last executing test programs: 12m26.492756758s ago: executing program 0 (id=6399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0xf0, 0x0, 0xffffffff, 0xf0, 0x208, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, &(0x7f00000001c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xffffffff, 0x0, 0xff000000, 0xff], [0xffffff, 0xffffff00, 0x0, 0xffffffff], 'dvmrp0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x23, 0x82, 0x4, 0x40}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast2, @icmp_id=0x67, @gre_key=0x3ff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @private0, [0x0, 0xffffffff, 0xffffff00, 0x1fffffe00], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x2f, 0x55, 0x7, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"a5a0"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@remote, @icmp_id=0x65, @icmp_id=0x65}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xffffff00, 0x0, 0xff000000], 'wg2\x00', 'veth0_to_team\x00', {0xff}, {}, 0x6, 0xb0, 0x2, 0x38}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x7ff, 0x6, 0x0, [0x200, 0x140, 0x8, 0x7c3, 0x9, 0x7f, 0x67ad, 0xe9d, 0x39, 0xb, 0x4, 0x3, 0x3, 0x6, 0xa, 0x7], 0x8}}, @common=@srh={{0x30}, {0x32, 0x0, 0x6, 0xee, 0x1, 0x102, 0x402}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xad9}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dvmrp0\x00', {}, {0xff}, 0x84, 0xe0, 0x3, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "391f"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x12}, @ipv6=@loopback, @gre_key=0x9, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x258, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001540)) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0xf0, 0x0, 0xffffffff, 0xf0, 0x208, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, &(0x7f00000001c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xffffffff, 0x0, 0xff000000, 0xff], [0xffffff, 0xffffff00, 0x0, 0xffffffff], 'dvmrp0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x23, 0x82, 0x4, 0x40}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@mcast2, @icmp_id=0x67, @gre_key=0x3ff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @private0, [0x0, 0xffffffff, 0xffffff00, 0x1fffffe00], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x2f, 0x55, 0x7, 0x10}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"a5a0"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@remote, @icmp_id=0x65, @icmp_id=0x65}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xffffff00, 0x0, 0xff000000], 'wg2\x00', 'veth0_to_team\x00', {0xff}, {}, 0x6, 0xb0, 0x2, 0x38}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x7ff, 0x6, 0x0, [0x200, 0x140, 0x8, 0x7c3, 0x9, 0x7f, 0x67ad, 0xe9d, 0x39, 0xb, 0x4, 0x3, 0x3, 0x6, 0xa, 0x7], 0x8}}, @common=@srh={{0x30}, {0x32, 0x0, 0x6, 0xee, 0x1, 0x102, 0x402}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xad9}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dvmrp0\x00', {}, {0xff}, 0x84, 0xe0, 0x3, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "391f"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x12}, @ipv6=@loopback, @gre_key=0x9, @port=0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x258, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001540)) (async) 12m25.52665831s ago: executing program 0 (id=6405): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x0, 0x0, {{0xb, 0x4, 0x1, 0x28, 0x2c, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @empty, {[@generic={0x83, 0x3, '^'}, @timestamp_addr={0x44, 0x14, 0x25, 0x1, 0x9, [{@broadcast, 0xbea7}, {@remote, 0x6}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x0, 0x0, {{0xb, 0x4, 0x1, 0x28, 0x2c, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @empty, {[@generic={0x83, 0x3, '^'}, @timestamp_addr={0x44, 0x14, 0x25, 0x1, 0x9, [{@broadcast, 0xbea7}, {@remote, 0x6}]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r1, r0, 0x1, 0x4, 0x1}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r1, r0, 0x1, 0x4, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1a, 0x19, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4e6, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x4, 0x4, 0x9, 0x100, 0x1}, @call={0x85, 0x0, 0x0, 0x77}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 12m25.23776695s ago: executing program 0 (id=6407): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000e70400000000000000000005000000090001797a300000edff40000000030a010200000000000000000500000009002b2d30fd7a30000000000900030073797a300000000014000480080001400000000008000240521deb0b54000000060a010400000000000000000500000008000b40000000002c00048028000180"], 0xdc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f00000002c0)=[{0x2, 0x4, 0x7}, {0x6, 0x0, 0x8, 0x2}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000010000160400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e"], 0x0, 0x5a}, 0x28) 12m24.749057475s ago: executing program 0 (id=6409): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x200008}, [@generic={0x91, 0x1, 0x1, 0x22}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) 12m24.579775834s ago: executing program 0 (id=6411): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000012c0), 0x0) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000013c0)={r1}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000001440)={0x9e, 0xfffffff8, 0x2, 0xeb6, 0x1}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001300)={@fallback=r1, r0, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xc, 0x7, &(0x7f0000001340)=ANY=[@ANYBLOB="7911a80000000000550102000100000085000000c40000007b000f000000000095000000000000020000001bd1b34f9eb85db4da87d7e37576ae97b30ae9d074ef80691bf273fa552e0b6b2c4285c57e08a552cb1174ec6ead096144a4506c4a4749f82bc3d808b41892f1bd23fe9dbb1bf4b8a5f2acb399d2f3ae4b"], &(0x7f0000001a00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m24.268356484s ago: executing program 0 (id=6414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x6, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r4, &(0x7f0000000640)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000680), 0x12) pread64(r6, &(0x7f0000001000)=""/4103, 0x1007, 0x1ff) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000006c0)=0x2018c91e3b3d30f2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffffc}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRESOCT=r8, @ANYRESHEX=r8], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r9, &(0x7f00000003c0), &(0x7f0000000400)=@tcp6=r8}, 0x20) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="6c92bc86427ef483d72f1ebb82208f5ca629fc3d90b04545874b961a26901422f01d22358cc335", 0x27}], 0x1}}], 0x2, 0x24040811) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd70100400000005000000080009000200000008000b000000040008000c00a80a0000"], 0x2c}}, 0x30) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) write$tun(r0, 0x0, 0x0) (async) syz_emit_ethernet(0x3de, &(0x7f0000000c00)=ANY=[@ANYBLOB="3bf9bef22c39aaaaaaaaaabb86dd6000000003a83afffe8000000000000000000000000000aaff02000000000000000000000000000186009078010004000000000000000000190aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502000100000005000000cf260004000218fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000001f1017dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f025bdfc6fd0b253664c7764b9990daac7c5937b42bc4f4ec842023422e45625b4bfea25dae3c918a0842107b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a02745000400000004145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf0630af1f98aea6fb3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7596d779b8353aac33a57d79b05613a12328f6101000000634a287570af5e4e12e213408c0005d5170000dce9674a36da018dff16e7a94fe18e88605abbbe1a02a326a63ce65f81ed0000000000"], 0x0) (async) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000700)={@private2, 0x31}) 12m9.128981137s ago: executing program 32 (id=6414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x6, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r4, &(0x7f0000000640)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000680), 0x12) pread64(r6, &(0x7f0000001000)=""/4103, 0x1007, 0x1ff) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000006c0)=0x2018c91e3b3d30f2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffffc}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRESOCT=r8, @ANYRESHEX=r8], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r9, &(0x7f00000003c0), &(0x7f0000000400)=@tcp6=r8}, 0x20) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, 0x0, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="6c92bc86427ef483d72f1ebb82208f5ca629fc3d90b04545874b961a26901422f01d22358cc335", 0x27}], 0x1}}], 0x2, 0x24040811) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd70100400000005000000080009000200000008000b000000040008000c00a80a0000"], 0x2c}}, 0x30) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) write$tun(r0, 0x0, 0x0) (async) syz_emit_ethernet(0x3de, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000700)={@private2, 0x31}) 8m58.043653393s ago: executing program 3 (id=7771): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="3baf694b7889"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write$rfkill(r1, &(0x7f0000000300)={0x7, 0x0, 0x2, 0x0, 0x1}, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7a2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040000}, 0x8880) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r4) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r4) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000a40)=0x4) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000a80)={0x2b, @local, 0x4e22, 0x3, 'none\x00', 0x12, 0x8, 0x74}, 0x2c) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x40) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, r12, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x48042}, 0x40040) sendmmsg$sock(r1, &(0x7f0000002540)=[{{&(0x7f0000000d40)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000dc0)="aa8545c2fc0db8c3dfc2da3f70c6fa5eba5ac4ba08e98fa1877fd5dd8fba0398b0817e988541f3f6c9e6f95aafef09a5fcd5ddf9152243ef72f46f370a84055c3f27c5e530a6767a92df0f600c4b326feece557fd2794dae2c7b4ca291d6988b15003277f51cb4852af7cbc2", 0x6c}, {&(0x7f0000000e40)="5b85fb70106d2641040b7b5254307d1a9c1d27c811585587c61a3420db9fd07de974cddd972faa2e750ed724802a21ad427cb7ee5e7ea695bec2f511d78aa85d604bbc7c914990c53e0de69c1259a148d336f624c2ab46b3954b37fb", 0x5c}, {&(0x7f0000000ec0)="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", 0xfe}, {&(0x7f0000000fc0)="726dd35e6fc6ce648aed33fd537ac4119ed217d0f6401b0ff2c487f8a8f13c612e34267f9fcb47adc908e3f28da91dbb972022e08c7d108039a1bc0794dea84041106afca67606435be215c605898bbcd0c1df1d32536632c3f2b0c3b897833c6709bb221e7a0fa314a9a1595ce039ab8cde9c4c018969ba42436a5e142a9b5e5e026de9887747820a00d65b0dbb0490e98f", 0x92}], 0x4, &(0x7f00000010c0)=[@timestamping={{0x14, 0x1, 0x25, 0xb6}}, @txtime={{0x18, 0x1, 0x3d, 0xe19e}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14}}], 0x60}}, {{&(0x7f0000001140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="6dab99e74caa24379c0e25de3ba179c3af30a31f73fa80579f6f2e050f270b691d95f2568b24aca35d51677086e1b5b624b5ba8d597b7093596d3d86c3df35ef02389e9f8198cf8354e998513560c91a42f00afdc6393be3388697f39f9d788260e9a38a688a140647c8d1bb661ccd00fef42940026d7ba05ffc24c191e015995d5176d6c39284ff0bb344e24f085bd8162d9239228978d21fca70059a8899872aa5c0d1df15bdcfc8ddc9e4e1a08db4c0259f72a24d17568fb60d486668fe963e8887915fc5a94f1f595daccb5e8ba2a31e10af89d7ad91d58ad72164aa12ffe3e054bec230144a7c94a9", 0xeb}, {&(0x7f00000022c0)="0ced4bd4386f5280fc0f0ff06f269c9e945bbd562c9b", 0x16}, {&(0x7f0000002300)="52ff7ba4f74be9d72b283901207b72c55233c9f5b46f613b6b028d35241bda5ea23472662c77bbab122e5d169d748566cb799e3f1f8f3241c2f26c464844b35401414c16cc8d65716f59025395e6ba57235480f0e264112e5d4b02ffbdda11b20046ea97d7cacf4fdccd232f9b4a", 0x6e}, {&(0x7f0000002380)="9357c398ceda354a80114632ced8b3efab8b2f3b86a887367374cff74528d5318bf910d635ae7509c28ef87aacb6c27f138e50654bf4f01a1f92bd1761911d29165b7492b88b7951e6f691d126dff87c6760a4e30ea4b82bd4703c148af230a5564626d98db6e1962943d37a8f255120c6fd", 0x72}, {&(0x7f0000002400)="9905801a29a6925eee92f01ba500cd9aacb8860adf2582d70f", 0x19}], 0x6, &(0x7f00000024c0)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x6b}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x58}}], 0x60}}], 0x2, 0x840) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r12, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, r13, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x17}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xa1fe257d002540f4}, 0x4000010) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000002800)='ip6gretap0\x00', 0x10) 8m57.198812834s ago: executing program 3 (id=7775): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000280), 0x12) (async) bind$x25(r3, &(0x7f00000002c0), 0x12) close(r3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) r5 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, 0x404c804) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0x30000000}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000140)) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x3c, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 8m56.793456064s ago: executing program 3 (id=7778): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001600000000000000ebffffff9111bc000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)="5a0000000200", 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'tunl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x1, 0x0, 0xd0b, 0x7b, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x68, 0x0, 0x9, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@lsrr={0x83, 0x1b, 0x61, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1]}, @timestamp={0x44, 0xc, 0x8b, 0x0, 0x0, [0x8, 0x8]}, @noop]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0x10}, {0xfff3, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0xb0, 0xca, 0xc, 0x10, @loopback, @remote, 0x700, 0x80, 0x8, 0x9}}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newlink={0x84, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a00)={'ip6gre0\x00', 0x0}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x2f}, 0x1) 8m55.889996653s ago: executing program 3 (id=7785): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x228, 0x30, 0x871a15abc695fa1d, 0x0, 0x35dfdbfe, {}, [{0x214, 0x1, [@m_connmark={0x210, 0x1c, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8c, 0x4, 0x8, 0xd6}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x1, 0x10, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0xb17, 0x3, 0x7, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x33d, 0x20000000, 0x6, 0x6}, 0x6c1c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x10, 0x6, 0x5, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd, 0x2c74, 0x5, 0x101, 0xd}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x7f, 0x20000000, 0x2, 0x83c}, 0xfc00}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x0, 0xfffffffc, 0xff}, 0x8}}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x140, 0xffffffff, 0x258, 0x348, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000700), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb}, @remote, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xff, 0xffffff00], 'ip6_vti0\x00', 'netpci0\x00', {}, {0x1fe}, 0x2c, 0x6d, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@icmp6={{0x28}, {0x5, "aa91", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@remote, @port=0x4e22, @port=0x4e20}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x3ff, 0x4c46}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x15, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv4=@empty, @gre_key=0x9, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@mcast2, @ipv4=@broadcast, @icmp_id=0x66, @gre_key=0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @port=0x4e23, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x880) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4024092}, 0x4000800) 8m55.077502495s ago: executing program 3 (id=7789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000c80)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000cc0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000d00)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000006c0)={r3, r1}, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000200"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x810}, 0x4084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}, 0x400c1) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48241, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x1d, 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000c00)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r11, &(0x7f0000000ec0)={@val={0x0, 0x6005}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @remote, @local, @remote}}, 0x20) 8m53.897706379s ago: executing program 3 (id=7796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'macvlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x2000004, 0x8, 0x3d, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x30) 8m38.860999649s ago: executing program 33 (id=7796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'macvlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x2000004, 0x8, 0x3d, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x30) 2.945379232s ago: executing program 2 (id=11336): connect$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r3, 0x2, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)=ANY=[], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) (async) close(0x3) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd1f17c3cfdf250100000008001900e000000108000c0d000100000008001800ac1414bb030000000600000000000020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd1f17c3cfdf250100000008001900e000000108000c0d000100000008001800ac1414bb030000000600000000000020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf25070001000800390006000000080034000000000008000b000800000005003800000000000600280001000000"], 0x3c}}, 0x20000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="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"]}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000001000)='dctcp', 