last executing test programs: 10.25871717s ago: executing program 3 (id=4857): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xb0, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x78, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffc5d, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x49b}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4590, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1}, {0x0, 0xfffffffffffffdd5, 0x1}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0xdc7a}, "254143f1"}}]}]}]}}]}, 0x64}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 9.674046514s ago: executing program 3 (id=4860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6}, {0x0, 0x0, 0x12}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1003}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1000}, {}, {0x0, 0x0, 0x0, 0x1ff}, {}, {}, {0x8, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7}], &(0x7f00000000c0)='GPL\x00', 0x3, 0x26, &(0x7f0000000100)=""/38, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x4, 0x1, 0x5}, {0x4, 0x5, 0x6, 0x1}, {0x3, 0x4, 0x7, 0x6}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0xf, 0x1, 0x200, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) (async) r6 = openat$cgroup(r3, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4}, 0x18) (async) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r9, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r6, r4, 0x32, 0x14, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) (async) socket$kcm(0x11, 0x2, 0x300) (async) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r10, 0x0) (async) ioctl$PPPIOCSMRRU(r10, 0x4004743b, &(0x7f0000000080)=0x7) (async) syz_emit_ethernet(0x131, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x123, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10f, 0x0, @opaque="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"}}}}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0xffff, 0x2}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x48) (async) r11 = syz_open_procfs$namespace(0x0, 0x0) (async) unshare(0x6a040000) ioctl$XFS_IOC_FD_TO_HANDLE(r11, 0xc038586a, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) 4.406196235s ago: executing program 3 (id=4864): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239ff3, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x4000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000002100)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 3.99878861s ago: executing program 1 (id=4869): r0 = socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071106b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x33}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x40082}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0x0, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x101, 0xfe000000, 0x1, 0x7fff, 0x80000001}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044874}, 0x4008000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)={0x2f}, 0x8) sendmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000080)=@generic={0xf, "04000000002100004af5576d05acc11b97d6bc51f97948166e614a231892e9fee7ad4620ee93253afc906afa15a2fc68b0012515064ddb1f52422e07c50ada9aa454fb8d1cfec6828462286a43364c45f0ccf4e2920becc7b3e58f33e62e0474049d6f00621971c8e3a2f2733872fa191dfca69955d8077979bfb321af1b"}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="d1224cb7e1895ac98c0b42c0fccae13b03d6997bafa42193658c588d1ed6285d50c0a3599908dd213d708adf756a3d3782dfa0", 0x33}, {&(0x7f0000000240)="6ccbaf120a7313117729223102b0ae3435418284b58771155e3507f0440541b25108dc2bed4c410bbb8f624a18336af73a2754a9d55c32be238c66aca117134e3c9bee1eb0188a9d89a2229eacecf28bfee8d98874244deccd61e00fe7bafec91f6a72249902b192698c08fe1a591e7b7b16f80d36864ff318cf8acc4fc1039d78ee98f0176cc31e2075440f00d22c0de3bc2b163ae816c6c4658cef3a7cd2e497c78b69004a9186acc41e", 0xab}], 0x2, &(0x7f00000006c0)=[{0xfffffffffffffd6d, 0x1, 0x0, "51a4a4c62792e18a8052960eb33df48d5f24aeec731b1c6304bd95d1380b06e9e5890789b07794d9f9a8b244f4fbff7b5ee916f86980d50e02160218a9007cc61510693caaf251d9efd4c867c7e0d46c4bd468ad1977540ae7f2a453a50f4d738505fec15923aa328d5876ca36652a5029a4879d2a7ff84129f14df9cc008783fd0b3cbf4d19a172d1694f1d8df9842ca6fbd92e3ae45328fc150db014bdde704c12fadae8409d4ca133af5b2b6a5f70868c871f832ac43811e8a6a14417f3ba723048d8fbbce997618eaad425df0b582ffcb605c7416dc6b26f6c89185f920ec4ab84c38b1e426b247857910c115e8e4c7d04c7c8"}, {0xa8, 0x112, 0x40, "f8b3fa27a37630cee9cdcb77afd3b28876dea157928df72d7dbb4610d952fada3a43002ea122e26dde573926349923e8ab0b8bebd8e1d81046eda310e9de92864ab1c9def8b3bc3d068b06b61900dfdf86d84cde9d65894ceaede6646e792a45524ee26dcc990426f5362207d9e070bf3de6871b23b0b5754d5440ac726801e9a4542bbfbde48499b60f23222950472756a5459d6f5612fc"}, {0xb8, 0x118, 0x9f, "069366326f281e273ddf0f73fcc02e0f29c2210228a5c5b9604a1065e859b494e272ccb58ccd3a708c06f0265d2ab15dd47a3ed3a59a40132210926dbec069f7b246b8f947100441622f8c76cafa0912bb8231bab09e10c273f7cadf49c6435e6ef16d76077bcde633ae29663adbae4cfc4afcd8f1162e753d9c83665538c1e447399f024a797c19452a7d0e9a41da66860861fbad67d3754be9958a2ba1847a0ec6f151e3ebcd38"}, {0x88, 0x117, 0x4, "4fd4088d2f13110a1cf634b38b21d0f4b97a0e5283844c00dfbf27e6dce2f9a02359fbd94ff33ec1fd89309dc2bbc66f2e0dc3c5f9c6c797ffb0fca95d2791493baceec7ebff9dbdab95cce79b9bcfb8249fef655790924f37ee4846e6c519a7993031c7383517bffcef117b58d6c3ce2d74b0"}], 0x2f0}}], 0x2, 0x4c040) 3.782051042s ago: executing program 0 (id=4872): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001001000000000000300000085000000410000001800000003000000000000000400000695000003000000002e0cc1"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180013000000010000000000000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000006c0)={{0x0, 0x1, 0x1, 0x9, 0x1000, 0x3, 0x1, 0x6, 0x1ff, 0x3ff, 0x100, 0xffffffff, 0x1, 0x6dc, 0x3}}) close(0xffffffffffffffff) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r8, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x483, &(0x7f0000000040)={0x0, @remote, 0x4e21, 0x4, 'none\x00', 0x2a, 0x5, 0x54}, 0x2c) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0xfffffffffffffffd, {}, 0xfd}, 0x18) sendmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x4) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x1, @remote, 0x1000}], 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.584578899s ago: executing program 1 (id=4874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r5, 0xef, 0x6}, 0xc) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x85, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000340)) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, 0x0, 0x4) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket$igmp6(0xa, 0x3, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000", @ANYRES16=r7], 0x24}}, 0x40004) 3.392820281s ago: executing program 2 (id=4875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000600)={{r1, &(0x7f0000000280)='wlan1\x00', 0x22600, &(0x7f00000002c0)={@align=0x4, {0x709, 0x5, 0x6, 0x7ff}}, 0xdc7, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x3}, 0x2, &(0x7f00000005c0)=[{0x2, 0x53355537, &(0x7f0000000380)='wlan1\x00', &(0x7f0000000440)="e87cfaa485eec6129e5bd4291f209a7ccbca12dce28f24b68c27715e67703d04d2b87e8a35304e49d2f39c48756ea02f70362cb15f68e746099c1af733e982be6f83deedaf6c72055ca7474fc8d40933ad221704ea5dbb9561a4949aaaef8ae6b4836f61efc8d7e481f1ef29a91f4309a566d05620668168a283ba3a301650951e4ffc23ac7d0466233b57af0744c229d54826e56cc241b80195b0849c0503b1c6593001e010a2f78e93", 0xaa, 0x28}, {0x3, 0x401, &(0x7f0000000500)='TIPCv2\x00', &(0x7f0000000540)="a88d4914bf3f77527a52fdabc31b24032923514160150ed676a0f2f987515f8098e9ffc56b541e84a4d926cb84eceeeccb89b84eb605f8f23fe9c34902741932e3987350715db65c7d137669ef6705dfe23bbd4db7d64f77b76cb637c1decb27eefb90e83524e3ebff4d276aaf48c3c43978845ce9", 0x75, 0x20}]}) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000680)=""/49, &(0x7f00000006c0)=0x31) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5cab73eb9bfa240a}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd, 0x7f}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x1, 0x5, 0x0, {0x7, 0x8, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x2010) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007564703a73797a32"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 3.076565968s ago: executing program 2 (id=4877): r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x6, 0x8000}, 0x4) (async, rerun: 32) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)={0x1, [0x9]}, 0x6) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) socket$kcm(0xa, 0x5, 0x0) (rerun: 64) r1 = socket$kcm(0x2, 0x3, 0x2) close(0x3) (async) r2 = socket$kcm(0xa, 0x5, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8000, 0x10, 0x3ff, 0x1, {{0x25, 0x4, 0x1, 0x21, 0x94, 0x65, 0x0, 0x9, 0x6, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xc5, 0x1, 0x2, [{@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0x36, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x6}, {@local, 0x2}, {@loopback, 0x3bce}, {@multicast2, 0xfffffff8}, {@private=0xa010102, 0x3}, {@local, 0xd65}]}, @cipso={0x86, 0x3d, 0x3, [{0x5, 0xe, "e84552bd223bb6cac7c9bcb7"}, {0x5, 0x4, "aecb"}, {0x2, 0xf, "005aa3d131fdb46c3d567cda42"}, {0x6, 0x5, "4822e1"}, {0x0, 0xb, "e8af73f5be7ca4e40a"}, {0x7, 0x2}, {0x1, 0x4, "6fab"}]}]}}}}}) (rerun: 32) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x90, 0x25, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff}, {0xc, 0x8}, {0x0, 0xfff1}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x33}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2c}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44000095}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async, rerun: 64) r5 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c710", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) 2.941485625s ago: executing program 2 (id=4878): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426bd7000fedbdf2502142000050000081400000008000200ffffffff08000d000400000008000200e00000020c000c400000000020000006"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x24050004) r1 = socket(0x840000000002, 0x3, 0x100) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040091}, 0x8811) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x4, @any, 0x2, 0x2}, 0xe) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20a}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350604000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b06795445f79b1f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, ']\x8d]'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000001080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000500)={0xb1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x37}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1a4, 0x111, 0x0, 0x1, {0x1a0, 0x5, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ae}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe1c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x920, 0x111, 0x0, 0x1, {0x91c, 0x5, 0x0, 0x1, [{0x338, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2bf2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x288, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x39}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x98}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x128, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x334, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1e4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x57}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x44}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0xb1c}}, 0x1) 2.790961103s ago: executing program 1 (id=4879): unshare(0x28000600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) shutdown(r2, 0x0) unshare(0x4000880) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x20000000800, 0x8, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6ab}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060c0000850000002e000000d313f1fb4000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.723186909s ago: executing program 0 (id=4881): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x10}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xd, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000000)=""/27, 0x5f, 0x1b, 0x1, 0x4}, 0x28) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000a40)=@x25, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/211, 0xd3}, {&(0x7f0000000c80)=""/147, 0x93}, {&(0x7f0000000d40)}], 0x4, &(0x7f0000000dc0)=""/210, 0xd2}, 0x4}], 0x1, 0x1, 0x0) read$alg(r2, &(0x7f0000000080)=""/47, 0x2f) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x2ddfdbfa, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1a}}, 0x1c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r5, @ANYBLOB="00012dbd7000ffdbdf2503000000050005000000000008000300020000004800068008000300e0000001080006001800000014000400fc000000000000000000000000000001060001000a000000050002000500000008000300e000000108000700", @ANYRES32=r6, @ANYBLOB="08000400f400000008000400010000001c0006800600010002000000050002007600000008000700", @ANYRES32=r3, @ANYBLOB="400006801402040000000000000000000000ffffe0000002060005004e210000060005004e21000006000100020000000600010002000000060005004e24000008000300020000003000018014000400fe80000000000000bb08000300ac1414aa060005004e240000080006000c0000003c000180060005004e210000050002000000000005000200ae00000005000200100000000800070000000000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="0800030064010100"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4801) socket$nl_route(0x10, 0x3, 0x0) r7 = epoll_create1(0x0) r8 = socket$unix(0x1, 0x1, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xfffb, 0x1}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000f00)={r10, @in6={{0xa, 0x4e22, 0x8, @private1, 0x8000}}, 0x8000, 0xa}, 0x90) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000002c0)={0xa002a014}) r11 = socket(0x1, 0x803, 0x0) sendmsg$alg(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000010c0)="5bde149400000000000000007e2b56421fbbcf5f79fc020b4961bb7297b9c4394b391e7e53d881cf8c63e1b1f447d37fc341d9c2b4d53ae5d6a145696b56f2306caaa58223c3cffc242a2ee77ef563cc9db2077b407489e7372ce46f89c8a832816b36264e1dd7ad6b7151549d63a37eada70300232e84abc4b1d52d051861749bd511db4a04e75c480d1c897457ca833e4a4412a2824ca94666461cc14747985bf74899cda7eac1128f34fa1216b54ad208cc620c384040095fe09843dfc106313544c7bcc7122f6c1cb7ab151ef2eb9acb11a889fb9c9a5bcd98b25b5c65596de86194bc01cf850ec30a26dfd39556a4227e0b1359637794", 0xf9}, {&(0x7f00000004c0)="d05313850297e42fa8ec5083af1e0c28902e4025bc3804cb022c4db3c8c80a799afa2d92e0816bad85bb781fb6d6a7424e2ce3d811d8426760277d3126bb86cf339641c7ba9b6b3eef6a70a87acf93ec393702fd316350c900b254b573e3624f3399b363d7a1ee446e0d4ebb5a3a6e1a5163cabe572cc4b91d869141e20b928e7f780dd0f62e44a70065fb677e96406ccf8e8e54e35a8038030a05e7232ea55644fd7b872dc67be9644bbd58ab3d9024c50efdff8f39c2ac7a567dff19bc681893164597b4fe86c79472efd06036", 0xce}, {&(0x7f00000006c0)="89755da5d683021530b2ac62f708c5f148b7376807bbadf07cd5e7cd4843193210d4034def08a92e281feedab62122cec521f6fc9bb5803645288eed181761421e4ff3580288d9867470beb1ae73724a574b96f35f517097a2f5ccf9e43e90211adcf3e587fed58bdabc3e4fcd0f8ba1123a1620eb5c0f04d1c50f6db6f880fcf757d44456cd8bcccac6966071549e6577f05e23940b39b26fcb4a38810a48613e72cf567a16f19937a01989f0c1482661112af26221273972d1568c92a137fa37b472dbcf6abb4fd99e1064ae0f3e46df08cd050a3d8a3cbd", 0xd9}], 0x3, 0x0, 0x0, 0x8060081}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 2.622823831s ago: executing program 2 (id=4882): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ff0100"/28], 0x50) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff3, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x40, 0x7, 0x7, 0x1, 0x6, 0xd, 0x0, 0x4, 0x4, 0x5, 0x1, 0x2, 0x2, 0xe5aa, 0x400, 0x0, 0x7, 0x4, 0x95f, 0x0, 0x6, 0x4, 0x2, 0x3, 0x7ff, 0xffffff87, 0x6, 0x7, 0x5, 0x8, 0xffff7fff, 0x800, 0x6, 0x6, 0x5c46, 0xc2, 0x3ff, 0xc3, 0x6, 0x5, 0x800, 0x476, 0x662, 0xffffffff, 0x3, 0x2, 0x3, 0x6, 0xb, 0x6b, 0x7, 0x4, 0x7, 0x8, 0x3, 0x7, 0x400, 0x4, 0x298, 0x6, 0x402, 0x100, 0x1, 0x7, 0x9, 0xfffff66f, 0x5, 0x80000001, 0x99, 0x2f, 0x3, 0xff, 0x1f3, 0x80000000, 0x3, 0x7, 0x3, 0x3, 0xf1c1, 0x4, 0x3, 0x5, 0x7, 0x0, 0x8, 0xb89, 0x80000000, 0xd92, 0x5, 0xac1, 0xffff0001, 0x0, 0x7, 0x1, 0x1000, 0xc799, 0x2, 0xfffffff9, 0x0, 0x7, 0x0, 0xfffffff8, 0xbf5, 0x8, 0x80000001, 0x7, 0x2ea9, 0x5, 0x1, 0x20, 0x4b, 0x5, 0x42, 0x1, 0xfffffff7, 0x9d, 0x7fff, 0x8, 0x7fffffff, 0x5, 0x8, 0x6, 0x2, 0x6, 0x9, 0x8001, 0x4, 0xfffffffa, 0x2, 0x8, 0x9, 0x6567, 0x9, 0x0, 0x400, 0x33, 0x4, 0x86, 0xe, 0x3, 0x6, 0x0, 0x8, 0x0, 0x1, 0x8, 0x400, 0x5, 0x3, 0x5, 0x84, 0xb, 0x4, 0x6, 0x5, 0xa9f, 0x6, 0x0, 0x1, 0x7, 0x4, 0x25a7e80b, 0x1, 0x5, 0x5, 0x0, 0x8, 0x87, 0x9, 0x1, 0x1, 0x8, 0xffffffff, 0x5, 0xffffff00, 0x326, 0x2, 0x9, 0xe, 0x4, 0x7, 0x4, 0x4, 0xff, 0x2, 0x5, 0x7, 0x1, 0xffffff00, 0x1, 0x0, 0x158, 0x1, 0x0, 0x7fffffff, 0x7, 0x6, 0x0, 0x0, 0xb, 0x80000001, 0x5, 0x1, 0x7a69bb2c, 0x6, 0x0, 0xf, 0x2, 0xcc, 0xb31b, 0xd5a3, 0x2, 0xd8, 0x9, 0xffffff81, 0xba4, 0x59, 0x0, 0x6, 0x1cf47395, 0xc5, 0x9, 0xfffffe00, 0x8, 0x8, 0x100, 0x2, 0xffff9013, 0xffff, 0x5, 0x80, 0xb2, 0x0, 0x80000000, 0x4e, 0x10001, 0x7f2, 0x8, 0x1, 0x4, 0x461, 0x954f, 0x1, 0x8, 0x4, 0x8, 0x0, 0x0, 0x39813501, 0x5, 0x8, 0x80, 0x1000, 0x6, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x7, 0x3, 0x1, {0x3, 0x0, 0xa, 0xa, 0xfffc, 0x401}, {0x7, 0x0, 0xba, 0x8, 0x200, 0x200}, 0x1, 0xffffff80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x7fff, 0x90a, 0x9, 0xd, 0x4, 0x1, 0x3, 0x9, 0x8, 0x6ac, 0x6, 0x9, 0xfffffff2, 0x238000, 0x8, 0x8c7, 0x50, 0x101, 0x2, 0x6, 0x2, 0xa, 0x5, 0x80000000, 0x1, 0x5, 0x9, 0x2, 0x7, 0x5, 0x0, 0x4, 0x1, 0x4f, 0x4, 0x2f91, 0x5, 0x6, 0x8, 0x40, 0x1, 0x5, 0x9, 0x9, 0x1, 0x5, 0xff, 0x4, 0xffffffff, 0x3, 0x0, 0x3, 0xaea3, 0x7ff, 0x1, 0x5, 0x4, 0xf, 0x3ff, 0x7, 0x6, 0x4, 0x2, 0xe7f6, 0x2, 0xfffffff9, 0x3, 0xda, 0x100, 0x7, 0x8, 0x2, 0x2, 0x8001, 0x6, 0x82bc, 0x0, 0x2, 0xffffffff, 0xff, 0xf7b, 0x6, 0x9, 0x7ff, 0x6, 0x5, 0xe09, 0x6, 0x9, 0x1, 0xa09, 0x8001, 0x1000, 0x8, 0x7, 0x100, 0x81, 0x5, 0x7f, 0xfffffff8, 0x10, 0x0, 0x6, 0xe0, 0x1ff, 0x29, 0x7e, 0x7a42, 0x7, 0x225, 0x7, 0xa, 0x8, 0x80, 0x1, 0x3ef, 0x7, 0x6, 0x174, 0x18, 0x0, 0x6, 0x9, 0x5, 0x458, 0x2, 0x6, 0x10000, 0xb, 0x9, 0xb, 0x5, 0x8, 0x6, 0xaf0, 0x4, 0x3, 0x1, 0xd, 0xf, 0xc, 0x4b0, 0x1, 0x3, 0x100, 0x4, 0x9, 0x4, 0x6, 0x10, 0x7fffffff, 0xfffffffd, 0x6, 0x2, 0x3, 0xff5, 0x1, 0x26a99613, 0x5, 0x7, 0xad9, 0x8, 0x8, 0x80000000, 0x2, 0xe5b, 0x5, 0x3, 0x6, 0x2, 0x53d0, 0x100, 0x401, 0x3, 0x1, 0x8, 0x4ad2, 0xed, 0x4, 0x9b402b0, 0x8, 0xff, 0x7, 0x8e, 0xffff, 0x1, 0x4, 0x9, 0x7, 0x6, 0x1, 0x1, 0x8, 0x7ff, 0xb04, 0x5, 0x2, 0x7, 0x6, 0x3, 0x9, 0x101, 0xfffffffe, 0x4, 0x8, 0x5, 0x8, 0x9, 0x13, 0x8b1b, 0x5, 0x5, 0x3, 0x0, 0xa73, 0x7dab19e1, 0x5, 0xff, 0x9, 0x2, 0x2, 0x6, 0x9, 0x8297, 0x9, 0x9, 0x7fffffff, 0x1ff, 0x9e, 0x4, 0x9, 0x7fff, 0x4, 0x40bf, 0x4, 0x8, 0x49eb, 0x3, 0x7fffffff, 0x7, 0x2, 0x7, 0x4, 0x9, 0xb, 0x7, 0x84, 0x3, 0x80, 0x3ff, 0x25460ab5, 0x75b4, 0x952, 0x3]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}]}}]}, 0x884}, 0x1, 0x4000000, 0x0, 0x50}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r2, 0xc, 0x7, 0x1a}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="110000000d00000007000000c700000010000400", @ANYRES32=0x1, @ANYBLOB="a700"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0100000000004bdfff31ee0000020000000000000000000000000000000015c100d441517c073772010f3890f15cacc8bf3975e1a5bda3eb5902d1d455f69fe03c80a0e6447663de5d4950390ce09c25d5799c8bb1caa4f919a2017bf3b6b48070444586f9c54ee3d408344b27287e46b6e89cb5eaf682436c50bb723d1a79d8"], 0x50) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000102000100080018"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.509995337s