cff2ea9f5d3b8c0789958ef4b39fbd9acb879dc27c20ca7b3551d56431e440be532d97ef4d9ff568e16f799c49ba6890595113e1438316514b786391924bf57573a33271cdb4096dd7d15047629dcaa166c166f814969d28b61936dc68983ca53f9233fc45c84b28f9a048f9666bc3283e130da5f030f0938a68628854a71b1f6ff551eee3c177722feab91856281a9511966bf617eb3c95a3696600fce051af418c35352025852254c5eab62377ee3d255ecc8b1dcbaa66540e01c2755bc75d4a296135a9689b3c41811c47ef4866fada058156259c9841247f6880d6ad9cb59131237677827822bebce7868f31935edd1dc31ed5fe9338001c4bca64aac0ea779bc3aff8de2abf9623864f5af30204ed046bec35ed9be9f6ee491c02d6a11469fede9b352643b5c35fbb258809bce21bafdc881752f1b04bf89fc29dd7f761fbbed44d7322eb4ec842a0b251b7e19eb9c46eb19c882110d8bbbadb64776ee13e45b29ee37b1d7aa60a9bcc68ffe086768ab4de603811b384e70b370ffc62b2faa9a3f8c4739b890db4d13e5f13a94f8f089b39bfd8aa7a2087c335ff4703388d4ebfa63436eced30900b14b491cd89039ade35bac996d7898ecf4561af62de551807de20b2ff1fa8324b3aa17dd848e202bc0e270cd75a14feafc6d9caeb199d3d6b3bb69309ef5a91af5b3257e03846d3b625a1278cd986adb949f90f48a3bacfa298067536c64c81d7db102d4fda865b5e809a21601d9b3b1d6fe293328cbe213188d95dbdf8a43362faadb1cbc32caeb657cd158aa56094f47b1e514799a568e17151b18107cedea50de6a92e40cb41ebb182b8cf49a6803a350fd9ffb190a464cced2890aba566b06d7b21123969dc082fbfadf752cc7c6eccb0a8be33b40e7a027d55a0f222fd8455f2788cbb040e8be67cdac5e6027146638a54881cf3c27968eec845824c71cf26d2cae86af9f447d33dd25ea206676d73acf0370c1c379723fd06f28f77d28735b125d7a0f163bef70e11458a870abaa0e2bd9c483e33f19fd09e7f0745ce1606eef35ffdaf09348326f329ad58c192ab3c840622c57b08d74a274ae19f7163ddc1e84c6e01875ac063b1db8bd54d444c37d88b9a03e79008e8355da19fb8830db8498e0d9140775725729ee1770db338a74a675cf54f252dda46374862481b84acb1b025b76987b76fe5e9822319a809b8a793a6db8ef1e390ac77656d2ccf942812ddecb5fc9099b98811879aef83b3441d367c3847773d560263bab287a1f7d66d8ad9e3909691556f06eceac1c0212cead9887ad85bfe0967298d29a223981b6bf342e1627415f010d91d3e074d349d41ab27afac922a4f5a4c05ada133d5728d77ae96d115f75b0eb97677820a973213d7d24a955b836ba99b533e59491ab38b0c2c50d96db0777b19a08e0904154df22bed4c6fb069ba13e0593d64d5463d090e0abca3b1c3a0e1fed36f6eb7c58c24c7a28609657b7263d084bd2188e5c90f206d9dbff6b815bf90729f4f7e5cd7a4632c4bfc7b2eea2f61f9722669e5908782ad2fab75c7556620bef61b911493f5546af55a018e2ca6ab3503fbf5b937088119023a0e8c05f1c912a08b9cb1275b9e9c0ee6856af77780b6bafce931650fe0622aee9f4553e0a7c44fa702bf481e063041c501e742d676d4ca8fcfa7cb5b2aa4ca658addb7d8b0cf0d63d833711a1d83e6452e613e81bb7e84ef75c856b07a1403b8db51d847ad18811c6ee47d31c02cbc11d4934cfb01dc73fbd7fd0fbfcedce0d57cd75d30909dc485bcd36f3ca800eeca415c79bdfd66115e2fd7df355d25e19343ed3b18b6e6c0abd7823774152a4153c6afc9927175a6f7a468eb64c4b9054501748db8ed588f78c16aa265575fa18e5fc75795c7d541b5556d4f37a112358080a22113dcbaba04d2a56a96a947283782bfee9f47bf305af853fde06356f24f1a653f0831808348472c91c2a285019243f6c1639269cb249855fbb5692fdc863daadc9659f8c46d35907bcc6cd5b1501c798b8b29090c6a2baf71f843bd99c97c71cc2c589aed7399884e5f010633bb481b8a2e3e1efcddf800454f07d27f77dfe8e95008566d08a2b9e58c2cb25c7bf532543c015fa022134451080aa4bd52a2290252e8eb9e331d03e7e94748b43cd4853f86bdb940e71dd83f627f896362df326c52da3c6d5e92cd188b5c0dd273be9247881d6488f4804a0faf22acfb574b21be8209e8f8b08fd67bc3370e4e61c86c1e280b2cb1d89275f6af91a8380f3fd742703555de45cba35f7b24ee82e5e93ab6016d1a1e904b0fae78a166ebdafa23a1ed73b62de7208577c482ea5f58cb8cc9108cefa20c2e103bb2303f44f74b59b6"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0xff], "1771dfac4920259e7fbea4c66338179b57a91778615c96e22dd190cf79034142474e0c5441de"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0xe, 0x0, 0x0, 0x1, 0x7, 0x3f}, 0x1, {0x80}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x7, 0x7}, 0x2, {0x200, 0x8000, 0x0, 0x18, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "a10582c5d225536ce82ec5f6128384c3a2e3bab189c4b6126319aed14f0cea3c7d872f60cc5845b6681b676376d0769311d1cea4bfa2ee7d2816e80eb6d0a79b711735acfbd53cb5f849d1f1d2bd5cc146a3d304e60611266b7a7a1ef17c9e071c5688320196b149f9e5a4dd0ebf9332547a96843909b19fbd0d0341ee8ad5c612c89bf7aebe6cb962cb3088e7b5d5359ba0a7bd744cd43c060cbb32525355a615d215e63007125714142615f629486018c1cdf65aa4ba9c0d52a81519"}}}}, 0x123b) 2m12.787524381s ago: executing program 33 (id=739): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0700000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000010000000500"/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0700000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000010000000500"/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={0xffffffffffffffff, 0x0, 0xf, 0x6f, &(0x7f0000000980)="2ab1d51f1e07a274a874a29cfc59d7", &(0x7f00000009c0)=""/111, 0x7ffd, 0x0, 0xf8, 0xd4, &(0x7f0000000780)="4d4413c027461539b0134f2b882a23de063f1b34c1caffe2f0870d3767daeacc765c220cdd579b61a44d232a95557e682bf92a538e02f16b259500bd2cd1b0e730485209457c8cee536bc0ad7b125c26d3582e8a72839d427e00007a6d04d9b016ef01aad755e0dd4522533e63770c0cb9047161c9db877af10c742c1bf0e455a70b7b01d5d16c54e421dd624c81cbb892f0c41ef9e042a8548bedd7000000000000200000000000a7f46c815af944555405fe250f7cb0926e4ce4555145b36ba318cfc37900cbbc7120358d6c7a0b4aeb63663627df1986fcc0b52bed2b4d505bbd67044c0fc1da723e6fd3097a6a738c4fbc92443f5678", &(0x7f0000001c40)="c323261c60fb026fcb683c940160e5e3be815845b2d53350dd724610b8e9faefcad1e4fc78832dbfd02fb55bc6b9487e382ff181b1d6db620a8a63ccd47fc3521d83fc1b5461672bc6317d68c3f0adbe9fcc09a6db3fdf2d95794dc0eef972b6dcf2fe7ee53db5c4020716493c859c553dd144bdee14ec57c16e800be90d10ebdb433f0490c492d28e448eda23bab8c1368c8c6d0334338adb2387168b82bff40a611cd0f405a8aa42877a1d4a86963c4fa013291d24a7d6b86d6f61c15e065103af1c032d9e3e526ba26f21690489e9f05eb2ce", 0x4}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="452de94ed427db2d6f3eb80bb2296c3eacfbfc3d3d68b29bb2ac0a01c5408d8c26ebadd933b5e045a894466e0d0c4c3e6821b60186e04251754b084785ccb94a8d4a2d39399546db9c2efa579a31e9d6d732bb60cdb2a27805737f7cb18207ed9aec25c90a446b64958f0f6458c87d3e7863af282ec4e56513a1c45d312182506f067acf1c8056d41891e136d0be197e2ec88e4b5ac71c2c91e8ffb058c98a54e463a6ca9ceff735e2e82babcbd25f1ca8c2d1439238e56e864ae679bedec553c3e6d7d1580f54db9d"], 0xa0}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000b80)={{0x0, 0xfffffffffffffff6, 0x4, 0x6, 0x0, 0x3, 0x3042, 0x7, 0x2, 0x8f, 0x0, 0x200, 0xffffffffffffffff, 0x80, 0x70}}) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="01feffffff0000001c0012000c000100626f6e64000000000c0002007c8f58e87205bd9665374f3670080001000595c2dd793bd62b47b0488c9ce24db3bd05b5ffa9d8fa0f96f0ae08d6c357de92128ac47eaa83"], 0x3c}}, 0x800) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="01feffffff0000001c0012000c000100626f6e64000000000c0002007c8f58e87205bd9665374f3670080001000595c2dd793bd62b47b0488c9ce24db3bd05b5ffa9d8fa0f96f0ae08d6c357de92128ac47eaa83"], 0x3c}}, 0x800) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001ffffc0600"/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428050009000900000008000a00", @ANYRES32=r5, @ANYBLOB="08001f0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESOCT=r0], 0x64}}, 0x20008044) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = socket(0x1e, 0x1, 0x0) listen(r6, 0xfff) (async) listen(r6, 0xfff) shutdown(r6, 0x2) (async) shutdown(r6, 0x2) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x40}, 0x2, 0x34005}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00fff2", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf2530000000050033000000000005003400680000000500330004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) unshare(0x6a040000) 2m12.732940982s ago: executing program 34 (id=742): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async) unshare(0x6a040000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_pi_setprio\x00', r0}, 0x18) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0x2, 0x6d7b, 0x5]}, &(0x7f0000000100)=0x54) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0xb, [0x4, 0x10, 0x9, 0x5, 0x11, 0x6, 0x1, 0x2, 0x7, 0x4, 0xf, 0xf, 0xd, 0xf, 0x6, 0xb], 0x0, [0x8, 0x2160, 0x80, 0x478, 0x6, 0xfff, 0x7, 0x2, 0x1, 0x5, 0x9, 0x6, 0xb0, 0x0, 0x5e61, 0xeb], [0xc, 0x1, 0x4, 0x4, 0x6, 0x5, 0x6, 0x3, 0x2, 0x5, 0x5, 0x3, 0x7, 0x2, 0x0, 0x4]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000812) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18560000050000001000000000000000183100000300000000000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x6, 0xd4, &(0x7f00000004c0)=""/212, 0x41000, 0x40, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x8, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000640)=[{0x1, 0x2, 0xc, 0x9}, {0x2, 0x1, 0x4, 0xc}], 0x10, 0x10000}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa000800450000001fe1e0000001"], 0x32) (async, rerun: 64) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a310000000072b6988b9908d147a6f944192ed4206bf87cf7ca42c75000000000300003800c00008008000340000000021c0000800c00018006000100d10300000c000440000000002df31ab3040000801400000011"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (rerun: 32) r8 = socket(0x22, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, &(0x7f0000000340)=0x2, 0x4) (async, rerun: 32) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x82591000) (rerun: 32) 2m1.352661075s ago: executing program 35 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') unshare(0x6a040000) r5 = socket$inet6(0xa, 0x3, 0xfa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="1c1000000a08040228bd7000fbdbdf25000000010800e2", @ANYRES32, @ANYBLOB], 0x101c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r8) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r9, 0x0, 0x9}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 1m55.625074517s ago: executing program 36 (id=839): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x22020600) unshare(0x2a020400) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket(0x11, 0x3, 0xffe) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x44) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, r3, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m50.386735111s ago: executing program 37 (id=852): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='snd_soc_jack_notify\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x8, 0x800, 0xfffffff9) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000800)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000000002907800000000e400030004009078000000004542000400640002054b00a77f000001ac141c35197667601a7fe6f3e186afb724aa7e850d5277e3cbce1ea43bb5bc2736eb818d352d49026abc6f49293a27e38f5399c70439331433eb9ec0d44898481c7b7b5904932169b7ecb02c6b8ce4d9ef09e70431c71597203d8b36569ad7752aaee67ef9d254f721ec672da25e1d4326443ffb24d3cd33f3ab3eb4958491afa3104df6e5078454a00fec5df0a60ae562eacf98799b"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x23, 0x4, 0x2) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76c}, 0x1c) r7 = socket(0x26, 0x2, 0x2) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000540)=@req3={0x7, 0x0, 0x6, 0x9, 0x400, 0x0, 0x2}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10], 0x40}}, 0x0) 1m44.787195405s ago: executing program 38 (id=880): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) 1m20.009072125s ago: executing program 39 (id=1010): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf0900000000b5a87aa4b814da3123206758430000260901000000000095000000000000003c68010000000000bf9800000000000056080000000000008500000007000000b70000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) unshare(0x6a040000) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x1, 0x3, 0x7, 0x65, 0x1, 0xa3, 0x1, 0xd, @loopback, @loopback, {[@rr={0x7, 0xf, 0xda, [@multicast2, @remote, @remote]}, @rr={0x7, 0xb, 0x6e, [@multicast2, @loopback]}, @timestamp_addr={0x44, 0x24, 0xbc, 0x1, 0x7, [{@broadcast, 0x2}, {@multicast2, 0x10}, {@multicast2, 0x2}, {@multicast2, 0x7}]}]}}}}}}}, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x10}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, 0x0, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0xd, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r9, 0x1], &(0x7f0000000400)=[{0x0, 0x5, 0x1, 0xb}, {0x4, 0x3, 0xa, 0x4}, {0x5, 0x1, 0xe, 0x5}, {0x4, 0x2, 0xe, 0x2}, {0x0, 0x2, 0x7, 0x7}], 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 1m17.727934869s ago: executing program 40 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24000040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000ac0)=ANY=[@ANYRES8=r4, @ANYRESDEC=r5, @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r3, @ANYRES64=0x0, @ANYRES32, @ANYRESDEC=r2, @ANYRES8=r5, @ANYRESDEC=r1], 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='ext4_request_inode\x00', r6, 0x0, 0x4}, 0x18) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xe}, {0xc, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m16.418330431s ago: executing program 41 (id=1038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0x2, 0x5, {{0x8, 0x4, 0x3, 0x2f, 0x20, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x7, 0x1b, [@remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000380)={@loopback, r3}, 0x14) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x14, 0x200, 0x70bd2a, 0x25dfdbfc, {0x1a, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x60, 0x1, "016c76b0736661bcb7f598bf8dbac45047205aebdd6685dfe82ec802ff8c556b4a339b90415671e7f07b5b53aa28cbf69b665d432f80e0a1ed4185c8f7962c0df84e92e1ddcdb08c4eeb998729f492dcf7bf5731a91325912bb6489b"}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40044) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000500)=0xfffffffe, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xe, &(0x7f0000000640)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], &(0x7f00000006c0)='syzkaller\x00', 0x10000, 0x29, &(0x7f0000000700)=""/41, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2c8631a632c0696c, r7, 0x8, &(0x7f0000000780)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x9, 0x100}, 0x10, r8, r0, 0x0, 0x0, &(0x7f0000000840), 0x10, 0x5}, 0x94) unshare(0x6a040000) 1m16.284615442s ago: executing program 42 (id=1037): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000140)=0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="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", 0x452}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000004e0001"], 0x1c}}, 0x0) socket(0xa, 0x3, 0xfffffffe) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="0300000000000000280001000080000000006c616e004f2508839a8a6d6934ee9fa8c54b104c30273984b6be104d2b3b112b7d6ec81bd4298cfa2b53901872fd1c3911136d4da8dd899c3a08a2725371fe72d4b3a3ae7615dfbe0c1b57fc6333fba19bd19191fbea1230375d83974f64faeff05c0e4d14355851cf0a38440f74bb05b73109254acc420930e55edc1b931233a72fc53f8b88bfa0158daff0ec3979d36798bc5811f85fe55b81c9e3468a3bae023610b175dc47025fb3d14bf8a698d8956b066386b509bb163ed34c09b5bb6156229d84ac2524e6ad8380bb9f00"/234], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000380)={{r2}, 0x8000000000000000, 0x4, 0x5}) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m3.765692282s ago: executing program 2 (id=1134): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xe, @remote, 0x660}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1, 0xe, 0x0, 0x8}, {0x7, 0x6, 0x9, 0x6}, {0xfff, 0x6, 0xf2, 0x7}, {0x5, 0x55, 0x22, 0xf1b}, {0x4, 0x6, 0x80, 0x2}, {0x0, 0x6, 0x4, 0x8}, {0x5, 0x3a, 0x7, 0x3}]}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24004800) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1a472ba029a3b8f1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2496}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10f}]}, 0x88}}, 0x10) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000003c0)) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00'}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000440)='GPL\x00', 0x9, 0x11, &(0x7f0000000480)=""/17, 0x41100, 0x6, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x911065b2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5], &(0x7f0000000680), 0x10, 0x400}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) (async) pwrite64(r7, &(0x7f0000000880)="9c48b486dba52762952a8f87c1a52e25256a8989bd6a2dc3dbbe97b30a22eac4b8c72a3632a907b6a75e76e9c29965811029b99508b4c34988620401bb751ed94534ef62cb83feec1209dec279b3a39d0df9cb", 0x53, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000a00)=0xe8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x10) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000c00)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000cc0)={{r6}, r11, 0x12, @inherit={0x70, &(0x7f0000000c40)={0x1, 0x5, 0xfffffffffffffff8, 0x83, {0x4, 0x57f, 0x3, 0x5, 0x3d5d75e6}, [0x2, 0x101, 0x6, 0xcc5, 0x2]}}, @name="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"}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001e00)={r5, &(0x7f0000001cc0)="ec16831cba87d2751266aaaeeb09e9ce1cfc40e98ab3e056bd5fec067f9a609cf4a1466adf7324d7ca568342cc80f3736c9838ca43746a73f191dff981a9deaad91ecb03a11d6c28d1c2bbacc4a51941ae7be6f7ef5bea8e2c90dbca3ac18be011561e7c69dd4b9cb415a54c1b996d33d42c3c978c95e7f74cd3da58571ec8a0f4d1564253577cdf2ae0426ee7b7cd43f4226f6314536db47a5bcf0e5215ac2e71f84751c926bb42a86deb2e9d1481e5ece2757981878e9c0a63746d9bcd4884a39b901dc0e0d19ebe77e54732b0072996ad646a090a1c5139ef6e04bf9343fd362b35c728c15d", &(0x7f0000001dc0)=""/25}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ec0)={r5, 0x58, &(0x7f0000001e40)}, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20008821}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x60, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002100)={'syztnl1\x00', &(0x7f00000020c0)={'syztnl1\x00', r8, 0x80, 0x8, 0xfffffffc, 0x8, {{0x6, 0x4, 0x3, 0x25, 0x18, 0x66, 0x0, 0x80, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, {[@end]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r12, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, r13, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r15 = syz_genetlink_get_family_id$smc(&(0x7f0000002240), r12) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, r15, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000001}, 0x801) 1m3.574300772s ago: executing program 2 (id=1136): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x3, 0x5}]}]}, {0x0, [0x4f, 0x30, 0x30]}}, &(0x7f00000006c0)=""/247, 0x35, 0xf7, 0x9}, 0x28) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x0, 0x1, 0x2}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0xff000000, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x2, 0x7, 0x6], 0x4, 0x7}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 1m2.739196506s ago: executing program 2 (id=1140): getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xc8, "4dbb50c33c9a8809a99443235adaa97d904780b8852709a936b881a55ae3dee6408ba00fccc9a327550873d5b2ee75fec1da0a48fc16236bab8b1f5d3f48d577e30fdeb6886a06afa188783c826a765aaf8f77363137f9edb0abbdfa583744a95e5b0d9b6e333dda087555d36956056b8ab0c2a88647618fca93aeda6f42b908c82363fff13e0be8bf431865040c61e557b5ea931cf2a9481e9df55798485d2c3af0fb76375beb121cc16453df1e929427073fd3d824ba8c97e4d12152778bef562bafa789f83c5e"}, &(0x7f0000000140)=0xd0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r0, 0x7}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1m2.693933793s ago: executing program 2 (id=1141): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000008, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req={0xc30f, 0x0, 0x40, 0x100}, 0x10) (async) sendto(r4, 0x0, 0x0, 0x8004, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) (async, rerun: 32) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f00000001c0)={0x800, 0x5, 0x4, 0x100}) (async, rerun: 32) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="6404000040"], 0x464}], 0x1, 0x0, 0x0, 0x8050}, 0x240440d1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000080)="0000008d") (async, rerun: 64) ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000080)) (async, rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000000008000540000000000f0003400000005708000240000000020800064000000002080007400000000808000840040000000900010073797a30000000000900024073797a3200000000140000001100010000000000000000000300000a"], 0xa4}}, 0x4) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000680)="2747a273c78d62d4dac0d7f7b58aab8d0c6100030df1e22f804cb4f85615b53f3c023960092a64b251526086ff235e04661a8ee45322f356383db0373341233d1e17c8216a78c34737ae4719c95162fd1e95d88e5341eb3d2eb1fe5d4fdc2e659c99dbf91182903c4e05af3e2fe9c5b05722dedca136f1e8119289cc8d483601eff02f684f029999464345068ef09f07c0eef5c0e2591e09f36a3a779a25959f01c55c258a56676f6a53", 0xaa}], 0x1, &(0x7f0000000880)=[@ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x96, [@local, @loopback, @remote, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}}}], 0x60}}], 0x1, 0x80) pipe(&(0x7f0000000300)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xfffffff8, 0x9, 0x401, 0x8010, 0xffffffffffffffff, 0x7, '\x00', 0x0, r10, 0x1, 0x0, 0x4, 0xd, @value=r2}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) 1m2.586408306s ago: executing program 2 (id=1142): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000040900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001408000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1fe, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c8, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x33, "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"}, {0x4, 0x1, "11fb6825931b"}]}}}}}}, 0x0) 1m2.570612597s ago: executing program 2 (id=1143): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xb60, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @generic={0xd, 0xe, 0x5, 0xf, 0x1}, @alu={0x7, 0x1, 0xb, 0x1, 0x2, 0xffffffffffffffe0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @generic={0xd, 0xe, 0x5, 0xf, 0x1}, @alu={0x7, 0x1, 0xb, 0x1, 0x2, 0xffffffffffffffe0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) r8 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 56.796379127s ago: executing program 43 (id=1103): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0xfff2}, {0xf36ccd3fbb1a9b9e, 0x5}, {0xffe3, 0x8}}, [{0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) unshare(0x20000400) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x31}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000480)={0x80}) getsockopt(r2, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) unshare(0x40010000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 56.656958855s ago: executing program 6 (id=1166): socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x75}, 0x38) (rerun: 64) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000240)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc82}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xb, 0x2, 0x9}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r4, r5, 0x0, 0xffffffff000) (async) write$cgroup_int(r5, &(0x7f0000000200)=0x8, 0x12) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a000008000280040010800a378160082eb76eae0a78a3edb2460a0e55a3cbc982ff2667a253fcef5ec13b3378b5aa08ea4f63727a28a2483f46"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB, @ANYRES32=0x0], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64=r6, @ANYRES16=0xffffffffffffffff, @ANYRES64=r9], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffb}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES64=r8, @ANYRES8=r9, @ANYRESOCT=r10, @ANYRESHEX=r12, @ANYRES16=r3, @ANYBLOB="827c1ed7a5ac07b321717dae6da757908b5771a2ce518620332fd5f05e35e914c271b60522114832b49b244ef6414f34b3c94f1eb3961f9c40f494d4160ccb08cfa941645eab1681991d0f9fb6117d7e7293616f0f82c775231cca7e3dc8c31afe30f504df9e5a960391acc87c6ecbb28b5e3cb369e1c6a97f8b570908551390f8b20590413741ee88c0a4a87375c91c3341e2da10368928f9486e267020391cb395950ffc24f4b4e1dbe8e203c368b42211f691a7b542975660e760d6ddf75863b02f899838d5af9ffd52fb6c7ed73be76316265decf14ab2b588b660a5eee77d3ef704f5c454f574287d58124c07"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r13}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f786dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 56.48500133s ago: executing program 6 (id=1167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffd, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000001080)={r7, 0x3, 0x20}, &(0x7f00000010c0)=0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x4000, 0x4000, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x80080) recvmmsg$unix(r9, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0) 55.413474769s ago: executing program 44 (id=1107): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x30, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'none\x00', 0x25, 0x4, 0x15}, 0x2c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010", @ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000140)={'pimreg\x00', 0x2, 0x8}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) 55.352714298s ago: executing program 6 (id=1169): syz_emit_ethernet(0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="e7c86361b5c80000000000000004aa00bffe976c00018f1a313d6c1650d1226734f42477e735e7ac48ea5c68b92d39b0028c8c59d7cc0bbb54d0b1c26c5a77"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r0, 0x0, 0xb7, 0x1000, &(0x7f0000000380)="7a638cdf98fb425dc60b53fc650863eb6ff68de1671d0cf86f7d30ec0a6380756ab57bc2f9b8c33a58000c0326392c395fb4fd05935def95deb1de71c3188c2b25fad1519a0b87189612438c9c771e269723b9977668e65c25eb3e7f8b9f6871f40cd8b63f68dfbc4573fcc245c1cb404f3433be80db1d5d12ab6f62f2e460d1a36b144dedc8498f8ca5231e728db5846f4b18f6e0e1564fbfcc8da25f1aaf1a3cf66499b402150136618690ff9b966b49f9a3733fa3e4", &(0x7f0000000440)=""/4096, 0x1, 0x0, 0x99, 0x1d, &(0x7f0000001440)="dd01bd98e22de31e3331029c03c51681f54083a46f55dd806a84c66c2340381c378b2edfcbc29636292a6f3b6919cd583b5ea3e12a162382b634e1b9d3e5e354faf0106b89d5210f8009d17ff94f7be607d341d8a213e1477e74a1ee266529ae9c9cba54767390271820423631242b7e9cee9b83288b1bd792271a6619d81ac70e6da5aebec172357381d56c6e35556e229ba1406749ac48d1", &(0x7f0000001500)="24a9ec48c00e31293578544e8f8530f046f3ff8d025b322f91b0f65516", 0x0, 0x0, 0xf}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x62}, {0x4, 0x1}, {0x43}, {0x52}, {0x4}, {0x48, 0x1}, {0x30, 0x1}, {0x18}]}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000044) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x18}, @val={0x2, 0x80, 0x3, 0x7, 0x70, 0x9}, @ipv4=@udp={{0x11, 0x4, 0x2, 0x13, 0x8c, 0x66, 0x0, 0x5, 0x11, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x35, 