0x5) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @local}, 0x10) socket$inet(0x2, 0x2, 0x0) (async) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001080)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000540)=ANY=[@ANYBLOB="303ae0001c000100000000000000070000000000d24680bf44e07ae5d70280de79a4bfceec9fd546a3025c3c899cbfc31167bcf7dc436467af0f057c", @ANYRES32=r9, @ANYBLOB="800002000a000200aaaaaaaaaa27000008000d0001000000"], 0x30}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001180)={@multicast2, @broadcast}, &(0x7f00000011c0)=0xc) 2.818554567s ago: executing program 6 (id=11338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) 2.545884655s ago: executing program 6 (id=11341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 2.533827187s ago: executing program 2 (id=11342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07002bbd700001dcdf250c0000000c009900"], 0x20}, 0x1, 0x0, 0x0, 0x440d1}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) 2.492213381s ago: executing program 4 (id=11343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) 2.248477008s ago: executing program 4 (id=11346): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000002c0)={'veth1_to_hsr\x00', {0x2, 0x4e22, @multicast2}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x4) r1 = socket(0x11, 0xa, 0x0) bind$netlink(r1, &(0x7f0000000740)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) bind$netlink(r1, &(0x7f0000000780)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz1\x00', 0x1ff) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x3fffffffffffeed, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940), 0x200002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000980)={0x0, 0x10, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000040001801000020696c250000000000202020db1af8ffa0000000bda10200000000000701000000ffffffb702000008000000b70300d930053e0000000085000000d200000095000000000000006978ece15307c68827c46a59f54a91cc31733c0a00000084dbf2e1203d77fd4f95e6817ad63e2dd64ef242730ab286"], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x290) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000c00)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/232, 0xe8}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r6, 0x0, 0x482, &(0x7f0000000d80)="110000007f0000014e200000000000006d6800000000000000000000000000001000"/44, 0x2c) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r7, &(0x7f0000000dc0)="aaaa", 0x4, 0x0, &(0x7f0000000e00)={0x2, 0x4e20, @loopback}, 0x10) 2.241279931s ago: executing program 2 (id=11347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x10}}, 0x14}}, 0x4044000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1002}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x90, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r2, &(0x7f00000008c0)=ANY=[], 0xfdef) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000080)=0xb2, 0x4) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x2020, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x103000, 0x800, 0x9}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000002c0)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r7, 0x29, 0x12, 0x0, &(0x7f0000000340)) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x2, r9, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r6, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x300, 0x0, 0x3ff000000, 0x80000000009c2a, 0x4}, 0x0, &(0x7f0000000200)={0x3ff, 0x4000000000002, 0x7ffffffffffff, 0x9, 0x4, 0x0, 0x8000000000000000, 0x4000009}, 0x0, 0x0) 2.172633861s ago: executing program 6 (id=11348): r0 = socket$unix(0x1, 0x5, 0x0) r1 = getuid() r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x100000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) sendmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="40c298565a5c6b75aeba6bc1a2804392255c42a8a17448cc750ba6d8c229fda72e1843d695901775501e99dd438fb7fc6de452072f4aaa9f4da74763da5c429e056cd341dc3ce441ca4e72cdab39c3caccbf05403b4a40274ba418f22c9f519c6617260a124807630ffc2cf7f38e1a2fad897c057f0f0542662e8d3ad14070cc491cd3093fee9101f293e2b0bf9ac04ad82da11bf2a3a1a38bdcfe396f4ff6e108f13085568d7b0cb3cd091671", 0xad}, {&(0x7f0000000140)="d9c043f762936a945bdffdb2c32a3e698e18ee8e33c4a32ed2eedd2c0a6438aecb562ad0e66cd617c1eb607431792c78175c580c5da9c68a7f6fd01d8cf54aac91a4dbd18c2a46", 0x47}, {&(0x7f00000001c0)="593ac22b12c865a59c230c46dde39aae1d9c959a9f8cb320c215c5e4d6e2f63ff97b3bf345f7c6e2e1b31a1a28a94199992d8f2c04d5dcdf1ef5921f9586cada874666", 0x43}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r6]}}], 0x78, 0x40}}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.controllers\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r5) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x280, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff3e8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9e1e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "b45e2f686ec3dbbf80d6707f4b7afcd1ea195f3cf41bfff64a418c3b3b5166"}}, @TIPC_NLA_NODE_ID={0x67, 0x3, "31b5b03a0ea237eb6f7ae80cf8ae07a05b731ce1618db5b2be19c257a259ee4c659031a31f830d1f1e0b47dd945e48917b62bec9f476fde49e58925640a14b4d7c1f3e251a153d6a38488fa9c4462eef3856e77a68c0d8c0c99f2da0e5cc00b93198ff"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x25, 0x3, "07e6cde6ed4b365598d35a7bb0040e2a1aa459cd5ea5c799b8d834511c3138fcda"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "557f08cf32089ca7d0dbcb75996980d1e79d7c735a15163b389aa555cb4b04d0d57bd6ec"}}, @TIPC_NLA_NODE_ID={0x60, 0x3, "5074a4af20f74fca570e47400dee4183bbce10f939d17e761a51823bae4ca7766e9d72051aeb07aff2ad2e2421cafef63544bcc82f81492ce3a06637c78bdbf74ad33b3164ef4457c72aee402636e23ef669a8f39e63cd9aad8606cb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x53}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe8}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000840)={0x0, 0x1, 0xca5c82fede1f2b57}, &(0x7f0000000880)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r7, 0x84, 0x25, &(0x7f00000008c0)={r9, @in6={{0xa, 0x4e23, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7b5}}, 0x2, 0x2, 0x1e7b}, &(0x7f0000000980)=0x90) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24048040}, 0x44041) shutdown(r2, 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080001}, 0x20000091) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r7) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000001b40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000c40)={0xeb8, r10, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xe9c, 0x111, 0x0, 0x1, {0xe98, 0x5, 0x0, 0x1, [{0x398, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff801}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4e0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe887}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x38cde51a80bc969a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x80, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6600}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}]}]}, {0x52c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xef}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x419}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa02e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x14ea127ac6b11b35}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x310, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa314}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfb6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0xeb8}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001b80)={0x88, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x7ff}, @calipso={0x7, 0x30, {0x3, 0xa, 0xd, 0x9, [0x7, 0xe3, 0x3, 0x1b86, 0x1ff]}}]}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00), r7) sendmsg$IPVS_CMD_SET_SERVICE(r11, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0xec, r12, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2f}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbc12}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r7) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001e40)={@loopback, @broadcast, 0x0}, &(0x7f0000001e80)=0xc) sendmsg$nl_route_sched(r7, &(0x7f0000002100)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001ec0)=@delqdisc={0x1d4, 0x25, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xfff1, 0x9}, {0x5, 0x9}, {0xfff3, 0xa}}, [@TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x0, 0x1e0, 0x5, 0x49ed]}}, {{0x1c, 0x1, {0x7, 0xf7, 0x5, 0x8, 0x0, 0x7, 0xffffffd8, 0xa}}, {0x18, 0x2, [0x6d02, 0x4, 0xf, 0x2, 0x8, 0x289, 0xd8, 0x7, 0x9, 0x7]}}, {{0x1c, 0x1, {0x6, 0x7, 0x7, 0x4, 0x1, 0x3, 0x7, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0xaa51, 0x9, 0x9, 0x1ff, 0x8]}}, {{0x1c, 0x1, {0x83, 0x2, 0x5688, 0x7, 0x0, 0xf02a, 0x3, 0x2}}, {0x8, 0x2, [0x8001, 0x9]}}, {{0x1c, 0x1, {0x1, 0xc, 0x0, 0x1, 0x2, 0x2, 0xfff, 0x4}}, {0xc, 0x2, [0xb, 0x4, 0xab9, 0x6]}}, {{0x1c, 0x1, {0xff, 0x5, 0xffff, 0x0, 0x0, 0x5, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0xfff7, 0x7]}}, {{0x1c, 0x1, {0xff, 0x81, 0x0, 0x8, 0x0, 0x8, 0xe4ff, 0x5}}, {0xe, 0x2, [0x6, 0x2, 0x9, 0x8, 0x4]}}, {{0x1c, 0x1, {0xa, 0xd, 0x3681, 0x16, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x7570, 0x9, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0xdc, 0x9}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0x9, 0xd6, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x7f, 0x40, 0x6, 0xed74, 0x1, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8810}, 0x4000100) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002140)={{{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x6, 0x4e23, 0x800, 0xa, 0x20, 0x80, 0x2f, r14, r1}, {0x6, 0x7, 0xa, 0x10001, 0x8, 0x3, 0x6, 0x94}, {0x5, 0x0, 0x4, 0x8000000000000001}, 0x8, 0x6e6bb7, 0x0, 0x2, 0x2, 0x1}, {{@in=@private=0xa010102, 0x4d6, 0xff}, 0xa, @in6=@private0, 0x3501, 0x3, 0x0, 0x1, 0xb34a, 0xdeb, 0x9}}, 0xe8) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r11, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, r13, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x28}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7c00000}]}, 0x1c}}, 0x24040044) 1.990397699s ago: executing program 6 (id=11349): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x891a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x2}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f804"], &(0x7f0000000340)=0x520) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x0, 0xe, 0x0, &(0x7f00000009c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x9e, 0xc, "9cad7cb0cf9ca21f6c2d394e2e5c5f17dc2c9521b9b5dc92767b687a9b230c3459b7109c9bc1cf226fd1fda2c0895d490d7949bbcafe1550c1ce717c732a20562111d2c0de9b3cbbb35b1f6dc8020715acd31236171daefe4617c5c5985dc38ec5076fd74fadd69fec5b99fe55cffabbfa3280db8a734f0f8b2baf850d069574f6bbf8c9737933911a02a770628a0f2313624125c202a1ecd8f4"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3bbc50748fdee32, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x20c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000044) 1.729709682s ago: executing program 4 (id=11350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000700)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) 1.584553459s ago: executing program 4 (id=11353): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x12, &(0x7f00000005c0)=ANY=[], &(0x7f00000010c0)='syzkaller\x00', 0xf, 0xfe9, &(0x7f0000001cc0)=""/4073, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x12, &(0x7f00000005c0)=ANY=[], &(0x7f00000010c0)='syzkaller\x00', 0xf, 0xfe9, &(0x7f0000001cc0)=""/4073, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 1.488266015s ago: executing program 1 (id=11354): r0 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000940)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x1, 0x4000040) r1 = socket$inet(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0000000000000008000000ffff0000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000124c681ef4aa621c8a1500"/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000e00)=0x200) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0x28, &(0x7f0000000a80)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x54}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x60}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x6, 0x3, 0x7, 0x18, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x2, 0x2, 0x8, 0xb, 0x100, 0x4}], &(0x7f0000000bc0)='syzkaller\x00', 0x8001, 0xe0, &(0x7f0000000c00)=""/224, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x5, 0xd, 0xf417, 0x80000001}, 0x10, 0x1b661, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[r2, 0xffffffffffffffff, r2, r2], 0x0, 0x10, 0x4000}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x5, 0x22, @empty, @mcast1, 0x8000, 0x8000, 0x5, 0x7}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000600590000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r3}, 0x94) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000001c0)=0x79, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000200), 0xa0d, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x7ff, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r5, 0x0, 0xffffff1c, 0x22000841, &(0x7f00000000c0)={0xa, 0x2, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}, 0xfffffffd}, 0x1c) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r5}, 0x8) sendmsg$nl_generic(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendto$inet6(r7, &(0x7f0000000200)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c119034e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775d6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c00000004000000000c6f57f90bac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/205, 0xcd, 0x1, 0x0, 0xfffffd67) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1, 0x0, 0x10, 0xd, 0xcaf, 0x0, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000680)={0x0, 0xe2, "0311c68c56c9c30640f56ae3aa54daceb7e88037c334e77f339306c54b1232cd6d6458bac2c5748bd4752a4bb2f13dc9ac3e6d40402a5099d90791426bcd9eb73ac983a56acb39a64ec04c2c9732a718b6f3aefdabe30a3ae400763124cf8c509122256e69b6c0a987d7d8bfcf1effc5761f5159cf99d27703cef7d32ad58cdb50b3cca1488e6f6475e7753124eb77b0cefb4c3ceaf31a3e79219b080ce2d8face48f5f81c44f2f95f234d88cea8d6dcbeddac998da95cd155603b25ae298619acb549f240b7abb73c5fb78fa1bc707e75efa3c3bf36735c8f5d2064c75e624685a2"}, &(0x7f0000000780)=0xea) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000007c0)={r10, @in={{0x2, 0x4e22, @private=0xa010101}}}, 0x84) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f00000008c0)=0x101022, 0x4) 1.439087683s ago: executing program 5 (id=11355): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) (async) sendmsg$sock(r0, &(0x7f0000000e80)={&(0x7f0000000800)=@nl=@unspec, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000880)="e92bae5facc287df9e9ba92d4c5d503b3379e6f5968455fbecea79b4c04827818d72f23dc907c075f2ea86825e37fd79e571bf44d4291d969ab07dae4635c82e8c0d01e818f37ca0b0275844fb08614d683c70dcf8ea9ae7d9473a6d546322986f475dfd249a6bc4d6e6130f2c44ef03c1be1fd99b79a7c03f530e6ede60c67847c4bf1b52aa134675b9bee416099755514bebe202cc7c8edb48540339703693e25e7da05c97072fce78726d3c60a75b1730dac25df288", 0xb7}, {&(0x7f0000000940)="2ec4c5a61a652f69d5c62f186e94a75f", 0x10}, {&(0x7f0000000980)="22f15ccddaf937acc4ad2c26d087c416f1b2d05c65df629128e2131fa2835035f451ff15e886395007f34df5b7a1313803dfb886debfd1c7e7ea2f22b02f9208adcd7279880f9ebb784e94fcd7b6d3e5d4b23d27b0ab584a797137c00c46f06992eebc75ad2407151be2168601802d908c45bc030b6533718c9dd9c626b781", 0x7f}, {&(0x7f0000000a00)="aaaa5b264fb52a29f642b7ed2c10d183f3a0e47e8196124141edd77afafa87f1396ed29a6e263ffe404383a674e12b0836371b6f0e0344ed71b523e9e814fc0f73", 0x41}, {&(0x7f0000000a80)="4a10b332f5efb183e125cce6744d0c12c7cbae6ed9d56b6557a274c66533944a116088bb80a6953344c20ad4f3a16be62a872000674e82e4fa70ad5e56187b9a94fc8e0fc42c5d44755b2328a0378627df1c561df33f69bd6aba96", 0x5b}, {&(0x7f0000000b00)="1a13ef312e38cfa9aadd0aaa0bf4863378aad5f33aa329e46fd2877b37ecbc5cedcf1a257e9bdf3bedae06b20e36789e1d393dd55a", 0x35}, {&(0x7f0000000b40)="cb93ad81c9ed803142f68b69e20f58cfe0cc2d1e89f49d5b460bbad76d2673d6738a138522a81f412a93e54b0ba4ec785cde88a01eef2ad558bbd2113c09c791ebe43a89610cb76c86da1505eb0d2d2c678b3b4322097fab60106375e7b5f12ac90605", 0x63}, {&(0x7f0000000bc0)="eda7f760443720da882132d2301ddd2a9b81795e743d8c54e21c48f67eea871a4eb1bee90bb26596482010d9babbc40d35ad90926eaccc4d9166baa56089b20d96b1c04581a42fe140bb5cf1c35b3625a51ad897ed3f0fd4847dea415a7ff37879ec226929ab99e5f83c946df7dbf12a68f9b2ba6f86395d06481b171a6b52660cb60e3a07c87c2f85391334972e959d1b2532b3fe329412433e36752e29a46b04539755e5", 0xa5}, {&(0x7f0000000c80)="21cbeb8fa99f33994ae610a588b44bf62efb533102226f880986e2805cc2cabb1b2a77a4c31765da2efd00fb5acd363bc79ca8efe7356e9168b3e4f6764b60d1069f47bfc90f3b9e346717df258f7623ce3a7358f5ce31de7f2ccf68257f57fd3bf2aaf79792f09aa8f80c2ad1d0d4f9a1aed9b40b685e87d5f7a7c8139e678297990a7407506d", 0x87}, {&(0x7f0000000d40)="2f3f801df3a6841f9b0ad341acfe7c0847ffb9aeaa0c90150d2f868b91e944b121cf48c592a09663a44406bf6aaa9d1b7622a7", 0x33}], 0xa, &(0x7f0000000e40)=[@timestamping={{0x14, 0x1, 0x25, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}, 0x810) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000500)=0x6, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000540), 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff0f000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x6, 0xd, 0x2}], 0x10, 0x3}, 0x94) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=[0xc], &(0x7f0000000440)=[0x1], 0x10, 0x1, 0x0, r8}}, 0x40) 1.322111231s ago: executing program 1 (id=11356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) 1.321740781s ago: executing program 4 (id=11357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000600)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000180)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000280)=[@init={0x18, 0x84, 0x0, {0x7fff, 0x8, 0x0, 0x4}}], 0x18, 