ago: executing program 4 (id=4883): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112ca000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x32, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffebb, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x20008800) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x28000000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8881) 2.307568014s ago: executing program 3 (id=4884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_EXT_MASK={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x440088c4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) 1.872620071s ago: executing program 1 (id=4885): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xff, 0x8, 0xa00}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_PRIORITY={0x8, 0x6, 0x57d}, @RTA_MARK={0x8}]}, 0x34}}, 0x40810) r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000300)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @local, 0x9b}}, 0x24) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x11, 0x4, 0x1000, 0x8, 0x1, 0xd, 0xdd, 0x7}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.655014105s ago: executing program 0 (id=4886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000200)=""/41, 0x2, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="5929528b", 0x2, 0x0, 0x1}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x5e, 0x401, 0x0, 0x25dfdbfe, "", [@nested={0x4, 0x107}]}, 0x14}], 0x1}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100256a86cf12893d83a6000000", @ANYRES32=r3], 0x20}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000200)=""/41, 0x2, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="5929528b", 0x2, 0x0, 0x1}, 0x50) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x5e, 0x401, 0x0, 0x25dfdbfe, "", [@nested={0x4, 0x107}]}, 0x14}], 0x1}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100256a86cf12893d83a6000000", @ANYRES32=r3], 0x20}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) 1.547909231s ago: executing program 4 (id=4887): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r2}, 0x48) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffc, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x80000000, 0x0, r2}, 0x48) (async) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffc, 0x1}, 0xe) (async) 1.501351466s ago: executing program 3 (id=4888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="56060900000000001c00128009000100626f6e64000000000c00028008000400", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 1.354712114s ago: executing program 1 (id=4889): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bc25, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe068, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1ff}]}}}]}, 0x44}, 0x1, 0x2000000000000000, 0x0, 0x20006044}, 0x4080) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r1, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYBLOB="82c77b21dde6804e3b2e7f10c27c003e4548f7a40809f264104853c5ae2110822651de32c19d5f48b7e0bc19b1a0c06cc77a6d8f61ce1e65411b353090d3d8ad85c0ede8be07e44611e68dc2de022c0f2cea3f2d4b4c1ad9aac67624d0e90b62ddf0a8ad189194683c0be143c3"], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x7fd, @loopback}, 0x0, {[0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x800000]}}, 0x5c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2a, 0x25dfdbfd, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd28, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x0]}}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@mcast1}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2e}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r7, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000020c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{}, 0x9, 0x2, 0x8, 0x46f, 0x1, 'syz0\x00', "1d43528df413b789bab07b656ecb216feb7433970814dd875e8cc9cc34de4995", "7410e73957346bdd46ea79faa0b79b1faf1315c46b5445b857ad0f1f9281f0e4", [{0x0, 0x6, {0x1}}, {0x40, 0x9, {0x3, 0x3}}, {0x5, 0x1, {0x2, 0x8}}, {0x6, 0x7fff}, {0x0, 0xff, {0x2, 0x3}}, {0xf10, 0x10, {0x3, 0x3e9e}}, {0x9, 0x2, {0x1, 0x6}}, {0x1, 0x101, {0x1, 0x3}}, {0xef7c, 0x13f, {0x3, 0x9}}, {0xd, 0x6, {0x0, 0xfffffff9}}, {0x2000, 0x8, {0x0, 0x3}}, {0x9, 0x9, {0x3, 0x3ff}}, {0x3, 0x0, {0x0, 0x100}}, {0x7, 0x9, {0x2, 0x1}}, {0x858, 0x7, {0x2, 0x7065}}, {0xfff5, 0xb3, {0x1, 0x800}}, {0x0, 0x6, {0x0, 0x6}}, {0x5, 0xd6ab, {0x2}}, {0x4e4, 0x80, {0x0, 0x8001}}, {0x6, 0x4, {0x2, 0xa}}, {0x2, 0xd, {0x0, 0x9a}}, {0xe418, 0x2, {0x1, 0x1bf}}, {0x3, 0x486, {0x3}}, {0x825, 0xf6e5, {0x0, 0x36}}, {0xb, 0x5, {0x0, 0x8}}, {0x8000, 0x5c70, {0x1, 0x3}}, {0xe02, 0x1, {0x0, 0x5}}, {0x8, 0x6, {0x0, 0x7fffffff}}, {0x7fff, 0x1, {0x3, 0x7f}}, {0x401, 0x4, {0x3, 0x36}}, {0xcb39, 0x7, {0x3, 0x9}}, {0x8, 0x401, {0x3}}, {0x6, 0x7, {0x2, 0x6}}, {0x8, 0x5, {0x0, 0xa}}, {0xd796, 0x40, {0x1, 0x4}}, {0x0, 0x48, {0x2, 0x4}}, {0xfffd, 0x2, {0x3, 0x4}}, {0x8, 0x4257, {0x3, 0x70d7}}, {0x1, 0x0, {0x2, 0xffffff7f}}, {0x1, 0x2, {0x1, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x40c0) (async) r11 = socket(0x22, 0x2, 0x1) accept4$inet(r11, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.354281968s ago: executing program 0 (id=4890): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) listen(r1, 0x7) listen(r0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.306708563s ago: executing program 2 (id=4891): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = epoll_create(0x103) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r3, 0x0, 0x20000000) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00000000", 0x15) (async) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=""/45, 0x2d}}], 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000001280)={0x30000010}) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$igmp(0x2, 0x3, 0x2) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) (async) socket(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast1, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4, 0x2, 0x3}}]}, 0x38}}, 0x0) 1.153604518s ago: executing program 4 (id=4892): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000002300)=[{{&(0x7f0000003600), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/66, 0x42}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000000a00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000b00)=""/94, 0x66}, {&(0x7f0000000800)=""/192, 0xc0}], 0x2, &(0x7f0000003540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/215, 0xd7}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000e80)=""/74, 0x4a}], 0x3}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000f40)=""/38, 0x26}, {&(0x7f0000000f80)=""/117, 0x75}, {&(0x7f0000001000)=""/153, 0x99}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/13, 0xd}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x212, &(0x7f0000001100)}}], 0x5, 0x0, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x800}}, @sadb_address={0x5, 0x5, 0xff, 0x0, 0x0, @in6={0xa, 0x4e23, 0xf53c, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=']\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf2503000000180001801400020073797a5f74756e00000000000000000005000500040000000500030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x400c090}, 0x20000000) (async) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=""/76, &(0x7f0000000340)=0x4c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newtaction={0x11c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x108, 0x1, [@m_ife={0x104, 0x1, 0x0, 0x0, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x10001}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x11c}}, 0x40000) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$sock_SIOCADDDLCI(r9, 0x8980, &(0x7f0000000000)={'bridge_slave_1\x00', 0x2}) (async) sendfile(0xffffffffffffffff, r9, 0x0, 0x9) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020071400000240012800b00010067656e6576657a72ba4f23cda1fd6f710e4855000014000280080002"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYBLOB="a59cfa42d6f255b7e844aa0bcc6984d007d9e8684a339b563a851e67135d"], 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x8010, r9, 0xe54e9000) syz_init_net_socket$rose(0xb, 0x5, 0x0) 946.780836ms ago: executing program 0 (id=4893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r1, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8dd8f69a636202e14997e2262c8ca3ff57548dd", 0x14}], 0x1, 0x0, 0x0, 0x4c944}], 0x1, 0x40840) recvmmsg$unix(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) 791.776399ms ago: executing program 4 (id=4894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) (async) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 730.297716ms ago: executing program 2 (id=4895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000007a7c9ce2a2e3943c00005000000050000000060000bab4031c4378699c000f0000000000008503000000040000000000000b040000000d0000000000000203000000060000000000000700000000000000000000000e02000000020004000a0000000000000e020000000000"], &(0x7f0000000a40)=""/4096, 0x6e, 0x1000, 0x0, 0x1}, 0x28) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf253000000005003500020000000500360001000000050035007f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x401}, 0x40000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000000), 0x4) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000580)={0x7, 0x5}) 622.225042ms ago: executing program 3 (id=4896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) socketpair(0xa, 0x5, 0xf, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/114, 0x72}, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200a0, 0x18841}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}]}, 0x48}}, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@delchain={0x34, 0x65, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x9, 0xfff1}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x34}}, 0x20000000) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) sendto$packet(r4, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x8100, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000600)={0xa, &(0x7f0000000580)=[{0x80, 0x4, 0x8, 0x6}, {0x4, 0x5, 0x4, 0x9b7f}, {0x1ff, 0xb, 0x5, 0x5}, {0x2, 0x2, 0x7, 0x4}, {0x2, 0x0, 0x4, 0xb}, {0x71, 0x0, 0xa, 0x7}, {0x3, 0x6, 0x32, 0xfe}, {0x1, 0x1, 0x4, 0x7fffffff}, {0x5, 0x0, 0xd, 0xfffffff7}, {0x6, 0x8, 0x8, 0xf33d}]}) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) 585.199472ms ago: executing program 4 (id=4897): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000feffffffffffffff000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x54}, 0x24048880) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="001280ee000100626f6e64000000001c0002800500010004002000080020000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 583.137259ms ago: executing program 0 (id=4898): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0xb4, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x5, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0xffffffffffffff48}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}]}}}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vlan1\x00'}]}]}, 0xb4}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = epoll_create1(0x80000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x83625fc5352ba305, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r14, &(0x7f0000000100)={0x20000014}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x338, 0x1000000, 0xffffffff, 0x280, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x338, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0xf, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'netbios-ns\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x430) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 342.012388ms ago: executing program 4 (id=4899): r0 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c"], &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r8, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) close(0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x28, 0x31, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=4900): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="00000080000000000200", 0xa}, {0x0}], 0x2}, 0x24004088) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000004}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r6, 0x10}, &(0x7f0000000100)=0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, 0x1c) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x7, &(0x7f0000001e00)=""/4088}, 0x90) kernel console output (not intermixed with test programs): 64594][T18622] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.085783][T18622] bridge_slave_1: entered allmulticast mode [ 496.106607][T18622] bridge_slave_1: entered promiscuous mode [ 496.123899][T18676] netlink: 'syz.0.3146': attribute type 8 has an invalid length. [ 496.173989][T18667] lo speed is unknown, defaulting to 1000 [ 496.273209][T18622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.291319][ T5828] Bluetooth: hci1: command tx timeout [ 496.356726][T18622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.379558][T18667] gre0 speed is unknown, defaulting to 1000 [ 496.552885][T18622] team0: Port device team_slave_0 added [ 496.561461][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 496.582356][T18622] team0: Port device team_slave_1 added [ 496.641678][T18622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.660142][T18622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.700715][T18622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.731040][T18622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.746961][T18622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.791614][T18622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.870778][T18622] hsr_slave_0: entered promiscuous mode [ 496.880583][T18622] hsr_slave_1: entered promiscuous mode [ 496.888026][T18622] debugfs: 'hsr0' already exists in 'hsr' [ 496.906325][T18622] Cannot create hsr debugfs directory [ 496.914434][T18695] lo speed is unknown, defaulting to 1000 [ 497.178905][T18695] gre0 speed is unknown, defaulting to 1000 [ 498.004793][T18712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3156'. [ 498.010931][T18710] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.039331][T18710] bridge_slave_0 (unregistering): left allmulticast mode [ 498.046900][T18710] bridge_slave_0 (unregistering): left promiscuous mode [ 498.063382][T18713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3156'. [ 498.063460][T18710] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.215049][T18717] netlink: 'syz.4.3157': attribute type 1 has an invalid length. [ 498.341441][T18717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.360237][ T5828] Bluetooth: hci1: command tx timeout [ 498.553699][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 498.569651][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3158'. [ 498.631340][T18622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.647645][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.656730][T18622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.668897][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.680482][T18622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 498.710972][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.728381][T18622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.739874][T18622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 498.915481][T18622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.967959][T18622] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.005467][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.013172][T13698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.045274][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.052908][T13698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.191339][T18752] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3166'. [ 499.231791][T18750] syzkaller0: entered promiscuous mode [ 499.240328][T18750] syzkaller0: entered allmulticast mode [ 499.251626][T18752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3166'. [ 499.267851][T18752] netlink: 'syz.0.3166': attribute type 6 has an invalid length. [ 500.454152][ T5828] Bluetooth: hci1: command tx timeout [ 501.982271][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.991566][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 502.525711][ T5828] Bluetooth: hci1: command tx timeout [ 502.977657][T18752] ip6tnl0: Caught tx_queue_len zero misconfig [ 502.985245][T18752] __nla_validate_parse: 2 callbacks suppressed [ 502.985260][T18752] netlink: 592 bytes leftover after parsing attributes in process `syz.0.3166'. [ 503.023382][T18764] pim6reg: entered allmulticast mode [ 503.121783][T18622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.188011][T18768] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.198404][T18768] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.242607][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'. [ 503.248961][T18771] netlink: 'syz.0.3170': attribute type 29 has an invalid length. [ 503.263959][T18772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3169'. [ 503.290663][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'. [ 503.317220][T18771] netlink: 'syz.0.3170': attribute type 29 has an invalid length. [ 503.354960][T18771] netlink: 'syz.0.3170': attribute type 32 has an invalid length. [ 503.407792][T18622] veth0_vlan: entered promiscuous mode [ 503.414465][T18771] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 503.453684][T18622] veth1_vlan: entered promiscuous mode [ 503.599749][T18622] veth0_macvtap: entered promiscuous mode [ 503.636331][T18622] veth1_macvtap: entered promiscuous mode [ 503.711722][T18622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.755343][T18622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.791789][T13692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.816134][T13692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.844200][T13692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.866277][T13692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.888635][T18805] netlink: 'syz.3.3177': attribute type 21 has an invalid length. [ 503.900753][T18805] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3177'. [ 503.925437][T18805] netlink: 'syz.3.3177': attribute type 5 has an invalid length. [ 503.936617][T18805] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3177'. [ 504.091255][T11272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.102643][T11272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.210110][T13692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.231464][T13692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.278222][T18810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3180'. [ 504.300621][T18810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3180'. [ 504.440563][T18816] netlink: 'syz.2.3181': attribute type 4 has an invalid length. [ 504.672351][T18829] Cannot find del_set index 0 as target [ 504.705204][T18828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 504.947365][T18839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.998325][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.052151][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.059291][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.067082][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.074561][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.083902][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.091598][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.099748][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.106888][T18841] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 