0x3, 0xf, [{@empty, 0xfff}, {@remote, 0x4}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@multicast1, 0x54cb}]}, @noop]}}, {0x4e24, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "8d52d17d6e6e11d354fba1654996fb653f4171511ded4564", "a54efeafabf34543883b0c52816557a576f701fe12f0398bf2c8179cbc4a9d61"}}}}, 0x9a) 55.201873651s ago: executing program 6 (id=1170): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 54.397894878s ago: executing program 6 (id=1171): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a300000000008004100738677001400330100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) socket$nl_rdma(0x10, 0x3, 0x14) accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@rose, @netrom, @null, @default, @bcast, @default, @default]}, &(0x7f0000000200)=0x48, 0x800) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x881, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) 52.535910751s ago: executing program 6 (id=1172): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000080000000100000080000040", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x6a, 0x2, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 49.436209389s ago: executing program 45 (id=1123): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) socket(0x2a, 0x3, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) 47.025226472s ago: executing program 46 (id=1143): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) (async) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xb60, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @generic={0xd, 0xe, 0x5, 0xf, 0x1}, @alu={0x7, 0x1, 0xb, 0x1, 0x2, 0xffffffffffffffe0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @generic={0xd, 0xe, 0x5, 0xf, 0x1}, @alu={0x7, 0x1, 0xb, 0x1, 0x2, 0xffffffffffffffe0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) r8 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 43.536512067s ago: executing program 9 (id=1182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000f40)={0x28, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x60008010}, 0x24008004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c00128011"], 0x7c}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r4, 0x0, 0x9) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x60, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20330f4b}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004009}, 0x1000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, 0x0, 0x3f01) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x48) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 42.942200148s ago: executing program 9 (id=1183): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xd, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) close(r0) 42.814119861s ago: executing program 9 (id=1184): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)="4125dc5e1eb1ef5822f4c0917f6a96dc1ada3f73e57b931596a6ad83e4f0e165a9eb47f408578670c53db03a7f56efdcf597bbbfa3ef64a89029d07384f3c9d0f537efe19e83046fd879d84c772ad0e489c9589ffa694628aaca5c80600298f59054594d35ca8b505c66772b67553d1d421855401ac008042178490fd919a4c2092539d5ba7bb1ea901ca13de0dc13a803ca80fc74b9289d329b143e235edd51a48139ff25c3831532c770eca505e8ecc06b38dd36", &(0x7f00000003c0)="fba8d095ddd9eb7a73d5163093730e82e0a8ac9401797c5469405e6a0db0d1fd6c2113778e8c71ebe8d0157fa5ffe71caa53f71ae8315a6302f3419e49247afcb17695a44dac5468c4ce188d4a9e9f2ee5c63b54080e76cdce82405bd140b619c0e05c13e51c36a3140010ad46dea3", 0x10005, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10) close(r2) r9 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r9, 0x0, 0x0, 0x44800, 0x0, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x24) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000419c517c00"/20], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4048010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x58f, 0x0, 0x0, {}, [{0x64, 0x1, [@m_simple={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x2, 0x5, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x202}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) 42.348196016s ago: executing program 9 (id=1186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xa2}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$packet(0x11, 0x1, 0x300) 42.105719292s ago: executing program 9 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x804}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004) 41.97462158s ago: executing program 9 (id=1189): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0xfffffffd}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb0b}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@deltaction={0xa0, 0x31, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcba0}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x700000}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40081}, 0x4c8d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x13}, 0x2c) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xff03}], 0x2, 0x20000000) 41.730033705s ago: executing program 5 (id=1190): syz_emit_ethernet(0x56, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "01458a73bb9f87d77c78abe8ed4e43a622a3ec72609c7ce3d1cdac24fe63ddb3308d5e26c5f868b5c3913aaa53eccbfca5efff9471d6a8c8db57c987e8ecdc99"}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xcc}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000000)=0x15) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7], 0x0, [0x3, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3b}]}}]}, 0xa4}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x4048400) 40.78790311s ago: executing program 5 (id=1191): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x3, 0xdc64}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0xb001, 0xff03, 0x3c8, 0xe8, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010102, @empty, 0xff000000, 0xff000000, 0xf, 0x10, {@mac=@random="bcbb2c49c064", {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff]}}, 0x9, 0xf702, 0x5, 0x3, 0x5, 0xe6d, 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0xb7949a4a2a8f65ab}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @mac=@local, @broadcast, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_emit_ethernet(0x60e, &(0x7f0000000b80)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x5d4, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x29}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2, "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"}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x250, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'syz_tun\x00', {0xff}}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@inet=@hashlimit3={{0xffffffffffffff85}, {'\x00', {0x4, 0x1, 0x1a, 0x0, 0xdedd, 0x10000000, 0x0, 0x1000, 0x78, 0x20}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth1_vlan\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}, {0x1}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x62e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) socket(0x10, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x3, 0xdc64}}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0xb001, 0xff03, 0x3c8, 0xe8, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010102, @empty, 0xff000000, 0xff000000, 0xf, 0x10, {@mac=@random="bcbb2c49c064", {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff]}}, 0x9, 0xf702, 0x5, 0x3, 0x5, 0xe6d, 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0xb7949a4a2a8f65ab}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @mac=@local, @broadcast, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) syz_emit_ethernet(0x60e, &(0x7f0000000b80)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x5d4, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x29}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2, "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"}}}}}}, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x250, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'syz_tun\x00', {0xff}}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9}}, @common=@inet=@hashlimit3={{0xffffffffffffff85}, {'\x00', {0x4, 0x1, 0x1a, 0x0, 0xdedd, 0x10000000, 0x0, 0x1000, 0x78, 0x20}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'veth1_vlan\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}, {0x1}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x62e) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) 40.593207528s ago: executing program 5 (id=1192): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf25050000002c0001800d0001007564703a73797a3200000000040002801400028008000200bc060000080004000500000a"], 0x40}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0xa, 0x5, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = epoll_create(0xaa22) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x3000000d}) sendmsg$inet_sctp(r4, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000100)) 40.092313007s ago: executing program 5 (id=1193): socket$kcm(0x10, 0x2, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4b919d76}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x860, 0xdd, &(0x7f00000007c0)=""/221, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) (async, rerun: 64) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl(r4, 0x1, &(0x7f0000000440)="02a131fcbc2b3c524a23f7b5f525c20d142a7c0d35aebf5758a5d31433090ef70834ffebbb315211343ae8bda3dc2e34a59af886597b09fcc963407ad45920b230eed6f5469c1a0237bf5d28c53ecf6330a96a43cbdaf3b461c4ab259ddddca3430dc1933ae6eee416dbc2214f46e02e8e05d26006a13e0975277644cef920f97ca36015c74af5620bebec3295c4856e6ffbbf92ea3c081f3efa549b4c9ccb9098bf8eae0c2845ff8baf54ff52ecf8b77ac5d25be1b69623fb0955000a3cc02e9e5ab5323aba17421b75380dbe4d68e97cb7b5d7fe4a6baefbad4c1ad1b356") (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1}, 0x3) 39.605951404s ago: executing program 5 (id=1194): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xffffffffffffff61) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r1, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001200000226bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="2001deffff00000008001300", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="080028000ef30000050027000100000008000d0001800000080025000400000004001400"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) getpid() getuid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a"], 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0xfff, 0x3a, 0x7fd, 0x40f83, 0x6}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000101401002cbd7000fddbdf250800150000000000080001000000000008004a000000000008000300010000000800dc2c23"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e00011b00000000000000000004001980040012"], 0x18}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x84}, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 39.166027509s ago: executing program 5 (id=1195): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="00000000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x51) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000707fe6f70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000001200000418110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) connect$llc(r5, &(0x7f0000000440)={0x1a, 0x201, 0x6, 0x8, 0x10, 0x8, @broadcast}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002070100e4f34ba839471649c7beda00d1ca15fc1b7c24091400"], 0x42}}, 0x6008814) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x200000000000001) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0xfffffffffffffffe}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000380)={0x2, {{0xa, 0x4e21, 0x9b3, @empty, 0x7b5}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 37.369928867s ago: executing program 47 (id=1172): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000080000000100000080000040", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x48) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x6a, 0x2, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 36.011334713s ago: executing program 7 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x80, 0xc1800) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000008c0)=""/4096, 0x1000}, &(0x7f0000000300)}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff020000001000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) accept4(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x80, 0xc1800) (async) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000340)={{&(0x7f00000008c0)=""/4096, 0x1000}, &(0x7f0000000300)}, 0x20) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff020000001000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) 35.685742333s ago: executing program 7 (id=1208): socket$igmp6(0xa, 0x3, 0x2) unshare(0x20000400) r0 = epoll_create1(0x0) epoll_pwait(r0, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x40}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000017090000fcffffffbf00000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000000a00)=""/4097, 0x40e00, 0x5}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x2c060000) unshare(0x2c020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r3, 0x5450b000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) 35.311989491s ago: executing program 7 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x200040c0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf257700000008000300", @ANYRES32=0x0, @ANYBLOB="0800ef0804000080"], 0x24}}, 0x20000040) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x20000000) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x4004094) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000240)=""/11, &(0x7f0000000300)=0xb) listen(r3, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0xde9}, 0x38) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_ts_info}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_ts_info}) 35.142397454s ago: executing program 7 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000400)=""/244, 0xf4}], 0x2}, 0x1}], 0x2, 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000040)={0x8000, 0x80000000}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x400, 0xfffc, @empty}, 0x1c) syz_emit_ethernet(0x2b, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x9, 0x0, @opaque="8f"}}}}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x1, 0xc, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00', @empty, @mcast2, @empty, @private1={0xfc, 0x1, '\x00', 0x3}]}, 0x68) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@loopback, @broadcast}, &(0x7f0000000180)=0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000001c0)={0x5e, @multicast1, 0x4e20, 0x3, 'rr\x00', 0x33, 0x1, 0x56}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@ipv4_getnexthop={0x2c, 0x6a, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r5}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xd1383000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) 34.733393682s ago: executing program 7 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000023080101000000000000000003000008060002400800000005000300880000002cd2af0c7b1226b57c67e7fe0cad1f07c66fa6938b24efa712cdb163e21503ed8aac13be50721f7a2a7195467aa9ce618ddd932958b8736859e53c06294d723a9edfb5cf7adc6b03ebbc2a1c25f8b3961e29e8c2327ad5d34fc565081fc495ad9b7d3f1e5f43913fc80210b14f8ca74aed419c4b888afa79fed829e5fb23e70cc5bed0e284bed46743d2c40bdfc5999986244c12405d3a63f77f3f"], 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x20}, 0x94) 34.608980858s ago: executing program 7 (id=1214): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x2e, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x20) r0 = socket(0x8, 0x3, 0x3) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2062) 26.9093113s ago: executing program 48 (id=1189): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0xfffffffd}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb0b}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@deltaction={0xa0, 0x31, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcba0}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x700000}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40081}, 0x4c8d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x80000) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x13}, 0x2c) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0xff03}], 0x2, 0x20000000) 23.684994164s ago: executing program 49 (id=1195): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="00000000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x51) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000707fe6f70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000001200000418110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) connect$llc(r5, &(0x7f0000000440)={0x1a, 0x201, 0x6, 0x8, 0x10, 0x8, @broadcast}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002070100e4f34ba839471649c7beda00d1ca15fc1b7c24091400"], 0x42}}, 0x6008814) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x200000000000001) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0xfffffffffffffffe}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000380)={0x2, {{0xa, 0x4e21, 0x9b3, @empty, 0x7b5}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 20.946954994s ago: executing program 8 (id=1285): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0416a1788593ea59"], 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x800, 0x0, 0x8000}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {0x0, 0xffe0}, {0x1c, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x2400c040) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, 0x8, [@default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.772495946s ago: executing program 8 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c37900000302020325010ebc000000000000008000f0fffe0700000000000000dd00000010000100090c100000000000204e00005a4a806dd6efffd7d834a792516d9c05", 0x58}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x2032, 0xffffffffffffffff, 0x3000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80001}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x8077, 0x43, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r6}, 0x38) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) writev(r7, &(0x7f0000001580)=[{&(0x7f0000000340)='0_', 0x2}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f0000000300), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x4c, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 19.752040753s ago: executing program 8 (id=1290): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 19.744650046s ago: executing program 8 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRESDEC, @ANYRES64], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$sock(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008891) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@exit, @ldst={0x3, 0x2, 0x4, 0x4, 0x1, 0xc, 0x10}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRES32=r2], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001400)=""/226, 0xe2}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) unshare(0x400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000008400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r7, 0x10000}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffe000) socket$nl_generic(0x10, 0x3, 0x10) 19.10721636s ago: executing program 50 (id=1214): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x2e, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x20) r0 = socket(0x8, 0x3, 0x3) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2062) 19.05677724s ago: executing program 8 (id=1295): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x50bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x8) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xf00) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 18.78749293s ago: executing program 8 (id=1296): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4004000) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000540)={0x2, 0x4e27, @multicast1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r1, 0x0, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc120000004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x5, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x80000001}, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 14.506009014s ago: executing program 4 (id=1315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@remote, @in6=@private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @local, 0x36b}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x90}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400c000) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r3, 0x80, 0x1, 0x1}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x29}, @empty}}}], 0x20}}], 0x1, 0x28000840) connect$can_bcm(r4, &(0x7f00000001c0)={0x1d, r7}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x4000000) 14.050279349s ago: executing program 4 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="8f00faff0af3fb6e308bb6c4d2", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250f0000000c00078008000100008000006df93ba9894f1fb8bf33fb3bbb8e7b329ce08b94797dd9db353bd68809b65818f6a96ede816b24382b11071d2a71b2a24d22b9c2e6e99991daab63b10336819da01bd8f27ed9869960d8f1c83742081965783b6f1673ab73fa0f7886aaaeca7bae6c30a0f538e4c2a072287b6f253b9e170590991ad0979f3f7317eb4b3d3488f929abee2307b6"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) 14.03230166s ago: executing program 4 (id=1318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 12.195799806s ago: executing program 4 (id=1323): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)="8d", 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) (async) setsockopt$inet6_buf(r1, 0x29, 0x15, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x83, 0x0, &(0x7f0000000900)="5becbc0e0d7c00effffff01d29bb6fd2a3e99a1250d211bc2091035c8a37a3f53805cd89567c0e0d0f14defdc864816c2f025c7cdee2c7b1f6ca9e16712d7e3fd48f64187b6dd6bc8f43b8fa2a66451a713660a511a0d9ff5f4f6d540deabc3c7341b954d19ce529a13f2d64f0f3196496c2ed07fcc2d4bb65862a9b90510fc935367e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x4}, 0x6) (async) write(r6, &(0x7f0000000000)='-\x00\x00\x00', 0x4) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r5, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0x48, 0xdb, &(0x7f0000000140)="c2b2e08876042f41ab4625bfec9af0781dd637fd47e1f447255c46cee20e9d9a0db407041b9f065296db4964ec51563fd89ac38e7324171348b962ae6613cca9536607ff3653cc31", &(0x7f0000000240)=""/219, 0x3ff, 0x0, 0x37, 0x5f, &(0x7f0000000340)="be96b1682c9dce72b4b4d16c7d215dcb2d41986f627d700cbb1477c651d9bd27e7da435bdd35d5c946a0a7d90b0b6d5cd97a86dc5fc90f", &(0x7f0000000380)="644fddbacd0ffd9947d77d1d623cc9efc0e7decbffff4a9f953557c3865dce932d2a2390a62f1bf1219ac3171c66a6f9aa12dc605047c09b3d918d136228a99308ee1a8306ae866cef1377891fc4ccee9b88c5b5548270dd7d9e4713d06566", 0x0, 0x0, 0x9}, 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000001c0)=0x3) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 11.805989035s ago: executing program 4 (id=1328): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000540)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000c002000002000001000002f0000600f121f7b41ba76db3faed1ac47eb2d9a865a86de05627a21a2e003d2dbfe4e88afaf9a759fc8cf4b9fcbb13bc017a9ce92b6914123f4c9cbd25f2fdf2874fb6c66841848735745ab54448fd6d9482715ed872edde9347d113f11b36bc674d78fb1959a07307b94abed148206a623fb8a128b49aa01a3eb0975750a04126598e443721f43b7e7a75de1c1bcf2f645eaef48acb4ade8520c61121ea2ad7840533116e1efc8888f487f2a3c77cf44ef142132544cd889691020584f08cfa767d65b53abe1f1bb8689820fce8a1bc899c03c02f9db10b82f13aa4695fb0f4cc62f6aeeb57a7a9b6169f9b38095cff74000600f6c265cc428a699a617d07e59a63b9df337d41afd3d589d846cdf5ac27846e3653e5c4c6c77a346d5e82b4c9f0180b5f00b75bba85928c70fd7a10b65b49566cc296c0e1e4509e9e5e31d8b63a792f67d056210200000000000000757f412b28d2f962706073f796494e1537b4c1c00c0900010073797a31000000000900010073797a30000000002e000600cd8899236143b6bdbda2a97a671b709f796e58234ade78d4bef557ba477b717cd0983bc582c874a8faa50000750006001f72412a2262ff0bc0841f44db85109c3949ad89c59d0f610de6a4e2fc3aefb346364a942bc670dc7bf92a4269499bcc95bd9296701a963b1f4eb7e3b36ba634a4e80ce3d6ed6799b2257885458b73422a47a6630131cf2d352a02820867caf045707f24c95af91edb4315ad6334a4d319000000080002400000000080000600818259185d170b1355502a6513769b3a5d869ab8e50017e82f41e6705e999f476d2876b9c4071525e958acb413e0fdae261aa4fe6aa966a138e0437a66166a4d8ebc14fc27bd9d5d2ea162d7d42c8eaa8e8d2baef8b02df16e740eaf32bca220f08a8a13bf4a6e20d2d0e1f5172441629c6cf6a7da1047ba59452acb480000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003801800008014000180100002800900020073797a3200000000140000001000010000000000000000000084000a000000000000000000"], 0x350}}, 0x0) 11.213732832s ago: executing program 4 (id=1330): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'vlan1\x00', @remote}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) r8 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000280)=0x5, 0x4) write$cgroup_type(r8, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 4.56820402s ago: executing program 3 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8000, 0x80, 0x2, 0x8, {{0x11, 0x4, 0x0, 0x7, 0x44, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @empty, {[@timestamp={0x44, 0x14, 0xd8, 0x0, 0xa, [0x9e7a, 0x81, 0xfffffff8, 0x6ab]}, @lsrr={0x83, 0x1b, 0x90, [@remote, @remote, @broadcast, @local, @loopback, @remote]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x40, 0x8, 0x40, @private2, @local, 0x10, 0x8006, 0x1, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x6, 0xffffff2d, {{0x30, 0x4, 0x1, 0x0, 0xc0, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @local, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x5, [{@rand_addr=0x64010100, 0xa0000000}, {@multicast1}, {@private=0xa010101, 0xb}, {@rand_addr=0x64010102, 0x2aa}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x1000}]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0x2, [0x80000000, 0x2, 0x10000]}, @timestamp_addr={0x44, 0x4c, 0xa, 0x1, 0x9, [{@multicast1, 0x6}, {@empty, 0x6}, {@multicast1, 0x80}, {@multicast1, 0x4a5}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8675}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x9}, {@private=0xa010100, 0xa}, {@local, 0x5}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x3}, {@multicast2, 