0x24000001}, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000002c0)=0x4, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020029bd7000fddbdf2564000000080001002a00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000400019c4ef40000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090) (async) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000780)="ec", 0xfdef}], 0x1) 1.242321566s ago: executing program 5 (id=11358): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60, 0x3fd}, 0x25) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000440)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x6, 0x5}, &(0x7f0000000600)=0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000640)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000680)=0x2c) bind(r5, &(0x7f00000004c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r5, 0x5) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500050008", @ANYRES8], 0x4a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010101, @in6=@mcast2, 0x4e21, 0x28, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x21}, {0x7, 0x1000, 0x1, 0x0, 0xffffffffffffffdf, 0x100000000, 0x0, 0x80000}, {0x43, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa921ab115eead83d080045000028000100000006907800000000ffffffff4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010010090780000"], 0x0) 1.144115242s ago: executing program 2 (id=11359): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000080000000000900000000000000000000000902"], 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000a80)='3\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xe) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000020900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002402000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(0x3) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000ac0)={0x7, 0x7f}) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f0000000840)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000880)=0x2, 0x4) connect$rxrpc(r4, &(0x7f00000008c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f0000000940)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r3, &(0x7f0000000980)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f0000000a00)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000b00)={0x1, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000c40)={0x1, {{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x7}, 0x20000000}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f00000002c0), &(0x7f0000000400)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r7}, &(0x7f0000000740), &(0x7f0000000780)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4, 0x1, 0x0, r7}, @alu={0x4, 0x1, 0x5, 0x5, 0x0, 0x10, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x3, 0x4, 0x5, 0x10, 0x4}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000180)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3b, r0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000007a0000000000089500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0xfffffffffffffdee, 0x0, 0x0, 0x14}, 0x90) 1.125652185s ago: executing program 1 (id=11360): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, 0x0}, 0x844) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000012c0)=""/247, 0xf7}], 0x1, &(0x7f0000001540)=""/154, 0x9a}, 0x8}], 0x1, 0x2122, 0x0) write$cgroup_devices(r0, &(0x7f0000001240)=ANY=[], 0xfffffeff) 925.954996ms ago: executing program 1 (id=11361): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000c00a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r3, 0x852ac000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000000000005"], &(0x7f0000000740)=""/4089, 0x3a, 0xff9, 0xa, 0x32e}, 0x28) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000002060500000000000b00000003000002050004000100000005000100070000000c0007800800060000000002050005000200000011000300686173683a69702c6d61726b000000000900020073797a3000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x9c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xb, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x5, 0x20000000, 0x3, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}}, 0x0) 924.357263ms ago: executing program 5 (id=11362): syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="c335f98a2c430000000000000800450000b00500000000119078ac1414ffac14141c08004e23009c907801000000000000006fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732be023520b57e4c98679c7795a2aa466ddde70e5f20ba8d82dde1bacdaa9d0866ab7fcf75fe803080000000000000000005df814aa2e34e4f8a751805b993e0edbe300000000000000000000002cfee9b9d5b0b2b171b51f9174963b0ce40ca7e0a7b4bbc4bc9720c876a57954"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0xffffffff, 0x40, 0x8, 0x100, 0x7, 0x808082, r1}) r2 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(r2, &(0x7f0000000780)={&(0x7f00000007c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcf}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400008000000000290000003e000000080010"], 0x18}, 0x4040) r3 = accept4(r0, &(0x7f0000000240)=@ieee802154={0x24, @short}, &(0x7f00000002c0)=0x80, 0x800) recvfrom$rxrpc(r3, &(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000001980)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r3) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f0000001b00)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000001b40)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000001b80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001bc0), 0x8) close(r5) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000001ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000004051d9059bcbebb3d31b642e3b9a6278b8f94a28a5c13debb56ea21ce9284f6ec026cb1a8", @ANYRES32=r3, @ANYBLOB="180426bd7000fbdbdf25060000002400038008000500e0000001050008008100000006000400020000000800030000000000140003800800030002000000080003000300000008000500080000001510583a3d93eda0f24a9d07084ca17da9cfcf4f4f6a36bf48486e1b6426b6d3e16e52ebc87f8430d3ef84da3cfcaeef69b584e9656a27d0045ac8b241ac498a8c7e901a73afc1b7ad58531cf9b4"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048081) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000840)={@mcast1, r1}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000740)=@gcm_256={{0x303}, "46d22716f9dda01b", "73a1147d128d94f11ef7b1e675ed73846c2a74e0a5bba6d450b56923bc38754b", "9927dba4", "bbeca25905a10677"}, 0x38) pwritev(r7, &(0x7f0000000640)=[{&(0x7f0000000680)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000006c0)={0x0, 0x1, 0x8, 0xfb4}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'team_slave_0\x00', 0x200}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0x0) sendmmsg$unix(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x48800}}], 0x1, 0x0) 814.464603ms ago: executing program 2 (id=11363): socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet(0x2, 0xa, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x6, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18020000040056c600000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000001b40)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x771d1a88}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r3, 0x0, 0xff1a, 0x0, &(0x7f0000001c00)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfdef) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002a00090025bd70007fd3df25010000000800010049ed"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000003040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000003080), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000030c0)=r8, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003180)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003180)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x154, r9, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x25}}}}, [@NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x6}, {0x3, 0x6}, {0x7, 0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x6}, {0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x3}, {0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x4}, {0x7, 0x6}, {0x5, 0xa}, {0x4, 0x3}, {0x4, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x6}, {0x7, 0xa}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0x200, 0x9, 0x0, 0x9, 0x5, 0x4e]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0xa}, {0x6, 0x2}, {0x6, 0x1}, {0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x1}, {0x6, 0x8}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x5}, {0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0x8}, {0x4, 0x4}, {0x3, 0xa}, {0x2, 0x6}, {0x1, 0x9}, {0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0xa}, {0x6, 0x3}, {0x1, 0x9}, {0x6}, {0x7, 0x9}, {0x7}, {0x2, 0x4}, {0x0, 0x1}, {0x6, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x2}, {}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x16, 0xc, 0x3, 0x30, 0x60, 0x16, 0x4, 0xb, 0x6, 0x30, 0x1b, 0x16, 0x9, 0x3d, 0x36, 0x36, 0x34, 0xf, 0x1, 0x60, 0x18, 0x9, 0xc, 0x50, 0x5, 0x12, 0x60, 0x1b, 0x1b, 0x60, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x48, 0x3, 0x61a5e483401bedcb, 0x36, 0x30, 0x12, 0x9, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x7, 0x1, 0xdda, 0x6, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x2}, {0x7, 0x4}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0xa}, {0x6}, {0x5, 0x4}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x2}, {0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xffff, 0x4, 0xeeb, 0x4134, 0xc91, 0x100, 0x7ff]}}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x81}, 0x4000) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) socket$inet6(0xa, 0x3, 0x7) (async) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r11, &(0x7f00000004c0)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_LINK_GET(r12, &(0x7f0000001900)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x74, r13, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084010}, 0x4001) 726.676636ms ago: executing program 5 (id=11364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="0800080006000600080014000000450a0fc0006600000b2f"], 0xfce) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="1f000000000000000c00026408000500ffedffff480003000004000000000000929d00000000002815bf2603607ce8cfe2f6648b4fbdaa63787084ab5a0624b0fb651dd1d49fbc37c5385fc400"/92], 0x44}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffff31) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0x3, 0x0}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000740)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000780)={r7, 0x1}, &(0x7f00000007c0)=0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000580)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r8, r4, 0x4, r4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x21, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000001c0)=0x3) 696.13515ms ago: executing program 6 (id=11365): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() (async) r1 = getpid() socket$packet(0x11, 0x2, 0x300) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="54784fb94abce8cb3fe8a8c23edf53da787f19a037781c7586d7f63c0058866e1899629dee816560e1e0dfa47127b9cebac26c9b39a07c436963dcf82238201402fd922b000000000000", 0x4a}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x8841) socket(0x3, 0x2, 0x10000) (async) r2 = socket(0x3, 0x2, 0x10000) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000040)=0x3, 0x4) 505.839734ms ago: executing program 1 (id=11366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) 350.001087ms ago: executing program 5 (id=11367): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f00000003c0)="b9ff030760030084b89e08d186ddcef11086808ba3a1cc136e6931fe9ccb9db10495161309e01b6fdf8edbd766612b0ee82cab6218c7", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000580)={r4, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000640)=0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r5, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) sendmmsg$inet_sctp(r2, &(0x7f0000000680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="3000000000000000840000000100"], 0x30, 0x40}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000700)={r4, 0x9}, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000d40)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x88, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000880)='GPL\x00', 0xa, 0xde, &(0x7f00000008c0)=""/222, 0x0, 0x8}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000b00)={@null, 0x6, 'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x44, 0x0, 0x0, 0x17, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x7, 0xf989, "e8321a"}, @md5sig={0x13, 0x12, "d140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) 286.402102ms ago: executing program 6 (id=11368): socket(0xa, 0x3, 0xff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x5, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7543, 0x8, 0x8000, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="a3f495", 0x3, 0x8000, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000140)="a07d53f2c3a34452e9493e67944c43abd43ccab22cbe25998d2ff12c4d948ce9cafe28c511656ac402390f64e8c7b8670dd8f86f96d99efac941248e4fd79bf1a7a046f5fd274b735fd2b99501c444a5d2fc4ab513c2aff55cd80f10e218fd23bca489d207deba2ab50064f2bc46dee0d36e8002851bee1259c3fa", &(0x7f00000003c0)=""/92, &(0x7f0000000440)="e6e57888a5884b398ab59093a01a9b93204d61a3fcb42367b50440cb77a040995ae37ea96d8ca7091c5b53275db348179c", &(0x7f0000000480)="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", 0x66, r2, 0x4}, 0x38) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000280)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x2000c8d0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7c1d6fac, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 200.653231ms ago: executing program 4 (id=11369): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x4, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x1001, &(0x7f0000000ec0)=""/4097, 0x41100, 0xc, '\x00', 0x0, 0x0, r0}, 0x94) 188.547207ms ago: executing program 1 (id=11370): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00', 0x21}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @loopback, 0x4e20, 0x0, 'fo\x00', 0x20, 0x0, 0x1b}, {@rand_addr=0x64010100, 0x4e24, 0x4, 0x1, 0x3}}, 0x44) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYBLOB="671d6a1c1bae7a5781e4f74ec005654ec79f870ae27fbfad8981d5d34da8d68d9c90f6ea8725e618202aadd6de7571ba8e46edcf1bee9ccbf3130caecbc9972751628c44ef5a7b78bb9c1bd843f75b09c7d1546d894555fa0d2c29d2ae9b245fb9e2fb4afd6941f3c7823dcfeca31230d753be1cc32e8c7714ce90a54b007e4a2837f0687026cd1ca125e1c9efd7c5f3dbfe97e4c16e7b08f5d5f8566dd931120c41d065b17ccd35f45a0e7bff", @ANYRES64=r4], 0x44}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000480), &(0x7f0000000280)=@udp=r5, 0x1}, 0x20) recvmmsg$unix(r5, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00', 0x21}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @loopback, 0x4e20, 0x0, 'fo\x00', 0x20, 0x0, 0x1b}, {@rand_addr=0x64010100, 0x4e24, 0x4, 0x1, 0x3}}, 0x44) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x50) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYBLOB="671d6a1c1bae7a5781e4f74ec005654ec79f870ae27fbfad8981d5d34da8d68d9c90f6ea8725e618202aadd6de7571ba8e46edcf1bee9ccbf3130caecbc9972751628c44ef5a7b78bb9c1bd843f75b09c7d1546d894555fa0d2c29d2ae9b245fb9e2fb4afd6941f3c7823dcfeca31230d753be1cc32e8c7714ce90a54b007e4a2837f0687026cd1ca125e1c9efd7c5f3dbfe97e4c16e7b08f5d5f8566dd931120c41d065b17ccd35f45a0e7bff", @ANYRES64=r4], 0x44}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmmsg(r5, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000480), &(0x7f0000000280)=@udp=r5, 0x1}, 0x20) (async) recvmmsg$unix(r5, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1}}], 0x1, 0x0, 0x0) (async) 41.278543ms ago: executing program 2 (id=11371): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000e40)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000e80)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001", @ANYRES16=r1, @ANYBLOB="672b2f741e92a2f5c21e3da1b55a85d1f4df17ac7f76fbff70"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="2000000001048500000000000000e4ffffff0700000002000000000600000000"], 0x20}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x9, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, &(0x7f0000000000), 0x6f5, 0x2000000022, &(0x7f0000000040)={0x77359400}) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x10}}, 0x24044800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001740)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001900)='westwood', 0x8) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001940), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(0xffffffffffffffff, 0x1) 0s ago: executing program 5 (id=11372): unshare(0x2a020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f00000006c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) close(r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="19000000", @ANYRES16=0x0, @ANYBLOB="02002bbd700000000000140000000800060571d60d6c000b0000000500190000040000"], 0x24}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000018000000000000000000008018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000004950000000000000075090200020000007b9a00fe00000000b509feff00000000c39a04fe10010000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r3, @ANYBLOB="0000000000000000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500"/64], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x705100, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa900000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000680)='syzkaller\x00', 0xa}, 0x94) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): .202769][T20699] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1511.213079][T20699] bond11: left promiscuous mode [ 1511.225872][T20699] ip6gre2: left promiscuous mode [ 1511.229230][T20699] bridge3: left promiscuous mode [ 1511.229934][T20699] macsec2: left promiscuous mode [ 1511.342591][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9878'. [ 