505.179129][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 505.252685][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 505.274431][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 505.284347][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 505.308759][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 505.333989][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 507.405116][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 507.413772][ C0] lec:lec_tx_timeout: lec0 [ 507.419455][ T5828] Bluetooth: hci3: command tx timeout [ 509.490569][ T5828] Bluetooth: hci3: command tx timeout [ 510.407420][T18846] lo speed is unknown, defaulting to 1000 [ 510.455002][T18846] gre0 speed is unknown, defaulting to 1000 [ 510.660216][ T29] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.684407][ T29] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.774412][T18864] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 510.857130][ T29] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.894339][ T29] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.945262][T18864] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 511.026011][T18882] __nla_validate_parse: 7 callbacks suppressed [ 511.026034][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3200'. [ 511.068430][T18882] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3200'. [ 511.082360][ T29] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.102503][ T29] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.146208][T18864] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 511.202163][ T29] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.238482][ T29] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.336552][T18864] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 511.564001][ T5828] Bluetooth: hci3: command tx timeout [ 511.643135][T18900] netlink: 'syz.3.3203': attribute type 21 has an invalid length. [ 511.709303][T18900] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3203'. [ 511.720613][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3203'. [ 511.800039][T11272] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 511.841057][T13692] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 511.949243][T18909] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3206'. [ 511.966243][T18909] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3206'. [ 512.023309][T18846] chnl_net:caif_netlink_parms(): no params data found [ 512.036234][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3206'. [ 512.047911][T13692] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 512.082964][T13692] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 512.569588][T18846] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.577838][T18846] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.586324][T18846] bridge_slave_0: entered allmulticast mode [ 512.609082][T18846] bridge_slave_0: entered promiscuous mode [ 512.629726][T18846] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.636965][T18846] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.655840][T18846] bridge_slave_1: entered allmulticast mode [ 512.666265][T18921] net_ratelimit: 2936 callbacks suppressed [ 512.666289][T18921] netlink: zone id is out of range [ 512.681845][T18846] bridge_slave_1: entered promiscuous mode [ 512.690674][T18921] netlink: zone id is out of range [ 512.696145][T18921] netlink: zone id is out of range [ 512.702093][T18921] netlink: zone id is out of range [ 512.707476][T18921] netlink: zone id is out of range [ 512.714306][T18921] netlink: zone id is out of range [ 512.721191][T18921] netlink: zone id is out of range [ 512.735081][T18921] netlink: zone id is out of range [ 512.744744][T18921] netlink: zone id is out of range [ 512.750729][T18921] netlink: zone id is out of range [ 512.776871][ T29] erspan0: left allmulticast mode [ 512.782806][ T29] erspan0: left promiscuous mode [ 512.789557][ T29] bridge0: port 1(erspan0) entered disabled state [ 512.831999][ T29] dvmrp0: left allmulticast mode [ 512.876714][T18941] netlink: 364 bytes leftover after parsing attributes in process `syz.3.3213'. [ 512.955842][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3213'. [ 513.220480][ T29] bond9 (unregistering): (slave erspan1): Releasing active interface [ 513.232100][ T29] erspan1 (unregistering): left promiscuous mode [ 513.413316][ T29] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 513.422979][ T29] bridge2 (unregistering): left promiscuous mode [ 513.431819][ T29] bridge2 (unregistering): left allmulticast mode [ 513.563550][ T29] bond0 (unregistering): Released all slaves [ 513.576794][ T29] bond1 (unregistering): Released all slaves [ 513.595919][ T29] bond2 (unregistering): Released all slaves [ 513.619977][ T29] bond3 (unregistering): (slave bond4): Releasing backup interface [ 513.629427][ T29] bond4 (unregistering): left promiscuous mode [ 513.637925][ T29] bond3 (unregistering): Released all slaves [ 513.639506][ T5828] Bluetooth: hci3: command tx timeout [ 513.665090][ T29] bond4 (unregistering): Released all slaves [ 513.682482][ T29] bond5 (unregistering): Released all slaves [ 513.707296][ T29] bond6 (unregistering): Released all slaves [ 513.725021][ T29] bond7 (unregistering): Released all slaves [ 513.744532][ T29] bond8 (unregistering): (slave veth7): Releasing active interface [ 513.755072][ T29] bond8 (unregistering): Released all slaves [ 513.783144][ T29] bond9 (unregistering): Released all slaves [ 513.800324][ T29] bond10 (unregistering): Released all slaves [ 513.817374][ T29] bond11 (unregistering): Released all slaves [ 513.835685][ T29] bond12 (unregistering): (slave lo): Releasing backup interface [ 513.845798][ T29] bond12 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 513.866569][ T29] bond12 (unregistering): Released all slaves [ 513.885316][ T29] bond13 (unregistering): Released all slaves [ 513.902474][ T29] bond14 (unregistering): Released all slaves [ 514.001398][T18945] IPv6: sit1: Disabled Multicast RS [ 514.141162][T18846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.192281][T18846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.291016][ T29] ,u: left promiscuous mode [ 514.591208][T18846] team0: Port device team_slave_0 added [ 514.646556][T18846] team0: Port device team_slave_1 added [ 514.706063][ T29] tipc: Disabling bearer [ 514.725158][ T29] tipc: Left network mode [ 514.726851][T18974] netlink: 616 bytes leftover after parsing attributes in process `syz.1.3220'. [ 515.129628][T18846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.137422][T18846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.176562][T18846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.260624][T18846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.291740][T18846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.406726][T18846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.613470][T19004] ip6gretap0: entered promiscuous mode [ 515.815844][T18846] hsr_slave_0: entered promiscuous mode [ 515.846568][T18846] hsr_slave_1: entered promiscuous mode [ 515.874418][T18846] debugfs: 'hsr0' already exists in 'hsr' [ 515.891202][T18846] Cannot create hsr debugfs directory [ 515.960770][T19012] : renamed from lo (while UP) [ 516.000442][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 516.015350][T19019] netlink: 'syz.1.3231': attribute type 4 has an invalid length. [ 516.090661][T19025] netlink: 'syz.1.3231': attribute type 4 has an invalid length. [ 516.144539][T19027] netlink: 'syz.3.3233': attribute type 21 has an invalid length. [ 516.236093][T19027] __nla_validate_parse: 1 callbacks suppressed [ 516.236115][T19027] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3233'. [ 516.545520][T19044] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 516.583240][T19044] netlink: 'syz.1.3236': attribute type 2 has an invalid length. [ 516.631636][T19044] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 516.684468][T19044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3236'. [ 516.995229][T19055] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3235'. [ 517.191335][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3237'. [ 517.541500][ T29] hsr_slave_0: left promiscuous mode [ 517.566493][ T29] hsr_slave_1: left promiscuous mode [ 517.576761][T19063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3238'. [ 517.604941][ T29] batadv0: left allmulticast mode [ 517.614105][ T29] veth1_macvtap: left promiscuous mode [ 517.635879][ T29] veth0_macvtap: left promiscuous mode [ 517.966129][ T29] pim6reg (unregistering): left allmulticast mode [ 518.694667][T19090] net_ratelimit: 7 callbacks suppressed [ 518.694688][T19090] openvswitch: netlink: Key type 254 is out of range max 32 [ 518.716566][T19079] veth1_to_bond: entered promiscuous mode [ 518.737895][ T5487] 8021q: adding VLAN 0 to HW filter on device eth2 [ 518.852624][T19078] veth1_to_bond: left promiscuous mode [ 518.863547][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'. [ 518.874379][T19089] lo speed is unknown, defaulting to 1000 [ 519.040215][T19101] netlink: 'syz.4.3245': attribute type 3 has an invalid length. [ 519.236198][T19089] gre0 speed is unknown, defaulting to 1000 [ 519.272887][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 519.293100][T19106] netlink: 'syz.3.3246': attribute type 13 has an invalid length. [ 519.307539][T19106] netlink: 'syz.3.3246': attribute type 17 has an invalid length. [ 519.747132][T19106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.913546][ T29] IPVS: stop unused estimator thread 0... [ 520.076921][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3247'. [ 520.325347][T19125] netlink: 'syz.3.3248': attribute type 6 has an invalid length. [ 520.366733][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3248'. [ 520.781584][T18846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 520.856175][T18846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.876212][T18846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 520.917980][T18846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.936664][T19138] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 521.007376][T18846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 521.040288][T19151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3254'. [ 521.066236][T18846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.178408][T18846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 521.202168][T18846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.592755][T19185] syzkaller1: entered promiscuous mode [ 521.608952][T19185] syzkaller1: entered allmulticast mode [ 521.631730][T19177] lo speed is unknown, defaulting to 1000 [ 521.693249][T19177] gre0 speed is unknown, defaulting to 1000 [ 521.804779][T18846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.870365][T18846] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.946725][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.954132][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.043904][T19195] __nla_validate_parse: 2 callbacks suppressed [ 522.043924][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 522.062558][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.070164][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.080678][T19195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 522.102958][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 522.214516][ T6274] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.236397][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'. [ 522.246504][ T6274] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.256664][T19202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3262'. [ 522.280957][ T6274] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.297197][ T6274] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.773584][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 522.774492][T19221] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 522.793791][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 522.824475][T19222] netlink: 'syz.2.3266': attribute type 5 has an invalid length. [ 522.853375][T19221] bridge1: entered allmulticast mode [ 522.872559][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 522.912619][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 522.946913][T19226] ip6erspan0: entered allmulticast mode [ 522.948674][T19222] netlink: 'syz.2.3266': attribute type 5 has an invalid length. [ 523.282854][T19240] netlink: 'syz.2.3270': attribute type 2 has an invalid length. [ 523.352188][T18846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.407706][T19241] netlink: 'syz.1.3269': attribute type 4 has an invalid length. [ 523.675557][T19249] xt_hashlimit: size too large, truncated to 1048576 [ 523.737955][T19250] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.746961][T19250] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.900170][T19250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.925397][T19250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.089416][T19250] ip6erspan0: left allmulticast mode [ 524.129349][ T6274] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.146909][ T6274] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.186501][ T6274] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.216642][T19252] lo speed is unknown, defaulting to 1000 [ 524.221255][T18846] veth0_vlan: entered promiscuous mode [ 524.239377][ T6274] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.269143][T19252] gre0 speed is unknown, defaulting to 1000 [ 524.314600][T18846] veth1_vlan: entered promiscuous mode [ 524.429690][T18846] veth0_macvtap: entered promiscuous mode [ 524.464559][T18846] veth1_macvtap: entered promiscuous mode [ 524.540912][T18846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.582951][T18846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.624728][T13697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.643205][T13697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.661596][T19272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3276'. [ 524.673202][T13697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.699972][T13697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.017541][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.051181][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.112363][T19284] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 525.130639][T19284] netlink: 'syz.2.3281': attribute type 2 has an invalid length. [ 525.158844][T19284] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 525.180407][T19284] netlink: 'syz.2.3281': attribute type 3 has an invalid length. [ 525.194340][T13706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.217384][T13706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.745555][T19316] dummy0: entered promiscuous mode [ 525.759720][T19316] dummy0: left promiscuous mode [ 525.835003][T19320] xt_hashlimit: size too large, truncated to 1048576 [ 525.944933][T19324] bridge_slave_0 (unregistering): left allmulticast mode [ 525.971526][T19324] bridge_slave_0 (unregistering): left promiscuous mode [ 525.984586][T19324] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.019970][T19325] netlink: 'syz.1.3289': attribute type 1 has an invalid length. [ 526.346756][T19337] nbd: must specify an index to disconnect [ 526.357401][T19337] xt_bpf: check failed: parse error [ 526.508446][T17123] IPVS: starting estimator thread 0... [ 526.628642][T19344] IPVS: using max 28 ests per chain, 67200 per kthread [ 526.651602][T19351] netlink: 'syz.1.3296': attribute type 3 has an invalid length. [ 526.661321][T19351] netlink: 'syz.1.3296': attribute type 2 has an invalid length. [ 526.677055][T19351] netlink: 'syz.1.3296': attribute type 2 has an invalid length. [ 527.334286][ T5889] IPVS: starting estimator thread 0... [ 527.458661][T19378] IPVS: using max 28 ests per chain, 67200 per kthread [ 527.579916][T19374] lo speed is unknown, defaulting to 1000 [ 527.641251][T19374] gre0 speed is unknown, defaulting to 1000 [ 527.877584][T19393] __nla_validate_parse: 8 callbacks suppressed [ 527.877607][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 527.937185][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3307'. [ 528.042258][T19397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3308'. [ 528.442213][T19413] netlink: 'syz.4.3314': attribute type 4 has an invalid length. [ 528.458527][T19413] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3314'. [ 528.516557][T19417] openvswitch: netlink: IPv4 tunnel dst address is zero [ 528.983256][T19433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3321'. [ 529.013794][T19429] bond1: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 529.026136][T19429] bond1: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 529.043169][T19440] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3322'. [ 529.640668][T19464] netlink: 'syz.1.3328': attribute type 1 has an invalid length. [ 530.002665][T19478] lo speed is unknown, defaulting to 1000 [ 530.018191][T19488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3332'. [ 530.023326][T19478] gre0 speed is unknown, defaulting to 1000 [ 530.183953][T19493] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3335'. [ 530.585590][T19509] syzkaller0: entered promiscuous mode [ 530.595002][T19509] syzkaller0: entered allmulticast mode [ 530.796710][ T31] audit: type=1107 audit(1776979328.350:12): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 530.901115][T19517] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 531.288749][T19518] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.296305][T19518] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.709630][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.743486][T19518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.133587][T19525] ipvlan2: entered allmulticast mode [ 532.143149][T19525] batadv_slave_1: entered allmulticast mode [ 532.185129][T19533] ipvlan3: entered allmulticast mode [ 532.272132][T19540] netlink: 'syz.3.3348': attribute type 1 has an invalid length. [ 532.315824][T13706] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.325939][T13706] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.339052][T13706] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.359931][T13706] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.632794][T19556] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20000 [ 532.915457][T19571] netlink: 'syz.1.3357': attribute type 62 has an invalid length. [ 532.962905][T19571] netlink: 'syz.1.3357': attribute type 62 has an invalid length. [ 533.996421][T19629] Bluetooth: MGMT ver 1.23 [ 534.218005][T19631] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 534.270569][T19631] bond1 (unregistering): Released all slaves [ 534.453537][ T7475] lec:lec_start_xmit: lec0:No lecd attached [ 534.493228][T19633] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 534.547786][T19633] bond1 (unregistering): Released all slaves [ 534.701277][T19645] tipc: Started in network mode [ 534.748465][T19645] tipc: Node identity 163f20ea6009, cluster identity 4711 [ 534.767055][T19645] tipc: Enabled bearer , priority 0 [ 534.813142][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'. [ 535.127795][T19647] syzkaller0: entered promiscuous mode [ 535.175187][T19647] syzkaller0: entered allmulticast mode [ 535.213526][T19647] tipc: Resetting bearer [ 535.371270][T19674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3382'. [ 535.399827][T19675] x_tables: duplicate underflow at hook 1 [ 535.420996][T19674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3382'. [ 535.520593][T19643] tipc: Resetting bearer [ 