0xde37}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x5, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x40, 0x7fffffff, 0xff}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1c0, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x28044884}, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x0, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000900)=0x2c, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, 0x1411, 0x2, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x840) getsockname$packet(r9, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x12, &(0x7f0000000b00)=@raw=[@ldst={0x2, 0x1, 0x1, 0x6, 0x2, 0x10, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd2f}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_fd={0x18, 0xa, 0x1, 0x0, r9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000bc0)='GPL\x00', 0x80000000, 0xa1, &(0x7f0000000c00)=""/161, 0x41100, 0x8, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x5, 0xa, 0x85, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d00)=[r9, r10, r10, r9, r10, r10], &(0x7f0000000d40)=[{0x5, 0x3, 0x4, 0x5}, {0x2, 0x2, 0x7, 0x5}, {0x4, 0x2, 0x0, 0x1c}], 0x10, 0x8000}, 0x94) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000e40), 0x208441, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r12, 0x4018f50b, &(0x7f0000000e80)={0x1, 0x1ff, 0x8}) syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r9) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000f00)='wg1\x00', 0x4) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000f40)={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3, 0x2, 0x6, 0x500, 0x80, 0x80000000, r11}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r10) sendmsg$NL80211_CMD_LEAVE_IBSS(r10, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, r13, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x104) sendmsg$NFT_BATCH(r9, &(0x7f0000002d80)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002d40)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x17d8, 0xc, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x144c, 0x3, 0x0, 0x1, [{0x320, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x22, 0x1, "d3bdd72dd3fe8e84392f6cf57a9febbd3a682a1e8fd928476493c4ca5603"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "3d978c83c251e00848f738307256bfd7dc68e99d186374e95faba82b66cb34207a4a806d254790c69d6076745bdbee2c03f2387a0774571a829abe126932f54cfe6f7f60aeafe5d8228fdc26f672b48f001acdd22c61e1d645cda62bc580023512d784e2bc51c8e8989e776fec77f8a005ab4d0eaeeb0c6d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x23c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd3, 0x1, "61a2c803f87ebdef52a3c4e40a41e90fda3346886738c84a6b00374be7464a10749bb4351118dc3c5f813f6ef6c1388462f83f5a3afeb521b9053c36bc55a265d2b3af2209b6e44370d68e569c1389e6acfe158d5252dc045030c0da08988e5ca61a074d5824262bb1bf3010160ccaaffabb1a893297ada33e22c306439e04c8c5a0cf3767d0bb3ff122b408332c2a118a057f58ea432ae3fecdf861a2051b897b1f8055c03bcbcd5fe4334776d999af477f34cf53851a1e74d3848c80bd788b11d6757946f661cd09c570aea2fb85"}, @NFTA_DATA_VALUE={0xac, 0x1, "1e72bd93e84c68a2b78a92bfae472bcd202b69819739b257dee4240c1418dcc916830602a15d52857abb56d40eb23871f15355a62dde9e596fc9bdfc6648ac9ecb11fd7f49f6e8dce815a1a38ba0cfc175ea829482c046bdecbd9f2f1d2e18481cf7d25623de6fe746f76ebc368eaec740a1bdac5334d99d07ded482603d631b2dafacc4135922c723763bdf7c6119c6ee9c7281bdf706facd8c5d9f2f39da0a2f52f92a3f436a40"}, @NFTA_DATA_VALUE={0x7c, 0x1, "55f25db53c7c676a279908685bccfe3ab579762dd2a2978e87951b87fb6b13a5fa556380c26f828f4a42aa4d12c1ac92d614971833b7fdfc96bc6039455773e500047400649fe1f9cb1d465bd8018532506873fa530584cce405bd7d20f83f0c85c9f41de13df397fb4e7ad9196ee5a4b9e05c20463753c4"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xeb}]}, {0xaec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x9e8, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x50, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x14, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x928, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x918, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x4c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_BITWISE_MASK={0x320, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "bff70102f3d79b4c4671d34d7851d7dc0ff6c63e3c11cd8a34ffc6cb0ae40c1d286cae67eabac2d659d9958023e7c49bcc3c09f2f5642ac276923b2f5b0ff09b4cdf3d711b097eb00252b54e115ae2b05a9b67e6e9a5e98fe93657656e2ea62466a3051a4e33ed0835514e96a5cb5d1a78c8ef754ded93a6f18a8044d27edb1fb38536104ef654830441221b982b3b1bcb72ed5b49b6489e3e8097e44e7bc501ccc64efc0ddf"}, @NFTA_DATA_VALUE={0x9e, 0x1, "ac7236de16ff0ca11e5dbc7f28dc8f25c86bfba9639425b41be6e58591f8673d4351f94387e543f58b94753099ea16f571a00000a8a7c50eb068e1c02d93fec500b56c3e0ad3719a8e8a38a15f3c71c26697c52845a8678fd80b9f67e5a601152e583f7aff0e377cab0d79fb23276dd2a8cef790c07fed052a0ed184c9321e43c42506c3f0761754214ae9c6a3335b37905fb4c1a7bbf6b0ffd0"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "2f4c441807bcb30e8d5641f7f193c9eb9f84702fdc421ecc24bcbcc4bf20c31ba978fbd76268eb43a88efbb6c288bfd6d1c98c39a6dea9e073a8db2f98bdb95de41f666546b234e9e4cb66fcb54967075c9f12910a970c4c7771da7fae37cea743ab85d3eb7ff9c6d9f03a0d9c703931934c5b68072ca36ce56b4638f169b82cba49133da904bb8ac809e686c9fa6fd9d0b3c9646c311631d29ff5ff7be9b4e81068c29dbef464c3d2e57672100fae9778caef600e22e5ca5540568b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x50, 0x1, "a15d938e81508c5066381781a749d6082f4bf0a1af63a6d627651e12fb1e7fa5df804862cca3a9da357e690d9d479ca1d7267eed9d007c7e5823aaa8c5acaa93af523cd09692670e3200d010"}]}, @NFTA_BITWISE_XOR={0x1b4, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "c7a5b7890aaa501aafba4fb303b49fd94afc6b52da10c774abe225a3627170b6332b9d0b3be5e1555e61ac31a1af830f745a8438f5067d2a19aa52d992309465c37b8d3b80c0788f58a65eed260fd751086014c7266ad13a7faab28fb9ef30f59eeedb5fb3750f4c1abee5391ae62422564154697d30c268258dc7e64e5dfdafeaff58ec828d38db71447fbfa157b388137cc77e8c38cc900f7a3c8a82810064254d921e161ee25d0036042a304ffe53dea95df795f72bf64e44088e8c00"}, @NFTA_DATA_VALUE={0x49, 0x1, "1aca99dd4e425b33ef803fbe8cf1bfc9ed57116b02957798a36f57b3f357178d6198a2db9948efb1a45d27be654a8f4330d7eedf41fb91be77ca6fe7052307a3e89d139790"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_MASK={0x208, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "c14b41d0533219d3d0e82b85dab320d095607268fc3125b0a660a48ee2862209c96a08a3c48e1617062d71c424b2f6a9971d712f21c3d1bb9c393cbcf6132a409911aae2ac84219596c7bfbcbd44598f3f07ae056e24b7142aef9feec171d0cb0ef329d74b94a0e87432e1683952d3fd8a1bbd359f5cb6228178c837147000d1999bc9f850ce1e8b8019210fac14cbec655d47b24cad49be2a3f93955e1b35e4b27fc42d8acf76602afe16c4413ab490fff4f1d0e9bbe072823ef9f18485a664ecd4373555956076a0d6a59e598cf7633e6518b32a5edbf34200bb3577544abe140c8893d4fcd4a1c62b671119b9a3c6b929a17317f853"}, @NFTA_DATA_VALUE={0xd0, 0x1, "032bad249b90b18a3b77ae40ab15c502ee408c51468436d7d15c327d22c1bdb56f18e44b229bf22975c17d56044ecb9db9d72a6add312e0d96c896c2b8bc2bb355a79497737d24a4300feb7a827256a21a368081ee7b28136fec47235dad0e19bbf4448f97f43192a7ff2859a9af404675f9e447d571b60f1725b063b0bd64e93ab7f94b1c39d35382bab75986a3f98613c3df7bf6935fef7cc56dcf88a7ad0ffc7bd31e08a2627ce58b9700857382169ed9c2d67148b1859c3b78f5a197b93498eea8e8168153688c9679ba"}]}, @NFTA_BITWISE_XOR={0x1dc, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x85, 0x1, "71869b5d551eb8ddba20f8beaecc26ece52db10685a4e853b6148be12758ae474deee654767a6c1f3262de74fee9c1dc2a79f5fa859231d1fb601a49acdd6ee3d54c48ab1b829d31656968951876957903e4620da3214c29ab1350a02c4ea5190d18d747f40f0fcf9dd5de87ba11f8ccc3bfce5b2d42bc2f4fe387c13a8b89a401"}, @NFTA_DATA_VALUE={0xa9, 0x1, "89fe3791c7687fc34e4f783645262f2bddd574e116e0e34e16bd4b5b96253e57f09542990cb1535df125d93fe311125b348f4565f2698bbadbcd0e118633fab587a07434f3e669e8b6004893462584afabd70ad00c089679c3a54c21b01faf17f283a9050e4f7ddda7787469352bcff5bb9340403135b5d959cff755af99fb20abc731ed5c0ed9aa16459e116ad3b548b7f37f6233733fcb1adeb5176ce6f727264da79811"}, @NFTA_DATA_VALUE={0x86, 0x1, "437bb5ed1a42c5d1bb6a6b612727f4dea353d679d5328d30d76e936af27b6b69214480bd48c99876822239df30be1b76fb5b61e58ff560f6e054ccd97241a9bea313bea250bbe563d7ccc747633e50f9969fb75fbfdef10d99f6da1ed7ac40f329662336aea9d7c9d54a9e93e9a07f7e85cc0ebdf2e49a002836bd757bc293e1f08b"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "36e0bba9edcab0be28b758aa6bd6e85f693bf30ac401e195fc789fa46ad6099d957c3018d22ff9d43bd764e5fa999f7e6341503cad08d4e2fb31743a3a31fca51e49478b36d1b01c5ef723ada64cabea4eadb4fa221b27e19c311ea3035fb2"}, @NFTA_DATA_VALUE={0x59, 0x1, "943ac09ae58f88f0575f4bd7e23b85de67e96d30f62ee14941ad71c1ce09cc662aeb630206c67663389a03ea913430ee5fcb15eccc7c800049384609ebd808ac7a21bf2f8f121a8d2bc2821dc3d7d5b689238eb746"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x304, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "fc7fd996b3bdd44a52d3ee12189fe0570fc4e3c1c79ee02e89e16c2f201ead7bbb75f756cd2ec4c833bac867e4a1f00db7a735f0b89c19523d2ef51f87b065f23d493255f782f41fbabd919bdecd2ebee23e531b5235431cf945c3333bb3"}, @NFTA_DATA_VALUE={0xea, 0x1, "12f38c1714703ab8c1b86585a5c8dd69ed74a3af2b18a6114131021371992bacef8e834cc4a76fba7aaacb03396378287086eda2fd5f93f1fd9f42730bc807a86d8753d92e4337ddb1186c5b99cb95071cbeeb167aeab0c6c46d161acd1f03318a008a946297cdf1f22762803eee0e7e4f4793d83e6d2ef7a437467e7ee787eb70c5ba860d3be7297a4f92a2da6179b16b799237603ab9831d920f7c28848fbfd4bd1a6c1246b71151987fbc2b0a3dcc7b4ebdfc81104869d5ac81d0e3b4d59c9b2a8bc6e2cd13417c8c6d9a2a8bce2e10afcc23e81a67e3bab5a091c53d04884fef7dd4fc2a"}, @NFTA_DATA_VALUE={0xc2, 0x1, "9da91f1ab560bee7297ebe7330db46cd634c155cb9e7b27334cc75bc07778b99e91654f7657634dd54c1790e9abde9d9c0e0fad90f0bbeeb3b62e9562e9f2826c117e5d7963e3b3847e6c2979b17dceaa73dc22ac28771e4e753f3ceb29785d1fbfc1f67f445698f5e0daa204be10e9b3ce30d4279de8df5e3e1159c2ac674dc9130589d357492bec551f79907dff4df013e3747c458336be0ebe750b7d4c759990c12496e8d89925bc3c50bb8329587bf0c4baa6caa85e97d3483bb3016"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "7a0ce61a64246973385e510673d7f2b017aab57f69b6f34a6bff66a80812da87c717b31c1757b3ae192cbd948ab9ff0c7701ead667e9dae6b625f824da11a6140e633e7740d3d789ab10bb1891d71210325592460edcfb9a163c55a1fb95dbb5f2460fe16d2125293e68971c285eb08acaa181f5d0b275295efc19308171079492666ff36cdd5a8b5df6f5d981a164c9d6be29fa58156005a46b2aaa862f81e89ba18c53e3325a805c7eff98c56bd9b067b4641a4dfab71c8db90d8af256cd2cdae576bddc482cb8c15666350b7243d3e22e427967a7"}]}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x61}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x45}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xd8, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc8, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_INNER_EXPR={0xac, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x98, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x42, 0x1, "18738674b44cb17caa97390b3e5612fc1279d9379f668ea70c8185b7e04b48a88f5eb13f78a76029c28a27945ef35c067607c91bf6e121f6f5539bfc5c94"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM={0x8}]}}}]}]}, {0x1c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "17f67f01237d7330d291a65063e6acea292e9f058b5ec2af002a80191b52ac134fcf7a333542449953906624027171e6f7f5ce68d658eaf3640c1d65116985647221fa9d68e9b5895cc38e6939eefee35ee6e2beca317160"}, @NFTA_DATA_VALUE={0x7, 0x1, "2fd3aa"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x7a, 0x6, 0x1, 0x0, "c05732adeaad4631cfd3014e9a83c4eac0157494dd2a2a8cd930076c060912648582d3b5040d7929d881fc82164d592183a6b62dcca3446b400dea0b857b32174a33216c0ff2a3c50a9362c222d80c0c58385dab588a93b6246e76a2d463bf0d79f5ce4beaa9078342919b85b35c83bf9933d0fc8958"}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xb0}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x334, 0x3, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x108, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "c13f0ed3745adab69fc3f127c06eff49d41e133b9d0842995d3a75136fb41c746bccc6daa3f266a5bbbc06bf6a1aeb30f1d5fcc013ad9739e06f094bdf0e9583aa303a5b7eb238b7945ed3ae6ab31aaa42eb97ef0ea339cfbf82cac986aecd3b74fb0dea8801f48c0c737a3e9b564d70b92a9a5fbcb683386331a009d8258d32f5dd331a03412c822a657826159435dd2f238a04f23c536c01e87d"}, @NFTA_DATA_VALUE={0xc, 0x1, "b33304e0944143c4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}]}, {0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x30, 0x1, "4ad50f2c68d3280e493ef30c80ff678e9594f19bff24fb46ea3dc30a31f1232a794b345a24059de5d4675673"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "c4c8f67baa43e124074c9c3cb3dbb59ed48fe70a1742e62ef721f5c923f1b5256ba749c73bfe6a7a7bd32a453480d5bbe7c77cc664058f36beb083c0edc071e648f87a9510b72c0f627271ab8b07dc8bf5c59f65489ec683d10668664452b37955bbb074a80bd84328a3204bbc52deffed6c1716b8906089d6c56af87a7742ca180ff22783c5b0e34108faf7954f8f741117c9585fe9ade3b68fd400687ec9aef84049c31afdc0f4f2139ad606bc3089cbe0fabc413c0185d33b2a471f1c1648e5e9e9288642641bde6d23cf069a1e"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "377700b8b01ea77b7977814dafd2feeded613ce0f914c6b1e57e55e0011b6e74c65be2c0c9dfb010166679b57df86363e529649e6b2fab08d5569cb364d039f6d8e9213ee7ff03ea757ec694f2541241c26c5db5d7fe7d"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELTABLE={0x198, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x9e, 0x6, "8910ac6cc077c60b8273741e3167fb331fd18f4b67ec581151bd50948ca20febed23379530b289d10b4b4d826ef5def56052b20d7fa84e793354d901257979e9c50724320bb0c1d7978554c9e79ba25fae71fff9277651d80e19ae0948571eab1742d0d461c83a0a2c1c109cbbbd5df5190f6416d7015448b5de7bf39239c80f21b66184e3c75a93181022b5ce9ed543e9dc0393baaf1e7334c5"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xa9, 0x6, "7747fe2e536d17d997b71349291ab48a34ac47604790e2c549a05dfec09410a0f74d3560aa29f9881857f4a962a8f287e3868e225ea3bdef7155175902377b6c071946628a6cade4de213b03d5a7072d652b9948d2167ffb4b38d4830178cdab09e38373c60941ca52296b35fa662485b2f5c9d07cbc77e8983d4d5199f6178c13c0ccc455bcd690bb94d8c2554ebbd6cca6cd8e15410c603a00945b122426c4427b1eddef"}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELSET={0xe4, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DESC={0xb4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5d1}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x23, 0x6, "6a825dbe72e2106111b217efd1a80bbffcbe4232a059c1f94784ca78e7fc45"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x24, 0x6, "e11f9650d1d33c0ffb002d8322cac5062396663febaf88a19fa80ed71aa84ec9"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x15, 0x3, "9b8a6a0827374903c4cb5da40096f59eef"}, @NFTA_MATCH_INFO={0x24, 0x3, "d0e4ff5c86f6a433b061034e32de9ffbeab01a8fe7092f75fde656867b52a1b5"}]}}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6795c1b21cbdbfd1}}}, 0x1bc8}}, 0x4000) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002e00), r10) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x68, r14, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002f80), r10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, r15, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x50) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r9, &(0x7f0000003ec0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e80)={&(0x7f00000030c0)={0xdbc, r13, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0xd90, 0x111, 0x0, 0x1, {0xd8c, 0x5, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}]}, {0x514, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6b}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8b}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x6e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x21c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2b2c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xaabfd28f0ecb2b47}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ec}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}]}]}, {0x4}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xdbc}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) 4.382632831s ago: executing program 3 (id=1361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x80) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) 4.333901183s ago: executing program 3 (id=1362): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x21, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="e0b9547e9387dbe9005bec1988a8", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) shutdown(r0, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xd00) 3.77399994s ago: executing program 1 (id=1364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x9, 0x2, 0x0, 0x0, 0x4, 0x6}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000890) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r5, 0x10e, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r7, r10, 0x0, 0xb) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0xffffffffffffffc7, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000000c0)={r13, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="030f000000000000000007"], 0x44}, 0x1, 0x0, 0x0, 0x8040001}, 0x0) 3.737051055s ago: executing program 51 (id=1296): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4004000) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000540)={0x2, 0x4e27, @multicast1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r1, 0x0, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc120000004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x4c38}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x5, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x80000001}, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 3.631395201s ago: executing program 1 (id=1366): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x138, 0x0, 0x290, 0x0, 0x0, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x2}}}, {{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x8, 0x3, 'fsm\x00', "320ed162cd7bbb5c623b980ee055668b8f3f37bc739cba06a6605408a96fb717fd4766f42da23c709c33f142c91d568e249b1538c77b20b7a8f1463c65099f65e88d93e223d375ba102a44e0b5a6092ab2c8ef1600ed1b4c255dfb8fb0c6e89f5aa8086005f19e9d7d50aafd97b9a468bb568b0d52b485deac7342bcf62ba601", 0x7f, 0x2, {0x3}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x2a}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40, 0x8, @rand_addr=0x64010101, 0x4e21}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006", @ANYRES32], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r13, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) (async) unshare(0x40600) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r14, r15, 0x5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r15, r14, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r12, 0x58, 0xfffffffffffffffe}, 0x10) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 3.414240927s ago: executing program 1 (id=1367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x8040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x800) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x2f, 0x0, @val=@perf_event={0x40}}, 0x18) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r6, r5, 0x4, r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.357833045s ago: executing program 3 (id=1368): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x54, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35b09c8913d4e54116b80106a24c0986"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a86aa2ba3d5b61023bf6361a435c368c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_getneigh={0x54, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2002a}, [@IFLA_VF_PORTS={0x34, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "35b09c8913d4e54116b80106a24c0986"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a86aa2ba3d5b61023bf6361a435c368c"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000800) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), r6) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x28}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x44804}, 0x40000000) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x4, r7, 0x12}, 0x10) listen(r4, 0xfffffffd) r10 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) sendmsg$unix(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="4f5f072a0db0e67d613178efcfe3a6054a0ca7f8e4cef47737bbc530093b9307b2828900b1ed8131e71b43e3909b35fa0a1964d2e1739c46bbb5732e95ad8ae39b90c89cb5cf53c25512e3668ede45982f290503f507caad3499871769e7e2827220fa5158dc339619beea2c86a2a170d62d9f5820dcbf21cecf5e9a51ca518d13237fa5d734cd6e23dd8d7cdbf2477f8cb68f0fc0417a10d062b49bebb3a9bf0293987ba25e78a53eb71c450e7dd594ae8635a37ffd177a864bcf517989c49ea7e621e4c67099b64f91a475dcc1de7aae52dfaf5a2e6afc425f6f32a82f720a6e95b8f001b2156a001bcba8e6077d139770ff868541", 0xf6}], 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) 2.931947372s ago: executing program 0 (id=1370): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090002"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x0, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r4}]}, 0x24}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000540)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x40044}}], 0x1, 0x4) r10 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000600)="b28c641c490cbd629cf15b8e92b7222925f322a714325a66d12403c48bcfdf287fba47caee13e894f18cf719596962b6bcec10a1da7f802417af0355263173fb5a62b993a8a4b115d81c75405a852845b42c6f949cfe47ff7e00eb2db6ea55f9e0ed7b5e9c615ce33d70a4e7161d5078d8dbf0b9ef482782a84168e82c2fa3d89a1e1a4ea804a7297bff9bcd435123419994c60f337184a50a4c80b45ded6aa56baa5025a2bd9c99b50bdf7edc43bae3e09239b427e6731c08bd1dfc7926d17f156db908c65cf4559baf07fe647670764deeeb2b20b2e3d9cd88ad", 0xdb}, {&(0x7f00000003c0)="b14c09201c71c0b4a86e4d12f757d86ab231a79427bb26d2b72fcd38bdaf68f03feb5e705d1c71673cfe090bba1f65a5f05114b2d00358f191bfd2bb14191e0fdb008cccba4deeb205e98a3690b01569f4b417d6b3f049a0231984330e07007c6ca485a11620c93adc05ca26183ec6ac6054c33824476f2da15d80964a6118d53f22e2cd70fa459ebba56755d75fe5a3e57a079edc278bf47dcc2f0e4b3b", 0x9e}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001800)="381085b94368c8028fae3833e523da223fbd9df8f768482ee78f096f5e7af16fc3511eb0abd049d40290f0ed2c6b1c7a5573e1b2416627861a4a5003964ef50e0c7627a4d0117130b36d11e888c770ad8cbf93784c4e6dfdb83daf9755ae8dba45318add9a818149aad8d47a", 0x6c}, {&(0x7f0000001880)="9f290cddfc8ca1539b3cbee42cee9f34012de03253896dbc9d221f6e620af10ed56fad9174e88c49666036300c863581f44bb3473190881738f83a01612c6a3988250e8447f2283f3c87dfa20c3904ff91a7d1aacc84f1bdb8180922d0228775f3f7c5960ecf0aea2b9b5d6cef42e02d1df5ddb1075d89e7b16be17325bd1939644b0d5c9b426447d4c4e4ae759cabcbf286a55c3af0cb960afec391721d5605a03977976ed932105416a2e3227f60134a866adb9e21df54eaa8861b4244b080b348df66945c97eb1c", 0xc9}, {&(0x7f0000001980)="12f2ea122557f949c4d13856ab3364353ca55950e736e5bb2e4741e3d753d5c95f26123393e43b561f630dd2955125c6377f2fe203e4021922c54ae8619e56727b0f7e8e9767286fa9cd718cd02188d68017ac59e115125cc73b38e0c8e1864c029eabece65c086e626766c2db46f97cb6", 0x71}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r9}}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}], 0x58, 0x1}, 0x20040001) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r11, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r14, @ANYBLOB="890c040000000000200012800800010067747000140002800500050001000000080004000100"], 0x40}}, 0x0) sendmmsg$inet(r12, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r11, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r14}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x100}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.628998706s ago: executing program 0 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230", @ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f530aa1fd4e20246614a386a9963290970ba2e8647f25951981159d996a6aef164856f1292938b0c4e001ce427bf1f882e562fb299e7f8f1f1dea1081406df29110a119b00ccc55ee34c1f443ccbe72a9c46210320a15227304fabec2042269f5bead2ae88ac33dd92004d2742a41c6f6ddd398f5cb5073ab72872afbb2ffa29926fca025bc8b1270c9c6bc28dff2f392e68623304614e96459cf580da7b6ae1109b1215", @ANYBLOB="779a793d434886a699751973e5a78329d740031cede5b252f82c0a701601a15e738233539d5a38f2d4de59ddf685f0a84b105e2658e8def61a2ef3c1f02af67d5f952cb0e8383a8dcbb8268c513373a34d4dfeb5feb078cebc20d7cc451f5447c9e664f4f309d3ab9b71b4003ae53f19083b679347e18ceb4aba7ee1ceae46e4376017163f863d63901a5840eb05f9b3f33ca29c9abdf004c9b58103998d2d4150a4022184b3e3353bf9c18d73d542117ac84c0d1e29e4370893389e3a9ad2b969fbbccd39e7a010d32fcf058ad72e373b3ce82ce5ad4d4478c3013304f4c09ab88f3356c101cc25c4666e031c84043b7f91491e"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000440)=[{&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000740)="ea40fb486d881eb9ec6316f2dcc192a78556d73fe204e30d766cd679940088405d85e4d76b541899de6f3bc6c33639c6fedabb4493", 0x35}, {&(0x7f00000002c0)="2362c46679bd7492095bd8e223d5044d43e1e72caaf593cfb61a882fe57ea6662b61273a5e4e7d441a0d62792a36feb2", 0x30}], 0x4, 0x0) (async) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000006c0)={0x3, 0x3}) (async) vmsplice(r5, 0x0, 0x0, 0x2) openat$cgroup_ro(r5, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r12, 0x26}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) (async) recvmsg$unix(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x40000102) close(0x3) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) (async) socket$unix(0x1, 0x5, 0x0) 1.883352975s ago: executing program 0 (id=1372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 1.533300049s ago: executing program 1 (id=1373): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711020000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x7e8345b59393f61e, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000140)={@empty, @broadcast, 0x1, "4a3d17ee3b7786deefd7978f1dd679ddb15437f26588ec856540d10b8c9519e2", 0x4, 0x2, 0x8, 0x401}, 0x3c) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000880)="a95c5509000000000000585228a7a1033ad3484758ff33bb", 0x18) shutdown(r0, 0x1) socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) close(0x3) 1.485105508s ago: executing program 0 (id=1374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000300)={'xfrm0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000030000000000020b6d0008000300fa61b1d5ed31a701e6ea2443756ed80afb17bf3727366598046fa412608b5e65b3aba227c15c1523a1e6a6b05c313392247c97f314a77704235c7f77c293c07eeec5fbb49dce0655b9eac1904a3b9c8691b16173efa06b1112f23becf2de7e366b2575ac08916eb6c5", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7}}}}]}, 