1513.783801][T20722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.883090][T20722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.898543][T20722] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1513.919608][T20314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.919718][T20314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.942078][T20314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.942226][T20314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.021784][T14425] bond7: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1514.022111][T14425] bond7: (slave veth0_to_bond): making interface the new active one [ 1514.057144][T14425] bond7: active interface up! [ 1514.089346][T20738] xt_cgroup: path and classid specified [ 1514.557297][T20733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9884'. [ 1514.645325][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9887'. [ 1515.510506][T20785] netlink: 'syz.4.9893': attribute type 1 has an invalid length. [ 1515.510530][T20785] netlink: 236 bytes leftover after parsing attributes in process `syz.4.9893'. [ 1515.748461][T20796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9896'. [ 1516.029562][T20814] tipc: Enabling of bearer rejected, failed to enable media [ 1516.342497][T20814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.342989][T20814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.569090][T20814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.994637][T20839] syzkaller0: entered promiscuous mode [ 1516.994661][T20839] syzkaller0: entered allmulticast mode [ 1517.375491][T20851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1517.455851][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9908'. [ 1517.533368][T20851] bridge_slave_0: left allmulticast mode [ 1517.533397][T20851] bridge_slave_0: left promiscuous mode [ 1517.533624][T20851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.632116][T20851] bridge_slave_1: left allmulticast mode [ 1517.632145][T20851] bridge_slave_1: left promiscuous mode [ 1517.632428][T20851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.700718][T20851] bond0: (slave bond_slave_0): Releasing backup interface [ 1517.736669][T20851] bond0: (slave bond_slave_1): Releasing backup interface [ 1517.780084][T20851] team0: Port device team_slave_0 removed [ 1517.799092][T20851] team0: Port device team_slave_1 removed [ 1517.802682][T20851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1517.802708][T20851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.831245][T20851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.831272][T20851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.971292][T20855] team0: Port device xfrm0 added [ 1518.425657][T20900] netlink: 204 bytes leftover after parsing attributes in process `syz.5.9915'. [ 1518.750481][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9918'. [ 1518.826413][T20916] syz_tun: entered promiscuous mode [ 1518.826657][T20916] macvtap1: entered allmulticast mode [ 1518.826674][T20916] syz_tun: entered allmulticast mode [ 1518.858960][T20916] syz_tun: left allmulticast mode [ 1518.858988][T20916] syz_tun: left promiscuous mode [ 1519.051560][T20922] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9919'. [ 1519.342894][T20943] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.9925'. [ 1519.389152][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9924'. [ 1519.715965][T20962] netlink: 'syz.1.9930': attribute type 1 has an invalid length. [ 1519.736571][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9926'. [ 1519.783612][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9933'. [ 1519.783639][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9933'. [ 1519.830181][T20962] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1519.843813][T20962] netlink: 'syz.1.9930': attribute type 10 has an invalid length. [ 1519.843837][T20962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9930'. [ 1520.412173][T21014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9940'. [ 1520.487123][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9940'. [ 1520.885286][T21027] FAULT_INJECTION: forcing a failure. [ 1520.885286][T21027] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.885321][T21027] CPU: 0 UID: 0 PID: 21027 Comm: syz.1.9944 Not tainted syzkaller #0 PREEMPT(full) [ 1520.885346][T21027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1520.885360][T21027] Call Trace: [ 1520.885369][T21027] [ 1520.885379][T21027] dump_stack_lvl+0xe8/0x150 [ 1520.885422][T21027] should_fail_ex+0x3eb/0x540 [ 1520.885456][T21027] ? __alloc_skb+0x1db/0x7a0 [ 1520.885478][T21027] should_failslab+0xa8/0x100 [ 1520.885502][T21027] ? __alloc_skb+0x1db/0x7a0 [ 1520.885523][T21027] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1520.885552][T21027] ? __alloc_skb+0x18d/0x7a0 [ 1520.885575][T21027] ? __alloc_skb+0x1db/0x7a0 [ 1520.885606][T21027] __alloc_skb+0x1db/0x7a0 [ 1520.885638][T21027] netlink_ack+0x136/0xb30 [ 1520.885669][T21027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1520.885698][T21027] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1520.885743][T21027] netlink_rcv_skb+0x2a4/0x4a0 [ 1520.885779][T21027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1520.885810][T21027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1520.885863][T21027] ? down_read+0x2b9/0x320 [ 1520.885908][T21027] genl_rcv+0x28/0x40 [ 1520.885933][T21027] netlink_unicast+0x8ef/0xa80 [ 1520.885986][T21027] netlink_sendmsg+0x7f0/0xb20 [ 1520.886016][T21027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.886043][T21027] ? aa_sock_msg_perm+0x144/0x210 [ 1520.886072][T21027] ? apparmor_socket_sendmsg+0x98/0x360 [ 1520.886107][T21027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.886127][T21027] sock_sendmsg_nosec+0x14e/0x190 [ 1520.886164][T21027] ____sys_sendmsg+0x54e/0x850 [ 1520.886197][T21027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1520.886236][T21027] ? import_iovec+0x73/0xa0 [ 1520.886269][T21027] ___sys_sendmsg+0x2a5/0x360 [ 1520.886293][T21027] ? __lock_acquire+0x747/0x2de0 [ 1520.886329][T21027] ? __pfx____sys_sendmsg+0x10/0x10 [ 1520.886401][T21027] ? __fget_files+0x3a2/0x420 [ 1520.886429][T21027] ? __fget_files+0x2a/0x420 [ 1520.886470][T21027] __x64_sys_sendmsg+0x1b1/0x290 [ 1520.886500][T21027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1520.886553][T21027] do_syscall_64+0x166/0x520 [ 1520.886583][T21027] ? trace_irq_disable+0x3b/0x140 [ 1520.886614][T21027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.886639][T21027] ? clear_bhb_loop+0x70/0xc0 [ 1520.886667][T21027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.886690][T21027] RIP: 0033:0x7f544179fb19 [ 1520.886712][T21027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.886732][T21027] RSP: 002b:00007f5442730028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1520.886756][T21027] RAX: ffffffffffffffda RBX: 00007f5441a25fa0 RCX: 00007f544179fb19 [ 1520.886773][T21027] RDX: 0000000000004000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1520.886787][T21027] RBP: 00007f5442730090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.886801][T21027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.886814][T21027] R13: 00007f5441a26038 R14: 00007f5441a25fa0 R15: 00007ffcb2403cd8 [ 1520.886851][T21027] [ 1521.075709][T21030] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1521.101645][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9945'. [ 1521.101725][T21032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9945'. [ 1521.199280][T21030] netlink: 'syz.2.9946': attribute type 1 has an invalid length. [ 1521.462279][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9947'. [ 1521.538001][T21031] tipc: Resetting bearer [ 1521.557712][T21044] netlink: 180 bytes leftover after parsing attributes in process `syz.6.9949'. [ 1521.698165][T21031] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1521.758770][T21031] vti0: left allmulticast mode [ 1521.790371][T21031] bond3: left allmulticast mode [ 1521.800542][T21031] bridge2: left promiscuous mode [ 1521.800567][T21031] bridge2: left allmulticast mode [ 1521.916324][T21037] tipc: Enabled bearer , priority 7 [ 1521.937063][T20317] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.937100][T20317] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.938016][T20312] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.938047][T20312] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.938087][T20312] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.938115][T20312] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.938152][T20312] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1521.938180][T20312] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.190864][T21066] vlan2: entered promiscuous mode [ 1522.190890][T21066] bond0: entered promiscuous mode [ 1522.378621][T21081] FAULT_INJECTION: forcing a failure. [ 1522.378621][T21081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.378654][T21081] CPU: 1 UID: 0 PID: 21081 Comm: syz.2.9957 Not tainted syzkaller #0 PREEMPT(full) [ 1522.378678][T21081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1522.378710][T21081] Call Trace: [ 1522.378720][T21081] [ 1522.378730][T21081] dump_stack_lvl+0xe8/0x150 [ 1522.378773][T21081] should_fail_ex+0x3eb/0x540 [ 1522.378808][T21081] _copy_from_user+0x2d/0xb0 [ 1522.378840][T21081] kstrtouint_from_user+0xd6/0x180 [ 1522.378870][T21081] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1522.378905][T21081] ? lock_acquire+0x115/0x350 [ 1522.378941][T21081] proc_fail_nth_write+0x8e/0x210 [ 1522.378967][T21081] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1522.379001][T21081] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1522.379025][T21081] vfs_write+0x296/0xba0 [ 1522.379069][T21081] ? __pfx_vfs_write+0x10/0x10 [ 1522.379107][T21081] ? __fget_files+0x2a/0x420 [ 1522.379134][T21081] ? __fget_files+0x3a2/0x420 [ 1522.379162][T21081] ? __fget_files+0x2a/0x420 [ 1522.379196][T21081] ? fdget+0x1ac/0x250 [ 1522.379234][T21081] ksys_write+0x150/0x270 [ 1522.379270][T21081] ? __pfx_ksys_write+0x10/0x10 [ 1522.379324][T21081] do_syscall_64+0x166/0x520 [ 1522.379355][T21081] ? trace_irq_disable+0x3b/0x140 [ 1522.379387][T21081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.379411][T21081] ? clear_bhb_loop+0x70/0xc0 [ 1522.379440][T21081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.379463][T21081] RIP: 0033:0x7f3521d6034e [ 1522.379484][T21081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1522.379504][T21081] RSP: 002b:00007f3522c00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1522.379528][T21081] RAX: ffffffffffffffda RBX: 00007f3522c016c0 RCX: 00007f3521d6034e [ 1522.379545][T21081] RDX: 0000000000000001 RSI: 00007f3522c010a0 RDI: 0000000000000004 [ 1522.379560][T21081] RBP: 00007f3522c01090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.379575][T21081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.379589][T21081] R13: 00007f3522026038 R14: 00007f3522025fa0 R15: 00007ffce21aa718 [ 1522.379628][T21081] [ 1522.849982][T21094] syzkaller0: left promiscuous mode [ 1522.923871][T21097] syzkaller0: MTU not usable for tipc bearer [ 1522.923912][T21097] tipc: Enabling of bearer rejected, failed to enable media [ 1523.311934][T21107] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1524.818806][T21173] __nla_validate_parse: 1 callbacks suppressed [ 1524.818827][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9978'. [ 1524.959940][T21192] bond8: entered promiscuous mode [ 1524.959966][T21192] bond8: entered allmulticast mode [ 1524.998869][T21194] rxe_eth0 speed is unknown, defaulting to 1000 [ 1525.533685][T21219] IPVS: Error connecting to the multicast addr [ 1525.990340][T21194] erspan0 speed is unknown, defaulting to 1000 [ 1526.516316][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9992'. [ 1526.799309][T21194] hsr0 speed is unknown, defaulting to 1000 [ 1527.451331][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9995'. [ 1527.772178][T21294] netlink: 'syz.2.9997': attribute type 1 has an invalid length. [ 1527.772204][T21294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9997'. [ 1527.773499][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9998'. [ 1527.773531][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9998'. [ 1527.800060][T21294] netlink: 'syz.2.9997': attribute type 6 has an invalid length. [ 1527.800113][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9997'. [ 1527.800162][T21294] nbd: must specify an index to disconnect [ 1527.877965][T21296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1528.548659][T21317] syzkaller0: entered promiscuous mode [ 1528.548683][T21317] syzkaller0: entered allmulticast mode [ 1528.777054][T21326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1529.207810][T21326] tipc: Enabled bearer , priority 0 [ 1529.224234][T21315] tipc: Resetting bearer [ 1529.276367][T21315] tipc: Disabling bearer [ 1529.318871][T21335] bridge_slave_0: left allmulticast mode [ 1529.318897][T21335] bridge_slave_0: left promiscuous mode [ 1529.319161][T21335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.363348][T21335] bridge_slave_1: left allmulticast mode [ 1529.363372][T21335] bridge_slave_1: left promiscuous mode [ 1529.363587][T21335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.391536][T21342] xt_hashlimit: invalid rate [ 1529.412196][T21335] bond7: (slave veth0_to_bond): Releasing active interface [ 1529.428429][T21335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.432140][T21335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1529.448127][T21342] xt_hashlimit: invalid rate [ 1529.752312][T21361] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10009'. [ 1529.754054][T21363] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10009'. [ 1530.235398][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1530.235428][T21387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10012'. [ 1530.399122][T21387] bond15: invalid ARP target 0.0.0.0 specified for addition [ 1530.399152][T21387] bond15: option arp_ip_target: invalid value (0) [ 1530.399169][T21387] bond15: Removing last arp target with arp_interval on [ 1530.432758][T21387] bond15 (unregistering): Released all slaves [ 1531.325412][T21432] netlink: 'syz.6.10020': attribute type 12 has an invalid length. [ 1531.337736][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10020'. [ 1531.844518][T21444] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10023'. [ 1531.906827][T21446] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10023'. [ 1531.984872][T21453] syzkaller1: entered promiscuous mode [ 1531.984897][T21453] syzkaller1: entered allmulticast mode [ 1532.120611][T21455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10025'. [ 1532.312027][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10028'. [ 1532.312191][T21470] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1532.346035][T21470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10028'. [ 1532.812513][T21500] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1532.912579][T21504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10037'. [ 1532.912789][T21504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10037'. [ 1533.454026][T21531] lo: entered promiscuous mode [ 1533.488002][T21531] tunl0: entered promiscuous mode [ 1533.514006][T21531] gre0: entered promiscuous mode [ 1533.568159][T21531] erspan0: entered promiscuous mode [ 1533.592557][T21531] ip_vti0: entered promiscuous mode [ 1533.602187][T21531] ip6_vti0: entered promiscuous mode [ 1533.610287][T21541] netlink: 'syz.2.10044': attribute type 10 has an invalid length. [ 1533.626786][T21531] sit0: entered promiscuous mode [ 1533.631082][T21531] ip6tnl0: entered promiscuous mode [ 1533.639118][T21531] ip6gre0: entered promiscuous mode [ 1533.655662][T21531] syz_tun: entered promiscuous mode [ 1533.662778][T21531] ip6gretap0: entered promiscuous mode [ 1533.678538][T21543] netlink: 'syz.2.10044': attribute type 10 has an invalid length. [ 1533.681796][T21531] bridge0: entered promiscuous mode [ 1533.691089][T21531] vcan0: entered promiscuous mode [ 1533.703376][T21531] bond0: entered promiscuous mode [ 1533.713153][T21531] team0: entered promiscuous mode [ 1533.713171][T21531] xfrm0: entered promiscuous mode [ 1533.729375][T21531] nlmon0: entered promiscuous mode [ 1533.732224][T21531] batadv0: entered promiscuous mode [ 1533.750736][T21531] vxcan0: entered promiscuous mode [ 1533.752049][T21531] vxcan1: entered promiscuous mode [ 1533.753051][T21531] veth0: entered promiscuous mode [ 1533.777728][T21531] veth1: entered promiscuous mode [ 1533.780796][T21531] wg0: entered promiscuous mode [ 1533.782973][T21531] wg1: entered promiscuous mode [ 1533.801175][T21531] wg2: entered promiscuous mode [ 1533.803279][T21531] veth0_to_bridge: entered promiscuous mode [ 1533.821110][T21531] bridge_slave_0: entered promiscuous mode [ 1533.823258][T21531] veth1_to_bridge: entered promiscuous mode [ 1533.830197][T21531] bridge_slave_1: entered promiscuous mode [ 1533.838761][T21531] veth0_to_bond: entered promiscuous mode [ 1533.843273][T21531] bond_slave_0: entered promiscuous mode [ 1533.862577][T21531] veth1_to_bond: entered promiscuous mode [ 1533.868479][T21531] bond_slave_1: entered promiscuous mode [ 1533.877941][T21531] veth0_to_team: entered promiscuous mode [ 1533.880478][T21531] team_slave_0: entered promiscuous mode [ 1533.882119][T21531] veth1_to_team: entered promiscuous mode [ 1533.903995][T21531] team_slave_1: entered promiscuous mode [ 1533.912645][T21531] veth0_to_batadv: entered promiscuous mode [ 1533.922747][T21531] batadv_slave_0: entered promiscuous mode [ 1533.935535][T21531] veth0_to_hsr: entered promiscuous mode [ 1533.938281][T21531] hsr_slave_0: entered promiscuous mode [ 1533.940396][T21531] veth1_to_hsr: entered promiscuous mode [ 1533.943260][T21531] hsr_slave_1: entered promiscuous mode [ 1533.972920][T21531] veth1_virt_wifi: entered promiscuous mode [ 1533.982345][T21531] veth0_virt_wifi: entered promiscuous mode [ 1533.993403][T21531] virt_wifi0: entered promiscuous mode [ 1534.004860][T21531] vlan1: entered promiscuous mode [ 1534.007523][T21531] macvlan0: entered promiscuous mode [ 1534.010704][T21531] macvlan1: entered promiscuous mode [ 1534.012685][T21531] ipvlan0: entered promiscuous mode [ 1534.039079][T21531] ipvlan1: entered promiscuous mode [ 1534.070382][T21531] macvtap0: entered promiscuous mode [ 1534.085037][T21531] veth1_macvtap: left allmulticast mode [ 1534.085060][T21531] macsec0: entered promiscuous mode [ 1534.091304][T21531] geneve0: entered promiscuous mode [ 1534.113044][T21531] geneve1: entered promiscuous mode [ 1534.123507][T21531] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1534.141151][T21531] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1534.158564][T21531] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1534.163962][T21531] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1534.173227][T21531] mac80211_hwsim hwsim81 wlan0: entered promiscuous mode [ 1534.189694][T21531] bond1: entered promiscuous mode [ 1534.193244][T21531] bond2: entered promiscuous mode [ 1534.196161][T21531] bond3: entered promiscuous mode [ 1534.211886][T21531] bond4: entered promiscuous mode [ 1534.220009][T21531] bond5: entered promiscuous mode [ 1534.221383][T21531] bond6: entered promiscuous mode [ 1534.222670][T21531] bond7: entered promiscuous mode [ 1534.223682][T21531] macvlan1.4: entered promiscuous mode [ 1534.236975][T21531] ip6tnl1: entered promiscuous mode [ 1534.250683][T21531] vlan2: entered promiscuous mode [ 1534.258325][T21531] syztnl1: entered promiscuous mode [ 1534.261181][T21531] gtp0: entered promiscuous mode [ 1534.262474][T21531] mac80211_hwsim hwsim87 wlan2: entered promiscuous mode [ 1534.267251][T21531] bridge1: entered promiscuous mode [ 1534.286622][T21531] gre1: entered promiscuous mode [ 1534.298978][T21531] veth2: entered promiscuous mode [ 1534.307049][T21531] veth3: entered promiscuous mode [ 1534.317162][T21531] sit1: entered promiscuous mode [ 1534.346253][T21531] veth4: entered promiscuous mode [ 1534.348167][T21531] veth5: entered promiscuous mode [ 1534.350250][T21531] vxlan0: entered promiscuous mode [ 1534.353129][T21531] ip6gretap1: entered promiscuous mode [ 1534.382833][T21531] bond8: entered promiscuous mode [ 1534.385433][T21531] bridge2: entered promiscuous mode [ 1534.396805][T21531] bridge0.257: entered promiscuous mode [ 1534.400881][T21531] bond9: entered promiscuous mode [ 1534.401696][T21531] gretap1: entered promiscuous mode [ 1534.403321][T21531] macsec0: left allmulticast mode [ 1534.403349][T21531] macsec1: entered promiscuous mode [ 1534.431712][T21531] bond10: entered promiscuous mode [ 1534.432614][T21531] veth6: entered promiscuous mode [ 1534.447351][T21531] veth7: entered promiscuous mode [ 1534.449095][T21531] bond11: entered promiscuous mode [ 1534.449908][T21531] vlan0: entered promiscuous mode [ 1534.453774][T21531] L: entered promiscuous mode [ 1534.462729][T21531] mac80211_hwsim hwsim83 nicvf0: entered promiscuous mode [ 1534.463278][T21531] ip6gre1: entered promiscuous mode [ 1534.470447][T21531] ip6gre2: entered promiscuous mode [ 1534.482286][T21531] sit2: entered promiscuous mode [ 1534.538390][T21531] syz_tun.1: entered promiscuous mode [ 1534.543271][T21531] bond12: entered promiscuous mode [ 1534.543476][T21531] bridge3: entered promiscuous mode [ 1534.561304][T21531] macsec2: entered promiscuous mode [ 1534.574571][T21531] bridge4: entered promiscuous mode [ 1534.576668][T21531] bridge5: entered promiscuous mode [ 1534.579108][T21531] bond13: entered promiscuous mode [ 1534.580171][T21531] bond14: entered promiscuous mode [ 1534.580929][T21531] gre2: entered promiscuous mode [ 1534.843366][T21547] can: request_module (can-proto-5) failed. [ 1534.870777][T21541] bridge0: port 1(netdevsim1) entered blocking state [ 1534.870913][T21541] bridge0: port 1(netdevsim1) entered disabled state [ 1534.871080][T21541] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1534.879041][T21541] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1534.974970][T20312] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1534.975007][T20312] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.976706][T20318] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1534.976738][T20318] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.976779][T20318] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1534.976807][T20318] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.976845][T20318] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 1534.976873][T20318] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.193438][T21559] netlink: 'syz.1.10049': attribute type 10 has an invalid length. [ 1535.298141][T21559] xfrm0: left allmulticast mode [ 1535.559472][T21559] team0 (unregistering): Port device xfrm0 removed [ 1535.892686][T20312] IPVS: starting estimator thread 0... [ 1535.974450][T21587] IPVS: using max 26 ests per chain, 62400 per kthread [ 1536.567061][T21612] __nla_validate_parse: 36 callbacks suppressed [ 1536.567086][T21612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10057'. [ 1536.568008][T21612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.643236][T21626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10060'. [ 1536.677056][T21611] bond9: entered allmulticast mode [ 1539.431077][T21612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1539.727269][T21666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10065'. [ 1540.318610][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10074'. [ 1540.388460][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1540.489772][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10074'. [ 1540.529038][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1540.558575][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1540.681358][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1540.697397][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10077'. [ 1540.788353][T21721] ip_tables: iptables: counters copy to user failed while replacing table [ 1541.055167][T21726] syz_tun (unregistering): left allmulticast mode [ 1541.800550][T21780] __nla_validate_parse: 58 callbacks suppressed [ 1541.800569][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10092'. [ 1541.800584][T21780] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10092'. [ 1542.152919][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10094'. [ 1542.237800][T21797] ip_tables: iptables: counters copy to user failed while replacing table [ 1542.247742][T21796] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1542.276178][T21796] IPv6: NLM_F_CREATE should be specified when creating new route [ 1542.276287][T21796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1542.276298][T21796] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.276365][T21796] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.276390][T21796] IPv6: NLM_F_CREATE should be set when creating new route [ 1542.371696][T21804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1542.372719][T21799] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1542.900668][T21826] openvswitch: netlink: Actions may not be safe on all matching packets [ 1542.972044][T21836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10105'. [ 1543.060028][T21842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10103'. [ 1543.098878][ T30] audit: type=1804 audit(1794030323.661:61): pid=21845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.10106" name="/newroot/274/cgroup.controllers" dev="tmpfs" ino=1422 res=1 errno=0 [ 1543.099106][ T30] audit: type=1800 audit(1794030323.661:62): pid=21845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10106" name="cgroup.controllers" dev="tmpfs" ino=1422 res=0 errno=-22 [ 1543.760724][T21875] netlink: 'syz.6.10110': attribute type 1 has an invalid length. [ 1543.760749][T21875] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10110'. [ 1544.609453][T21913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10121'. [ 1544.620584][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10121'. [ 1544.931641][T21924] hsr0: entered allmulticast mode [ 1544.931666][T21924] hsr_slave_0: entered allmulticast mode [ 1544.931685][T21924] hsr_slave_1: entered allmulticast mode [ 1545.021497][T21924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10124'. [ 1545.023262][T21924] hsr_slave_0: left promiscuous mode [ 1545.044931][T21924] hsr_slave_1: left promiscuous mode [ 1545.139672][T21924] hsr0 (unregistering): left allmulticast mode [ 1545.193849][T21935] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10123'. [ 1545.513858][T21923] syzkaller0: entered promiscuous mode [ 1545.513887][T21923] syzkaller0: entered allmulticast mode [ 1548.098072][T21962] __nla_validate_parse: 4 callbacks suppressed [ 1548.098093][T21962] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10130'. [ 1548.283077][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10134'. [ 1548.310801][T21977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10133'. [ 1548.311145][T21977] lo: entered promiscuous mode [ 1548.749675][T21986] xt_hashlimit: size too large, truncated to 1048576 [ 1549.873900][T22048] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10152'. [ 1549.928955][T22048] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10152'. [ 1550.392552][T22082] netlink: 84 bytes leftover after parsing attributes in process `syz.6.10159'. [ 1550.433204][T22082] vlan0: entered promiscuous mode [ 1550.556796][T22085] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10157'. [ 1550.562121][T22085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10157'. [ 1550.779417][T22098] netlink: 'syz.5.10161': attribute type 1 has an invalid length. [ 1551.180138][T22118] x_tables: unsorted underflow at hook 4 [ 1551.296084][T22127] netlink: 'syz.4.10165': attribute type 10 has an invalid length. [ 1551.320533][T22127] team0: Port device veth1_to_hsr added [ 1551.333996][T22127] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10165'. [ 1551.675936][T22136] netlink: 'syz.4.10168': attribute type 16 has an invalid length. [ 1551.675959][T22136] netlink: 'syz.4.10168': attribute type 17 has an invalid length. [ 1551.831884][T22136] netlink: 'syz.4.10168': attribute type 16 has an invalid length. [ 1551.831908][T22136] netlink: 'syz.4.10168': attribute type 17 has an invalid length. [ 1551.832309][T22136] netlink: 'syz.4.10168': attribute type 16 has an invalid length. [ 1551.832325][T22136] netlink: 'syz.4.10168': attribute type 17 has an invalid length. [ 1551.851512][T22136] netlink: 'syz.4.10168': attribute type 16 has an invalid length. [ 1551.851632][T22136] netlink: 'syz.4.10168': attribute type 17 has an invalid length. [ 1552.063045][T22148] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1552.999886][T22194] 8021q: VLANs not supported on ipvlan0 [ 1553.447274][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10182'. [ 1553.447326][T22206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10182'. [ 1553.817204][T22227] tipc: Enabling of bearer rejected, failed to enable media [ 1554.291730][T22252] IPv6: addrconf: prefix option has invalid lifetime [ 1554.308769][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10193'. [ 1554.357015][T22256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10195'. [ 1554.379172][T22256] bridge0: port 1(veth0) entered blocking state [ 1554.379671][T22256] bridge0: port 1(veth0) entered disabled state [ 1554.379829][T22256] veth0: entered allmulticast mode [ 1554.397123][T22256] veth0: entered promiscuous mode [ 1554.477370][T22261] Cannot find map_set index 2 as target [ 1554.766550][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10199'. [ 1554.917459][T22278] veth0_to_bond: entered allmulticast mode [ 1554.919601][T22274] syzkaller0: entered promiscuous mode [ 1554.928743][T22267] rxe_eth0 speed is unknown, defaulting to 1000 [ 1555.567941][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10204'. [ 1555.640508][T22309] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10205'. [ 1555.952709][T22321] ip6tnl3: entered promiscuous mode [ 1555.952735][T22321] ip6tnl3: entered allmulticast mode [ 1556.032212][T22317] veth4: entered allmulticast mode [ 1556.143269][T22321] bond8: option lacp_rate: invalid value (128) [ 1556.151227][T22321] bond8 (unregistering): Released all slaves [ 1556.223513][T22267] erspan0 speed is unknown, defaulting to 1000 [ 1556.311463][T22337] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1556.622899][T22347] tipc: Resetting bearer [ 1556.665208][T22347] tipc: Resetting bearer [ 1557.071193][T22267] hsr0 speed is unknown, defaulting to 1000 [ 1557.213333][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10219'. [ 1557.213371][T22368] validate_nla: 58 callbacks suppressed [ 1557.213386][T22368] netlink: 'syz.4.10219': attribute type 30 has an invalid length. [ 1557.269531][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10219'. [ 1557.269569][T22370] netlink: 'syz.4.10219': attribute type 30 has an invalid length. [ 1557.313504][T22368] vxlan1: entered promiscuous mode [ 1557.313527][T22368] vxlan1: entered allmulticast mode [ 1557.346904][T22370] vxlan2: entered promiscuous mode [ 1557.346927][T22370] vxlan2: entered allmulticast mode [ 1557.436599][T22377] netlink: 'syz.4.10221': attribute type 1 has an invalid length. [ 1557.436780][T22378] netlink: 'syz.4.10221': attribute type 1 has an invalid length. [ 1557.452724][T22380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1557.478321][T22381] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1558.199803][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10220'. [ 1558.214101][T20320] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.215607][T20318] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.215648][T20318] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.215685][T20318] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.548595][T22400] netlink: 'syz.6.10224': attribute type 1 has an invalid length. [ 1558.826921][T22400] bond8: entered promiscuous mode [ 1558.827433][T22400] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1558.850120][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10225'. [ 1558.893731][T22423] netlink: 'syz.2.10228': attribute type 1 has an invalid length. [ 1558.893754][T22423] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1558.964875][T22423] netlink: 'syz.2.10228': attribute type 10 has an invalid length. [ 1558.964900][T22423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1559.081383][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10228'. [ 1559.384637][T22438] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10230'. [ 1559.508980][T22446] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1559.509943][T22446] bridge0: port 2(bond10) entered blocking state [ 1559.510131][T22446] bridge0: port 2(bond10) entered disabled state [ 1559.510280][T22446] bond10: entered allmulticast mode [ 1559.512883][T22446] bond10: entered promiscuous mode [ 1559.513603][T22446] bridge0: port 2(bond10) entered blocking state [ 1559.513727][T22446] bridge0: port 2(bond10) entered forwarding state [ 1559.588090][T20312] bridge0: port 2(bond10) entered disabled state [ 1560.046120][T22472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10236'. [ 1561.374017][T22530] xt_hashlimit: invalid interval [ 1561.717394][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1561.717432][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1561.717536][T22543] netlink: 'syz.2.10249': attribute type 5 has an invalid length. [ 1561.717554][T22543] netlink: 'syz.2.10249': attribute type 15 has an invalid length. [ 1561.819144][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1561.819170][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1561.819196][T22543] netlink: 'syz.2.10249': attribute type 5 has an invalid length. [ 1561.965913][T20320] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1561.965951][T20320] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 1561.966707][T20320] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1561.966737][T20320] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 1561.966815][T20320] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1561.966844][T20320] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 1561.966887][T20320] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1561.966915][T20320] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 1562.420745][T22554] bond6 (unregistering): Released all slaves [ 1563.141609][T22613] bridge4: entered promiscuous mode [ 1563.357105][T22623] validate_nla: 1 callbacks suppressed [ 1563.357126][T22623] netlink: 'syz.2.10264': attribute type 1 has an invalid length. [ 1563.391046][T22623] bond11: entered promiscuous mode [ 1563.391436][T22623] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1563.500324][T22624] ipvlan2: entered allmulticast mode [ 1563.500340][T22624] bond11: entered allmulticast mode [ 1565.200638][T22553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1565.319385][T22631] netlink: 'syz.6.10265': attribute type 49 has an invalid length. [ 1565.377166][T22631] bond_slave_0: entered promiscuous mode [ 1565.377232][T22631] bond_slave_0: entered allmulticast mode [ 1565.453249][T22634] ip6tnl1: entered allmulticast mode [ 1565.540095][T22645] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1565.676666][T22653] syzkaller0: left promiscuous mode [ 1565.676691][T22653] syzkaller0: left allmulticast mode [ 1566.153554][T22665] syzkaller0: entered promiscuous mode [ 1566.153611][T22665] syzkaller0: entered allmulticast mode [ 1566.183272][T22672] batman_adv: batadv0: Adding interface: veth0 [ 1566.183290][T22672] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.183488][T22672] batman_adv: batadv0: Interface activated: veth0 [ 1566.225619][T22647] batman_adv: batadv0: Interface deactivated: veth0 [ 1566.225641][T22647] batman_adv: batadv0: Removing interface: veth0 [ 1566.227156][T22667] __nla_validate_parse: 3 callbacks suppressed [ 1566.227176][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10273'. [ 1566.354412][T22644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.296923][T22708] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10280'. [ 1569.361474][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10280'. [ 