536.067468][T19707] rdma_rxe: rxe_newlink: failed to add wg1 [ 539.305749][T19643] tipc: Disabling bearer [ 539.327709][ T8445] tipc: Node number set to 1983258858 [ 539.336831][T19668] lo speed is unknown, defaulting to 1000 [ 539.366980][T19668] gre0 speed is unknown, defaulting to 1000 [ 539.468376][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 539.476578][ C0] lec:lec_tx_timeout: lec0 [ 539.481873][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 539.522083][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3397'. [ 539.569017][T19719] Cannot find add_set index 0 as target [ 539.826934][T19731] veth0: entered promiscuous mode [ 539.845844][T19730] veth0: left promiscuous mode [ 539.979409][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 540.042482][T19743] syzkaller0: entered promiscuous mode [ 540.058497][T19743] syzkaller0: entered allmulticast mode [ 540.099507][T19738] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 540.286110][T19750] netlink: 364 bytes leftover after parsing attributes in process `syz.4.3403'. [ 540.755701][T19763] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3404'. [ 540.815960][T19771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3407'. [ 541.313313][T19800] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3413'. [ 541.420836][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3413'. [ 541.453512][T19802] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 541.720796][T19813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3417'. [ 541.735191][T19811] bridge_slave_1: left allmulticast mode [ 541.767784][T19813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3417'. [ 541.793608][T19811] bridge_slave_1: left promiscuous mode [ 541.830483][T19811] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.893720][T19811] bond0: (slave bond_slave_0): Releasing backup interface [ 541.939103][T19811] bond0: (slave bond_slave_1): Releasing backup interface [ 541.974894][T19825] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 542.063709][T19811] team0: Port device team_slave_0 removed [ 542.124751][T19811] team0: Port device team_slave_1 removed [ 542.133624][T19800] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 542.150296][T19800] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 542.155088][T19811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.179109][T19811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.202891][T19811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.218543][T19811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.240060][T19811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 542.301623][T19813] bond2: option primary_reselect: invalid value (133) [ 542.311334][T19813] bond2 (unregistering): Released all slaves [ 542.357627][T19825] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3417'. [ 542.382233][T19800] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 542.411336][T19800] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 542.420909][T19813] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3417'. [ 542.511178][T19824] lo speed is unknown, defaulting to 1000 [ 542.513841][T19800] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 542.534348][T19824] gre0 speed is unknown, defaulting to 1000 [ 542.553784][T19800] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 542.680844][T19800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 542.698983][T19800] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 542.757284][T19800] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 542.767943][T19800] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 542.897146][T19842] netlink: 'syz.1.3425': attribute type 13 has an invalid length. [ 542.917966][T19842] netlink: 'syz.1.3425': attribute type 17 has an invalid length. [ 543.040591][T19847] netlink: 'syz.2.3424': attribute type 3 has an invalid length. [ 543.083128][T19842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.104096][T19842] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.123974][T19842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.675822][T19858] lo speed is unknown, defaulting to 1000 [ 543.737582][T13697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.758633][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.769176][T13697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.839346][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.933740][T19870] : entered allmulticast mode [ 543.972219][T19858] gre0 speed is unknown, defaulting to 1000 [ 544.101106][T19886] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 544.180161][T19888] geneve1: entered promiscuous mode [ 544.441031][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.488329][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 544.497300][ C0] lec:lec_tx_timeout: lec0 [ 544.502452][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 545.286897][T19931] netlink: 'syz.4.3449': attribute type 1 has an invalid length. [ 545.298098][T19931] __nla_validate_parse: 4 callbacks suppressed [ 545.298117][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'. [ 545.333663][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'. [ 545.367140][T19933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 545.611154][T19940] lo speed is unknown, defaulting to 1000 [ 545.658774][T19940] gre0 speed is unknown, defaulting to 1000 [ 545.835844][T19951] netlink: 556 bytes leftover after parsing attributes in process `syz.4.3454'. [ 545.894335][T19955] veth0_macvtap: left promiscuous mode [ 546.473433][T19964] lo speed is unknown, defaulting to 1000 [ 546.502781][T19968] xt_hashlimit: size too large, truncated to 1048576 [ 546.597093][T19964] gre0 speed is unknown, defaulting to 1000 [ 548.198718][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 548.242012][T20015] lo speed is unknown, defaulting to 1000 [ 548.291130][T20015] gre0 speed is unknown, defaulting to 1000 [ 548.693859][T20041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3473'. [ 549.497053][T20050] tipc: Enabling of bearer rejected, failed to enable media [ 549.518296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 549.527219][ C0] lec:lec_tx_timeout: lec0 [ 549.533275][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.549215][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 549.578099][T13707] bridge_slave_1: left allmulticast mode [ 549.578921][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3477'. [ 549.613960][T13707] bridge_slave_1: left promiscuous mode [ 549.625111][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.670704][T13707] bridge_slave_0: left allmulticast mode [ 549.687846][T13707] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.784039][T20056] block nbd0: NBD_DISCONNECT [ 549.787307][T13707] dvmrp6: left allmulticast mode [ 549.808852][T13707] pimreg9: left allmulticast mode [ 549.817893][T20056] block nbd0: Send disconnect failed -32 [ 549.869955][T20056] block nbd0: shutting down sockets [ 549.997392][T13707] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 550.182581][T13707] bond7 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 550.210395][T13707] bond7 (unregistering): (slave ip6gretap0): Releasing backup interface [ 550.693600][T13707] bond1 (unregistering): (slave gretap1): Releasing active interface [ 550.780855][T13707] bond6 (unregistering): (slave geneve3): Releasing active interface [ 551.044846][T13707] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 551.055719][T13707] bridge6 (unregistering): left promiscuous mode [ 551.211608][T13707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.225062][T13707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.241139][T13707] bond0 (unregistering): Released all slaves [ 551.256958][T13707] bond1 (unregistering): Released all slaves [ 551.285313][T13707] bond2 (unregistering): (slave veth7): Releasing backup interface [ 551.296398][T13707] bond2 (unregistering): Released all slaves [ 551.318059][T13707] bond3 (unregistering): Released all slaves [ 551.348730][T13707] bond4 (unregistering): Released all slaves [ 551.369248][T13707] bond5 (unregistering): Released all slaves [ 551.410184][T13707] bond6 (unregistering): Released all slaves [ 551.428966][T13707] bond7 (unregistering): Released all slaves [ 551.446505][T13707] team0: Port device bond8 removed [ 551.454774][T13707] bond8 (unregistering): Released all slaves [ 551.476583][T13707] bond9 (unregistering): Released all slaves [ 551.676685][T13707] tipc: Left network mode [ 552.021450][T20101] lo speed is unknown, defaulting to 1000 [ 552.052413][T20101] gre0 speed is unknown, defaulting to 1000 [ 553.297879][T20161] ipvlan2: left allmulticast mode [ 553.310987][T20161] ipvlan3: left allmulticast mode [ 553.316651][T20161] batadv_slave_1: left allmulticast mode [ 553.507473][T20170] sctp: [Deprecated]: syz.0.3504 (pid 20170) Use of int in max_burst socket option. [ 553.507473][T20170] Use struct sctp_assoc_value instead [ 553.572895][T20177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3506'. [ 553.781289][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 554.548355][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 554.557382][ C0] lec:lec_tx_timeout: lec0 [ 554.563552][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.617413][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 555.046289][T20247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3522'. [ 555.054912][T20245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3522'. [ 555.074863][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 555.095748][T13707] hsr_slave_0: left promiscuous mode [ 555.111141][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3522'. [ 555.123540][T13707] hsr_slave_1: left promiscuous mode [ 555.135095][T13707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.150211][T13707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.771470][T13707] team0 (unregistering): Port device team_slave_1 removed [ 556.057810][T20249] gre0 speed is unknown, defaulting to 1000 [ 556.432691][T20279] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 556.516207][T20283] tipc: New replicast peer: 255.255.255.255 [ 556.570569][T20283] tipc: Enabled bearer , priority 10 [ 556.998431][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 557.057147][T13707] IPVS: stop unused estimator thread 0... [ 557.106221][T20299] netlink: 'syz.4.3534': attribute type 1 has an invalid length. [ 557.115196][T20299] netlink: 936 bytes leftover after parsing attributes in process `syz.4.3534'. [ 557.232607][T13707] bond2: left allmulticast mode [ 557.254856][T20301] netlink: 'syz.4.3535': attribute type 2 has an invalid length. [ 557.259842][T13707] bond2: left promiscuous mode [ 557.276990][T20301] netlink: 'syz.4.3535': attribute type 1 has an invalid length. [ 557.285811][T20301] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3535'. [ 557.307682][T13707] bridge1: port 1(bond2) entered disabled state [ 557.779159][T13698] smc: removing ib device syz1 [ 558.012457][T13707] bond4 (unregistering): (slave geneve3): Releasing backup interface [ 558.415103][T13707] bond11 (unregistering): (slave bridge4): Releasing backup interface [ 558.432390][T13707] bridge4 (unregistering): left promiscuous mode [ 558.453559][T13707] bridge4 (unregistering): left allmulticast mode [ 558.692400][T13707] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 558.713102][T13707] bond0 (unregistering): Released all slaves [ 558.757107][T13707] bond1 (unregistering): Released all slaves [ 558.809571][T13707] bond2 (unregistering): Released all slaves [ 558.870733][T13707] bond3 (unregistering): Released all slaves [ 558.941443][T13707] bond4 (unregistering): Released all slaves [ 558.985895][T13707] bond5 (unregistering): Released all slaves [ 559.021856][T13707] bond6 (unregistering): Released all slaves [ 559.081559][T13707] bond7 (unregistering): Released all slaves [ 559.138924][T13707] bond8 (unregistering): Released all slaves [ 559.183605][T13707] bond9 (unregistering): Released all slaves [ 559.223198][T13707] bond10 (unregistering): Released all slaves [ 559.281313][T13707] bond11 (unregistering): Released all slaves [ 559.328933][T13707] bond12 (unregistering): Released all slaves [ 559.411303][T13707] bond13 (unregistering): Released all slaves [ 559.450128][T13707] bond14 (unregistering): Released all slaves [ 559.797267][T20333] syzkaller0: entered promiscuous mode [ 559.834178][T20333] syzkaller0: entered allmulticast mode [ 560.015351][T20343] netlink: 'syz.2.3545': attribute type 1 has an invalid length. [ 560.046757][T20343] nbd: illegal input index 871591272 [ 560.358271][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 560.366522][ C0] lec:lec_tx_timeout: lec0 [ 560.373683][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.392355][T20358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3548'. [ 560.463855][T20358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3548'. [ 560.961840][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3553'. [ 561.099345][T20385] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 561.167105][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3554'. [ 561.420020][T13707] : left promiscuous mode [ 561.728762][T13707] tipc: Disabling bearer [ 561.760556][T13707] tipc: Disabling bearer [ 561.795740][T13707] tipc: Left network mode [ 561.994373][T20424] netlink: 'syz.1.3568': attribute type 58 has an invalid length. [ 562.097677][T20429] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3569'. [ 562.671120][T13707] IPVS: stopping backup sync thread 12030 ... [ 562.735033][T20447] gretap0: entered promiscuous mode [ 562.765725][T20447] vlan2: entered promiscuous mode [ 563.410170][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.856916][T20474] syzkaller0: entered promiscuous mode [ 563.875324][T20474] syzkaller0: entered allmulticast mode [ 564.023908][T20477] IPVS: Scheduler module ip_vs_ not found [ 564.051786][T20481] IPVS: Scheduler module ip_vs_ not found [ 564.159660][T20494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3584'. [ 564.497963][T20503] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.562782][T13707] hsr_slave_0: left promiscuous mode [ 564.602496][T13707] hsr_slave_1: left promiscuous mode [ 564.737622][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3589'. [ 564.794772][T13707] pim6reg (unregistering): left allmulticast mode [ 564.832629][T20517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.055753][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 565.398279][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 565.407175][ C0] lec:lec_tx_timeout: lec0 [ 565.413662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 565.575638][T20549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'. [ 565.589510][T20549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'. [ 565.752252][T20515] bond1: (slave 26): Releasing backup interface [ 565.775904][T20515] bond1: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed [ 565.842867][T20515] bridge_slave_0: left allmulticast mode [ 565.850846][T20515] bridge_slave_0: left promiscuous mode [ 565.857147][T20515] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.873891][T20515] bridge_slave_1: left allmulticast mode [ 565.881576][T20515] bridge_slave_1: left promiscuous mode [ 565.887679][T20515] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.902631][T20515] bond0: (slave bond_slave_0): Releasing backup interface [ 565.941938][T20515] team0: Port device team_slave_0 removed [ 565.972377][T20515] team0: Port device team_slave_1 removed [ 565.988086][T20515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.996453][T20515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.005875][T20515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.014738][T20515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.024610][T20515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.044352][T20520] macvtap0: entered promiscuous mode [ 566.056664][T20514] tipc: Enabling of bearer rejected, already enabled [ 566.331863][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 566.526337][T20567] pim6reg: entered allmulticast mode [ 566.606542][T20577] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 566.856598][T20583] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3605'. [ 567.036755][T13707] IPVS: stop unused estimator thread 0... [ 567.045189][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 567.134348][T20607] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 567.198554][T20612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3612'. [ 567.370182][T20621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3611'. [ 567.644348][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 567.666394][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 567.747750][T20630] syzkaller0: entered promiscuous mode [ 567.761644][T20630] syzkaller0: entered allmulticast mode [ 568.140082][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 570.436016][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 570.444321][ C0] lec:lec_tx_timeout: lec0 [ 570.449612][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 571.771644][T20639] syz_tun: entered allmulticast mode [ 571.837053][T20659] bridge0: entered promiscuous mode [ 572.017343][T20695] __nla_validate_parse: 2 callbacks suppressed [ 572.017364][T20695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3621'. [ 572.453777][T20693] bond2: Removing last arp target with arp_interval on [ 572.473453][T20695] ipvlan1: entered promiscuous mode [ 572.481556][T20695] ipvlan1: left promiscuous mode [ 572.717778][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3623'. [ 572.730017][T20707] netem: incorrect ge model size [ 572.750085][T20707] netem: change failed [ 572.798386][T20704] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.839505][T20713] xt_l2tp: invalid flags combination: 8 [ 572.932087][T20711] syzkaller0: entered promiscuous mode [ 572.943219][T20711] syzkaller0: entered allmulticast mode [ 572.967394][T20704] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 573.638492][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 575.470594][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 575.479393][ C0] lec:lec_tx_timeout: lec0 [ 575.484587][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 576.816280][T20704] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 576.832724][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3629'. [ 576.842648][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3629'. [ 576.929925][T20704] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 577.058536][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3636'. [ 577.126988][ T5828] block nbd0: Receive control failed (result -1) [ 577.164180][T13691] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.355055][T13691] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.426039][T20768] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3638'. [ 577.583870][ T7241] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 577.610037][ T7241] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 578.012497][T20794] nbd: must specify a device to reconfigure [ 578.282758][T20815] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3649'. [ 578.525365][T20830] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 579.296057][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'. [ 579.627558][T20877] macvtap1: entered promiscuous mode [ 579.643078][T20877] macvtap1: entered allmulticast mode [ 579.923242][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 579.951377][T20899] netlink: 'syz.2.3667': attribute type 15 has an invalid length. [ 579.972087][T20899] netlink: 