0x40}}, 0x0) 1.241701211s ago: executing program 0 (id=1375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bc25, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe068, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1ff}]}}}]}, 0x44}, 0x1, 0x2000000000000000, 0x0, 0x20006044}, 0x4080) (async) close(r3) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async, rerun: 64) r8 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x99d}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 965.584007ms ago: executing program 0 (id=1376): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000100)=0x1, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x46) close(0x4) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x32658) read(r7, 0x0, 0x0) 767.535155ms ago: executing program 3 (id=1377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x200}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 658.016003ms ago: executing program 1 (id=1378): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000040000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000072630f196de608c65de7ddc2b16c3c40aeeeb6cc9ac27412957e6547729d3f456b1585a70ebb", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000230000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xfc, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc81c}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb5}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}]}, @CTA_LABELS_MASK={0x24, 0x17, [0xebc7, 0xba, 0x0, 0x1, 0x3, 0x9, 0x8, 0xea1]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x49}]}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/80, 0x50}}], 0x1, 0x2, 0x0) 80.341174ms ago: executing program 3 (id=1379): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1e, "bcd458ce4bf40710e900000800000025ee14c11f00000000000000000008"}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x17, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmmsg$inet6(r2, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0x9}, 0x8) 0s ago: executing program 1 (id=1380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd704dcbe122001400000018000180140002006e657464657673696d300000000000000000080017000600000008000700ab0f0000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44044080}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000001e40)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x1, 0x9, 0x9, @dev={0xfe, 0x80, '\x00', 0x16}, @loopback, 0x7800, 0x1, 0xfffff9e0, 0x4}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x74, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80c4}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x3, 0xff) sendto(r11, 0x0, 0x0, 0x40810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000100000000000053d100100000e60b"], 0x20}], 0x1, 0x0, 0x0, 0xc0e5}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): parsing attributes in process `syz.8.913'. [ 216.758641][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.8.914'. [ 216.776911][ T9806] netlink: 'syz.8.914': attribute type 3 has an invalid length. [ 216.977056][ T9813] netlink: 'syz.8.916': attribute type 2 has an invalid length. [ 217.023982][ T9777] chnl_net:caif_netlink_parms(): no params data found [ 217.117325][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 217.117339][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 217.132548][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 217.340214][ T9777] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.356341][ T9777] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.373320][ T9777] bridge_slave_0: entered allmulticast mode [ 217.389997][ T9777] bridge_slave_0: entered promiscuous mode [ 217.400819][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.420447][ T9777] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.433175][ T9777] bridge_slave_1: entered allmulticast mode [ 217.442853][ T9777] bridge_slave_1: entered promiscuous mode [ 217.661024][ T9777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.700346][ T9777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.766128][ T5846] Bluetooth: hci9: command tx timeout [ 217.833947][ T5846] Bluetooth: hci8: command tx timeout [ 217.917914][ T9777] team0: Port device team_slave_0 added [ 217.936335][ T9777] team0: Port device team_slave_1 added [ 218.018951][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.032545][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.091624][ T9777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.114767][ T9777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.131942][ T9777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.167848][ T9777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.232351][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 218.240458][ C0] lec:lec_tx_timeout: lec0 [ 218.247703][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 218.376649][ T9777] hsr_slave_0: entered promiscuous mode [ 218.383822][ T9777] hsr_slave_1: entered promiscuous mode [ 218.395057][ T9777] debugfs: 'hsr0' already exists in 'hsr' [ 218.403249][ T9777] Cannot create hsr debugfs directory [ 218.409094][ T9859] netlink: 'syz.8.922': attribute type 1 has an invalid length. [ 218.598321][ T9869] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 218.617418][ T9869] macsec1: entered allmulticast mode [ 218.625638][ T9869] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 218.650112][ T9869] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 218.657767][ T9869] mac80211_hwsim hwsim26 wlan1: left promiscuous mode [ 218.825604][ T9876] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.925'. [ 218.872597][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 219.041381][ T9777] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 219.065851][ T7415] IPVS: starting estimator thread 0... [ 219.134644][ T9777] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 219.164751][ T9890] IPVS: using max 38 ests per chain, 91200 per kthread [ 219.175473][ T9777] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 219.205559][ T9777] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 219.451446][ T9777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.486863][ T9777] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.516450][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.523734][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.577831][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.585155][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.629143][ T9918] xfrm0 speed is unknown, defaulting to 1000 [ 219.832729][ T5846] Bluetooth: hci9: command tx timeout [ 220.110555][ T9777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.203903][ T9937] netlink: 24 bytes leftover after parsing attributes in process `syz.7.933'. [ 220.335768][ T9937] tipc: Enabling of bearer rejected, failed to enable media [ 220.518720][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 220.527950][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 220.537222][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 220.550913][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 220.561030][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 220.645863][ T9944] xfrm0 speed is unknown, defaulting to 1000 [ 220.789054][ T9777] veth0_vlan: entered promiscuous mode [ 220.825231][ T9777] veth1_vlan: entered promiscuous mode [ 221.017859][ T9777] veth0_macvtap: entered promiscuous mode [ 221.047843][ T9777] veth1_macvtap: entered promiscuous mode [ 221.086297][ T9777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.103983][ T9777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.126583][ T1095] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.142013][ T1095] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.190308][ T9951] bond2 (unregistering): Released all slaves [ 221.221732][ T9961] netlink: 'syz.8.937': attribute type 1 has an invalid length. [ 221.230698][ T1095] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.250982][ T1095] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.310383][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.937'. [ 221.333017][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.937'. [ 221.383850][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.8.937'. [ 221.442029][ T6556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.463891][ T6556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.601306][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.626940][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.913150][ T52] Bluetooth: hci9: command tx timeout [ 222.254373][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 222.564534][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.8.943'. [ 222.589599][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.607321][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.623434][ T9944] bridge_slave_0: entered allmulticast mode [ 222.633131][ T52] Bluetooth: hci10: command tx timeout [ 222.641866][ T9944] bridge_slave_0: entered promiscuous mode [ 222.677617][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.693182][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.703020][ T9944] bridge_slave_1: entered allmulticast mode [ 222.711152][ T9944] bridge_slave_1: entered promiscuous mode [ 222.774712][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.801174][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.877826][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.944'. [ 222.923703][ T9944] team0: Port device team_slave_0 added [ 222.945391][ T9944] team0: Port device team_slave_1 added [ 223.047336][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.063153][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.121243][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.152635][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.169819][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.222424][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.262363][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 223.270430][ C0] lec:lec_tx_timeout: lec0 [ 223.275586][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 223.397132][ T9944] hsr_slave_0: entered promiscuous mode [ 223.414294][ T9944] hsr_slave_1: entered promiscuous mode [ 223.421016][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 223.448275][ T9944] Cannot create hsr debugfs directory [ 223.854368][ T9944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.876021][ T9944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.001066][ T52] Bluetooth: hci9: command tx timeout [ 224.026701][ T9944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.042601][ T9944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.136443][ T9944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.162364][ T9944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.276247][ T9944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.302473][ T9944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.712970][ T52] Bluetooth: hci10: command tx timeout [ 224.809840][ T9944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.838404][ T9944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.863942][ T9944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.889388][ T9944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.159621][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.218337][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.260426][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.267706][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.299061][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.306358][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.375910][T10013] netlink: 124 bytes leftover after parsing attributes in process `syz.8.946'. [ 225.444438][T10013] tipc: Started in network mode [ 225.462540][T10013] tipc: Node identity 021ff946672f, cluster identity 4711 [ 225.469909][T10013] tipc: Enabled bearer , priority 0 [ 225.505439][T10015] syzkaller0: entered promiscuous mode [ 225.510995][T10015] syzkaller0: entered allmulticast mode [ 225.576023][T10013] tipc: Resetting bearer [ 225.583855][T10012] tipc: Resetting bearer [ 225.616901][T10012] tipc: Disabling bearer [ 225.887051][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.481676][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 226.492913][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 226.504159][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 226.516678][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 226.524802][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 226.549890][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.951'. [ 226.704562][T10038] netlink: 'syz.7.952': attribute type 8 has an invalid length. [ 226.712570][T10038] sch_fq: defrate 0 ignored. [ 226.743364][T10033] xfrm0 speed is unknown, defaulting to 1000 [ 226.750694][T10040] openvswitch: netlink: Message has -2 unknown bytes. [ 226.771373][T10040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.793850][ T5846] Bluetooth: hci10: command tx timeout [ 226.855693][ T9944] veth0_vlan: entered promiscuous mode [ 226.880175][ T9944] veth1_vlan: entered promiscuous mode [ 226.964908][ T9944] veth0_macvtap: entered promiscuous mode [ 226.995398][ T9944] veth1_macvtap: entered promiscuous mode [ 227.057760][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.099879][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.129555][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.177499][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.222814][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.239340][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.8.954'. [ 227.278193][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.444373][T10048] netlink: 'syz.8.955': attribute type 2 has an invalid length. [ 227.554822][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.573856][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.704700][ T6383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.723492][ T6383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.854440][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.957'. [ 228.282366][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 228.290480][ C0] lec:lec_tx_timeout: lec0 [ 228.295826][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 228.421072][T10078] xt_hashlimit: max too large, truncated to 1048576 [ 228.461727][T10083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.469392][T10083] IPv6: NLM_F_CREATE should be set when creating new route [ 228.496879][T10085] xt_hashlimit: max too large, truncated to 1048576 [ 228.632660][ T5846] Bluetooth: hci11: command tx timeout [ 228.712880][T10097] netlink: 'syz.7.967': attribute type 1 has an invalid length. [ 228.737482][ T7415] IPVS: starting estimator thread 0... [ 228.760812][T10097] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 228.766433][T10033] chnl_net:caif_netlink_parms(): no params data found [ 228.872522][ T5846] Bluetooth: hci10: command tx timeout [ 228.884579][T10101] IPVS: using max 29 ests per chain, 69600 per kthread [ 228.947984][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.968'. [ 229.086876][T10106] Bluetooth: MGMT ver 1.23 [ 229.158113][T10109] syz_tun: entered promiscuous mode [ 229.263828][T10119] netlink: 1 bytes leftover after parsing attributes in process `syz.7.971'. [ 229.370853][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.405594][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.443961][T10033] bridge_slave_0: entered allmulticast mode [ 229.459110][T10033] bridge_slave_0: entered promiscuous mode [ 229.519355][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.554456][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.561862][T10033] bridge_slave_1: entered allmulticast mode [ 229.585443][T10033] bridge_slave_1: entered promiscuous mode [ 229.743258][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.9.974'. [ 229.788413][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.923783][T10135] syzkaller0: entered promiscuous mode [ 229.931490][T10135] syzkaller0: entered allmulticast mode [ 229.944278][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.718189][ T5846] Bluetooth: hci11: command tx timeout [ 231.784292][T10155] dvmrp1: entered allmulticast mode [ 231.794478][T10158] dvmrp1: left allmulticast mode [ 231.875513][T10159] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 231.953720][T10033] team0: Port device team_slave_0 added [ 231.969851][T10033] team0: Port device team_slave_1 added [ 232.136093][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.146518][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.173547][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.192860][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.200502][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.231679][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.253520][T10179] tipc: Started in network mode [ 232.258653][T10179] tipc: Node identity cee11e629971, cluster identity 4711 [ 232.266261][T10179] tipc: Enabled bearer , priority 0 [ 232.288190][T10183] syzkaller0: entered promiscuous mode [ 232.294084][T10183] syzkaller0: entered allmulticast mode [ 232.304190][T10182] wg1 speed is unknown, defaulting to 1000 [ 232.319253][T10182] wg1 speed is unknown, defaulting to 1000 [ 232.329142][T10184] tipc: Enabling of bearer rejected, failed to enable media [ 232.389750][T10182] wg1 speed is unknown, defaulting to 1000 [ 232.453375][T10182] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 232.590320][T10188] tipc: Resetting bearer [ 232.606490][T10182] wg1 speed is unknown, defaulting to 1000 [ 232.639673][T10033] hsr_slave_0: entered promiscuous mode [ 232.679368][T10033] hsr_slave_1: entered promiscuous mode [ 232.699069][T10033] debugfs: 'hsr0' already exists in 'hsr' [ 232.724339][T10033] Cannot create hsr debugfs directory [ 232.742893][T10182] wg1 speed is unknown, defaulting to 1000 [ 232.757767][T10178] tipc: Resetting bearer [ 232.803566][ T5846] Bluetooth: hci11: command tx timeout [ 232.827370][T10178] tipc: Disabling bearer [ 232.867600][T10182] wg1 speed is unknown, defaulting to 1000 [ 232.910479][T10182] wg1 speed is unknown, defaulting to 1000 [ 232.945169][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.017783][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.044484][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.071688][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.104850][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.126667][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.153658][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.197270][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.220199][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.240021][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.256950][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.282127][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.303388][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 233.311416][ C0] lec:lec_tx_timeout: lec0 [ 233.316447][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 233.327432][T10033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.347046][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.357112][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.398420][T10033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.418570][T10182] wg1 speed is unknown, defaulting to 1000 [ 233.500530][T10033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.616681][T10033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.703529][T10208] tipc: Enabled bearer , priority 0 [ 233.726163][T10208] syzkaller0: entered promiscuous mode [ 233.731694][T10208] syzkaller0: entered allmulticast mode [ 234.130942][T10033] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.167984][T10033] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.178546][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.997'. [ 234.194757][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.9.996'. [ 234.208086][T10033] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.217074][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.9.996'. [ 234.232018][T10033] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.241075][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 234.349057][T10241] netlink: 'syz.7.998': attribute type 1 has an invalid length. [ 234.358026][T10241] netlink: 264 bytes leftover after parsing attributes in process `syz.7.998'. [ 234.410282][T10241] netlink: 'syz.7.998': attribute type 1 has an invalid length. [ 234.419150][T10241] netlink: 264 bytes leftover after parsing attributes in process `syz.7.998'. [ 234.474793][T10207] tipc: Resetting bearer [ 234.543727][T10207] tipc: Disabling bearer [ 234.596087][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.672164][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.763429][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.770685][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.850573][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.857826][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.876770][ T5846] Bluetooth: hci11: command tx timeout [ 234.984556][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1005'. [ 235.033276][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1005'. [ 235.115490][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1003'. [ 235.243377][T10274] syzkaller0: entered promiscuous mode [ 235.267049][T10274] syzkaller0: entered allmulticast mode [ 235.650147][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.774314][T10033] veth0_vlan: entered promiscuous mode [ 235.798060][T10033] veth1_vlan: entered promiscuous mode [ 235.888687][T10033] veth0_macvtap: entered promiscuous mode [ 235.919380][T10033] veth1_macvtap: entered promiscuous mode [ 235.938969][T10288] xfrm0 speed is unknown, defaulting to 1000 [ 235.963038][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.987622][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.030149][ T3564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.049791][ T3564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.081115][ T3564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.102631][ T3564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.176827][ T5846] Bluetooth: hci4: link tx timeout [ 236.182105][ T5846] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 236.571061][T10302] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 237.110419][T10312] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1017'. [ 237.221994][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.246698][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.275334][T10288] wg1 speed is unknown, defaulting to 1000 [ 237.419493][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.446327][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.634025][T10334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.948'. [ 237.655480][T10323] xfrm0 speed is unknown, defaulting to 1000 [ 238.233014][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 238.332851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 238.340927][ C0] lec:lec_tx_timeout: lec0 [ 238.346015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 238.698357][T10375] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 238.774413][T10379] delete_channel: no stack [ 238.845545][T10379] bond2: Removing last ns target with arp_interval on [ 239.057692][T10392] tipc: Failed to remove unknown binding: 66,1,1/0:800817233/800817235 [ 239.069032][T10392] tipc: Failed to remove unknown binding: 66,1,1/0:800817233/800817235 [ 239.148416][T10323] wg1 speed is unknown, defaulting to 1000 [ 239.301814][T10404] __nla_validate_parse: 2 callbacks suppressed [ 239.301849][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 239.384669][T10403] xfrm0 speed is unknown, defaulting to 1000 [ 239.783191][T10401] xfrm0 speed is unknown, defaulting to 1000 [ 240.706274][T10403] wg1 speed is unknown, defaulting to 1000 [ 240.816931][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 240.836674][T10441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 241.075042][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 241.250313][T10401] wg1 speed is unknown, defaulting to 1000 [ 241.451922][T10461] netlink: 'syz.4.1046': attribute type 15 has an invalid length. [ 241.496875][T10461] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 241.655786][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 242.568585][T10499] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.639866][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.647693][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.778972][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.809076][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.924839][ T6382] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.934468][ T6382] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.949366][ T6382] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.962781][ T6382] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.067728][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'. [ 243.077011][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 243.086122][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1049'. [ 243.352535][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 243.360648][ C0] lec:lec_tx_timeout: lec0 [ 243.365752][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 244.085042][T10535] raw_sendmsg: syz.4.1050 forgot to set AF_INET. Fix it! [ 244.851019][T10552] tipc: Enabling of bearer rejected, failed to enable media [ 244.911824][T10559] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 244.953001][T10560] xfrm0 speed is unknown, defaulting to 1000 [ 245.113506][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 245.259642][T10560] wg1 speed is unknown, defaulting to 1000 [ 245.360241][T10565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1058'. [ 245.371011][T10565] netlink: 'syz.4.1058': attribute type 7 has an invalid length. [ 245.378900][T10565] netlink: 'syz.4.1058': attribute type 8 has an invalid length. [ 245.387074][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'. [ 