1569.701046][T22700] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1569.819788][T22723] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1570.063287][T22744] IPVS: set_ctl: invalid protocol: 33 172.20.20.17:20004 [ 1570.499732][ T5767] nci: nci_stop_poll: unable to stop poll, since poll is not active [ 1570.870905][T22800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10295'. [ 1571.111814][T22810] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10296'. [ 1573.214015][T22751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1573.812199][T22825] vlan0: entered promiscuous mode [ 1573.812221][T22825] bridge0: entered promiscuous mode [ 1573.947270][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.947295][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.947586][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.947605][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.947822][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.947840][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.948059][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.948076][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.948287][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1573.948303][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10304'. [ 1574.099647][T22861] netlink: 'syz.4.10303': attribute type 266 has an invalid length. [ 1574.287955][T22872] batman_adv: batadv0: Adding interface: syzkaller0 [ 1574.288179][T22872] batman_adv: batadv0: Interface activated: syzkaller0 [ 1574.877376][T22870] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1574.950269][T22870] batman_adv: batadv0: Removing interface: syzkaller0 [ 1575.326553][T22908] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1575.621979][T22945] gre2: entered promiscuous mode [ 1575.622005][T22945] gre2: entered allmulticast mode [ 1575.845356][T22955] syz.2.10321: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1575.845437][T22955] CPU: 1 UID: 0 PID: 22955 Comm: syz.2.10321 Not tainted syzkaller #0 PREEMPT(full) [ 1575.845461][T22955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1575.845474][T22955] Call Trace: [ 1575.845483][T22955] [ 1575.845493][T22955] dump_stack_lvl+0xe8/0x150 [ 1575.845533][T22955] warn_alloc+0x24d/0x270 [ 1575.845559][T22955] ? stack_depot_save_flags+0x33/0x810 [ 1575.845598][T22955] ? __pfx_warn_alloc+0x10/0x10 [ 1575.845622][T22955] ? kasan_save_track+0x4f/0x80 [ 1575.845651][T22955] ? __kasan_kmalloc+0x93/0xb0 [ 1575.845682][T22955] ? xsk_init_queue+0x8a/0xe0 [ 1575.845705][T22955] ? xsk_setsockopt+0x52a/0x960 [ 1575.845730][T22955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.845766][T22955] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 1575.845823][T22955] ? rcu_is_watching+0x16/0xb0 [ 1575.845861][T22955] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1575.845886][T22955] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1575.845914][T22955] ? __kmalloc_cache_noprof+0x148/0x600 [ 1575.845942][T22955] ? xskq_create+0x56/0x220 [ 1575.845973][T22955] xskq_create+0x148/0x220 [ 1575.846000][T22955] ? xsk_init_queue+0x8a/0xe0 [ 1575.846028][T22955] xsk_init_queue+0x8a/0xe0 [ 1575.846056][T22955] xsk_setsockopt+0x52a/0x960 [ 1575.846085][T22955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1575.846110][T22955] ? __pfx_aa_sk_perm+0x10/0x10 [ 1575.846154][T22955] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1575.846183][T22955] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1575.846210][T22955] do_sock_setsockopt+0x17c/0x1b0 [ 1575.846240][T22955] __x64_sys_setsockopt+0x13d/0x1b0 [ 1575.846271][T22955] do_syscall_64+0x166/0x520 [ 1575.846301][T22955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.846323][T22955] ? clear_bhb_loop+0x70/0xc0 [ 1575.846351][T22955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.846373][T22955] RIP: 0033:0x7f3521d9fb19 [ 1575.846393][T22955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.846412][T22955] RSP: 002b:00007f3522c01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1575.846444][T22955] RAX: ffffffffffffffda RBX: 00007f3522025fa0 RCX: 00007f3521d9fb19 [ 1575.846460][T22955] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1575.846473][T22955] RBP: 00007f3521e37b70 R08: 0000000000000004 R09: 0000000000000000 [ 1575.846487][T22955] R10: 0000200000002dc0 R11: 0000000000000246 R12: 0000000000000000 [ 1575.846501][T22955] R13: 00007f3522026038 R14: 00007f3522025fa0 R15: 00007ffce21aa718 [ 1575.846557][T22955] [ 1575.846659][T22955] Mem-Info: [ 1575.846670][T22955] active_anon:9818 inactive_anon:0 isolated_anon:0 [ 1575.846670][T22955] active_file:18 inactive_file:43758 isolated_file:0 [ 1575.846670][T22955] unevictable:0 dirty:69 writeback:0 [ 1575.846670][T22955] slab_reclaimable:14044 slab_unreclaimable:194165 [ 1575.846670][T22955] mapped:34896 shmem:548 pagetables:6054 [ 1575.846670][T22955] sec_pagetables:0 bounce:0 [ 1575.846670][T22955] kernel_misc_reclaimable:0 [ 1575.846670][T22955] free:1185235 free_pcp:10772 free_cma:0 [ 1575.846731][T22955] Node 0 active_anon:39272kB inactive_anon:0kB active_file:72kB inactive_file:174820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139584kB dirty:276kB writeback:0kB shmem:2192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22496kB pagetables:24068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1575.846801][T22955] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1575.846861][T22955] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1575.846928][T22955] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1575.846970][T22955] Node 0 DMA32 free:781800kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:39272kB inactive_anon:0kB active_file:72kB inactive_file:174820kB unevictable:0kB writepending:276kB zspages:0kB present:3129332kB managed:2522828kB mlocked:0kB bounce:0kB free_pcp:38560kB local_pcp:20680kB free_cma:0kB [ 1575.847054][T22955] lowmem_reserve[]: 0 0 1 1 1 [ 1575.847093][T22955] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1575.847159][T22955] lowmem_reserve[]: 0 0 0 0 0 [ 1575.847199][T22955] Node 1 Normal free:3943780kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4524kB local_pcp:4280kB free_cma:0kB [ 1575.847266][T22955] lowmem_reserve[]: 0 0 0 0 0 [ 1575.847304][T22955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1575.847461][T22955] Node 0 DMA32: 1954*4kB (UM) 1800*8kB (UME) 1194*16kB (UME) 390*32kB (UME) 169*64kB (UME) 25*128kB (UM) 147*256kB (UME) 209*512kB (UM) 76*1024kB (UME) 12*2048kB (UME) 114*4096kB (UM) = 781800kB [ 1575.847672][T22955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1575.847859][T22955] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 3*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943832kB [ 1575.848038][T22955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.848058][T22955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1575.848076][T22955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1575.848096][T22955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1575.848115][T22955] 44320 total pagecache pages [ 1575.848125][T22955] 0 pages in swap cache [ 1575.848133][T22955] Free swap = 124996kB [ 1575.848143][T22955] Total swap = 124996kB [ 1575.848153][T22955] 2097051 pages RAM [ 1575.848161][T22955] 0 pages HighMem/MovableOnly [ 1575.848170][T22955] 434380 pages reserved [ 1575.848179][T22955] 0 pages cma reserved [ 1576.396944][T22955] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1576.592486][T22965] netlink: 'syz.5.10322': attribute type 1 has an invalid length. [ 1577.352185][T23011] netlink: 'syz.6.10335': attribute type 1 has an invalid length. [ 1577.352211][T23011] netlink: 'syz.6.10335': attribute type 1 has an invalid length. [ 1578.074034][T23043] ip_tables: iptables: counters copy to user failed while replacing table [ 1578.565966][T23057] xt_HMARK: spi-set and port-set can't be combined [ 1579.443982][T23111] netlink: 'syz.2.10356': attribute type 49 has an invalid length. [ 1581.515556][T23058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1581.920828][T23145] macvtap1: entered promiscuous mode [ 1581.920853][T23145] batadv0: entered promiscuous mode [ 1581.939105][T23145] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1581.963240][T23145] batadv0: left promiscuous mode [ 1582.313940][T23174] __nla_validate_parse: 66 callbacks suppressed [ 1582.313960][T23174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10374'. [ 1582.334919][T23174] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10374'. [ 1582.338190][T23174] IPVS: Error connecting to the multicast addr [ 1582.339399][T23164] tap0: tun_chr_ioctl cmd 1074025680 [ 1582.449626][T23183] syzkaller0: entered promiscuous mode [ 1582.449650][T23183] syzkaller0: entered allmulticast mode [ 1582.579052][T23187] tipc: Enabled bearer , priority 0 [ 1583.162307][T23215] netlink: 5 bytes leftover after parsing attributes in process `syz.5.10381'. [ 1583.175476][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10381'. [ 1583.332227][T23181] tipc: Resetting bearer [ 1583.413899][T23181] tipc: Disabling bearer [ 1583.626051][T23193] xt_hashlimit: size too large, truncated to 1048576 [ 1583.691575][T23222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10377'. [ 1584.380484][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10386'. [ 1584.380521][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10386'. [ 1584.437963][T23248] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10388'. [ 1584.468123][T20283] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1584.468669][T20283] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1584.468711][T20283] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1584.468749][T20283] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1584.538943][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10386'. [ 1584.538977][T23238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10386'. [ 1584.578847][T23252] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1584.946452][T23275] bond12: peer notification delay (37) is not a multiple of miimon (100), value rounded to 0 ms [ 1584.949966][T23275] bond12 (unregistering): Released all slaves [ 1585.538228][T23308] netlink: 'syz.2.10399': attribute type 10 has an invalid length. [ 1585.539920][T23308] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 1585.539952][T23308] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1585.540330][T23308] bridge0: port 1(netdevsim1) entered disabled state [ 1585.597302][T23308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1585.599684][T23308] team0: Port device netdevsim1 added [ 1585.952678][T23337] IPv6: addrconf: prefix option has invalid lifetime [ 1585.991969][T23334] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1585.994419][T23334] batman_adv: batadv0: Adding interface: gretap2 [ 1585.994435][T23334] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1585.994680][T23334] batman_adv: batadv0: Interface activated: gretap2 [ 1586.218902][T23328] bond9: option broadcast_neighbor: invalid value (4) [ 1586.701473][T23328] bond9 (unregistering): Released all slaves [ 1586.710683][T23360] netlink: 'syz.5.10407': attribute type 3 has an invalid length. [ 1586.821630][T23360] ip_tables: iptables: counters copy to user failed while replacing table [ 1587.307713][T23381] nftables ruleset with unbound set [ 1587.409990][T23391] __nla_validate_parse: 7 callbacks suppressed [ 1587.410013][T23391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10416'. [ 1587.564150][T23388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10414'. [ 1587.957793][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10420'. [ 1588.027789][T23409] IPVS: Scheduler module ip_vs_sip not found [ 1588.067609][T23423] x_tables: duplicate underflow at hook 2 [ 1589.282643][T23464] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1589.753738][T23487] Set syz1 is full, maxelem 1029 reached [ 1589.801534][T23494] syzkaller0: entered promiscuous mode [ 1589.801554][T23494] syzkaller0: entered allmulticast mode [ 1590.028458][T23501] netlink: 'syz.6.10436': attribute type 1 has an invalid length. [ 1590.108983][T23501] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1590.122330][T23498] netlink: 'syz.2.10437': attribute type 5 has an invalid length. [ 1590.122538][T23507] bond9: entered promiscuous mode [ 1590.207450][T23500] bond9: left promiscuous mode [ 1590.693512][T23541] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10445'. [ 1590.843692][T23551] SET target dimension over the limit! [ 1590.879935][T23543] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10446'. [ 1590.995523][T23559] netlink: 'syz.6.10450': attribute type 1 has an invalid length. [ 1591.147083][T23568] netlink: 'syz.6.10450': attribute type 10 has an invalid length. [ 1591.147106][T23568] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10450'. [ 1591.147219][T23568] batadv0: entered promiscuous mode [ 1591.147237][T23568] batadv0: entered allmulticast mode [ 1591.187125][T23568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.188450][T23568] bridge0: port 1(batadv0) entered blocking state [ 1591.190898][T23568] bridge0: port 1(batadv0) entered disabled state [ 1591.251514][T23568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1591.251533][T23568] IPv6: NLM_F_CREATE should be set when creating new route [ 1591.251587][T23568] IPv6: NLM_F_CREATE should be set when creating new route [ 1591.289309][T23564] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10452'. [ 1591.367966][T26412] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1591.367988][T26412] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1591.613833][T23586] netlink: 'syz.2.10454': attribute type 4 has an invalid length. [ 1591.992566][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10460'. [ 1592.191028][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10463'. [ 1592.199676][T23612] netlink: 'syz.5.10463': attribute type 1 has an invalid length. [ 1592.292372][T23612] netlink: 'syz.5.10463': attribute type 10 has an invalid length. [ 1592.292397][T23612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10463'. [ 1592.292548][T23612] dummy0: entered promiscuous mode [ 1592.575484][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.576141][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.576736][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.616353][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.616973][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.647785][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.828690][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.829262][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.838059][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1592.849418][T23624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10465'. [ 1593.083470][T23622] syzkaller1: entered promiscuous mode [ 1593.083494][T23622] syzkaller1: entered allmulticast mode [ 1593.819446][T23676] netlink: 'syz.2.10476': attribute type 1 has an invalid length. [ 1594.078991][T23683] netlink: 'syz.2.10479': attribute type 21 has an invalid length. [ 1594.079095][T23683] netlink: 'syz.2.10479': attribute type 6 has an invalid length. [ 1594.122067][T23683] netlink: 'syz.2.10479': attribute type 2 has an invalid length. [ 1594.808304][T23716] netlink: 'syz.6.10484': attribute type 1 has an invalid length. [ 1595.467654][T23743] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1595.501880][T23757] bond6: entered allmulticast mode [ 1595.599972][T23743] bond6: (slave ip6gretap1): making interface the new active one [ 1595.600000][T23743] ip6gretap1: entered allmulticast mode [ 1595.629695][T23743] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1595.651484][T23755] bridge0: port 1(batadv0) entered blocking state [ 1595.651633][T23755] bridge0: port 1(batadv0) entered listening state [ 1595.660743][T23755] bridge0: entered allmulticast mode [ 1595.843387][T23777] syzkaller1: entered promiscuous mode [ 1595.843411][T23777] syzkaller1: entered allmulticast mode [ 1596.449605][T23802] batman_adv: batadv0: Adding interface: veth0 [ 1596.449626][T23802] batman_adv: batadv0: The MTU of interface veth0 is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 1596.449732][T23802] batman_adv: batadv0: Interface activated: veth0 [ 1596.504318][T23802] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1597.478309][T23843] sctp: [Deprecated]: syz.1.10512 (pid 23843) Use of int in max_burst socket option. [ 1597.478309][T23843] Use struct sctp_assoc_value instead [ 1597.497925][T23845] validate_nla: 1 callbacks suppressed [ 1597.497975][T23845] netlink: 'syz.5.10513': attribute type 8 has an invalid length. [ 1597.653841][T23848] __nla_validate_parse: 35 callbacks suppressed [ 1597.653862][T23848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10511'. [ 1597.679397][T23848] Bluetooth: hci0: unsupported parameter 5134 [ 1597.679420][T23848] Bluetooth: hci0: unsupported parameter 8192 [ 1597.679441][T23848] Bluetooth: hci0: unsupported parameter 5134 [ 1597.679455][T23848] Bluetooth: hci0: unsupported parameter 8192 [ 1597.767548][T23863] team0: entered promiscuous mode [ 1597.767573][T23863] xfrm0: entered promiscuous mode [ 1597.767959][T23863] team0: entered allmulticast mode [ 1597.767976][T23863] xfrm0: entered allmulticast mode [ 1597.768628][T23863] team0: Cannot enslave team device to itself [ 1597.853941][T23868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10518'. [ 1597.878256][T23870] team0: Cannot enslave team device to itself [ 1598.498783][T23910] IPv6: addrconf: prefix option has invalid lifetime [ 1598.778551][T23918] syzkaller0: entered promiscuous mode [ 1598.778604][T23918] syzkaller0: entered allmulticast mode [ 1598.862484][T23878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1599.031035][T23918] syzkaller0: mtu less than device minimum [ 1599.749230][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10533'. [ 1599.906617][T23967] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10532'. [ 1600.440112][T23995] tipc: New replicast peer: 127.0.0.1 [ 1600.441849][T23995] tipc: Enabled bearer , priority 26 [ 1600.597526][T23999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1601.335257][T24010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1601.520264][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10550'. [ 1601.522083][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10550'. [ 1601.612281][T24042] caif0: tun_chr_ioctl cmd 2147767507 [ 1602.015143][T24063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1602.260357][T24078] Cannot find map_set index 2 as target [ 1602.470173][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10559'. [ 1602.693825][T24107] ip_tables: iptables: counters copy to user failed while replacing table [ 1602.730221][T24095] syzkaller1: entered promiscuous mode [ 1602.730246][T24095] syzkaller1: entered allmulticast mode [ 1603.051007][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10566'. [ 1603.051052][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10566'. [ 1603.243115][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10567'. [ 1603.680174][T24154] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1603.714590][T24154] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1603.963533][T24164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10574'. [ 1604.070722][T24170] netlink: 'syz.5.10576': attribute type 1 has an invalid length. [ 1604.070745][T24170] netlink: 1368 bytes leftover after parsing attributes in process `syz.5.10576'. [ 1604.253219][T24177] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10578'. [ 1604.430677][T24189] netlink: 'syz.4.10580': attribute type 4 has an invalid length. [ 1604.444923][T24193] netlink: 'syz.4.10580': attribute type 4 has an invalid length. [ 1604.699534][T24199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10581'. [ 1604.937842][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10584'. [ 1605.241808][T24231] netlink: zone id is out of range [ 1605.241825][T24231] netlink: zone id is out of range [ 1605.241834][T24231] netlink: zone id is out of range [ 1605.241842][T24231] netlink: get zone limit has 4 unknown bytes [ 1607.583696][T24197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1607.762566][T24238] ip_tables: iptables: counters copy to user failed while replacing table [ 1607.908589][T24248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10589'. [ 1607.947682][T24251] pim6reg: entered allmulticast mode [ 1607.954121][T24249] pim6reg: left allmulticast mode [ 1607.990571][T24258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10592'. [ 1608.055895][T24263] __nla_validate_parse: 3 callbacks suppressed [ 1608.055914][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10592'. [ 1608.055941][T24263] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10592'. [ 1608.055956][T24263] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10592'. [ 1608.338230][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10591'. [ 1608.675150][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10597'. [ 1608.711669][T24292] netlink: 'syz.5.10598': attribute type 1 has an invalid length. [ 1608.888956][T24297] veth3: entered allmulticast mode [ 1608.940113][T24297] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1608.987980][T24292] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1609.034658][T24307] netlink: 'syz.1.10602': attribute type 1 has an invalid length. [ 1609.166605][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10595'. [ 1609.292316][T24281] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1609.330145][T24312] bond15: (slave veth9): Enslaving as an active interface with a down link [ 1609.384066][T24307] bond12: (slave veth0_to_bond): Releasing backup interface [ 1609.384091][T24307] bond12: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1609.431004][T24312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10602'. [ 1609.444011][T24307] veth0_to_bond: left promiscuous mode [ 1609.478437][T24307] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1609.508849][T24312] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1612.936065][T24346] bond12: entered promiscuous mode [ 1612.936089][T24346] bond12: entered allmulticast mode [ 1613.169520][T24363] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10613'. [ 1613.427666][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10616'. [ 1613.567650][ T3015] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1613.568826][T26414] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1613.568871][T26414] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1613.568908][T26414] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1613.749285][T24396] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10619'. [ 1614.281061][T24421] netlink: 'syz.4.10624': attribute type 1 has an invalid length. [ 1614.436378][T24421] bond7: entered promiscuous mode [ 1614.436919][T24421] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1614.506370][T24426] bond7: (slave bridge6): making interface the new active one [ 1614.506394][T24426] bridge6: entered promiscuous mode [ 1614.510727][T24426] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1614.815894][T24443] netlink: 'syz.4.10629': attribute type 1 has an invalid length. [ 1614.856961][T24443] bond8: entered promiscuous mode [ 1614.862613][T24443] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1614.898236][ T30] audit: type=1804 audit(1794030395.461:63): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.10628" name="/newroot/202/cgroup.controllers" dev="tmpfs" ino=1042 res=1 errno=0 [ 1614.898461][ T30] audit: type=1800 audit(1794030395.461:64): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10628" name="cgroup.controllers" dev="tmpfs" ino=1042 res=0 errno=-22 [ 1614.903724][T24443] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1614.911339][T24443] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1614.911405][T24443] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1614.993446][T24443] bond8: (slave ip6gre1): making interface the new active one [ 1614.993471][T24443] ip6gre1: entered promiscuous mode [ 1615.013607][T24443] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 1615.433864][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10634'. [ 1615.445924][T24464] netlink: 'syz.5.10634': attribute type 2 has an invalid length. [ 1615.445943][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10634'. [ 1615.520523][T24470] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1615.576792][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10633'. [ 1615.593601][T24475] sctp: [Deprecated]: syz.5.10636 (pid 24475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1615.593601][T24475] Use struct sctp_sack_info instead [ 1615.619865][T24476] netlink: 'syz.6.10633': attribute type 9 has an invalid length. [ 1615.621885][T24476] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10633'. [ 1615.751650][T24481] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1616.893321][T24527] netlink: 'syz.4.10646': attribute type 1 has an invalid length. [ 1617.106534][T24533] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10647'. [ 1617.106585][T24533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10647'. [ 1617.143115][T24511] tipc: Failed to remove unknown binding: 66,0,2/0:4199028924/4199028925 [ 1617.158734][T24511] tipc: Failed to remove unknown binding: 66,0,2/0:4199028924/4199028925 [ 1617.225926][T24538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10648'. [ 1617.474084][T24544] netlink: 'syz.1.10649': attribute type 2 has an invalid length. [ 1617.474108][T24544] nbd: illegal input index -2147221500 [ 1617.624774][T24550] ip_tables: iptables: counters copy to user failed while replacing table [ 1618.324918][T24584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1619.138153][T24621] syzkaller0: entered promiscuous mode [ 1619.138177][T24621] syzkaller0: entered allmulticast mode [ 1619.247172][T24627] netlink: 'syz.6.10661': attribute type 4 has an invalid length. [ 1619.247196][T24627] __nla_validate_parse: 3 callbacks suppressed [ 1619.247209][T24627] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10661'. [ 1619.440092][T24638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10663'. [ 1619.507377][T24635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10663'. [ 1619.507406][T24635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10663'. [ 1619.556351][T12634] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1619.558893][T24638] macsec1: entered allmulticast mode [ 1619.558914][T24638] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1619.560236][T24638] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1619.629975][T24650] netlink: 'syz.1.10666': attribute type 1 has an invalid length. [ 1619.805146][T24650] bond16: entered promiscuous mode [ 1619.807086][T24650] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1619.858511][T24658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10667'. [ 1619.881959][T24654] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1619.906064][T24654] bond16: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1619.906090][T24654] bond16: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1619.935335][T24654] bond16: (slave ip6gre3): making interface the new active one [ 1619.935357][T24654] ip6gre3: entered promiscuous mode [ 1619.937093][T24654] bond16: (slave ip6gre3): Enslaving as an active interface with an up link [ 1619.942199][T24662] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1620.150746][T24666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10668'. [ 1620.153080][T24666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10668'. [ 1620.408239][T24681] Set syz1 is full, maxelem 1029 reached [ 1620.488276][T24687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10673'. [ 1620.546677][T24687] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1620.551248][T24687] bond10 (unregistering): Released all slaves [ 1620.691821][T24703] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10675'. [ 1621.441990][T24743] netlink: 6627 bytes leftover after parsing attributes in process `syz.4.10683'. [ 1621.442014][T24743] netlink: 'syz.4.10683': attribute type 2 has an invalid length. [ 1621.472005][T24743] netlink: 'syz.4.10683': attribute type 2 has an invalid length. [ 1622.651177][T24812] netlink: 'syz.5.10695': attribute type 3 has an invalid length. [ 1622.676823][T24814] netlink: 'syz.5.10695': attribute type 3 has an invalid length. [ 1623.479626][T24868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1624.242169][T26414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.242210][T26414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.279258][T26414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.279280][T26414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.328774][T24907] __nla_validate_parse: 5 callbacks suppressed [ 1624.328791][T24907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10708'. [ 1624.929337][T24936] netlink: 'syz.6.10715': attribute type 1 has an invalid length. [ 1624.929360][T24936] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10715'. [ 1625.015997][T24937] netlink: 'syz.1.10714': attribute type 32 has an invalid length. [ 1625.583038][T24974] ipvlan1: mtu less than device minimum [ 1626.126652][ C1] bridge0: port 1(batadv0) entered learning state [ 1626.493675][T25023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10731'. [ 1626.811148][T25027] syzkaller0: entered promiscuous mode [ 1626.811170][T25027] syzkaller0: entered allmulticast mode [ 1626.922887][T25030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10732'. [ 1628.771360][T24983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1629.125596][T25048] team0: Device vlan0 failed to change mtu [ 1629.214140][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10734'. [ 1629.268665][T25058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10737'. [ 1629.383139][T25059] bond17: entered allmulticast mode [ 1629.396999][T25059] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1631.862766][T25033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1631.877840][T25058] netlink: 'syz.2.10737': attribute type 1 has an invalid length. [ 1632.054140][T25088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10739'. [ 1632.195644][T25089] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10739'. [ 1632.352443][T25104] x_tables: duplicate entry at hook 2 [ 1632.352619][T25105] x_tables: duplicate entry at hook 2 [ 1632.436641][T25110] netlink: ct family unspecified [ 1633.248626][T25139] ip6gre2: entered promiscuous mode [ 1633.248652][T25139] ip6gre2: entered allmulticast mode [ 1633.252489][T20282] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1633.252733][T20282] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1633.301133][ T5767] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1633.483653][ T30] audit: type=1800 audit(1794030414.041:65): pid=25129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10750" name="memory.events" dev="tmpfs" ino=2162 res=0 errno=-22 [ 1633.658124][T25146] ip_tables: iptables: counters copy to user failed while replacing table [ 1633.678735][T25146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10755'. [ 1633.678776][T25146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10755'. [ 1633.731116][T12634] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1633.736280][T12634] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1633.771992][T25154] xt_hashlimit: size too large, truncated to 1048576 [ 1633.908829][T25164] sctp: [Deprecated]: syz.2.10758 (pid 25164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1633.908829][T25164] Use struct sctp_sack_info instead [ 1633.932039][T25155] xt_hashlimit: size too large, truncated to 1048576 [ 1633.947787][T25164] sctp: [Deprecated]: syz.2.10758 (pid 25164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1633.947787][T25164] Use struct sctp_sack_info instead [ 1634.472831][T25187] netlink: 'syz.1.10762': attribute type 12 has an invalid length. [ 1634.482773][T25187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10762'. [ 1635.516233][T25222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10768'. [ 1635.516259][T25222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10768'. [ 1635.783061][T25237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10771'. [ 1635.783109][T25237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10771'. [ 1635.809952][T25237] erspan2: entered promiscuous mode [ 1636.093771][T25255] netlink: 'syz.4.10778': attribute type 10 has an invalid length. [ 1636.259377][T25255] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10778'. [ 1637.133803][T25295] __nla_validate_parse: 2 callbacks suppressed [ 1637.133824][T25295] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10787'. [ 1637.324543][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1637.874491][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.874817][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.875129][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.875419][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.875708][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.877727][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.878038][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.878361][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1637.882059][T25320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1638.018932][T25329] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1638.021349][T25329] bond5: (slave macvlan0): Enslaving as an active interface with a down link [ 1638.290751][T25341] bridge6: entered promiscuous mode [ 1638.290774][T25341] bridge6: entered allmulticast mode [ 1638.356348][T25352] netlink: 'syz.2.10801': attribute type 5 has an invalid length. [ 1638.375988][T25350] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 1638.432632][T25342] bridge6: entered promiscuous mode [ 1638.432655][T25342] bridge6: entered allmulticast mode [ 1638.496327][T25352] geneve3: entered promiscuous mode [ 1638.496353][T25352] geneve3: entered allmulticast mode [ 1638.770774][T25375] ovs-dp0: entered promiscuous mode [ 1639.080737][T25389] netlink: zone id is out of range [ 1639.080754][T25389] netlink: set zone limit has 4 unknown bytes [ 1639.559762][T25404] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1639.618042][T10632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1639.633121][T10632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1639.644927][T10632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1639.663255][T10632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1639.665109][T10632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1640.623953][T25450] xt_IDLETIMER: label is empty or not nul-terminated [ 1640.710948][T25438] team0: Port device vlan0 removed [ 1640.750199][T25455] netlink: 'syz.4.10817': attribute type 1 has an invalid length. [ 1640.776744][T25455] sctp: [Deprecated]: syz.4.10817 (pid 25455) Use of int in max_burst socket option. [ 1640.776744][T25455] Use struct sctp_assoc_value instead [ 1641.097134][T20283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1641.097182][T20283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1641.359148][T20283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1641.359188][T20283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1641.479064][T25406] rxe_eth0 speed is unknown, defaulting to 1000 [ 1641.670766][T20283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1641.670803][T20283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1641.728644][ T5650] Bluetooth: hci4: command tx timeout [ 1643.418367][T25406] erspan0 speed is unknown, defaulting to 1000 [ 1643.682612][T20283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 1643.704715][T20283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1643.806540][ T5650] Bluetooth: hci4: command tx timeout [ 1644.397068][T25525] __nla_validate_parse: 62 callbacks suppressed [ 1644.397093][T25525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10829'. [ 