'syz.2.3667': attribute type 25 has an invalid length. [ 580.012773][T20899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 580.086684][T20900] bond1 (unregistering): Released all slaves [ 580.498480][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 580.506898][ C0] lec:lec_tx_timeout: lec0 [ 580.512016][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 580.618985][T20924] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 580.778096][T20929] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3677'. [ 580.836459][T20929] tipc: Enabled bearer , priority 0 [ 580.865755][T20929] syzkaller0: entered promiscuous mode [ 580.889892][T20929] syzkaller0: entered allmulticast mode [ 580.989644][T20929] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3677'. [ 581.031381][T20929] tipc: Resetting bearer [ 581.064474][T20928] tipc: Resetting bearer [ 581.159238][T20928] tipc: Disabling bearer [ 581.449699][T20958] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 581.675812][T20967] IPVS: set_ctl: invalid protocol: 137 172.20.20.41:20001 [ 581.914292][T20973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3689'. [ 581.924280][T20973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3689'. [ 583.254043][T21026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3700'. [ 583.520987][T21042] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3704'. [ 583.780173][T21054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3707'. [ 584.372951][T21082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3715'. [ 584.630600][T21093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'. [ 584.810567][T21097] tun0: tun_chr_ioctl cmd 1074812118 [ 584.831948][T21097] tun0: tun_chr_ioctl cmd 1074033169 [ 585.029111][T21106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3722'. [ 585.518358][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 585.527016][ C0] lec:lec_tx_timeout: lec0 [ 585.532397][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 585.543047][T21120] netlink: 'syz.4.3727': attribute type 1 has an invalid length. [ 585.619215][T21120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.734028][T21129] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 585.797683][T21131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.820956][T21134] sctp: [Deprecated]: syz.4.3733 (pid 21134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.820956][T21134] Use struct sctp_sack_info instead [ 585.909813][T21135] sit0: entered promiscuous mode [ 585.922405][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 585.945402][T21139] dummy0: mtu less than device minimum [ 585.995741][T21142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.035895][T21144] ip6tnl0: entered promiscuous mode [ 586.042344][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3735'. [ 586.060635][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'. [ 586.145906][T21147] No such timeout policy "syz1" [ 586.253497][T21156] netlink: 'syz.4.3739': attribute type 1 has an invalid length. [ 586.264638][T21153] netlink: 'syz.0.3738': attribute type 3 has an invalid length. [ 586.289452][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 586.300186][T21153] netlink: 'syz.0.3738': attribute type 3 has an invalid length. [ 586.544485][T21176] netlink: 'syz.3.3746': attribute type 4 has an invalid length. [ 586.544485][T21175] netlink: 'syz.3.3746': attribute type 4 has an invalid length. [ 586.636117][T21175] netlink: 'syz.3.3746': attribute type 4 has an invalid length. [ 586.824161][T21197] tipc: Enabling of bearer rejected, failed to enable media [ 588.628661][T21264] netlink: 'syz.1.3763': attribute type 1 has an invalid length. [ 588.697672][T21268] __nla_validate_parse: 3 callbacks suppressed [ 588.697694][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 588.765253][T21269] gretap1: entered allmulticast mode [ 588.779513][T21269] bond2: (slave gretap1): making interface the new active one [ 588.791564][T21269] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 588.937990][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'. [ 589.067087][T21292] netlink: 'syz.0.3768': attribute type 1 has an invalid length. [ 589.087717][T21287] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 589.135586][T21286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3767'. [ 589.252968][T21298] Cannot find add_set index 1 as target [ 589.493512][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 589.564345][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3771'. [ 589.731512][T21322] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 589.784837][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 589.894887][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3771'. [ 589.920997][T13694] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.943220][T13694] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.007420][T13694] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.038980][T13698] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.550274][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 590.558885][ C0] lec:lec_tx_timeout: lec0 [ 590.564053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 590.712808][T21367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.273336][T21378] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.281782][T21391] can: request_module (can-proto-0) failed. [ 591.291450][T21378] team0: Port device bond5 added [ 591.693251][T21419] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 591.826626][T21426] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 591.896070][T21426] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 592.022394][T21429] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 592.042058][T21429] syzkaller1: Refused to change device type [ 592.058861][ T5487] veth0_vlan: left promiscuous mode [ 592.105392][ T5487] veth0_vlan: entered promiscuous mode [ 592.368155][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3799'. [ 592.401158][T21442] bond2: Removing last ns target with arp_interval on [ 592.723466][T21458] No such timeout policy "syz0" [ 592.853158][T21461] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3801'. [ 593.654733][T21479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3803'. [ 593.773068][T21490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3804'. [ 593.802829][T21487] can: request_module (can-proto-3) failed. [ 593.959631][T21494] openvswitch: netlink: Multiple metadata blocks provided [ 593.981281][T21487] netlink: 'syz.0.3804': attribute type 10 has an invalid length. [ 594.033211][T21487] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3804'. [ 594.083973][T21482] bond2: entered promiscuous mode [ 594.099049][T21482] bond2: entered allmulticast mode [ 594.126650][T21506] netlink: 'syz.4.3807': attribute type 10 has an invalid length. [ 594.162793][T21506] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3807'. [ 594.185060][T21487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.208053][T21487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.225863][T21499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.236458][T21487] hsr0: entered promiscuous mode [ 594.252702][T21487] bridge0: port 3(hsr0) entered blocking state [ 594.269086][T21487] bridge0: port 3(hsr0) entered disabled state [ 594.284048][T21487] hsr0: entered allmulticast mode [ 594.295695][T21487] hsr_slave_0: entered allmulticast mode [ 594.308618][T21487] hsr_slave_1: entered allmulticast mode [ 594.361282][T21506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.379116][T21506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.411638][T21506] hsr0: entered promiscuous mode [ 594.423749][T21506] bridge0: port 1(hsr0) entered blocking state [ 594.431325][T21506] bridge0: port 1(hsr0) entered disabled state [ 594.439578][T21506] hsr0: entered allmulticast mode [ 594.444991][T21506] hsr_slave_0: entered allmulticast mode [ 594.452534][T21506] hsr_slave_1: entered allmulticast mode [ 594.781362][T21518] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3812'. [ 594.827895][T21518] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3812'. [ 594.913138][T21527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3813'. [ 595.059922][T21539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3815'. [ 595.320720][T21549] ip6gretap1: entered promiscuous mode [ 595.345206][T21549] ip6gretap1: entered allmulticast mode [ 595.532967][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'. [ 595.544210][T21564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3818'. [ 595.566485][T21540] syzkaller1: entered promiscuous mode [ 595.616220][T21540] syzkaller1: entered allmulticast mode [ 595.847854][T21571] gre1: entered allmulticast mode [ 596.111105][T21578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3823'. [ 596.211157][T21578] erspan0: entered promiscuous mode [ 596.358254][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 596.366693][ C0] lec:lec_tx_timeout: lec0 [ 596.373815][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 596.776475][T21611] team0: Port device syz_tun added [ 596.793018][T21613] ip6erspan0: entered allmulticast mode [ 596.810561][T21611] team0: Port device syz_tun removed [ 596.825245][T21611] bridge_slave_0: left allmulticast mode [ 596.838346][T21611] bridge_slave_0: left promiscuous mode [ 596.852205][T21611] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.876938][T21611] bridge_slave_1: left allmulticast mode [ 596.890615][T21611] bridge_slave_1: left promiscuous mode [ 596.904197][T21611] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.932489][T21611] bond0: (slave bond_slave_0): Releasing backup interface [ 596.956786][T21611] bond0: (slave bond_slave_1): Releasing backup interface [ 596.977190][T21611] team0: Port device team_slave_0 removed [ 596.997476][T21611] team0: Port device team_slave_1 removed [ 597.016813][T21611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.040686][T21611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 597.127807][T21617] bond6: Unable to set down delay as MII monitoring is disabled [ 597.141123][T21617] bond6 (unregistering): Released all slaves [ 597.504249][T21632] pim6reg1: entered promiscuous mode [ 597.521225][T21632] pim6reg1: entered allmulticast mode [ 597.651186][T21644] xt_hashlimit: size too large, truncated to 1048576 [ 597.688043][T21644] xt_hashlimit: max too large, truncated to 1048576 [ 597.821777][T21655] syzkaller0: entered promiscuous mode [ 597.827775][T21655] syzkaller0: entered allmulticast mode [ 599.881138][T21703] netlink: 'syz.0.3860': attribute type 4 has an invalid length. [ 600.294435][T21727] xt_CT: No such helper "snmp_trap" [ 600.723168][T21736] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.398389][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 601.407307][ C0] lec:lec_tx_timeout: lec0 [ 601.412120][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 601.813257][T21744] __nla_validate_parse: 7 callbacks suppressed [ 601.813291][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 601.870443][T21744] netlink: 'syz.4.3869': attribute type 1 has an invalid length. [ 602.871349][T21712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.242994][T21763] bridge_slave_1: entered promiscuous mode [ 603.266393][T21763] bridge_slave_1: entered allmulticast mode [ 603.283433][T21764] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3874'. [ 603.706303][T21773] netlink: 'syz.0.3877': attribute type 7 has an invalid length. [ 604.014452][T21781] netlink: 'syz.0.3879': attribute type 1 has an invalid length. [ 604.197193][T21781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.292494][T21786] vlan3: entered allmulticast mode [ 604.318658][T21786] bond3: entered allmulticast mode [ 604.414565][T21787] bond3: (slave geneve2): making interface the new active one [ 604.436179][T21787] geneve2: entered allmulticast mode [ 604.448126][T21787] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 604.471343][ T7241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.496232][ T7241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.535912][ T7241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.558622][ T7241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.574613][T21789] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 604.608650][T21789] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 604.714768][T21802] netlink: 'syz.0.3885': attribute type 89 has an invalid length. [ 604.767778][T21803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3885'. [ 605.068363][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 605.273784][T21821] delete_channel: no stack [ 605.353606][T21823] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 605.367734][T21823] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 605.396542][T21821] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3890'. [ 605.454571][T21825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3892'. [ 605.917434][T21836] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3897'. [ 605.933195][T21841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3900'. [ 606.267149][T21846] 8021q: VLANs not supported on ip6_vti0 [ 606.279024][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 606.317527][T21846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3902'. [ 606.415618][T21855] macsec1: entered allmulticast mode [ 606.423698][T21855] dummy0: entered allmulticast mode [ 606.428469][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 606.437724][ C0] lec:lec_tx_timeout: lec0 [ 606.443444][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 606.456493][T21855] dummy0: left allmulticast mode [ 606.757161][T21867] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3906'. [ 606.822087][T21873] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3906'. [ 606.844833][T21875] netlink: 'syz.0.3908': attribute type 1 has an invalid length. [ 606.899074][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3905'. [ 606.955190][T21864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.024894][T21875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 607.036815][T21864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3905'. [ 607.541981][T21897] Bluetooth: MGMT ver 1.23 [ 608.355902][T21951] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 608.689720][T21968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'. [ 608.906063][T21973] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3930'. [ 608.967370][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 609.159189][T21988] xt_hashlimit: size too large, truncated to 1048576 [ 609.223068][T21988] xt_hashlimit: max too large, truncated to 1048576 [ 609.238799][T21992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3934'. [ 609.241393][T21981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.286592][T21992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3934'. [ 609.305928][T21995] netlink: 'syz.3.3936': attribute type 10 has an invalid length. [ 609.348811][T21995] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3936'. [ 609.391303][T21995] hsr0: entered promiscuous mode [ 609.409078][T21995] bridge0: port 1(hsr0) entered blocking state [ 609.435771][T21995] bridge0: port 1(hsr0) entered disabled state [ 609.487395][T21995] hsr0: entered allmulticast mode [ 609.515378][T21995] hsr_slave_0: entered allmulticast mode [ 609.555947][T21995] hsr_slave_1: entered allmulticast mode [ 609.607637][T21995] bridge0: port 1(hsr0) entered blocking state [ 609.614424][T21995] bridge0: port 1(hsr0) entered forwarding state [ 609.664603][T22006] netlink: 'syz.1.3940': attribute type 1 has an invalid length. [ 609.778813][T21997] netlink: 'syz.3.3936': attribute type 27 has an invalid length. [ 609.941173][T22019] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 609.978307][T22027] netlink: 'syz.1.3940': attribute type 1 has an invalid length. [ 609.999874][T22019] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 610.017866][T22027] netlink: 'syz.1.3940': attribute type 2 has an invalid length. [ 610.414100][T13691] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 610.441477][T22037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3945'. [ 610.452151][T13691] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 610.489201][T13691] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 610.524555][T13691] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 611.458330][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 611.467378][ C0] lec:lec_tx_timeout: lec0 [ 611.472655][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 612.474417][T22133] __nla_validate_parse: 4 callbacks suppressed [ 612.474439][T22133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3972'. [ 613.284113][T22175] netlink: 'syz.1.3981': attribute type 6 has an invalid length. [ 613.292722][T22175] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3981'. [ 613.686830][T22180] tipc: Enabled bearer , priority 0 [ 613.709351][T22180] tipc: Resetting bearer [ 613.724281][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3985'. [ 613.745364][T22188] gretap0: entered promiscuous mode [ 613.778956][T22188] gretap0: left promiscuous mode [ 613.995998][T22184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3984'. [ 614.465466][ T9] IPVS: starting estimator thread 0... [ 614.498574][T22215] tipc: Enabled bearer , priority 0 [ 614.530693][T22215] syzkaller0: entered promiscuous mode [ 614.557377][T22215] syzkaller0: entered allmulticast mode [ 614.566266][T22217] IPVS: using max 25 ests per chain, 60000 per kthread [ 614.618414][T22211] netlink: 'syz.0.3993': attribute type 39 has an invalid length. [ 614.661485][T22223] netlink: 'syz.1.3997': attribute type 83 has an invalid length. [ 614.731306][T22215] tipc: Resetting bearer [ 614.759777][T22225] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 614.814955][T22212] tipc: Resetting bearer [ 614.838136][T22239] netlink: 'syz.1.4000': attribute type 2 has an invalid length. [ 614.929613][T22212] tipc: Disabling bearer [ 615.001415][T22239] : entered promiscuous mode [ 615.077412][T22245] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 615.113409][T22248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4003'. [ 615.297957][T22258] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.4007'. [ 615.353725][T22258] syzkaller0: entered promiscuous mode [ 615.370960][T22258] syzkaller0: entered allmulticast mode [ 615.391037][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.401329][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.408636][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.415530][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.422516][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.429799][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.436699][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.443709][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.450739][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.457638][T22258] tc action pedit offset must be on 32 bit boundaries [ 615.465012][T22258] TC_ACT_REPEAT abuse ? [ 615.606279][T22269] netlink: 'syz.0.4008': attribute type 5 has an invalid length. [ 616.357149][T22292] veth1_vlan: left promiscuous mode [ 616.376556][T22296] ip6t_srh: unknown srh match flags 4000 [ 616.488294][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 616.496699][ C0] lec:lec_tx_timeout: lec0 [ 616.502291][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 617.495527][T22327] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 619.254087][T22289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.505546][T22352] xt_hashlimit: size too large, truncated to 1048576 [ 619.732429][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 619.907356][T11265] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.923631][T11265] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.951627][T22379] vlan4: entered allmulticast mode [ 619.957238][T22379] bridge_slave_0: entered allmulticast mode [ 619.965231][T22379] bridge0: port 1(vlan4) entered blocking state [ 619.975154][T22379] bridge0: port 1(vlan4) entered disabled state [ 619.984797][T22379] vlan4: entered promiscuous mode [ 619.990803][T22379] bridge_slave_0: entered promiscuous mode [ 620.005697][T11265] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.027814][T22386] netlink: 'syz.1.4040': attribute type 1 has an invalid length. [ 620.029961][T11265] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.050907][T22386] nbd: illegal input index 871591272 [ 620.215155][T22401] syzkaller1: entered promiscuous mode [ 620.223628][T22401] syzkaller1: entered allmulticast mode [ 620.295946][T22404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4044'. [ 620.360336][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4044'. [ 620.429753][T22404] netlink: 'syz.3.4044': attribute type 2 has an invalid length. [ 620.452479][T22404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4044'. [ 620.597590][T22425] xt_l2tp: unknown flags: 51 [ 621.032948][T22449] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 621.178898][T22453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4055'. [ 621.283319][T22456] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4055'. [ 621.518323][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 621.527166][ C0] lec:lec_tx_timeout: lec0 [ 621.532311][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 621.626591][T22440] bond3: ARP target 9.0.0.0 is already present [ 621.646138][T22440] bond3: option arp_ip_target: invalid value (9) [ 621.660346][T22440] bond3 (unregistering): Released all slaves [ 621.915087][T22469] netlink: 'syz.4.4058': attribute type 10 has an invalid length. [ 621.935468][T22469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4058'. [ 622.232992][T22481] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 622.342280][T22481] netlink: 'syz.3.4062': attribute type 10 has an invalid length. [ 622.644558][T22495] netlink: 'syz.2.4064': attribute type 4 has an invalid length. [ 623.060707][T22511] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 623.133578][T22503] bond6 (unregistering): Released all slaves [ 623.904418][T22548] syzkaller1: entered promiscuous mode [ 623.926277][T22548] syzkaller1: entered allmulticast mode [ 623.994988][T22555] syzkaller0: entered promiscuous mode [ 624.011142][T22555] syzkaller0: entered allmulticast mode [ 624.221492][T22564] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 624.355187][T22567] netlink: 'syz.4.4085': attribute type 2 has an invalid length. [ 624.376939][T22567] netlink: 'syz.4.4085': attribute type 1 has an invalid length. [ 624.603647][T22576] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4087'. [ 624.630973][T22576] 0X: renamed from caif0 [ 624.647345][T22578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4088'. [ 624.660732][T22576] 0X: entered allmulticast mode [ 624.678438][T22576] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 624.847255][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.016021][T22593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4092'. [ 625.122484][T22599] netlink: 'syz.0.4096': attribute type 1 has an invalid length. [ 625.140637][T22598] delete_channel: no stack [ 625.199716][T22604] netlink: 'syz.1.4097': attribute type 4 has an invalid length. [ 625.282661][T22604] syzkaller1: entered promiscuous mode [ 625.311308][T22604] syzkaller1: entered allmulticast mode [ 625.547500][T22623] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4100'. [ 625.587360][T22623] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4100'. [ 625.657827][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4100'. [ 625.717708][T22626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4101'. [ 626.026159][T22636] xt_CT: No such helper "snmp_trap" [ 626.548352][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 626.557285][ C0] lec:lec_tx_timeout: lec0 [ 626.562675][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 626.693392][T22688] xt_CONNSECMARK: invalid mode: 0 [ 626.710214][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 629.327566][T22670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.566949][T22724] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.616904][T22727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4127'. [ 629.681347][T22732] bridge0: port 1(vlan3) entered blocking state [ 629.697005][T22732] bridge0: port 1(vlan3) entered disabled state [ 629.704480][T22732] vlan3: entered allmulticast mode [ 629.731518][T22732] geneve0: entered allmulticast mode [ 629.830613][T22738] bridge0: port 3(vlan2) entered blocking state [ 629.844005][T22738] bridge0: port 3(vlan2) entered disabled state [ 629.855565][T22738] vlan2: entered allmulticast mode [ 629.866834][T22738] dummy0: entered allmulticast mode [ 629.877421][T22738] vlan2: entered promiscuous mode [ 629.883453][T22738] dummy0: entered promiscuous mode [ 629.937346][T22749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4134'. [ 630.094864][T22759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4135'. [ 630.399381][T22770] tipc: Started in network mode [ 630.405875][T22770] tipc: Node identity ced649bb442e, cluster identity 4711 [ 630.414578][T22770] tipc: Enabled bearer , priority 0 [ 630.534285][T22777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4141'. [ 630.583537][T22770] syzkaller0: entered promiscuous mode [ 630.598985][T22770] syzkaller0: entered allmulticast mode [ 630.607725][T22770] tipc: Resetting bearer [ 630.635754][T22769] tipc: Resetting bearer [ 630.710347][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4145'. [ 630.734075][T22788] netlink: 'syz.4.4145': attribute type 10 has an invalid length. [ 632.370034][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 632.379054][ C0] lec:lec_tx_timeout: lec0 [ 632.384430][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.703061][T22769] tipc: Disabling bearer [ 634.720753][T22788] team0 (unregistering): Port device team_slave_0 removed [ 634.733703][T22788] team0 (unregistering): Port device team_slave_1 removed [ 634.761618][T22788] team0 (unregistering): Port device bond5 removed [ 634.799858][ T8444] tipc: Node number set to 2331527611 [ 635.023074][T22812] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4150'. [ 635.053345][T22812] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4150'. [ 635.232831][T22820] No such timeout policy "syz1" [ 635.312629][T22820] tipc: Started in network mode [ 635.326997][T22820] tipc: Node identity 16018bdc3399, cluster identity 4711 [ 635.352230][T22820] tipc: Enabled bearer , priority 0 [ 635.375259][T22820] syzkaller0: entered promiscuous mode [ 635.395954][T22820] syzkaller0: entered allmulticast mode [ 635.443444][T22820] tipc: Resetting bearer [ 635.561840][T22818] tipc: Resetting bearer [ 635.679781][T22818] tipc: Disabling bearer [ 635.792989][T22826] sit0: left promiscuous mode [ 635.814933][T22826] bridge_slave_1: left promiscuous mode [ 635.843483][T22826] bridge_slave_1: left allmulticast mode [ 635.866230][T22826] macvtap0: left promiscuous mode [ 635.874235][T22826] bond2: left promiscuous mode [ 635.880480][T22826] bond2: left allmulticast mode [ 635.886018][T22826] vlan3: left allmulticast mode [ 635.908042][T22826] bond3: left allmulticast mode [ 635.924775][T22826] geneve2: left allmulticast mode [ 635.995841][T22850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4161'. [ 636.113080][T22850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 637.263970][T13704] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.295843][T13704] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.324650][T13704] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.398386][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 637.406951][ C0] lec:lec_tx_timeout: lec0 [ 637.412406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 637.461439][T13704] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.502328][T13704] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.534843][T13704] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.576284][T13704] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.597728][T13704] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.087203][T22909] netlink: 'syz.3.4177': attribute type 1 has an invalid length. [ 638.113323][T22909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4177'. [ 638.860398][T22933] x_tables: duplicate underflow at hook 2 [ 638.899668][T22935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4184'. [ 639.201677][T22951] netlink: 'syz.0.4188': attribute type 13 has an invalid length. [ 639.217613][T22951] netlink: 'syz.0.4188': attribute type 17 has an invalid length. [ 639.342471][T22958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4191'. [ 639.356715][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4191'. [ 639.361012][T22951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.381116][T22951] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.421527][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'. [ 639.442834][T22951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.460847][T13704] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.497218][T13704] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.519886][T13704] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.531404][T13704] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.720523][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'. [ 640.256339][T22998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 640.370137][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4203'. [ 640.451425][T22998] xt_CT: No such helper "netbios-ns" [ 640.572190][T23005] ieee802154 phy0 wpan0: encryption failed: -22 [ 641.103321][T23030] __nla_validate_parse: 2 callbacks suppressed [ 641.103343][T23030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4213'. [ 641.135489][T23030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4213'. [ 641.170903][T23031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4213'. [ 641.200341][T23028] xt_socket: unknown flags 0x50 [ 641.210655][T23031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4213'. [ 641.476303][T23038] syzkaller0: entered promiscuous mode [ 641.518362][T23038] syzkaller0: entered allmulticast mode [ 642.428313][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 642.437055][ C0] lec:lec_tx_timeout: lec0 [ 642.442476][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 642.468014][T23089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4226'. [ 642.508119][T23090] openvswitch: netlink: Flow actions attr not present in new flow. [ 642.588678][T23090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4225'. [ 645.929541][T23071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4224'. [ 645.941539][T23074] IPVS: Unknown mcast interface: 3 [ 645.951551][T23075] syzkaller0: entered promiscuous mode [ 645.963175][T23075] syzkaller0: entered allmulticast mode [ 646.419395][T23119] xt_limit: Overflow, try lower: 28676/2147483648 [ 646.497291][T23115] tipc: Enabled bearer , priority 0 [ 646.591491][T23115] syzkaller0: entered promiscuous mode [ 646.598168][T23115] syzkaller0: entered allmulticast mode [ 646.611560][T23115] tipc: Resetting bearer [ 646.777757][T23114] tipc: Resetting bearer [ 647.054872][T23144] netlink: 'syz.0.4238': attribute type 21 has an invalid length. [ 647.077216][T23144] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4238'. [ 647.458242][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 647.466936][ C0] lec:lec_tx_timeout: lec0 [ 647.472222][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 650.766343][T23114] tipc: Disabling bearer [ 650.799719][T23131] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 650.965782][T23144] netlink: 'syz.0.4238': attribute type 4 has an invalid length. [ 650.993848][T23144] netlink: 'syz.0.4238': attribute type 5 has an invalid length. [ 651.007239][T23144] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4238'. [ 651.022407][ T5931] tipc: Node number set to 630754268 [ 651.072750][T23152] tipc: Started in network mode [ 651.093772][T23152] tipc: Node identity bbbbbb01, cluster identity 4711 [ 651.116269][T23152] tipc: Enabled bearer , priority 10 [ 651.419183][T23171] netlink: 'syz.0.4242': attribute type 1 has an invalid length. [ 651.497458][T23171] bond6: entered promiscuous mode [ 651.551093][T23171] 8021q: adding VLAN 0 to HW filter on device bond6 [ 651.929817][T23177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 651.947693][T23177] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 651.976762][T23177] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 652.000587][T23177] bond6: (slave gre1): making interface the new active one [ 652.030756][T23177] gre1: entered promiscuous mode [ 652.079686][T23177] bond6: (slave gre1): Enslaving as an active interface with an up link [ 652.127175][T23199] hsr0: left allmulticast mode [ 652.147389][T23199] hsr_slave_0: left allmulticast mode [ 652.165105][T23199] hsr_slave_1: left allmulticast mode [ 652.175653][T23199] bridge0: port 1(hsr0) entered disabled state [ 652.488291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 652.496996][ C0] lec:lec_tx_timeout: lec0 [ 652.502714][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 652.568038][ T8439] tipc: Node number set to 3149642497 [ 652.602614][T23210] syzkaller0: entered promiscuous mode [ 652.621440][T23210] syzkaller0: entered allmulticast mode [ 652.781238][T23211] syzkaller0: entered promiscuous mode [ 652.788642][T23211] syzkaller0: entered allmulticast mode [ 653.262667][T23244] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4260'. [ 653.289158][T23244] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4260'. [ 653.316789][T23244] netlink: 'syz.1.4260': attribute type 5 has an invalid length. [ 653.343099][T23244] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4260'. [ 657.440451][T23243] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 657.451458][T23243] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 657.461899][T23243] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 657.477156][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'. [ 657.518474][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 657.527265][ C0] lec:lec_tx_timeout: lec0 [ 657.532897][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 657.673675][T23272] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4263'. [ 658.497606][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4274'. [ 658.535832][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'. [ 658.858833][T23322] netlink: 'syz.4.4276': attribute type 1 has an invalid length. [ 658.867500][T23322] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4276'. [ 659.053515][T23309] syzkaller0: entered promiscuous mode [ 659.067995][T23309] syzkaller0: entered allmulticast mode [ 659.086858][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.110829][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.147744][T23315] 5n: entered promiscuous mode [ 659.160235][T23322] netlink: 'syz.4.4276': attribute type 1 has an invalid length. [ 659.176446][T23322] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4276'. [ 659.212276][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.233071][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.612849][T23358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 662.551767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 662.560275][ C0] lec:lec_tx_timeout: lec0 [ 662.565441][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 663.434438][T23358] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 663.662517][T23370] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4286'. [ 663.699711][T23370] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 663.829121][T23376] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4288'. [ 663.848904][T23376] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4288'. [ 663.875492][T23381] rdma_op ffff8880576361f0 conn xmit_rdma 0000000000000000 [ 664.158484][T23391] syzkaller0: entered promiscuous mode [ 664.180926][T23391] syzkaller0: entered allmulticast mode [ 665.332310][T23439] netlink: 'syz.0.4306': attribute type 1 has an invalid length. [ 665.366983][T23441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4307'. [ 665.512137][T23444] netlink: 'syz.3.4308': attribute type 2 has an invalid length. [ 665.521682][T23448] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4309'. [ 665.555181][T23448] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4309'. [ 665.732255][T23456] netlink: 'syz.3.4311': attribute type 3 has an invalid length. [ 665.753090][T23456] nbd: must specify at least one socket [ 665.759559][T23456] nbd: couldn't find device at index 3 [ 665.768073][T23456] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4311'. [ 666.035570][T23461] netlink: 'syz.2.4315': attribute type 12 has an invalid length. [ 666.062711][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'. [ 666.093110][T23482] netlink: 'syz.4.4319': attribute type 4 has an invalid length. [ 666.122820][T23482] netlink: 'syz.4.4319': attribute type 4 has an invalid length. [ 666.172026][T23485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4319'. [ 666.219232][T23482] netlink: 'syz.4.4319': attribute type 4 has an invalid length. [ 666.229426][T23485] hsr_slave_0: left promiscuous mode [ 666.240068][T23485] hsr_slave_1: left promiscuous mode [ 666.298954][T23482] netlink: 'syz.4.4319': attribute type 4 has an invalid length. [ 666.319405][T23482] netlink: 'syz.4.4319': attribute type 4 has an invalid length. [ 666.338404][T23482] netlink: 'syz.4.4319': attribute type 4 has an invalid length. [ 666.402058][T23494] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4323'. [ 667.838326][ T31] audit: type=1107 audit(1776979465.400:13): pid=23583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+ȼh2 [ 667.838326][ T31] 4K@t7+2}i4_MwM)SGAބ^IЦbf`8,85D"ww)1R}<\95-!ӫVbSۋoIggsYƢ[!*U`@|Uz6w'3?zW=dOKrvv;m]yM-*0wKj=;ةq&g_ (\lOz35I^R A =`VdB˵h3؛5^!LF)L)VABS1bl5bif]c%k e0MdM&.