245.789595][T10587] sock: sock_set_timeout: `syz.4.1066' (pid 10587) tries to set negative timeout [ 245.875789][T10589] xfrm0 speed is unknown, defaulting to 1000 [ 246.200067][T10589] wg1 speed is unknown, defaulting to 1000 [ 246.733289][T10594] syzkaller0: entered promiscuous mode [ 246.738837][T10594] syzkaller0: entered allmulticast mode [ 246.863604][T10596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1069'. [ 247.909335][T10605] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 247.938553][T10605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.298461][T10621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.426975][T10625] syzkaller0: entered promiscuous mode [ 248.433510][T10625] syzkaller0: entered allmulticast mode [ 249.192367][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 249.200522][ C0] lec:lec_tx_timeout: lec0 [ 249.206011][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 249.460647][T10636] xfrm0 speed is unknown, defaulting to 1000 [ 249.794337][T10636] wg1 speed is unknown, defaulting to 1000 [ 249.919371][T10640] xfrm0 speed is unknown, defaulting to 1000 [ 250.112440][T10646] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 250.381071][T10640] wg1 speed is unknown, defaulting to 1000 [ 250.690684][T10655] tipc: Started in network mode [ 250.696322][T10655] tipc: Node identity 8a1e729d08dd, cluster identity 4711 [ 250.708198][T10655] tipc: Enabled bearer , priority 0 [ 250.717443][T10655] syzkaller0: entered promiscuous mode [ 250.723290][T10655] syzkaller0: entered allmulticast mode [ 250.733652][T10655] tipc: Resetting bearer [ 250.780176][T10655] tipc: Disabling bearer [ 250.853386][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 250.862045][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 250.874373][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 250.900495][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 250.908503][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 250.993489][T10656] xfrm0 speed is unknown, defaulting to 1000 [ 251.004718][T10662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1086'. [ 251.040091][T10662] xt_TCPMSS: Only works on TCP SYN packets [ 251.315848][T10656] wg1 speed is unknown, defaulting to 1000 [ 251.535551][T10656] chnl_net:caif_netlink_parms(): no params data found [ 251.652459][T10656] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.659784][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.667360][T10656] bridge_slave_0: entered allmulticast mode [ 251.679116][T10656] bridge_slave_0: entered promiscuous mode [ 251.688856][T10656] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.697066][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.707242][T10656] bridge_slave_1: entered allmulticast mode [ 251.715246][T10656] bridge_slave_1: entered promiscuous mode [ 251.753671][T10656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.766502][T10656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.816856][T10656] team0: Port device team_slave_0 added [ 251.826342][T10656] team0: Port device team_slave_1 added [ 251.884802][T10656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.891827][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.922147][T10656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.935628][T10656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.943418][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.970077][T10656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.034475][T10656] hsr_slave_0: entered promiscuous mode [ 252.041067][T10656] hsr_slave_1: entered promiscuous mode [ 252.048636][T10656] debugfs: 'hsr0' already exists in 'hsr' [ 252.054599][T10656] Cannot create hsr debugfs directory [ 252.484205][T10656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.497929][T10656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.509592][T10656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.526765][T10656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.653263][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.686638][T10656] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.700320][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.707554][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.734786][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.741992][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.913251][T10684] openvswitch: netlink: IP tunnel dst address not specified [ 252.952827][ T5846] Bluetooth: hci12: command tx timeout [ 253.149969][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 253.159965][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 253.169114][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 253.178770][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 253.187125][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 253.267984][T10689] xfrm0 speed is unknown, defaulting to 1000 [ 253.297917][T10656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.326372][T10694] bridge0: port 3(macvtap1) entered blocking state [ 253.333790][T10694] bridge0: port 3(macvtap1) entered disabled state [ 253.345364][T10694] macvtap1: entered allmulticast mode [ 253.350807][T10694] bridge0: entered allmulticast mode [ 253.359846][T10694] macvtap1: left allmulticast mode [ 253.366234][T10694] bridge0: left allmulticast mode [ 253.449838][T10656] veth0_vlan: entered promiscuous mode [ 253.470194][T10656] veth1_vlan: entered promiscuous mode [ 253.520187][T10656] veth0_macvtap: entered promiscuous mode [ 253.531743][T10656] veth1_macvtap: entered promiscuous mode [ 253.567073][T10656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.586701][T10656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.608274][ T1989] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.617967][ T1989] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.634813][ T1989] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.648914][ T1989] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.784662][ T1989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.801314][ T1989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.867485][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.880881][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.062229][T10697] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 254.091926][T10689] wg1 speed is unknown, defaulting to 1000 [ 254.212332][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 254.220404][ C0] lec:lec_tx_timeout: lec0 [ 254.225560][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 254.569431][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 254.578672][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 254.587275][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 254.596021][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 254.604954][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 254.699973][T10708] xfrm0 speed is unknown, defaulting to 1000 [ 254.791639][T10689] chnl_net:caif_netlink_parms(): no params data found [ 255.034701][ T5846] Bluetooth: hci12: command tx timeout [ 255.217535][ T52] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 255.229531][ T52] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 255.240053][ T52] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 255.250765][ T52] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 255.260554][ T52] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 255.273804][ T52] Bluetooth: hci13: command tx timeout [ 255.328847][T10720] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 255.453076][T10720] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 255.577022][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.613213][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.620848][T10689] bridge_slave_0: entered allmulticast mode [ 255.645284][T10689] bridge_slave_0: entered promiscuous mode [ 255.675095][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.693333][T10717] xfrm0 speed is unknown, defaulting to 1000 [ 255.700840][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.712201][T10689] bridge_slave_1: entered allmulticast mode [ 255.732909][T10689] bridge_slave_1: entered promiscuous mode [ 256.350829][T10708] wg1 speed is unknown, defaulting to 1000 [ 256.398344][T10733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.407191][T10733] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 256.443222][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.503270][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.638644][ T5846] Bluetooth: hci14: command tx timeout [ 256.768231][T10689] team0: Port device team_slave_0 added [ 256.799359][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 256.824597][T10689] team0: Port device team_slave_1 added [ 256.860371][T10717] wg1 speed is unknown, defaulting to 1000 [ 256.933912][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.960845][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.016651][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.081434][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.088862][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.116020][ T5846] Bluetooth: hci12: command tx timeout [ 257.124292][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.355004][ T5846] Bluetooth: hci13: command tx timeout [ 257.355048][ T52] Bluetooth: hci15: command tx timeout [ 257.448962][T10689] hsr_slave_0: entered promiscuous mode [ 257.467962][T10689] hsr_slave_1: entered promiscuous mode [ 257.488953][T10689] debugfs: 'hsr0' already exists in 'hsr' [ 257.501261][T10689] Cannot create hsr debugfs directory [ 257.546075][T10708] chnl_net:caif_netlink_parms(): no params data found [ 258.086089][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1101'. [ 258.097440][T10760] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 258.109469][T10708] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.117016][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.128082][T10708] bridge_slave_0: entered allmulticast mode [ 258.137701][T10708] bridge_slave_0: entered promiscuous mode [ 258.187950][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.204108][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.211601][T10708] bridge_slave_1: entered allmulticast mode [ 258.220112][T10708] bridge_slave_1: entered promiscuous mode [ 258.316391][T10708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.346635][T10717] chnl_net:caif_netlink_parms(): no params data found [ 258.380402][T10708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.490114][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1102'. [ 258.499712][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1102'. [ 258.566985][T10708] team0: Port device team_slave_0 added [ 258.614183][T10708] team0: Port device team_slave_1 added [ 258.653898][T10689] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 258.666646][T10689] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.712863][ T52] Bluetooth: hci14: command tx timeout [ 258.818600][T10708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.832144][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.859931][T10708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.907132][T10708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.923836][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.954360][T10708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.979190][T10689] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 258.990739][T10689] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.025955][T10773] xfrm0 speed is unknown, defaulting to 1000 [ 259.104668][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 259.156697][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 259.198150][ T52] Bluetooth: hci12: command tx timeout [ 259.232408][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 259.240515][ C0] lec:lec_tx_timeout: lec0 [ 259.246138][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 259.259500][T10689] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 259.270164][T10689] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.345478][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 259.356843][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.363957][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 259.385948][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.397027][T10717] bridge_slave_0: entered allmulticast mode [ 259.405635][T10717] bridge_slave_0: entered promiscuous mode [ 259.422718][T10708] hsr_slave_0: entered promiscuous mode [ 259.429806][T10708] hsr_slave_1: entered promiscuous mode [ 259.437351][ T5846] Bluetooth: hci15: command tx timeout [ 259.437365][ T52] Bluetooth: hci13: command tx timeout [ 259.446830][T10708] debugfs: 'hsr0' already exists in 'hsr' [ 259.455143][T10708] Cannot create hsr debugfs directory [ 259.461704][ T2996] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.473017][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.480205][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.490207][T10717] bridge_slave_1: entered allmulticast mode [ 259.498315][T10717] bridge_slave_1: entered promiscuous mode [ 259.510169][T10689] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 259.520359][T10689] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.538932][ T2996] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.567212][ T2996] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.650186][ T2996] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.683079][T10794] block nbd0: Unsupported socket: should be TCP or UNIX. [ 259.704248][T10717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.847729][T10795] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20001 [ 259.856728][T10717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.004800][T10717] team0: Port device team_slave_0 added [ 260.011444][T10794] xfrm0 speed is unknown, defaulting to 1000 [ 260.039716][T10773] wg1 speed is unknown, defaulting to 1000 [ 260.046487][T10717] team0: Port device team_slave_1 added [ 260.178996][T10717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.187237][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.217762][T10717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.258102][T10717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.265534][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.293507][T10717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.373583][T10689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.451283][T10689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.486707][T10717] hsr_slave_0: entered promiscuous mode [ 260.510050][T10717] hsr_slave_1: entered promiscuous mode [ 260.518034][T10717] debugfs: 'hsr0' already exists in 'hsr' [ 260.525236][T10717] Cannot create hsr debugfs directory [ 260.530976][T10689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.569349][T10689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.690433][T10794] wg1 speed is unknown, defaulting to 1000 [ 260.793114][ T52] Bluetooth: hci14: command tx timeout [ 260.965759][T10708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.977426][T10708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.988530][T10708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.026440][T10717] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.044988][T10708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.094846][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.129780][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.143532][T10717] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.184887][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.208876][T10717] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.235868][ T1989] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.243119][ T1989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.275487][ T1989] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.282697][ T1989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.314396][T10717] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.424299][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.515358][ T52] Bluetooth: hci15: command tx timeout [ 261.515366][ T5846] Bluetooth: hci13: command tx timeout [ 261.567494][T10708] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.583159][ T1989] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.590679][ T1989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.636920][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.644171][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.663019][T10717] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.679063][T10717] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.702016][T10717] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.722172][T10717] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.856903][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.983587][T10689] veth0_vlan: entered promiscuous mode [ 262.013353][T10717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.059648][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.071545][T10689] veth1_vlan: entered promiscuous mode [ 262.087147][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.094362][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.127987][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.135223][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.178573][T10708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.216622][T10689] veth0_macvtap: entered promiscuous mode [ 262.242214][T10689] veth1_macvtap: entered promiscuous mode [ 262.307908][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.341782][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.359050][T10708] veth0_vlan: entered promiscuous mode [ 262.378472][T10160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.415485][T10160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.439138][T10160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.456840][T10160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.486265][T10708] veth1_vlan: entered promiscuous mode [ 262.627912][T10708] veth0_macvtap: entered promiscuous mode [ 262.645935][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.668816][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.669949][T10708] veth1_macvtap: entered promiscuous mode [ 262.731352][T10717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.740937][T10160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.750580][T10160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.766754][T10708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.790551][T10708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.824422][ T6378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.835551][ T6378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.851849][ T6378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.869007][ T6378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.879800][ T52] Bluetooth: hci14: command tx timeout [ 263.032197][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.080538][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.150982][ T6381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.172061][ T6381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.327146][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 263.426126][T10836] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.434068][T10836] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.590709][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.602063][ T52] Bluetooth: hci15: command tx timeout [ 263.626960][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.673436][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.772437][ T6552] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.781585][ T6552] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.803211][ T6552] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.844851][ T6552] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.962532][T10717] veth0_vlan: entered promiscuous mode [ 263.979977][T10717] veth1_vlan: entered promiscuous mode [ 264.099734][T10717] veth0_macvtap: entered promiscuous mode [ 264.124740][T10717] veth1_macvtap: entered promiscuous mode [ 264.169840][T10717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.187709][T10855] tipc: Started in network mode [ 264.195799][T10855] tipc: Node identity 926c78d500b4, cluster identity 4711 [ 264.205047][T10855] tipc: Enabled bearer , priority 0 [ 264.219167][T10717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.230720][T10855] syzkaller0: entered promiscuous mode [ 264.246551][T10855] syzkaller0: entered allmulticast mode [ 264.252378][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 264.260418][ C0] lec:lec_tx_timeout: lec0 [ 264.265843][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.290300][ T6552] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.302153][ T6552] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.321646][ T6552] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.334348][T10855] tipc: Resetting bearer [ 264.359270][ T6552] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.376058][T10854] tipc: Resetting bearer [ 264.407972][T10854] tipc: Disabling bearer [ 264.511680][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.530028][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.569694][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.586224][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.025634][T10874] x_tables: duplicate underflow at hook 1 [ 265.454092][T10883] xfrm0 speed is unknown, defaulting to 1000 [ 266.551967][T10883] wg1 speed is unknown, defaulting to 1000 [ 266.722922][T10919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1131'. [ 266.732089][T10919] openvswitch: netlink: Flow key attr not present in new flow. [ 267.078183][T10934] Cannot find add_set index 1 as target [ 267.096304][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1137'. [ 267.935615][T10949] Bluetooth: MGMT ver 1.23 [ 267.999821][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 268.092166][T10955] xfrm0 speed is unknown, defaulting to 1000 [ 268.679993][T10955] wg1 speed is unknown, defaulting to 1000 [ 268.759580][T10969] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 269.272547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 269.280739][ C0] lec:lec_tx_timeout: lec0 [ 269.286066][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 269.977743][T10988] syzkaller0: entered promiscuous mode [ 269.983661][T10988] syzkaller0: entered allmulticast mode [ 269.998438][T10988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.076587][ T5846] Bluetooth: hci15: command 0x0405 tx timeout [ 271.637745][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1158'. [ 274.093750][ T5846] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 274.108210][ T5846] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 274.119409][ T5846] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 274.132368][ T5846] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 274.141790][ T5846] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 274.213645][T11041] xfrm0 speed is unknown, defaulting to 1000 [ 274.264391][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1167'. [ 274.292866][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 274.301007][ C0] lec:lec_tx_timeout: lec0 [ 274.306363][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.585934][T11041] wg1 speed is unknown, defaulting to 1000 [ 274.767932][T11041] chnl_net:caif_netlink_parms(): no params data found [ 274.879696][T11041] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.887489][T11041] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.898472][T11041] bridge_slave_0: entered allmulticast mode [ 274.907810][T11041] bridge_slave_0: entered promiscuous mode [ 274.918091][T11041] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.925645][T11041] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.933587][T11041] bridge_slave_1: entered allmulticast mode [ 274.941575][T11041] bridge_slave_1: entered promiscuous mode [ 274.999731][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.016440][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.075875][T11041] team0: Port device team_slave_0 added [ 275.086887][T11041] team0: Port device team_slave_1 added [ 275.147005][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.160142][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.188615][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.209055][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.217805][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.283738][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.422159][T11041] hsr_slave_0: entered promiscuous mode [ 275.444438][T11041] hsr_slave_1: entered promiscuous mode [ 275.451756][T11041] debugfs: 'hsr0' already exists in 'hsr' [ 275.482872][T11041] Cannot create hsr debugfs directory [ 275.779496][ T5846] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 275.791668][ T5846] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 275.803654][ T5846] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 275.813834][ T5846] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 275.824448][ T5846] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 275.976061][T11041] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.005646][T11062] xfrm0 speed is unknown, defaulting to 1000 [ 276.107098][T11041] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.227838][T11041] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.242959][ T5846] Bluetooth: hci16: command tx timeout [ 276.419072][T11041] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.048386][T11062] wg1 speed is unknown, defaulting to 1000 [ 277.417647][T11041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.433537][T11041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.450607][T11041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.475440][T11041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.909129][T11062] chnl_net:caif_netlink_parms(): no params data found [ 277.922679][ T5846] Bluetooth: hci17: command tx timeout [ 278.314962][ T5846] Bluetooth: hci16: command tx timeout [ 278.398679][T11062] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.413284][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.420752][T11062] bridge_slave_0: entered allmulticast mode [ 278.445947][T11062] bridge_slave_0: entered promiscuous mode [ 278.483709][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.490953][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.533796][T11062] bridge_slave_1: entered allmulticast mode [ 278.544722][T11062] bridge_slave_1: entered promiscuous mode [ 278.630995][T11105] xfrm0 speed is unknown, defaulting to 1000 [ 278.734457][T11062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.775337][T11062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.900976][T11062] team0: Port device team_slave_0 added [ 278.920479][T11041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.947737][T11062] team0: Port device team_slave_1 added [ 279.077033][T11041] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.103540][T11062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.110569][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.182843][T11062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.208108][T11062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.215933][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.244923][T11062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.282019][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.289442][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.322409][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 279.330495][ C0] lec:lec_tx_timeout: lec0 [ 279.335742][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.443399][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.450626][ T6381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.492166][T11062] hsr_slave_0: entered promiscuous mode [ 279.505803][T11062] hsr_slave_1: entered promiscuous mode [ 279.523903][T11062] debugfs: 'hsr0' already exists in 'hsr' [ 279.535505][T11062] Cannot create hsr debugfs directory [ 279.740803][T11105] wg1 speed is unknown, defaulting to 1000 [ 279.993595][ T5846] Bluetooth: hci17: command tx timeout [ 280.096610][T11062] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.247573][T11062] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.339049][T11062] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.381200][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.394596][ T5846] Bluetooth: hci16: command tx timeout [ 280.455862][T11062] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.679321][T11062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 280.703332][T11062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 280.735366][T11062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 280.760574][T11062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 281.016023][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.120118][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.155109][T11041] veth0_vlan: entered promiscuous mode [ 281.204851][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.212076][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.276921][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.284378][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.342038][T11041] veth1_vlan: entered promiscuous mode [ 281.483858][T11041] veth0_macvtap: entered promiscuous mode [ 281.509389][T11041] veth1_macvtap: entered promiscuous mode [ 281.580590][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.658299][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.697185][ T6381] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.732703][ T6381] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.771290][ T6381] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.791710][ T6381] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.819299][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 281.831692][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 281.843115][ T52] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 281.858881][ T52] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 281.869349][ T52] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 282.073780][ T5846] Bluetooth: hci17: command tx timeout [ 282.121365][T11176] xfrm0 speed is unknown, defaulting to 1000 [ 282.198012][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.229942][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.239370][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.322233][ T1964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.334202][ T1964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.477356][ T5846] Bluetooth: hci16: command tx timeout [ 283.222940][T11062] veth0_vlan: entered promiscuous mode [ 283.281500][T11062] veth1_vlan: entered promiscuous mode [ 283.406320][T11062] veth0_macvtap: entered promiscuous mode [ 283.453438][T11062] veth1_macvtap: entered promiscuous mode [ 283.536126][T11176] wg1 speed is unknown, defaulting to 1000 [ 283.553435][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.701026][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.816520][ T60] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.872910][ T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.913332][ T5846] Bluetooth: hci18: command tx timeout [ 283.962009][ T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.985989][ T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.155930][ T52] Bluetooth: hci17: command tx timeout [ 284.309457][ T5846] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 284.320698][ T5846] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 284.329294][ T5846] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 284.342790][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.350886][ C0] lec:lec_tx_timeout: lec0 [ 284.355855][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.384786][ T6552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.395238][ T5846] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 284.406604][ T5846] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 284.428834][ T6552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.594560][T11176] chnl_net:caif_netlink_parms(): no params data found [ 284.684009][ T1989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.710056][ T1989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.790479][T11216] xfrm0 speed is unknown, defaulting to 1000 [ 285.281848][T11176] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.297240][T11176] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.323355][T11176] bridge_slave_0: entered allmulticast mode [ 285.349683][T11176] bridge_slave_0: entered promiscuous mode [ 285.389234][T11176] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.412831][T11176] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.436643][T11176] bridge_slave_1: entered allmulticast mode [ 285.455190][T11176] bridge_slave_1: entered promiscuous mode [ 285.640071][T11176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.736018][T11176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.939839][T11176] team0: Port device team_slave_0 added [ 285.985874][T11176] team0: Port device team_slave_1 added [ 285.994048][ T5846] Bluetooth: hci18: command tx timeout [ 286.200374][T11176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.224169][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.287008][T11176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.373641][T11216] wg1 speed is unknown, defaulting to 1000 [ 286.385991][T11176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.401906][T11244] rdma_rxe: rxe_newlink: failed to add lo [ 286.408894][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.409204][T11245] rdma_rxe: rxe_newlink: failed to add lo [ 286.473683][ T5846] Bluetooth: hci19: command tx timeout [ 286.481906][T11176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.822238][T11279] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1180'. [ 286.845345][T11176] hsr_slave_0: entered promiscuous mode [ 286.861546][T11176] hsr_slave_1: entered promiscuous mode [ 286.869199][T11176] debugfs: 'hsr0' already exists in 'hsr' [ 286.877423][T11176] Cannot create hsr debugfs directory [ 287.121741][T11288] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1182'. [ 287.718332][T11216] chnl_net:caif_netlink_parms(): no params data found [ 287.810070][T11176] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.952032][T11176] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.062008][T11176] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.073627][ T5846] Bluetooth: hci18: command tx timeout [ 288.238909][T11176] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.273313][T11216] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.283656][T11216] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.304473][T11216] bridge_slave_0: entered allmulticast mode [ 288.335742][T11216] bridge_slave_0: entered promiscuous mode [ 288.351851][T11216] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.364986][T11216] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.375257][T11216] bridge_slave_1: entered allmulticast mode [ 288.387259][T11216] bridge_slave_1: entered promiscuous mode [ 288.535477][T11216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.555197][ T5846] Bluetooth: hci19: command tx timeout [ 288.575544][T11216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.726864][T11216] team0: Port device team_slave_0 added [ 288.745202][T11216] team0: Port device team_slave_1 added [ 288.876488][T11216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.890516][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.918342][T11216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.958750][T11216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.974135][T11216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.003969][T11216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.028871][T11320] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 289.045158][ T7411] IPVS: starting estimator thread 0... [ 289.079120][T11176] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 289.094916][T11316] xfrm0 speed is unknown, defaulting to 1000 [ 289.096999][T11176] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 289.143290][T11324] IPVS: using max 24 ests per chain, 57600 per kthread [ 289.160782][T11176] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 289.228828][T11176] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 289.300863][T11216] hsr_slave_0: entered promiscuous mode [ 289.312045][T11216] hsr_slave_1: entered promiscuous mode [ 289.324065][T11216] debugfs: 'hsr0' already exists in 'hsr' [ 289.329979][T11216] Cannot create hsr debugfs directory [ 289.362417][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.370519][ C0] lec:lec_tx_timeout: lec0 [ 289.375967][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.691797][T11216] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.819306][T11216] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.944865][T11216] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.020911][T11176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.057772][T11316] wg1 speed is unknown, defaulting to 1000 [ 290.101376][T11216] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.153749][ T5846] Bluetooth: hci18: command tx timeout [ 290.203708][T11176] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.276558][ T1964] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.283815][ T1964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.325120][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.332494][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.441717][T11216] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 290.464497][T11216] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 290.495969][T11216] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 290.520474][T11216] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 290.634887][ T5846] Bluetooth: hci19: command tx timeout [ 290.849181][T11216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.125324][T11216] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.187940][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.195216][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.223192][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.230403][ T6382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.285742][T11372] dvmrp0: entered allmulticast mode [ 291.337952][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1194'. [ 291.417709][T11176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.717473][T11381] xfrm0 speed is unknown, defaulting to 1000 [ 291.724934][T11377] tun0: tun_chr_ioctl cmd 1074025675 [ 291.730644][T11377] tun0: persist enabled [ 291.754233][T11377] tun0: tun_chr_ioctl cmd 1074025675 [ 291.759604][T11377] tun0: persist disabled [ 291.817184][T11216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.107327][T11176] veth0_vlan: entered promiscuous mode [ 292.148997][T11176] veth1_vlan: entered promiscuous mode [ 292.228049][T11176] veth0_macvtap: entered promiscuous mode [ 292.263738][T11176] veth1_macvtap: entered promiscuous mode [ 292.310435][T11176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.318032][ T8594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.376676][T11176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.430479][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.467130][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.483218][ T3564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.499961][ T891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.511368][ T7415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.521502][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.552203][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.661300][T11216] veth0_vlan: entered promiscuous mode [ 292.714145][ T5846] Bluetooth: hci19: command tx timeout [ 292.726162][T11381] wg1 speed is unknown, defaulting to 1000 [ 292.738863][T11216] veth1_vlan: entered promiscuous mode [ 292.776654][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.787723][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.899662][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.920765][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.949604][T11216] veth0_macvtap: entered promiscuous mode [ 292.988112][T11216] veth1_macvtap: entered promiscuous mode [ 293.031542][T11216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.052044][T11216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.077462][ T2996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.095066][ T2996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.118800][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.134432][ T7415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.141953][ T3564] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.154695][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.169225][ T3564] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.365288][ T8594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.452065][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.480941][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.551474][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.561522][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.718498][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1174'. [ 293.730956][T11402] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 293.939495][ T52] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 293.953164][ T52] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 293.963057][ T52] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 293.971799][ T52] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 293.984181][ T52] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 294.055077][T11408] xfrm0 speed is unknown, defaulting to 1000 [ 294.284969][T11421] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1203'. [ 294.296747][T11421] syzkaller1: entered promiscuous mode [ 294.305311][T11421] syzkaller1: entered allmulticast mode [ 294.338516][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1203'. [ 294.399068][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.407336][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.424491][T11423] tipc: Started in network mode [ 294.430061][T11423] tipc: Node identity 6a425272b0ad, cluster identity 4711 [ 294.438411][T11423] tipc: Enabled bearer , priority 0 [ 294.450533][T11423] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 294.464284][T11423] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 294.485327][T11423] tipc: Resetting bearer [ 294.494392][T11422] delete_channel: no stack [ 294.518252][T11422] tipc: Disabling bearer [ 294.774352][T11430] syzkaller0: entered promiscuous mode [ 294.780860][T11430] syzkaller0: entered allmulticast mode [ 294.905039][T11408] wg1 speed is unknown, defaulting to 1000 [ 295.044749][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.055460][ T6415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.064876][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.084684][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.093575][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.109305][ T30] audit: type=1804 audit(1767614928.774:4): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1208" name="/newroot/5/cgroup.controllers" dev="tmpfs" ino=43 res=1 errno=0 [ 295.136696][ T30] audit: type=1800 audit(1767614928.794:5): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1208" name="cgroup.controllers" dev="tmpfs" ino=43 res=0 errno=0 [ 295.159675][ T30] audit: type=1800 audit(1767614928.804:6): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1208" name="cgroup.controllers" dev="tmpfs" ino=43 res=0 errno=0 [ 295.422106][T11408] chnl_net:caif_netlink_parms(): no params data found [ 295.433920][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.626236][T11448] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 295.672465][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6300 ms [ 295.680594][ C0] lec:lec_tx_timeout: lec0 [ 295.688247][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.772479][T11408] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.779972][T11408] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.794957][T11408] bridge_slave_0: entered allmulticast mode [ 295.804425][T11408] bridge_slave_0: entered promiscuous mode [ 295.820532][T11453] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 295.839873][T11408] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.849015][T11408] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.859408][T11408] bridge_slave_1: entered allmulticast mode [ 295.869723][T11408] bridge_slave_1: entered promiscuous mode [ 295.989246][T11408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.028039][T11408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.073713][ T5846] Bluetooth: hci20: command tx timeout [ 296.108329][T11408] team0: Port device team_slave_0 added [ 296.126228][T11408] team0: Port device team_slave_1 added [ 296.179818][T11408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.187579][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.215105][T11408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.240557][T11459] xfrm0 speed is unknown, defaulting to 1000 [ 296.251426][T11408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.260991][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.288466][T11408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.425676][T11408] hsr_slave_0: entered promiscuous mode [ 296.433870][T11408] hsr_slave_1: entered promiscuous mode [ 296.440656][T11408] debugfs: 'hsr0' already exists in 'hsr' [ 296.446683][T11408] Cannot create hsr debugfs directory [ 296.478789][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.748035][T11408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.861242][T11408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.885918][T11459] wg1 speed is unknown, defaulting to 1000 [ 296.945912][T11408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.016347][T11408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.167944][T11408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.181040][T11408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.195209][T11408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.209429][T11408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.308084][T11408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.331461][T11408] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.347072][ T1964] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.354384][ T1964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.381741][ T3075] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.388955][ T3075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.518756][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.651381][T11408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.713952][T11408] veth0_vlan: entered promiscuous mode [ 297.729378][T11408] veth1_vlan: entered promiscuous mode [ 297.778419][T11408] veth0_macvtap: entered promiscuous mode [ 297.794424][T11408] veth1_macvtap: entered promiscuous mode [ 297.818235][T11408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.839384][T11408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.860229][ T6124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.872109][ T6124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.887476][ T6124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.897482][ T6124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.029480][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.042546][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.076703][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.106790][ T6378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.117076][ T6378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.153778][ T5846] Bluetooth: hci20: command tx timeout [ 298.301927][T11482] tipc: Started in network mode [ 298.309091][T11482] tipc: Node identity c27b2d3d8f33, cluster identity 4711 [ 298.318907][T11482] tipc: Enabled bearer , priority 0 [ 298.350092][T11482] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 298.359490][T11482] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 298.375317][T11482] tipc: Resetting bearer [ 298.384481][T11481] delete_channel: no stack [ 298.419379][T11481] tipc: Disabling bearer [ 298.555411][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.865364][T11494] tipc: Enabled bearer , priority 0 [ 298.884216][T11494] syzkaller0: entered promiscuous mode [ 298.890200][T11494] syzkaller0: entered allmulticast mode [ 298.920785][T11494] tipc: Resetting bearer [ 298.941026][T11493] tipc: Resetting bearer [ 298.962120][T11493] tipc: Disabling bearer [ 299.000007][T11498] netlink: 'syz.8.1221': attribute type 11 has an invalid length. [ 299.011698][T11498] netlink: 173856 bytes leftover after parsing attributes in process `syz.8.1221'. [ 299.598844][ T8593] net_ratelimit: 3 callbacks suppressed [ 299.598864][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.036056][T11537] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 300.044931][T11537] nbd: error processing sock list [ 300.235331][ T5846] Bluetooth: hci20: command tx timeout [ 300.296892][T11556] netlink: 'syz.1.1242': attribute type 11 has an invalid length. [ 300.305586][T11556] netlink: 'syz.1.1242': attribute type 11 has an invalid length. [ 300.322147][T11556] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1242'. [ 300.360786][T11558] netlink: 'syz.1.1242': attribute type 11 has an invalid length. [ 300.369396][T11558] netlink: 'syz.1.1242': attribute type 11 has an invalid length. [ 300.380547][T11558] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1242'. [ 300.426206][T11562] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1243'. [ 300.437776][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1243'. [ 300.529266][T11567] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 300.567047][T11567] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1244'. [ 300.592004][T11566] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.604606][T11567] block nbd0: not configured, cannot reconfigure [ 300.633947][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.687577][T11566] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.777801][T11566] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.859768][T11566] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.966547][ T1989] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.986969][ T1989] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.008849][ T6556] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.031687][ T6124] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.242653][T11575] xfrm0 speed is unknown, defaulting to 1000 [ 301.432459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 301.440534][ C0] lec:lec_tx_timeout: lec0 [ 301.447434][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.524839][T11580] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1249'. [ 301.681696][ T7411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.914977][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.931165][T11575] wg1 speed is unknown, defaulting to 1000 [ 302.313870][ T52] Bluetooth: hci20: command tx timeout [ 302.720495][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.753002][ T8594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.862804][T11605] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 304.001429][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.011613][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.021658][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.174223][ T5851] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 304.186828][ T5851] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 304.197889][ T5851] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 304.211259][ T5851] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 304.220608][ T5851] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 304.394399][ T52] Bluetooth: hci20: command 0x0405 tx timeout [ 