-yyS RèE}BSO.p\pmt [ 667.838326][ T31] "6T' [ 668.358277][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 668.366805][ C0] lec:lec_tx_timeout: lec0 [ 668.371818][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 668.633325][T23616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 668.656146][T23635] dvmrp6: entered allmulticast mode [ 669.052271][T23660] __nla_validate_parse: 4 callbacks suppressed [ 669.052299][T23660] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4365'. [ 669.232837][T23675] xt_TCPMSS: Only works on TCP SYN packets [ 669.270366][T23677] xt_TCPMSS: Only works on TCP SYN packets [ 669.436294][T23692] netlink: zone id is out of range [ 669.448863][T23692] netlink: zone id is out of range [ 669.455816][T23692] netlink: zone id is out of range [ 669.531686][T23684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4370'. [ 669.614724][T23692] netlink: set zone limit has 4 unknown bytes [ 670.460728][T23737] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 670.597506][T23742] validate_nla: 29 callbacks suppressed [ 670.597530][T23742] netlink: 'syz.2.4383': attribute type 10 has an invalid length. [ 670.622717][T23743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 670.918481][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 671.052479][T23754] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4387'. [ 671.106152][T23754] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4387'. [ 671.417866][T23761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4388'. [ 671.902673][T23785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4391'. [ 671.940063][T23785] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 672.770113][T23790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.053402][T23829] netlink: 'syz.1.4402': attribute type 3 has an invalid length. [ 673.100557][T23827] netlink: 'syz.0.4401': attribute type 15 has an invalid length. [ 673.201513][T23827] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4401'. [ 673.240543][T23832] 8021q: VLANs not supported on 60X [ 673.398332][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 673.407043][ C0] lec:lec_tx_timeout: lec0 [ 673.412328][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 673.632239][T23838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4406'. [ 674.158144][T23847] x_tables: duplicate underflow at hook 2 [ 674.638822][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4411'. [ 674.670503][T23859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4411'. [ 674.882761][T23864] netlink: 'syz.3.4412': attribute type 1 has an invalid length. [ 674.990473][T23864] erspan2: entered allmulticast mode [ 675.542032][T23893] netlink: 'syz.1.4422': attribute type 21 has an invalid length. [ 675.564946][T23893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4422'. [ 676.099400][T23902] pim6reg1: entered promiscuous mode [ 676.118113][T23902] pim6reg1: entered allmulticast mode [ 676.399336][T23909] tipc: Enabling of bearer rejected, failed to enable media [ 676.474039][T23910] syzkaller0: entered promiscuous mode [ 676.483594][T23910] syzkaller0: entered allmulticast mode [ 676.585742][T23923] netlink: 'syz.2.4430': attribute type 1 has an invalid length. [ 676.708576][T23923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.741593][T23931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4432'. [ 676.765374][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4427'. [ 676.829798][T23937] netlink: 'syz.1.4427': attribute type 12 has an invalid length. [ 676.849370][T23924] bond5: (slave veth12): Enslaving as an active interface with a down link [ 677.075461][T23939] bond3 (unregistering): Released all slaves [ 677.142099][T23948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4435'. [ 677.150002][T23949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4435'. [ 677.176883][T23943] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 677.349947][T23951] IPVS: length: 124 != 8 [ 677.450753][T23957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4437'. [ 678.428314][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 678.437409][ C0] lec:lec_tx_timeout: lec0 [ 679.018886][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 679.076667][T24026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4451'. [ 679.740283][T24050] __nla_validate_parse: 1 callbacks suppressed [ 679.740303][T24050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4457'. [ 679.938839][T24049] batman_adv: batadv0: Adding interface: dummy0 [ 679.961317][T24049] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.008326][T24049] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 680.324132][T24066] netlink: 'syz.4.4461': attribute type 13 has an invalid length. [ 680.417691][T24066] tipc: Resetting bearer [ 680.501942][T24079] syzkaller1: entered promiscuous mode [ 680.513591][T24079] syzkaller1: entered allmulticast mode [ 680.765629][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.796418][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.819758][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.828052][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.836640][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.849585][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4471'. [ 680.853472][T24102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4472'. [ 680.859705][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.859845][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.859993][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.860388][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.905936][T24098] openvswitch: netlink: Flow key attr not present in new flow. [ 680.956894][T24102] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.034964][T24102] bond5: (slave batadv1): Opening slave failed [ 681.087324][T24110] netlink: 'syz.2.4474': attribute type 1 has an invalid length. [ 681.104451][T24110] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4474'. [ 681.133645][T24111] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4473'. [ 681.411782][T24124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 681.438397][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4478'. [ 681.460006][T24124] netlink: 'syz.4.4478': attribute type 1 has an invalid length. [ 681.661748][T24131] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4481'. [ 681.832110][T24144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4481'. [ 681.924438][T24148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4484'. [ 683.253506][T24190] tipc: Enabling of bearer rejected, failed to enable media [ 683.431436][T24201] netlink: 'syz.4.4497': attribute type 4 has an invalid length. [ 683.477795][T24201] netlink: 'syz.4.4497': attribute type 4 has an invalid length. [ 683.602258][T24204] netlink: 'syz.0.4499': attribute type 1 has an invalid length. [ 683.612007][T24201] tipc: Resetting bearer [ 683.657242][ T29] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 683.682046][ T29] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 683.693107][T24206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.700393][ T29] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 683.732408][ T29] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 683.858455][T24211] netlink: 'syz.0.4501': attribute type 1 has an invalid length. [ 683.932265][T24211] 8021q: adding VLAN 0 to HW filter on device bond7 [ 684.425761][T24220] tipc: Started in network mode [ 684.437702][T24224] netlink: 'syz.2.4504': attribute type 13 has an invalid length. [ 684.445190][T24220] tipc: Node identity b2a2e94968b, cluster identity 4711 [ 684.475782][T24220] tipc: Enabled bearer , priority 0 [ 684.511394][T24225] syzkaller0: entered promiscuous mode [ 684.532367][T24225] syzkaller0: entered allmulticast mode [ 684.653101][T24243] netlink: 'syz.1.4506': attribute type 4 has an invalid length. [ 684.812899][ T5931] IPVS: starting estimator thread 0... [ 684.821427][ T5931] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 684.908457][T24254] IPVS: using max 25 ests per chain, 60000 per kthread [ 685.140871][T24225] tipc: Resetting bearer [ 685.205131][T24225] tipc: Disabling bearer [ 685.439008][ T5931] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 685.466543][T24283] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 685.503893][T24285] __nla_validate_parse: 1 callbacks suppressed [ 685.503913][T24285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4512'. [ 686.199969][T24310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4521'. [ 686.289975][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 686.933476][T24343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4525'. [ 686.963583][T24343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4525'. [ 687.395077][T24350] syzkaller0: entered promiscuous mode [ 687.419619][T24350] syzkaller0: entered allmulticast mode [ 687.685183][T24350] macsec1: entered promiscuous mode [ 687.711644][T24350] virt_wifi0: entered promiscuous mode [ 687.726600][T24376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4532'. [ 687.782546][T24373] geneve2: entered promiscuous mode [ 687.865512][ T31] audit: type=1107 audit(1776979485.430:14): pid=24377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 688.177408][T24392] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4535'. [ 688.194949][T24397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4537'. [ 690.770458][T24410] net_ratelimit: 25 callbacks suppressed [ 690.770480][T24410] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 690.965135][T24412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'. [ 691.398640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.407413][ C0] lec:lec_tx_timeout: lec0 [ 692.595366][T10473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.695413][T10473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.805967][T10473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.840956][T10473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.968253][T24432] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 693.090116][T24432] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 693.146682][T24432] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4545'. [ 693.895717][T24478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4556'. [ 694.153907][T24490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4559'. [ 694.318828][T24488] mac80211_hwsim hwsim46 syzkaller0: Caught tx_queue_len zero misconfig [ 694.626102][T24465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.649840][T24465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.944402][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'. [ 694.970991][T24523] openvswitch: netlink: Flow actions attr not present in new flow. [ 695.086837][T24465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.106766][T24465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.696180][T24523] 8021q: VLANs not supported on caif0 [ 695.930108][T24465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.943523][T24465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.097352][T24465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.113336][T24465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.263653][T24555] x9: renamed from bridge_slave_0 [ 696.437798][T24560] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4576'. [ 696.599991][T10473] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.620568][T10473] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.763790][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.786175][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.918026][T10473] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.945678][T10473] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.020601][T10473] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.038932][T10473] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.149168][T24587] netlink: 'syz.0.4583': attribute type 29 has an invalid length. [ 697.164430][T24587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4583'. [ 697.315309][T24587] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 697.356297][T24587] bond8 (unregistering): Released all slaves [ 697.743366][T24616] SET target dimension over the limit! [ 698.305770][T24639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4596'. [ 698.772093][T24647] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4600'. [ 699.017768][T24665] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 699.030031][T24666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4606'. [ 699.046498][T24665] netlink: 'syz.4.4605': attribute type 1 has an invalid length. [ 699.238940][T24681] netlink: 'syz.2.4609': attribute type 1 has an invalid length. [ 699.277810][T24681] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4609'. [ 699.501882][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4612'. [ 699.575035][T24697] unsupported nla_type 216 [ 699.685509][T24700] openvswitch: netlink: Key type 253 is out of range max 32 [ 699.762643][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4614'. [ 700.529908][T24726] sctp: [Deprecated]: syz.3.4622 (pid 24726) Use of int in maxseg socket option. [ 700.529908][T24726] Use struct sctp_assoc_value instead [ 700.550076][T24723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4620'. [ 701.536948][T24766] syzkaller1: entered promiscuous mode [ 701.558947][T24766] syzkaller1: entered allmulticast mode [ 701.846286][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4633'. [ 702.351097][T24795] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4638'. [ 703.300749][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 704.342566][T24878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4663'. [ 704.410112][T24883] gtp0: entered promiscuous mode [ 704.421634][T24883] gtp0: entered allmulticast mode [ 704.553078][T22417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.583305][T22417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.721866][T24903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4671'. [ 704.731465][T24903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4671'. [ 704.748003][T24903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4671'. [ 704.758059][T24903] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4671'. [ 704.796546][T24902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4671'. [ 704.806500][T24902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4671'. [ 705.874066][T24971] xt_TCPMSS: Only works on TCP SYN packets [ 708.797577][T24968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 708.811823][T25002] netlink: 'syz.3.4695': attribute type 1 has an invalid length. [ 708.834365][T25002] __nla_validate_parse: 2 callbacks suppressed [ 708.834386][T25002] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4695'. [ 709.073734][T25062] bond6: entered promiscuous mode [ 709.100635][T25062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 709.236292][T25076] netlink: 'syz.1.4711': attribute type 16 has an invalid length. [ 709.275812][T25076] netlink: 'syz.1.4711': attribute type 17 has an invalid length. [ 709.321234][T25078] xt_hashlimit: max too large, truncated to 1048576 [ 709.417246][T25085] netlink: 'syz.0.4714': attribute type 1 has an invalid length. [ 709.438478][T25085] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4714'. [ 709.472546][T25085] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4714'. [ 709.506269][T25085] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4714'. [ 709.556394][T25088] IPVS: Scheduler module ip_vs_ not found [ 709.682876][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4718'. [ 709.743450][T25098] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 710.539751][T25133] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4727'. [ 711.018594][T25145] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4730'. [ 711.476191][T25161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4733'. [ 711.904581][T25169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4735'. [ 711.951414][T25169] ipt_REJECT: TCP_RESET invalid for non-tcp [ 712.129725][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4737'. [ 712.260068][T25176] virt_wifi0 (unregistering): left promiscuous mode [ 713.611741][T25229] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 714.322745][T25256] __nla_validate_parse: 3 callbacks suppressed [ 714.322766][T25256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4751'. [ 715.604597][T25289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4756'. [ 716.056211][T25307] netlink: 'syz.4.4761': attribute type 58 has an invalid length. [ 716.084565][T25307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4761'. [ 716.154448][T25306] syzkaller0: entered promiscuous mode [ 716.181205][T25306] syzkaller0: entered allmulticast mode [ 716.854942][T25337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.906957][T25337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4765'. [ 716.983551][T25338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 717.030034][T25338] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4765'. [ 717.089302][T25338] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4765'. [ 723.049574][T25351] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 723.065071][T25351] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 723.076767][T25351] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 723.279894][T25365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4772'. [ 723.420169][T25368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4773'. [ 723.703018][T25378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 723.762899][T25378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4777'. [ 724.336028][T25403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4783'. [ 724.385888][T25404] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4782'. [ 724.399617][T25399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4781'. [ 724.409919][T25403] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4783'. [ 724.430731][T25399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4781'. [ 724.621212][T25409] tipc: Enabled bearer , priority 0 [ 724.654310][T25409] syzkaller0: entered promiscuous mode [ 724.670659][T25409] syzkaller0: entered allmulticast mode [ 724.747715][T25409] tipc: Resetting bearer [ 724.777249][T25408] tipc: Resetting bearer [ 724.877823][T25419] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4788'. [ 724.922920][T25419] netlink: 'syz.4.4788': attribute type 1 has an invalid length. [ 724.934902][T25408] tipc: Disabling bearer [ 725.385863][T25437] netlink: 'syz.2.4794': attribute type 13 has an invalid length. [ 725.513756][ T8439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 725.610416][T25444] batadv_slave_1: entered promiscuous mode [ 725.631997][ T8439] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 725.862884][T25443] batadv_slave_1: left promiscuous mode [ 725.900524][T25423] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 726.357938][T25461] veth0_macvtap: entered allmulticast mode [ 726.376740][T25461] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 726.694791][T25473] netlink: 'syz.3.4802': attribute type 8 has an invalid length. [ 726.747108][T25475] syzkaller1: entered promiscuous mode [ 726.773359][T25475] syzkaller1: entered allmulticast mode [ 726.796640][ T7475] lec:lec_start_xmit: lec0:No lecd attached [ 727.637405][T25507] netlink: 'syz.3.4810': attribute type 62 has an invalid length. [ 727.737930][T25513] netlink: 'syz.0.4815': attribute type 13 has an invalid length. [ 729.118708][T25567] __nla_validate_parse: 5 callbacks suppressed [ 729.118749][T25567] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4829'. [ 729.155097][T25567] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4829'. [ 729.178884][T25567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4829'. [ 729.424898][T25585] netlink: 'syz.1.4836': attribute type 28 has an invalid length. [ 729.441594][T25585] netlink: 'syz.1.4836': attribute type 3 has an invalid length. [ 729.454321][T25585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4836'. [ 729.822773][T25576] veth0_vlan: left promiscuous mode [ 730.097649][T25579] pim6reg: left allmulticast mode [ 730.319306][T11265] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.364397][T11265] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.397864][T11265] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.419644][T11265] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.451631][T11265] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.473453][T11265] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.614400][T11265] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.646144][T11265] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.734005][T25629] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4843'. [ 730.853587][T25624] vlan4: entered allmulticast mode [ 