304.418996][T11619] wg1: entered promiscuous mode [ 304.424946][T11619] wg1: entered allmulticast mode [ 304.509315][T11624] xfrm0 speed is unknown, defaulting to 1000 [ 304.655173][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.796638][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.027869][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'. [ 305.087674][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1263'. [ 305.248535][T11624] wg1 speed is unknown, defaulting to 1000 [ 305.780400][T11624] chnl_net:caif_netlink_parms(): no params data found [ 305.834611][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.103949][T11674] syzkaller0: entered promiscuous mode [ 306.113489][T11674] syzkaller0: entered allmulticast mode [ 306.141444][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.150291][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.159400][T11624] bridge_slave_0: entered allmulticast mode [ 306.168366][T11624] bridge_slave_0: entered promiscuous mode [ 306.185595][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.193537][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.201004][T11624] bridge_slave_1: entered allmulticast mode [ 306.209625][T11624] bridge_slave_1: entered promiscuous mode [ 306.256781][T11624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.270587][T11624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.315447][ T5846] Bluetooth: hci21: command tx timeout [ 306.331987][T11624] team0: Port device team_slave_0 added [ 306.342093][T11624] team0: Port device team_slave_1 added [ 306.388016][T11624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.401098][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.431021][T11624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.445891][T11624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.454717][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.488413][T11624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.573297][T11624] hsr_slave_0: entered promiscuous mode [ 306.580398][T11624] hsr_slave_1: entered promiscuous mode [ 306.591081][T11624] debugfs: 'hsr0' already exists in 'hsr' [ 306.600123][T11624] Cannot create hsr debugfs directory [ 306.781535][T11624] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.871654][T11624] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.888035][ T7425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.966303][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 306.984795][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 307.039194][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.065679][T11624] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.117674][T11680] siw: device registration error -23 [ 307.193398][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 307.201495][ C0] lec:lec_tx_timeout: lec0 [ 307.209210][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 307.325462][T11624] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.389839][ T52] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 307.399955][ T52] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 307.417246][ T52] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 307.427492][ T52] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 307.440894][ T52] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 307.720379][T11687] xfrm0 speed is unknown, defaulting to 1000 [ 307.730465][T11624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.764131][T11624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.787695][T11624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.820613][T11624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.939858][ T7425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.054013][T11697] erspan0: entered promiscuous mode [ 308.188917][T11624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.274542][T11624] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.291280][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.298633][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.334826][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.342060][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.393727][ T52] Bluetooth: hci21: command tx timeout [ 308.407221][T11707] syzkaller0: entered promiscuous mode [ 308.417593][T11707] syzkaller0: entered allmulticast mode [ 308.518352][T11687] wg1 speed is unknown, defaulting to 1000 [ 308.853766][T11687] chnl_net:caif_netlink_parms(): no params data found [ 308.954753][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.084319][T11687] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.092031][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.101552][T11687] bridge_slave_0: entered allmulticast mode [ 309.114306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.124064][T11687] bridge_slave_0: entered promiscuous mode [ 309.136359][T11687] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.144901][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.156644][T11687] bridge_slave_1: entered allmulticast mode [ 309.167474][T11687] bridge_slave_1: entered promiscuous mode [ 309.268499][T11687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.300664][T11687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.333713][T11624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.415425][T11687] team0: Port device team_slave_0 added [ 309.440694][T11687] team0: Port device team_slave_1 added [ 309.494916][T11729] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1283'. [ 309.511379][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1284'. [ 309.523123][ T52] Bluetooth: hci22: command tx timeout [ 309.569833][T11687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.577535][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.614769][T11687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.644635][T11687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.651758][T11687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.720698][T11687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.772773][ T3075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.781792][ T7425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.791816][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.001270][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.024859][T11687] hsr_slave_0: entered promiscuous mode [ 310.032882][T11687] hsr_slave_1: entered promiscuous mode [ 310.040308][T11687] debugfs: 'hsr0' already exists in 'hsr' [ 310.048329][T11687] Cannot create hsr debugfs directory [ 310.081539][T11746] netlink: 'syz.8.1287': attribute type 1 has an invalid length. [ 310.097232][T11746] netlink: 'syz.8.1287': attribute type 2 has an invalid length. [ 310.331475][T11624] veth0_vlan: entered promiscuous mode [ 310.399588][ T5985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.411301][ T6415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.421499][ T6096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.448485][T11624] veth1_vlan: entered promiscuous mode [ 310.473948][ T52] Bluetooth: hci21: command tx timeout [ 310.561509][T11687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.626447][T11624] veth0_macvtap: entered promiscuous mode [ 310.641789][T11624] veth1_macvtap: entered promiscuous mode [ 310.665702][T11754] netlink: 'syz.8.1292': attribute type 32 has an invalid length. [ 310.679478][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1292'. [ 310.726970][T11754] bond1: Setting coupled_control to off (0) [ 310.755732][T11687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.782044][T11624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.800581][T11624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.849738][T11687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.895766][ T5985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.906870][ T5985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.916389][ T5985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.926072][ T5985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.967065][T11687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.041095][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.161002][ T6378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.188710][ T6378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.288978][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.314537][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.358474][T11687] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.376166][T11687] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.401632][T11687] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.430226][T11687] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.584876][T11768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1260'. [ 311.595890][ T52] Bluetooth: hci22: command tx timeout [ 311.679533][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.897538][T11687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.044061][T11687] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.087823][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.102104][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.109409][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.222387][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 312.230596][ C0] lec:lec_tx_timeout: lec0 [ 312.235872][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 312.261483][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.268781][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.279948][T11782] xfrm0 speed is unknown, defaulting to 1000 [ 312.288225][ T5846] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 312.313042][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 312.337174][ T5846] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 312.346053][ T5846] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 312.355772][ T5846] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 312.367680][ T5846] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 312.553743][ T52] Bluetooth: hci21: command tx timeout [ 312.655140][T11791] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 312.888465][T11785] xfrm0 speed is unknown, defaulting to 1000 [ 313.207023][T11687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.332121][T11802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1301'. [ 313.381310][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 313.475539][T11687] veth0_vlan: entered promiscuous mode [ 313.518664][T11687] veth1_vlan: entered promiscuous mode [ 313.644627][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 313.677124][ T52] Bluetooth: hci22: command tx timeout [ 313.747706][T11687] veth0_macvtap: entered promiscuous mode [ 313.749737][T11782] wg1 speed is unknown, defaulting to 1000 [ 313.874203][T11809] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1304'. [ 313.893780][T11809] block nbd0: not configured, cannot reconfigure [ 314.179879][T11687] veth1_macvtap: entered promiscuous mode [ 314.275211][T11785] wg1 speed is unknown, defaulting to 1000 [ 314.392248][T11824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1306'. [ 314.407197][T11822] syzkaller0: entered promiscuous mode [ 314.415701][T11822] syzkaller0: entered allmulticast mode [ 314.429821][T11687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.444417][T11824] pim6reg1: entered promiscuous mode [ 314.450082][T11824] pim6reg1: entered allmulticast mode [ 314.476141][ T52] Bluetooth: hci23: command tx timeout [ 314.536732][T11687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.728014][ T6556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.754974][ T6556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.784242][ T6378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.825012][ T6378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.892880][T11785] chnl_net:caif_netlink_parms(): no params data found [ 315.194161][ T8593] net_ratelimit: 7 callbacks suppressed [ 315.194181][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.347577][T11844] netem: change failed [ 315.357131][ T1964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.388161][ T1964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.407538][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.415962][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.426807][T11785] bridge_slave_0: entered allmulticast mode [ 315.437074][T11785] bridge_slave_0: entered promiscuous mode [ 315.475197][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.486464][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.495876][T11785] bridge_slave_1: entered allmulticast mode [ 315.506965][T11785] bridge_slave_1: entered promiscuous mode [ 315.517887][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.535072][ T7415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.545403][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.626352][ T6552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.640228][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.649430][ T6552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.681600][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.753556][ T52] Bluetooth: hci22: command tx timeout [ 315.838765][T11785] team0: Port device team_slave_0 added [ 315.851198][T11785] team0: Port device team_slave_1 added [ 315.980528][T11860] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 315.991213][T11785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.000754][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.048886][T11785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.101269][T11785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.114681][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.158998][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.175741][ T6096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.185259][ T7415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.202362][T11785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.236513][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.376781][T11785] hsr_slave_0: entered promiscuous mode [ 316.397616][T11785] hsr_slave_1: entered promiscuous mode [ 316.428575][T11785] debugfs: 'hsr0' already exists in 'hsr' [ 316.443924][T11785] Cannot create hsr debugfs directory [ 316.553450][ T52] Bluetooth: hci23: command tx timeout [ 316.570742][T11876] bond0: entered promiscuous mode [ 316.584847][T11876] bond_slave_0: entered promiscuous mode [ 316.591536][T11876] bond_slave_1: entered promiscuous mode [ 316.601594][T11876] batadv0: entered promiscuous mode [ 316.611225][T11876] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 316.625538][T11876] bond0: left promiscuous mode [ 316.630371][T11876] bond_slave_0: left promiscuous mode [ 316.637309][T11876] bond_slave_1: left promiscuous mode [ 316.650481][T11876] batadv0: left promiscuous mode [ 316.875660][T11869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.893662][T11869] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 316.949002][T11869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.963763][T11869] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 316.990106][T11869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.998432][T11869] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 317.052706][T11869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.068072][T11869] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 317.138072][T11886] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 317.158439][T11886] netlink: 'syz.3.1320': attribute type 2 has an invalid length. [ 317.159859][T11869] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 317.175078][T11869] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 317.189769][T11887] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 317.204682][T11887] netlink: 'syz.3.1320': attribute type 2 has an invalid length. [ 317.218239][T11869] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 317.230781][T11869] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 317.242817][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 317.250957][ C0] lec:lec_tx_timeout: lec0 [ 317.255982][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 317.281598][ T8594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.319908][T11869] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 317.326868][T11869] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 317.410625][T11869] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 317.452952][T11869] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 317.545742][T11869] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 317.553854][T11869] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 317.586134][T11869] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 317.615839][T11869] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 317.649180][T11869] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 317.657058][T11869] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 317.699861][T11869] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 317.708653][T11869] Bluetooth: hci12: Error when powering off device on rfkill (-4) [ 317.742395][T11869] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 317.760733][T11869] Bluetooth: hci13: Error when powering off device on rfkill (-4) [ 317.783649][T11869] Bluetooth: hci14: Opcode 0x0c1a failed: -4 [ 317.790295][T11869] Bluetooth: hci14: Error when powering off device on rfkill (-4) [ 317.815664][T11869] Bluetooth: hci15: Opcode 0x0c1a failed: -4 [ 317.821732][T11869] Bluetooth: hci15: Error when powering off device on rfkill (-4) [ 317.835981][T11869] Bluetooth: hci16: Opcode 0x0c1a failed: -4 [ 317.860244][T11869] Bluetooth: hci16: Error when powering off device on rfkill (-4) [ 317.875295][T11869] Bluetooth: hci17: Opcode 0x0c1a failed: -4 [ 317.881494][T11869] Bluetooth: hci17: Error when powering off device on rfkill (-4) [ 317.895779][T11869] Bluetooth: hci18: Opcode 0x0c1a failed: -4 [ 317.902050][T11869] Bluetooth: hci18: Error when powering off device on rfkill (-4) [ 317.984206][T11869] Bluetooth: hci19: Opcode 0x0c1a failed: -4 [ 317.990262][T11869] Bluetooth: hci19: Error when powering off device on rfkill (-4) [ 318.090237][T11869] Bluetooth: hci20: Opcode 0x0c1a failed: -4 [ 318.096810][T11869] Bluetooth: hci20: Error when powering off device on rfkill (-4) [ 318.157455][T11869] Bluetooth: hci21: Opcode 0x0c1a failed: -4 [ 318.174602][T11869] Bluetooth: hci21: Error when powering off device on rfkill (-4) [ 318.191926][T11869] Bluetooth: hci22: Opcode 0x0c1a failed: -4 [ 318.203560][T11869] Bluetooth: hci22: Error when powering off device on rfkill (-4) [ 318.248006][T11869] Bluetooth: hci23: Opcode 0x0c1a failed: -4 [ 318.256744][T11869] Bluetooth: hci23: Error when powering off device on rfkill (-4) [ 318.348373][T11785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.405639][T11785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.431745][T11895] siw: device registration error -23 [ 318.448618][T11785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.500113][T11899] xt_cgroup: path and classid specified [ 318.515836][T11785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.537253][T11900] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1323'. [ 318.707100][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 318.894967][T11785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.945635][T11785] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.987663][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.994960][T10160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.041249][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.048550][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.088928][T11929] tap0: tun_chr_ioctl cmd 2148553947 [ 319.099047][T11929] tap0: tun_chr_ioctl cmd 2147767521 [ 319.120668][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 319.134464][T11929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.143924][T11929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.155443][T11929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.164586][T11929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.201770][T11925] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1328'. [ 319.507276][T11935] xfrm0 speed is unknown, defaulting to 1000 [ 319.801524][T11785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.980362][T11785] veth0_vlan: entered promiscuous mode [ 320.046180][T11785] veth1_vlan: entered promiscuous mode [ 320.148341][T11785] veth0_macvtap: entered promiscuous mode [ 320.181953][T11785] veth1_macvtap: entered promiscuous mode [ 320.256195][T11785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.305713][T11785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.363949][ T6385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.386159][ T6385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.404947][ T8593] net_ratelimit: 3 callbacks suppressed [ 320.404967][ T8593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.416124][ T6385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.437820][ T6385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.531948][T11948] syzkaller0: entered promiscuous mode [ 320.540268][T11948] syzkaller0: entered allmulticast mode [ 320.844413][T11954] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1334'. [ 321.299409][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.318177][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.328073][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.437321][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.916862][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.937100][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.957090][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.265595][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 322.273890][ C0] lec:lec_tx_timeout: lec0 [ 322.279202][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 322.476943][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.552876][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.793608][T11935] wg1 speed is unknown, defaulting to 1000 [ 322.890249][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.910387][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.993173][T11963] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 323.063000][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.072171][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.161235][T11969] netlink: 'syz.3.1338': attribute type 21 has an invalid length. [ 323.180090][T11969] netlink: 'syz.3.1338': attribute type 1 has an invalid length. [ 323.201339][T11969] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1338'. [ 323.246768][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1294'. [ 323.267717][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'. [ 323.297406][T11972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1294'. [ 323.350694][T11976] tipc: Enabling of bearer rejected, failed to enable media [ 323.418079][T11973] Cannot find add_set index 2 as target [ 323.645688][T11985] xfrm0 speed is unknown, defaulting to 1000 [ 323.697494][T11988] syzkaller0: entered promiscuous mode [ 323.705938][T11988] syzkaller0: entered allmulticast mode [ 324.149811][T11985] wg1 speed is unknown, defaulting to 1000 [ 324.833714][T12024] tipc: Enabled bearer , priority 0 [ 324.844594][T12024] syzkaller0: entered promiscuous mode [ 324.850153][T12024] syzkaller0: entered allmulticast mode [ 325.097784][T12030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.119189][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 325.215726][T12030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.299587][T12030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.411082][T12030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.528132][T12018] tipc: Resetting bearer [ 325.567387][T12018] tipc: Disabling bearer [ 325.596957][ T7408] net_ratelimit: 3 callbacks suppressed [ 325.596972][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.616177][ T6556] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.656292][ T6552] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.698606][ T6556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.723241][ T6556] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.891032][T12041] syzkaller1: entered promiscuous mode [ 325.907949][T12041] syzkaller1: entered allmulticast mode [ 325.942787][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 325.963898][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1357'. [ 326.633917][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.685822][T12063] bridge: RTM_NEWNEIGH with invalid ether address [ 326.840896][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 326.896557][T12066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1364'. [ 327.062005][T12069] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.292769][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 327.300966][ C0] lec:lec_tx_timeout: lec0 [ 327.306331][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 327.378635][ T5846] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 327.391122][ T5846] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 327.400408][ T5846] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 327.416778][ T5846] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 327.432729][ T5846] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 327.440630][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.613461][T12082] xfrm0 speed is unknown, defaulting to 1000 [ 327.707711][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.188235][T12095] syzkaller0: entered promiscuous mode [ 328.207447][T12095] syzkaller0: entered allmulticast mode [ 328.715956][ T7425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.882604][T12103] netlink: 'syz.0.1372': attribute type 4 has an invalid length. [ 329.171927][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 329.181759][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 329.218969][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 329.425523][T12082] wg1 speed is unknown, defaulting to 1000 [ 329.513135][ T5846] Bluetooth: hci24: command tx timeout [ 