730.917511][T25624] bond0: entered allmulticast mode [ 730.963769][T25635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4845'. [ 731.050298][T25629] bond0 (unregistering): Released all slaves [ 731.132234][T25635] bond0: entered promiscuous mode [ 731.156903][T25635] bond_slave_0: entered promiscuous mode [ 731.185447][T25635] bond_slave_1: entered promiscuous mode [ 731.211855][T25635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.234920][T25645] batadv_slave_1: entered promiscuous mode [ 731.291490][T25652] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4848'. [ 731.303850][T25653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.365656][T25640] batadv_slave_1: left promiscuous mode [ 731.530616][T25652] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 731.635930][T25664] wg2: entered allmulticast mode [ 731.968931][T25673] netlink: 'syz.4.4853': attribute type 1 has an invalid length. [ 732.262242][T25683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4857'. [ 732.295343][T25677] syzkaller0: entered promiscuous mode [ 732.314388][T25677] syzkaller0: entered allmulticast mode [ 732.338993][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 732.359803][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 732.369448][ C0] lec:lec_tx_timeout: lec0 [ 732.493239][T25683] vlan2: entered promiscuous mode [ 732.507396][T25683] bridge0: entered promiscuous mode [ 733.330891][T25723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4862'. [ 737.937287][T25714] netlink: 'syz.0.4861': attribute type 3 has an invalid length. [ 737.975233][T25714] netlink: 'syz.0.4861': attribute type 3 has an invalid length. [ 738.815735][T25770] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 739.248276][T25787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.260007][T25787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.300667][T25791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4875'. [ 739.664669][T25800] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4878'. [ 739.944870][T25812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4882'. [ 739.954956][T25813] netlink: 'syz.0.4881': attribute type 1 has an invalid length. [ 740.092929][T25813] bond8: entered promiscuous mode [ 740.125172][T25813] bond8: entered allmulticast mode [ 740.155171][T25813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 740.260732][T25815] netlink: 34 bytes leftover after parsing attributes in process `syz.4.4883'. [ 740.324390][T25815] netlink: 34 bytes leftover after parsing attributes in process `syz.4.4883'. [ 740.403831][T25820] batman_adv: batadv0: Removing interface: dummy0 [ 740.439342][T25820] bond0: (slave bond_slave_0): Releasing backup interface [ 740.477959][T25820] bond_slave_0: left promiscuous mode [ 740.675068][T25820] bond0: (slave bond_slave_1): Releasing backup interface [ 740.723687][T25820] bond_slave_1: left promiscuous mode [ 740.732379][T25820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.756031][T25820] tipc: Resetting bearer [ 740.771896][T25822] syzkaller0: entered promiscuous mode [ 740.780273][T25841] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 740.793656][T25822] syzkaller0: entered allmulticast mode [ 740.809071][T25841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.143859][T25854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4888'. [ 741.279421][T25854] bond6: Unable to set up delay as MII monitoring is disabled [ 741.331191][T25854] bond6 (unregistering): Released all slaves [ 741.482765][T25876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4892'. [ 741.671633][T25880] netlink: 'syz.0.4893': attribute type 12 has an invalid length. [ 742.252329][T25908] netlink: 'syz.2.4895': attribute type 16 has an invalid length. [ 742.328361][T25908] netlink: 'syz.2.4895': attribute type 17 has an invalid length. [ 742.487153][T25899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4898'. [ 742.754343][T25916] Cannot find del_set index 1 as target [ 742.760268][ C1] ================================================================== [ 742.760301][ C1] BUG: KASAN: slab-use-after-free in ax25_heartbeat_expiry+0x115/0x140 [ 742.760342][ C1] Read of size 4 at addr ffff888077e42460 by task syz.0.4898/25916 [ 742.760362][ C1] [ 742.760381][ C1] CPU: 1 UID: 0 PID: 25916 Comm: syz.0.4898 Not tainted syzkaller #0 PREEMPT(full) [ 742.760407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.760428][ C1] Call Trace: [ 742.760436][ C1] [ 742.760445][ C1] dump_stack_lvl+0xe8/0x150 [ 742.760478][ C1] print_report+0xba/0x230 [ 742.760505][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 742.760531][ C1] kasan_report+0x117/0x150 [ 742.760552][ C1] ? call_timer_fn+0xd4/0x5e0 [ 742.760585][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 742.760617][ C1] ax25_heartbeat_expiry+0x115/0x140 [ 742.760646][ C1] call_timer_fn+0x192/0x5e0 [ 742.760674][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 742.760701][ C1] ? call_timer_fn+0xd4/0x5e0 [ 742.760729][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 742.760765][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 742.760788][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 742.760817][ C1] __run_timer_base+0x652/0x8b0 [ 742.760853][ C1] ? ktime_get+0x45/0x220 [ 742.760883][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 742.760916][ C1] run_timer_softirq+0xb7/0x170 [ 742.760942][ C1] handle_softirqs+0x22a/0x840 [ 742.760971][ C1] ? __irq_exit_rcu+0xca/0x220 [ 742.761002][ C1] __irq_exit_rcu+0xca/0x220 [ 742.761029][ C1] irq_exit_rcu+0x9/0x30 [ 742.761057][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 742.761083][ C1] [ 742.761091][ C1] [ 742.761100][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 742.761131][ C1] RIP: 0010:console_flush_all+0x801/0xb20 [ 742.761157][ C1] Code: ff ff e8 72 c3 20 00 90 0f 0b 90 e9 85 fc ff ff e8 64 c3 20 00 e8 9f 7a 0e 0a 48 85 db 74 c0 e8 55 c3 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 66 [ 742.761178][ C1] RSP: 0018:ffffc9000405f3e0 EFLAGS: 00000283 [ 742.761200][ C1] RAX: ffffffff81a49a9b RBX: ffffc9000405f540 RCX: 0000000000080000 [ 742.761217][ C1] RDX: ffffc9001f155000 RSI: 000000000000193c RDI: 000000000000193d [ 742.761232][ C1] RBP: ffffc9000405f4f0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 742.761249][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: dffffc0000000000 [ 742.761266][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f20f3c0 [ 742.761286][ C1] ? console_flush_all+0x7fb/0xb20 [ 742.761324][ C1] ? console_flush_all+0x123/0xb20 [ 742.761351][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 742.761375][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 742.761399][ C1] console_unlock+0xd1/0x1c0 [ 742.761431][ C1] ? __pfx_console_unlock+0x10/0x10 [ 742.761462][ C1] ? _printk+0xdd/0x130 [ 742.761483][ C1] vprintk_emit+0x485/0x560 [ 742.761517][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 742.761554][ C1] _printk+0xdd/0x130 [ 742.761577][ C1] ? __pfx__printk+0x10/0x10 [ 742.761598][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 742.761621][ C1] ? ___ratelimit+0x58c/0x8d0 [ 742.761655][ C1] set_target_v0_checkentry+0x3f1/0x500 [ 742.761687][ C1] xt_check_target+0x4a8/0xbf0 [ 742.761706][ C1] ? xt_find_target+0x83/0x260 [ 742.761746][ C1] ? __pfx_xt_check_target+0x10/0x10 [ 742.761777][ C1] ? xt_find_target+0x208/0x260 [ 742.761813][ C1] translate_table+0x1881/0x2110 [ 742.761856][ C1] ? __pfx_translate_table+0x10/0x10 [ 742.761877][ C1] ? __might_fault+0xaf/0x130 [ 742.761906][ C1] ? __might_fault+0xaf/0x130 [ 742.761945][ C1] ? _copy_from_user+0x94/0xb0 [ 742.761969][ C1] do_ipt_set_ctl+0x9f5/0xe00 [ 742.761993][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.762023][ C1] ? trace_contention_end+0x3d/0x140 [ 742.762043][ C1] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 742.762077][ C1] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 742.762102][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 742.762128][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 742.762160][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 742.762190][ C1] nf_setsockopt+0x26f/0x290 [ 742.762216][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 742.762245][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 742.762279][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 742.762321][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.762344][ C1] do_syscall_64+0x15f/0xf80 [ 742.762369][ C1] ? trace_irq_disable+0x3b/0x140 [ 742.762392][ C1] ? clear_bhb_loop+0x40/0x90 [ 742.762417][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.762439][ C1] RIP: 0033:0x7f1c3259c819 [ 742.762460][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.762479][ C1] RSP: 002b:00007f1c333f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 742.762503][ C1] RAX: ffffffffffffffda RBX: 00007f1c32816360 RCX: 00007f1c3259c819 [ 742.762520][ C1] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 742.762534][ C1] RBP: 00007f1c32632c91 R08: 0000000000000430 R09: 0000000000000000 [ 742.762548][ C1] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.762561][ C1] R13: 00007f1c328163f8 R14: 00007f1c32816360 R15: 00007fffc081a468 [ 742.762588][ C1] [ 742.762596][ C1] [ 742.762603][ C1] Allocated by task 24858: [ 742.762615][ C1] kasan_save_track+0x3e/0x80 [ 742.762646][ C1] __kasan_kmalloc+0x93/0xb0 [ 742.762664][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 742.762691][ C1] ax25_dev_device_up+0x54/0x5f0 [ 742.762709][ C1] ax25_device_event+0x127/0x8a0 [ 742.762726][ C1] notifier_call_chain+0x1ad/0x3d0 [ 742.762743][ C1] __dev_notify_flags+0x1a9/0x310 [ 742.762771][ C1] netif_change_flags+0xe8/0x1a0 [ 742.762799][ C1] dev_change_flags+0x130/0x260 [ 742.762825][ C1] dev_ioctl+0x7b4/0x1150 [ 742.762847][ C1] sock_do_ioctl+0x23e/0x320 [ 742.762867][ C1] sock_ioctl+0x5c6/0x7f0 [ 742.762885][ C1] __se_sys_ioctl+0xfc/0x170 [ 742.762901][ C1] do_syscall_64+0x15f/0xf80 [ 742.762924][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.762944][ C1] [ 742.762950][ C1] Freed by task 17536: [ 742.762962][ C1] kasan_save_track+0x3e/0x80 [ 742.762989][ C1] kasan_save_free_info+0x46/0x50 [ 742.763014][ C1] __kasan_slab_free+0x5c/0x80 [ 742.763043][ C1] __rcu_free_sheaf_prepare+0x129/0x290 [ 742.763066][ C1] rcu_free_sheaf+0x31/0x200 [ 742.763095][ C1] rcu_core+0x7cd/0x1070 [ 742.763119][ C1] handle_softirqs+0x22a/0x840 [ 742.763145][ C1] __irq_exit_rcu+0xca/0x220 [ 742.763171][ C1] irq_exit_rcu+0x9/0x30 [ 742.763197][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 742.763220][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 742.763242][ C1] [ 742.763248][ C1] The buggy address belongs to the object at ffff888077e42400 [ 742.763248][ C1] which belongs to the cache kmalloc-256 of size 256 [ 742.763266][ C1] The buggy address is located 96 bytes inside of [ 742.763266][ C1] freed 256-byte region [ffff888077e42400, ffff888077e42500) [ 742.763299][ C1] [ 742.763306][ C1] The buggy address belongs to the physical page: [ 742.763325][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888077e43c00 pfn:0x77e42 [ 742.763349][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 742.763366][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 742.763393][ C1] page_type: f5(slab) [ 742.763411][ C1] raw: 00fff00000000240 ffff88813fe2cb40 ffffea0000d9ed10 ffffea0000a93c10 [ 742.763429][ C1] raw: ffff888077e43c00 0000000800100008 00000000f5000000 0000000000000000 [ 742.763447][ C1] head: 00fff00000000240 ffff88813fe2cb40 ffffea0000d9ed10 ffffea0000a93c10 [ 742.763465][ C1] head: ffff888077e43c00 0000000800100008 00000000f5000000 0000000000000000 [ 742.763483][ C1] head: 00fff00000000001 ffffea0001df9081 00000000ffffffff 00000000ffffffff [ 742.763499][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 742.763510][ C1] page dumped because: kasan: bad access detected [ 742.763524][ C1] page_owner tracks the page as allocated [ 742.763532][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6021, tgid 6019 (syz.1.24), ts 99646929105, free_ts 99281714445 [ 742.763569][ C1] post_alloc_hook+0x231/0x280 [ 742.763600][ C1] get_page_from_freelist+0x24dc/0x2580 [ 742.763620][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 742.763641][ C1] allocate_slab+0x77/0x660 [ 742.763664][ C1] refill_objects+0x331/0x3c0 [ 742.763686][ C1] __pcs_replace_empty_main+0x2e6/0x730 [ 742.763710][ C1] __kmalloc_noprof+0x474/0x760 [ 742.763739][ C1] hash_ipportnet6_add+0x1634/0x2eb0 [ 742.763764][ C1] hash_ipportnet6_uadt+0xa88/0xe00 [ 742.763785][ C1] call_ad+0x18d/0xb60 [ 742.763808][ C1] ip_set_ad+0x824/0x9d0 [ 742.763829][ C1] nfnetlink_rcv_msg+0xc03/0x12c0 [ 742.763857][ C1] netlink_rcv_skb+0x232/0x4b0 [ 742.763900][ C1] nfnetlink_rcv+0x2c0/0x27b0 [ 742.763927][ C1] netlink_unicast+0x75c/0x8e0 [ 742.763951][ C1] netlink_sendmsg+0x813/0xb40 [ 742.763985][ C1] page last free pid 5875 tgid 5875 stack trace: [ 742.764000][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 742.764030][ C1] __slab_free+0x263/0x2b0 [ 742.764059][ C1] qlist_free_all+0x97/0x100 [ 742.764089][ C1] kasan_quarantine_reduce+0x148/0x160 [ 742.764118][ C1] __kasan_slab_alloc+0x22/0x80 [ 742.764136][ C1] __kmalloc_node_track_caller_noprof+0x493/0x7b0 [ 742.764168][ C1] __alloc_skb+0x2c1/0x7d0 [ 742.764195][ C1] alloc_skb_with_frags+0xca/0x890 [ 742.764225][ C1] sock_alloc_send_pskb+0x878/0x990 [ 742.764245][ C1] unix_dgram_sendmsg+0x460/0x18d0 [ 742.764270][ C1] sock_write_iter+0x49b/0x4f0 [ 742.764299][ C1] vfs_write+0x61d/0xb90 [ 742.764328][ C1] ksys_write+0x150/0x270 [ 742.764358][ C1] do_syscall_64+0x15f/0xf80 [ 742.764382][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.764404][ C1] [ 742.764410][ C1] Memory state around the buggy address: [ 742.764423][ C1] ffff888077e42300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 742.764440][ C1] ffff888077e42380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 742.764455][ C1] >ffff888077e42400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 742.764467][ C1] ^ [ 742.764481][ C1] ffff888077e42480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 742.764496][ C1] ffff888077e42500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 742.764510][ C1] ================================================================== [ 742.764555][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 742.764578][ C1] CPU: 1 UID: 0 PID: 25916 Comm: syz.0.4898 Not tainted syzkaller #0 PREEMPT(full) [ 742.764604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.764620][ C1] Call Trace: [ 742.764629][ C1] [ 742.764640][ C1] vpanic+0x56c/0xa60 [ 742.764675][ C1] ? __pfx_vpanic+0x10/0x10 [ 742.764708][ C1] ? irqentry_exit+0x218/0x730 [ 742.764740][ C1] panic+0xc5/0xd0 [ 742.764770][ C1] ? __pfx_panic+0x10/0x10 [ 742.764801][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 742.764839][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 742.764868][ C1] check_panic_on_warn+0x89/0xb0 [ 742.764894][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 742.764923][ C1] end_report+0x73/0x170 [ 742.764946][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 742.764974][ C1] kasan_report+0x128/0x150 [ 742.764995][ C1] ? call_timer_fn+0xd4/0x5e0 [ 742.765026][ C1] ? ax25_heartbeat_expiry+0x115/0x140 [ 742.765061][ C1] ax25_heartbeat_expiry+0x115/0x140 [ 742.765089][ C1] call_timer_fn+0x192/0x5e0 [ 742.765119][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 742.765148][ C1] ? call_timer_fn+0xd4/0x5e0 [ 742.765177][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 742.765213][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 742.765237][ C1] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 742.765267][ C1] __run_timer_base+0x652/0x8b0 [ 742.765302][ C1] ? ktime_get+0x45/0x220 [ 742.765335][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 742.765374][ C1] run_timer_softirq+0xb7/0x170 [ 742.765496][ C1] handle_softirqs+0x22a/0x840 [ 742.765542][ C1] ? __irq_exit_rcu+0xca/0x220 [ 742.765580][ C1] __irq_exit_rcu+0xca/0x220 [ 742.765613][ C1] irq_exit_rcu+0x9/0x30 [ 742.765642][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 742.765674][ C1] [ 742.765685][ C1] [ 742.765696][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 742.765723][ C1] RIP: 0010:console_flush_all+0x801/0xb20 [ 742.765752][ C1] Code: ff ff e8 72 c3 20 00 90 0f 0b 90 e9 85 fc ff ff e8 64 c3 20 00 e8 9f 7a 0e 0a 48 85 db 74 c0 e8 55 c3 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 66 [ 742.765774][ C1] RSP: 0018:ffffc9000405f3e0 EFLAGS: 00000283 [ 742.765797][ C1] RAX: ffffffff81a49a9b RBX: ffffc9000405f540 RCX: 0000000000080000 [ 742.765818][ C1] RDX: ffffc9001f155000 RSI: 000000000000193c RDI: 000000000000193d [ 742.765835][ C1] RBP: ffffc9000405f4f0 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 742.765854][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: dffffc0000000000 [ 742.765878][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f20f3c0 [ 742.765899][ C1] ? console_flush_all+0x7fb/0xb20 [ 742.765934][ C1] ? console_flush_all+0x123/0xb20 [ 742.765963][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 742.765998][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 742.766031][ C1] console_unlock+0xd1/0x1c0 [ 742.766070][ C1] ? __pfx_console_unlock+0x10/0x10 [ 742.766107][ C1] ? _printk+0xdd/0x130 [ 742.766134][ C1] vprintk_emit+0x485/0x560 [ 742.766173][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 742.766217][ C1] _printk+0xdd/0x130 [ 742.766243][ C1] ? __pfx__printk+0x10/0x10 [ 742.766268][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 742.766424][ C1] ? ___ratelimit+0x58c/0x8d0 [ 742.766454][ C1] set_target_v0_checkentry+0x3f1/0x500 [ 742.766492][ C1] xt_check_target+0x4a8/0xbf0 [ 742.766516][ C1] ? xt_find_target+0x83/0x260 [ 742.766552][ C1] ? __pfx_xt_check_target+0x10/0x10 [ 742.766582][ C1] ? xt_find_target+0x208/0x260 [ 742.766623][ C1] translate_table+0x1881/0x2110 [ 742.766665][ C1] ? __pfx_translate_table+0x10/0x10 [ 742.766690][ C1] ? __might_fault+0xaf/0x130 [ 742.766722][ C1] ? __might_fault+0xaf/0x130 [ 742.766766][ C1] ? _copy_from_user+0x94/0xb0 [ 742.766793][ C1] do_ipt_set_ctl+0x9f5/0xe00 [ 742.766822][ C1] ? rcu_is_watching+0x15/0xb0 [ 742.766856][ C1] ? trace_contention_end+0x3d/0x140 [ 742.766880][ C1] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 742.766916][ C1] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 742.766944][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 742.766975][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 742.767012][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 742.767047][ C1] nf_setsockopt+0x26f/0x290 [ 742.767076][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 742.767122][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 742.767160][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 742.767198][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.767222][ C1] do_syscall_64+0x15f/0xf80 [ 742.767249][ C1] ? trace_irq_disable+0x3b/0x140 [ 742.767274][ C1] ? clear_bhb_loop+0x40/0x90 [ 742.767308][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.767331][ C1] RIP: 0033:0x7f1c3259c819 [ 742.767351][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.767372][ C1] RSP: 002b:00007f1c333f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 742.767398][ C1] RAX: ffffffffffffffda RBX: 00007f1c32816360 RCX: 00007f1c3259c819 [ 742.767416][ C1] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 742.767431][ C1] RBP: 00007f1c32632c91 R08: 0000000000000430 R09: 0000000000000000 [ 742.767446][ C1] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.767461][ C1] R13: 00007f1c328163f8 R14: 00007f1c32816360 R15: 00007fffc081a468 [ 742.767490][ C1] [ 742.768116][ C1] Kernel Offset: disabled