329.754895][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.959189][T12082] chnl_net:caif_netlink_parms(): no params data found [ 329.979161][T12125] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 330.109608][T12123] tipc: Started in network mode [ 330.123944][T12123] tipc: Node identity 4, cluster identity 4711 [ 330.132809][T12123] tipc: Node number set to 4 [ 330.183728][T12129] bond1: entered promiscuous mode [ 330.197966][T12129] bond1: entered allmulticast mode [ 330.207530][T12129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.333242][T12125] bridge1: entered promiscuous mode [ 330.339664][T12125] bridge1: entered allmulticast mode [ 330.358830][T12125] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 330.377062][T12121] xfrm0 speed is unknown, defaulting to 1000 [ 330.405377][T10160] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 330.474282][ T6415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.564314][ T6124] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 330.734629][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.742196][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.772907][T12082] bridge_slave_0: entered allmulticast mode [ 330.781621][T12082] bridge_slave_0: entered promiscuous mode [ 330.794218][ T7425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.827970][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.874383][ T31] INFO: task kworker/u8:23:6386 blocked for more than 143 seconds. [ 330.874543][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.901531][ T31] Not tainted syzkaller #0 [ 330.913132][T12082] bridge_slave_1: entered allmulticast mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.914583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.933041][ T31] task:kworker/u8:23 state:D stack:24464 pid:6386 tgid:6386 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 330.946314][ T31] Workqueue: netns cleanup_net [ 330.951168][ T31] Call Trace: [ 330.959457][ T31] [ 330.966797][ T31] __schedule+0x149b/0x4fd0 [ 330.971433][ T31] ? __pfx___schedule+0x10/0x10 [ 330.977696][T12082] bridge_slave_1: entered promiscuous mode [ 330.995468][ T31] ? schedule+0x91/0x360 [ 330.999802][ T31] schedule+0x165/0x360 [ 331.013979][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.019624][ T31] __mutex_lock+0x7e6/0x1350 [ 331.032354][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.040026][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 331.071878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.087889][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 331.102950][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 331.123353][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 331.128640][ T31] ? _raw_spin_unlock+0x28/0x50 [ 331.145835][ T31] rdma_dev_change_netns+0x39/0x300 [ 331.151217][ T31] rdma_dev_exit_net+0x203/0x340 [ 331.180051][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 331.193643][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 331.211922][ T31] ? rtnl_is_locked+0x15/0x20 [ 331.223690][ T31] ops_undo_list+0x49a/0x990 [ 331.235174][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 331.244638][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 331.249945][ T31] cleanup_net+0x4d8/0x7a0 [ 331.260998][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 331.268662][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 331.279901][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 331.295953][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 331.305335][ T31] process_scheduled_works+0xad1/0x1770 [ 331.311067][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.321026][ T31] ? do_raw_spin_lock+0x121/0x290 [ 331.326705][ T31] worker_thread+0x8a0/0xda0 [ 331.331610][ T31] ? __kthread_parkme+0x7b/0x200 [ 331.339535][ T31] kthread+0x711/0x8a0 [ 331.346192][ T31] ? __pfx_worker_thread+0x10/0x10 [ 331.351372][ T31] ? __pfx_kthread+0x10/0x10 [ 331.372082][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.378097][ T31] ? __pfx_kthread+0x10/0x10 [ 331.385247][ T31] ret_from_fork+0x510/0xa50 [ 331.390715][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.412706][ T31] ? __switch_to+0xc9e/0x1480 [ 331.453081][ T31] ? __pfx_kthread+0x10/0x10 [ 331.483137][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.488046][ T31] [ 331.522848][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.533526][ T31] INFO: task syz.4.708:8903 blocked for more than 144 seconds. [ 331.541133][ T31] Not tainted syzkaller #0 [ 331.567076][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.580182][ T31] task:syz.4.708 state:D stack:23904 pid:8903 tgid:8902 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 331.592925][ T5846] Bluetooth: hci24: command tx timeout [ 331.599320][ T31] Call Trace: [ 331.603918][ T31] [ 331.606900][ T31] __schedule+0x149b/0x4fd0 [ 331.611464][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 331.617701][ T31] ? stack_trace_save+0x9c/0xe0 [ 331.623123][ T31] ? __pfx___schedule+0x10/0x10 [ 331.628045][ T31] ? schedule+0x91/0x360 [ 331.644283][ T31] schedule+0x165/0x360 [ 331.648520][ T31] schedule_timeout+0x9a/0x270 [ 331.680739][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 331.687907][ T31] ? do_raw_spin_lock+0x121/0x290 [ 331.694674][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.699944][ T31] ? wait_for_completion+0x267/0x5d0 [ 331.707563][ T31] wait_for_completion+0x2bf/0x5d0 [ 331.714970][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 331.720669][ T31] ? disable_device+0x137/0x320 [ 331.730199][ T31] ? remove_client_context+0xc0/0x1e0 [ 331.736583][ T31] disable_device+0x1c6/0x320 [ 331.741323][ T31] ? __pfx_disable_device+0x10/0x10 [ 331.747686][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 331.759455][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 331.765900][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 331.771682][ T31] nldev_dellink+0x2d1/0x320 [ 331.777446][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 331.783376][ T31] ? apparmor_capable+0x137/0x1a0 [ 331.788476][ T31] ? bpf_lsm_capable+0x9/0x20 [ 331.795463][ T31] ? security_capable+0x7e/0x2e0 [ 331.800459][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 331.807086][ T31] rdma_nl_rcv+0x6ae/0x980 [ 331.811571][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 331.819321][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.827515][ T31] netlink_unicast+0x82f/0x9e0 [ 331.833586][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.848424][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.855297][ T31] ? __alloc_skb+0x198/0x3a0 [ 331.859942][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.865669][ T31] ? skb_put+0x11b/0x210 [ 331.869969][ T31] netlink_sendmsg+0x805/0xb30 [ 331.876356][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.882037][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 331.887817][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.893822][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.899159][ T31] __sock_sendmsg+0x21c/0x270 [ 331.904899][ T31] ____sys_sendmsg+0x505/0x820 [ 331.909720][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.929270][ T31] ? import_iovec+0x74/0xa0 [ 331.937038][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 331.941796][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.959918][ T31] ? futex_wake+0x4b2/0x560 [ 331.967747][ T31] ? __fget_files+0x2a/0x420 [ 331.973384][ T31] ? __fget_files+0x3a0/0x420 [ 331.978135][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 331.985255][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.990796][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.000189][ T31] do_syscall_64+0xec/0xf80 [ 332.005465][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.011579][ T31] ? trace_irq_disable+0x37/0x100 [ 332.018171][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.023832][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.029772][ T31] RIP: 0033:0x7f2c6518f749 [ 332.037658][ T31] RSP: 002b:00007f2c66020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.047736][ T31] RAX: ffffffffffffffda RBX: 00007f2c653e5fa0 RCX: 00007f2c6518f749 [ 332.056634][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 332.070798][ T31] RBP: 00007f2c65213f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.085437][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.095257][ T31] R13: 00007f2c653e6038 R14: 00007f2c653e5fa0 R15: 00007fff47693e18 [ 332.103839][ T31] [ 332.107425][ T31] INFO: task syz.1.739:9012 blocked for more than 144 seconds. [ 332.115812][ T31] Not tainted syzkaller #0 [ 332.121063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.133831][ T31] task:syz.1.739 state:D stack:23064 pid:9012 tgid:9009 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 332.148074][ T31] Call Trace: [ 332.151403][ T31] [ 332.177255][ T31] __schedule+0x149b/0x4fd0 [ 332.181958][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 332.190240][ T31] ? finish_task_switch+0x23d/0x940 [ 332.197734][ T31] ? __pfx___schedule+0x10/0x10 [ 332.203841][ T31] ? schedule+0x91/0x360 [ 332.208605][ T31] schedule+0x165/0x360 [ 332.213186][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.218701][ T31] __mutex_lock+0x7e6/0x1350 [ 332.223954][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.228776][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 332.283563][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.307870][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 332.314500][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 332.320540][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 332.326149][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 332.326176][ C0] lec:lec_tx_timeout: lec0 [ 332.334450][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 332.346599][ T31] ? _raw_spin_unlock+0x28/0x50 [ 332.351519][ T31] rdma_dev_change_netns+0x39/0x300 [ 332.357722][ T31] rdma_dev_exit_net+0x203/0x340 [ 332.363882][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 332.369271][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 332.393699][ T31] ? rtnl_is_locked+0x15/0x20 [ 332.398480][ T31] ops_undo_list+0x49a/0x990 [ 332.422843][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 332.427998][ T31] ? ops_init+0x469/0x5c0 [ 332.442900][ T31] setup_net+0x2e8/0x330 [ 332.447258][ T31] ? __pfx_setup_net+0x10/0x10 [ 332.452071][ T31] ? preinit_net+0x47d/0x780 [ 332.466842][ T31] copy_net_ns+0x3e3/0x570 [ 332.477823][ T31] create_new_namespaces+0x3e7/0x6a0 [ 332.484175][ T31] ? security_capable+0x7e/0x2e0 [ 332.489191][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 332.504608][ T31] ksys_unshare+0x4c8/0x8c0 [ 332.509201][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 332.519021][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.526239][ T31] __x64_sys_unshare+0x38/0x50 [ 332.531072][ T31] do_syscall_64+0xec/0xf80 [ 332.539422][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.546935][ T31] ? trace_irq_disable+0x37/0x100 [ 332.552018][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.559267][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.566153][ T31] RIP: 0033:0x7f586338f749 [ 332.570753][ T31] RSP: 002b:00007f58642e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.579866][ T31] RAX: ffffffffffffffda RBX: 00007f58635e6090 RCX: 00007f586338f749 [ 332.588779][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 332.597774][ T31] RBP: 00007f5863413f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.606697][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.616364][ T31] R13: 00007f58635e6128 R14: 00007f58635e6090 R15: 00007fff047e6af8 [ 332.626677][ T31] [ 332.629872][ T31] INFO: task syz.3.742:9025 blocked for more than 145 seconds. [ 332.682533][ T31] Not tainted syzkaller #0 [ 332.687834][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.704946][ T31] task:syz.3.742 state:D stack:25304 pid:9025 tgid:9024 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 332.719943][ T31] Call Trace: [ 332.723510][ T31] [ 332.726748][ T31] __schedule+0x149b/0x4fd0 [ 332.731784][ T31] ? __pfx___schedule+0x10/0x10 [ 332.746843][ T31] ? schedule+0x91/0x360 [ 332.751176][ T31] schedule+0x165/0x360 [ 332.755985][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.761584][ T31] __mutex_lock+0x7e6/0x1350 [ 332.766721][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.771558][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 332.778715][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.784964][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 332.790871][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 332.824366][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 332.830879][ T31] ? _raw_spin_unlock+0x28/0x50 [ 332.836202][ T31] rdma_dev_change_netns+0x39/0x300 [ 332.841464][ T31] rdma_dev_exit_net+0x203/0x340 [ 332.847162][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 332.854880][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 332.860423][ T31] ? rtnl_is_locked+0x15/0x20 [ 332.866205][ T31] ops_undo_list+0x49a/0x990 [ 332.870870][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 332.876892][ T31] ? ops_init+0x469/0x5c0 [ 332.879934][ T7404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.881296][ T31] setup_net+0x2e8/0x330 [ 332.898785][ T31] ? __pfx_setup_net+0x10/0x10 [ 332.905494][ T31] ? preinit_net+0x47d/0x780 [ 332.910114][ T31] copy_net_ns+0x3e3/0x570 [ 332.915025][ T31] create_new_namespaces+0x3e7/0x6a0 [ 332.920334][ T31] ? security_capable+0x7e/0x2e0 [ 332.925833][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 332.931615][ T31] ksys_unshare+0x4c8/0x8c0 [ 332.936720][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 332.941799][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.947304][ T31] __x64_sys_unshare+0x38/0x50 [ 332.952093][ T31] do_syscall_64+0xec/0xf80 [ 332.959622][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.968240][ T31] ? trace_irq_disable+0x37/0x100 [ 332.973586][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.978593][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.985264][ T31] RIP: 0033:0x7fc05d18f749 [ 332.989725][ T31] RSP: 002b:00007fc05dff3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 332.998962][ T31] RAX: ffffffffffffffda RBX: 00007fc05d3e5fa0 RCX: 00007fc05d18f749 [ 333.010217][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 333.018602][ T31] RBP: 00007fc05d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.027009][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.036220][ T31] R13: 00007fc05d3e6038 R14: 00007fc05d3e5fa0 R15: 00007ffc515f2568 [ 333.046345][ T31] [ 333.049612][ T31] [ 333.049612][ T31] Showing all locks held in the system: [ 333.069398][ T31] 1 lock held by khungtaskd/31: [ 333.103350][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.126309][ T31] 2 locks held by getty/5591: [ 333.131059][ T31] #0: ffff88802fb660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.162763][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 333.182610][ T31] 4 locks held by kworker/u8:23/6386: [ 333.188139][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 333.210556][ T31] #1: ffffc9000e3bfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 333.221963][ T31] #2: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 333.232933][ T31] #3: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.245824][ T31] 2 locks held by syz.4.708/8903: [ 333.250988][ T31] #0: ffffffff99c82df8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 333.263171][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 333.288284][ T31] 2 locks held by syz.1.739/9012: [ 333.294363][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.304487][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.317717][ T31] 2 locks held by syz.3.742/9025: [ 333.323617][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.342524][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.372680][ T31] 2 locks held by syz.2.824/9317: [ 333.377779][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.402892][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.422852][ T31] 2 locks held by syz.0.839/9403: [ 333.428045][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.456677][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.469455][ T31] 2 locks held by syz.6.852/9507: [ 333.477548][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.487891][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.499573][ T31] 2 locks held by syz.5.880/9668: [ 333.504993][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.515951][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.528384][ T6096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.529577][ T31] 2 locks held by syz.9.1010/10288: [ 333.542691][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.553011][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.564674][ T31] 2 locks held by syz.8.1021/10323: [ 333.569998][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.579847][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.591854][ T31] 2 locks held by syz.1.1037/10403: [ 333.598332][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.608099][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.620037][ T31] 2 locks held by syz.7.1038/10401: [ 333.625808][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.635501][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.647319][ T31] 2 locks held by syz.4.1103/10773: [ 333.653005][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.663337][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.675192][ T31] 2 locks held by syz.3.1107/10794: [ 333.680441][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.683435][ T5846] Bluetooth: hci24: command tx timeout [ 333.691736][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.707527][ T31] 2 locks held by syz.0.1123/10883: [ 333.714270][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.724500][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.735961][ T31] 2 locks held by syz.2.1143/10955: [ 333.741187][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.751257][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.765334][ T31] 2 locks held by syz.6.1172/11105: [ 333.770587][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.781189][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.796118][ T31] 2 locks held by syz.9.1189/11316: [ 333.801351][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.814483][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.827227][ T31] 2 locks held by syz.5.1195/11381: [ 333.834055][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.844026][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.855649][ T31] 2 locks held by syz.7.1214/11459: [ 333.860854][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.870411][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.883790][ T31] 2 locks held by syz-executor/11687: [ 333.889313][ T31] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 333.898595][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 333.909978][ T31] 2 locks held by syz.8.1296/11782: [ 333.918240][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.927784][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.937986][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.949934][ T31] 2 locks held by syz.4.1330/11935: [ 333.955857][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 333.965642][ T31] #1: ffff8880306f0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 333.977514][ T31] 4 locks held by syz-executor/12082: [ 333.983323][ T31] #0: ffff88804eb6cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 333.996407][ T31] #1: ffff88804eb6c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 334.010681][ T31] #2: ffffffff8f483948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 334.021298][ T31] #3: ffff8880ae159b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 334.034026][ T31] 5 locks held by syz.0.1376/12121: [ 334.039286][ T31] #0: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 334.048915][ T31] #1: ffffffff8f078d50 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1f5/0x2f0 [ 334.059073][ T31] #2: ffffffff8f078f10 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x22d/0x2f0 [ 334.069147][ T31] #3: ffff88804de88f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 334.082033][ T31] #4: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 334.091774][ T31] 1 lock held by dhcpcd/12143: [ 334.097380][ T31] #0: ffff888033506260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 334.107631][ T31] [ 334.110065][ T31] ============================================= [ 334.110065][ T31] [ 334.123961][ T31] NMI backtrace for cpu 0 [ 334.123980][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.124006][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.124020][ T31] Call Trace: [ 334.124029][ T31] [ 334.124039][ T31] dump_stack_lvl+0xe8/0x150 [ 334.124073][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 334.124098][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.124129][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 334.124158][ T31] sys_info+0x135/0x170 [ 334.124178][ T31] watchdog+0xf95/0xfe0 [ 334.124206][ T31] ? watchdog+0x20a/0xfe0 [ 334.124237][ T31] kthread+0x711/0x8a0 [ 334.124262][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.124285][ T31] ? __pfx_kthread+0x10/0x10 [ 334.124309][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.124335][ T31] ? __pfx_kthread+0x10/0x10 [ 334.124358][ T31] ret_from_fork+0x510/0xa50 [ 334.124377][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.124402][ T31] ? __switch_to+0xc9e/0x1480 [ 334.124429][ T31] ? __pfx_kthread+0x10/0x10 [ 334.124453][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.124492][ T31] [ 334.124499][ T31] Sending NMI from CPU 0 to CPUs 1: [ 334.251838][ C1] NMI backtrace for cpu 1 [ 334.251857][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 334.251879][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.251893][ C1] Workqueue: kvfree_rcu_reclaim kfree_rcu_work [ 334.251927][ C1] RIP: 0010:unwind_next_frame+0x15d/0x23d0 [ 334.251952][ C1] Code: 5d 00 48 85 db 74 23 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 55 1b 00 00 f6 03 03 0f 85 ec 18 00 00 <49> 8d 5e 35 48 89 d8 48 c1 e8 03 48 89 44 24 28 0f b6 04 28 84 c0 [ 334.251969][ C1] RSP: 0018:ffffc90000117378 EFLAGS: 00000246 [ 334.251986][ C1] RAX: 1ffff92000022e93 RBX: 0000000000000000 RCX: 0000000080000001 [ 334.251999][ C1] RDX: 00000000ca2f28e3 RSI: ffffffff8bc083c0 RDI: ffffffff8bc08380 [ 334.252013][ C1] RBP: dffffc0000000000 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 [ 334.252027][ C1] R10: ffffc90000117498 R11: ffffffff81acf3d0 R12: 1ffff92000022e89 [ 334.252041][ C1] R13: ffffc90000117498 R14: ffffc90000117448 R15: ffffffff8173fd65 [ 334.252056][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 334.252071][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.252084][ C1] CR2: 00007fff6ad37047 CR3: 0000000048f46000 CR4: 00000000003526f0 [ 334.252102][ C1] Call Trace: [ 334.252116][ C1] [ 334.252131][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 334.252153][ C1] ? kasan_save_track+0x3e/0x80 [ 334.252171][ C1] ? kasan_save_track+0x3e/0x80 [ 334.252190][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.252220][ C1] arch_stack_walk+0x11c/0x150 [ 334.252251][ C1] ? kasan_save_track+0x3e/0x80 [ 334.252278][ C1] stack_trace_save+0x9c/0xe0 [ 334.252309][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 334.252344][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 334.252367][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 334.252387][ C1] kasan_save_track+0x3e/0x80 [ 334.252406][ C1] ? kasan_save_track+0x3e/0x80 [ 334.252462][ C1] kasan_save_free_info+0x46/0x50 [ 334.252494][ C1] __kasan_slab_free+0x5c/0x80 [ 334.252517][ C1] kmem_cache_free_bulk+0x3fb/0xdb0 [ 334.252547][ C1] ? kvfree_rcu_bulk+0xe5/0x1f0 [ 334.252575][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 334.252607][ C1] ? kvfree_rcu_bulk+0x6d/0x1f0 [ 334.252630][ C1] ? kvfree_rcu_bulk+0x6d/0x1f0 [ 334.252661][ C1] ? kvfree_rcu_bulk+0x6d/0x1f0 [ 334.252682][ C1] kvfree_rcu_bulk+0xe5/0x1f0 [ 334.252706][ C1] kfree_rcu_work+0xed/0x170 [ 334.252744][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 334.252765][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 334.252787][ C1] process_scheduled_works+0xad1/0x1770 [ 334.252829][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.252847][ C1] ? do_raw_spin_lock+0x121/0x290 [ 334.252884][ C1] worker_thread+0x8a0/0xda0 [ 334.252923][ C1] kthread+0x711/0x8a0 [ 334.252951][ C1] ? __pfx_worker_thread+0x10/0x10 [ 334.252973][ C1] ? __pfx_kthread+0x10/0x10 [ 334.253000][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.253030][ C1] ? __pfx_kthread+0x10/0x10 [ 334.253054][ C1] ret_from_fork+0x510/0xa50 [ 334.253073][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 334.253089][ C1] ? __switch_to+0xc9e/0x1480 [ 334.253126][ C1] ? __pfx_kthread+0x10/0x10 [ 334.253150][ C1] ret_from_fork_asm+0x1a/0x30 [ 334.253186][ C1] [ 334.255718][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 334.255783][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.255849][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.255893][ T31] Call Trace: [ 334.255918][ T31] [ 334.255950][ T31] vpanic+0x1e0/0x670 [ 334.256059][ T31] panic+0xb9/0xc0 [ 334.256144][ T31] ? __pfx_panic+0x10/0x10 [ 334.256242][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 334.256325][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 334.256401][ T31] watchdog+0xfdf/0xfe0 [ 334.256499][ T31] ? watchdog+0x20a/0xfe0 [ 334.256644][ T31] kthread+0x711/0x8a0 [ 334.256733][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.256814][ T31] ? __pfx_kthread+0x10/0x10 [ 334.256892][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.256981][ T31] ? __pfx_kthread+0x10/0x10 [ 334.257057][ T31] ret_from_fork+0x510/0xa50 [ 334.257133][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.257187][ T31] ? __switch_to+0xc9e/0x1480 [ 334.257284][ T31] ? __pfx_kthread+0x10/0x10 [ 334.257366][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.257487][ T31] [ 334.691450][ T31] Kernel Offset: disabled [ 334.695801][ T31] Rebooting in 86400 seconds..