1644.559853][T25529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10829'. [ 1644.683137][T20283] bond16 (unregistering): (slave ip6gre3): Releasing backup interface [ 1644.683168][T20283] ip6gre3 (unregistering): left promiscuous mode [ 1645.324487][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1645.344631][T20283] bond12 (unregistering): (slave bridge3): Releasing backup interface [ 1645.399407][T20283] bond0 (unregistering): Released all slaves [ 1645.419867][T20283] bond1 (unregistering): Released all slaves [ 1645.441856][T20283] bond2 (unregistering): Released all slaves [ 1645.473116][T20283] bond3 (unregistering): Released all slaves [ 1645.511055][T20283] bond4 (unregistering): Released all slaves [ 1645.535807][T20283] bond5 (unregistering): Released all slaves [ 1645.562394][T20283] bond6 (unregistering): Released all slaves [ 1645.596064][T20283] bond7 (unregistering): Released all slaves [ 1645.621484][T20283] bond8 (unregistering): Released all slaves [ 1645.653227][T20283] bond9 (unregistering): Released all slaves [ 1645.681945][T20283] bond10 (unregistering): Released all slaves [ 1645.719756][T20283] bond11 (unregistering): Released all slaves [ 1645.752423][T20283] bond12 (unregistering): Released all slaves [ 1645.776460][T20283] bond13 (unregistering): Released all slaves [ 1645.815885][T20283] bond14 (unregistering): Released all slaves [ 1645.841953][T20283] bond15 (unregistering): (slave veth9): Releasing active interface [ 1645.867134][T20283] bond15 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1645.870724][T20283] bond15 (unregistering): Released all slaves [ 1645.891544][ T5650] Bluetooth: hci4: command tx timeout [ 1645.902171][T20283] bond16 (unregistering): Released all slaves [ 1645.928095][T25551] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10832'. [ 1645.928441][T20283] bond17 (unregistering): Released all slaves [ 1645.961797][T25406] hsr0 speed is unknown, defaulting to 1000 [ 1646.225492][T20283] tipc: Left network mode [ 1646.266896][T25556] sctp: [Deprecated]: syz.5.10833 (pid 25556) Use of int in max_burst socket option deprecated. [ 1646.266896][T25556] Use struct sctp_assoc_value instead [ 1646.562394][T25406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.562643][T25406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.562784][T25406] bridge_slave_0: entered allmulticast mode [ 1646.589322][T25406] bridge_slave_0: entered promiscuous mode [ 1646.603832][T25406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.606180][T25406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.606324][T25406] bridge_slave_1: entered allmulticast mode [ 1646.618109][T25406] bridge_slave_1: entered promiscuous mode [ 1646.706860][T25406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1646.712703][T25406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1646.801895][T25406] team0: Port device team_slave_0 added [ 1646.811520][T25406] team0: Port device team_slave_1 added [ 1646.883119][T25406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.883140][T25406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.883168][T25406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.934010][T25406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.934029][T25406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.934058][T25406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.104042][T25406] hsr_slave_0: entered promiscuous mode [ 1647.114975][T25406] hsr_slave_1: entered promiscuous mode [ 1647.115775][T25406] debugfs: 'hsr0' already exists in 'hsr' [ 1647.115793][T25406] Cannot create hsr debugfs directory [ 1647.254000][T25529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1647.572120][T25572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10834'. [ 1647.619079][T25575] netlink: 480 bytes leftover after parsing attributes in process `syz.4.10837'. [ 1647.619194][T25575] netlink: 480 bytes leftover after parsing attributes in process `syz.4.10837'. [ 1647.964791][ T5650] Bluetooth: hci4: command tx timeout [ 1648.146956][T25572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.618887][T20283] IPVS: stop unused estimator thread 0... [ 1648.771613][T25599] ip_tables: iptables: counters copy to user failed while replacing table [ 1648.785253][T25599] ip_tables: iptables: counters copy to user failed while replacing table [ 1648.787296][T25599] siw: device registration error -23 [ 1649.356770][T25632] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1649.529287][ T5650] block nbd4: Receive control failed (result -32) [ 1649.789628][T25406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1649.834122][T25406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1649.836983][T25406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1649.870340][T25406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1649.938738][T25406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1649.943668][T25406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1649.959843][T25406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1649.963238][T25406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1650.000437][T25656] netlink: 'syz.2.10853': attribute type 1 has an invalid length. [ 1650.000459][T25656] nbd: error processing sock list [ 1650.000888][T25656] block nbd8: shutting down sockets [ 1650.153419][T25406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.200244][T25673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1650.271244][T25406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.297667][T20300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.297795][T20300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.335831][T26414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.335939][T26414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.471799][T25671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10855'. [ 1650.518431][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.537575][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.559353][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.582726][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.609223][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.622459][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.647555][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.652415][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1650.664918][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10859'. [ 1651.450019][T25727] netlink: 'syz.5.10866': attribute type 1 has an invalid length. [ 1651.583367][T25727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1651.659580][T25729] bond3: (slave geneve3): making interface the new active one [ 1651.662948][T25729] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1652.083423][T25745] can: request_module (can-proto-5) failed. [ 1652.133841][T25406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.202835][T25406] veth0_vlan: entered promiscuous mode [ 1652.256939][T25406] veth1_vlan: entered promiscuous mode [ 1652.425560][T25406] veth0_macvtap: entered promiscuous mode [ 1652.453143][T25406] veth1_macvtap: entered promiscuous mode [ 1652.478578][T25759] bond0: Unable to set down delay as MII monitoring is disabled [ 1652.508640][T25406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.545372][T25406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.699305][T31328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.699762][T31328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.699846][T31328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.708731][T20300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.815699][T20300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.815721][T20300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.880830][T26413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.880854][T26413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.128117][T25777] veth0 (unregistering): left allmulticast mode [ 1653.128145][T25777] veth0 (unregistering): left promiscuous mode [ 1653.128229][T25777] bridge0: port 1(veth0) entered disabled state [ 1654.209160][T25825] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1654.209483][T25826] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1654.613169][T20283] nci: nci_ntf_packet: unknown ntf opcode 0xe33 [ 1655.478490][T25857] __nla_validate_parse: 105 callbacks suppressed [ 1655.478546][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10887'. [ 1655.504918][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10887'. [ 1655.518494][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10887'. [ 1655.538573][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10887'. [ 1655.563187][T25857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10887'. [ 1656.204985][ C1] bridge0: port 1(batadv0) entered forwarding state [ 1656.205011][ C1] bridge0: topology change detected, propagating [ 1656.336101][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10894'. [ 1656.355982][T25908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1656.355997][T25908] IPv6: NLM_F_CREATE should be set when creating new route [ 1656.356036][T25908] IPv6: NLM_F_CREATE should be set when creating new route [ 1656.356061][T25908] IPv6: NLM_F_CREATE should be set when creating new route [ 1657.278207][T25835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1658.163199][T25977] netlink: 2 bytes leftover after parsing attributes in process `syz.5.10906'. [ 1658.227975][ T5650] block nbd8: Receive control failed (result -32) [ 1658.606795][T25996] netlink: 'syz.2.10909': attribute type 10 has an invalid length. [ 1658.606821][T25996] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10909'. [ 1659.252861][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10918'. [ 1659.574485][T26040] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002 [ 1659.643202][T26040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10922'. [ 1659.643234][T26040] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1660.040091][T26058] netlink: 'syz.6.10927': attribute type 13 has an invalid length. [ 1660.492231][T26071] bond14: entered promiscuous mode [ 1660.492280][T26071] bond14: entered allmulticast mode [ 1660.506497][T26071] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1660.655429][T26083] syzkaller0: entered promiscuous mode [ 1660.655452][T26083] syzkaller0: entered allmulticast mode [ 1660.661181][T26083] netlink: 'syz.4.10932': attribute type 26 has an invalid length. [ 1660.687777][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1661.323915][T26103] __nla_validate_parse: 3 callbacks suppressed [ 1661.323938][T26103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10936'. [ 1665.233335][T26182] syzkaller1: entered promiscuous mode [ 1665.233358][T26182] syzkaller1: entered allmulticast mode [ 1667.239953][T26135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1667.553446][T26200] ip6tnl3: entered allmulticast mode [ 1667.586637][T26200] netlink: 'syz.2.10958': attribute type 39 has an invalid length. [ 1667.644814][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10961'. [ 1667.662911][T26214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10961'. [ 1667.885327][T26222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10962'. [ 1667.912684][T26222] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10962'. [ 1668.807640][T26256] xt_TCPMSS: Only works on TCP SYN packets [ 1668.825796][T26256] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10967'. [ 1669.045997][T26263] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10968'. [ 1669.073377][T26270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10970'. [ 1669.089602][T26264] bridge0: left allmulticast mode [ 1669.180125][T26277] ip_tables: iptables: counters copy to user failed while replacing table [ 1669.343346][T26282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10972'. [ 1669.447365][T26282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10972'. [ 1669.675969][T26291] netlink: 260 bytes leftover after parsing attributes in process `syz.5.10974'. [ 1670.013673][T26296] batadv1: entered promiscuous mode [ 1670.026840][T26296] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1670.320155][T26317] netlink: 'syz.6.10983': attribute type 21 has an invalid length. [ 1670.359075][T26314] netlink: set zone limit has 4 unknown bytes [ 1671.719934][T26389] ip_tables: iptables: counters copy to user failed while replacing table [ 1671.743663][T26389] syzkaller0: left promiscuous mode [ 1671.743704][T26389] syzkaller0: left allmulticast mode [ 1671.924471][T26397] netlink: 'syz.6.11001': attribute type 1 has an invalid length. [ 1671.996505][T26401] netlink: 'syz.1.11002': attribute type 1 has an invalid length. [ 1672.087777][T26401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1672.255213][T26411] netlink: 'syz.2.11005': attribute type 1 has an invalid length. [ 1672.258683][T26411] netlink: 'syz.2.11005': attribute type 1 has an invalid length. [ 1672.293935][T26411] netlink: 'syz.2.11005': attribute type 1 has an invalid length. [ 1672.301576][T26411] netlink: 'syz.2.11005': attribute type 1 has an invalid length. [ 1672.310679][T26411] netlink: 'syz.2.11005': attribute type 1 has an invalid length. [ 1672.320637][T26411] netlink: 'syz.2.11005': attribute type 1 has an invalid length. [ 1672.814634][T26439] syzkaller0: entered promiscuous mode [ 1672.814659][T26439] syzkaller0: entered allmulticast mode [ 1673.239836][T26462] validate_nla: 21 callbacks suppressed [ 1673.239858][T26462] netlink: 'syz.4.11015': attribute type 1 has an invalid length. [ 1673.239872][T26462] __nla_validate_parse: 36 callbacks suppressed [ 1673.239884][T26462] netlink: 244 bytes leftover after parsing attributes in process `syz.4.11015'. [ 1673.466638][T26474] syzkaller0: entered promiscuous mode [ 1673.466664][T26474] syzkaller0: entered allmulticast mode [ 1673.518573][T26481] netlink: 'syz.4.11020': attribute type 39 has an invalid length. [ 1673.602994][T26486] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11020'. [ 1673.681806][T26488] veth0_to_bond: left allmulticast mode [ 1673.689920][T26486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11020'. [ 1673.712480][T26472] syzkaller0: entered promiscuous mode [ 1673.712508][T26472] syzkaller0: entered allmulticast mode [ 1674.091544][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11023'. [ 1674.141559][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11024'. [ 1674.141586][T26516] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) ! [ 1674.160121][T26517] IPVS: Error connecting to the multicast addr [ 1674.590295][T26535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1675.196733][T26549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11028'. [ 1675.251425][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11032'. [ 1675.288147][T26555] netlink: 'syz.4.11030': attribute type 1 has an invalid length. [ 1675.321609][T26563] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11032'. [ 1675.422550][T26566] netlink: 'syz.4.11030': attribute type 10 has an invalid length. [ 1675.422574][T26566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11030'. [ 1675.436934][T26561] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1675.491989][T26561] netlink: 'syz.6.11032': attribute type 10 has an invalid length. [ 1675.492015][T26561] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11032'. [ 1675.553326][T26555] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1675.553867][T26563] bond11: entered promiscuous mode [ 1675.553887][T26563] bond11: entered allmulticast mode [ 1675.629152][T26564] bond11: (slave veth9): Enslaving as an active interface with a down link [ 1675.629606][T26566] dummy0: entered promiscuous mode [ 1675.935456][T26580] ip_tables: iptables: counters copy to user failed while replacing table [ 1676.027373][T26582] syz_tun: entered allmulticast mode [ 1676.040382][T26580] netlink: 'syz.4.11036': attribute type 30 has an invalid length. [ 1676.053324][T26582] siw: device registration error -23 [ 1676.216982][T26581] syz_tun: left allmulticast mode [ 1676.555459][T26609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1676.670828][T26611] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1676.710165][T26612] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1677.013968][T26623] netlink: 'syz.2.11044': attribute type 3 has an invalid length. [ 1677.062107][T26629] netlink: 'syz.4.11046': attribute type 1 has an invalid length. [ 1677.206443][T26629] bond13: entered promiscuous mode [ 1677.210835][T26629] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1677.292811][T26631] bond13: (slave bridge7): making interface the new active one [ 1677.292837][T26631] bridge7: entered promiscuous mode [ 1677.294098][T26631] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 1677.373761][T26638] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 1677.505599][T26629] ipvlan0: entered allmulticast mode [ 1677.505626][T26629] bond13: entered allmulticast mode [ 1677.505643][T26629] bridge7: entered allmulticast mode [ 1677.506127][T26629] bond13: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1677.506150][T26629] bond13: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1677.995111][T26652] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1678.234371][T26669] netlink: 'syz.1.11053': attribute type 1 has an invalid length. [ 1678.567553][T26681] __nla_validate_parse: 11 callbacks suppressed [ 1678.567579][T26681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11055'. [ 1678.912139][T26689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11057'. [ 1679.198800][T26713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11063'. [ 1679.307987][T26717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11062'. [ 1679.313240][T26717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11062'. [ 1679.380880][T26721] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11065'. [ 1679.950839][T26747] bridge7: entered promiscuous mode [ 1679.950904][T26747] bridge7: entered allmulticast mode [ 1680.032006][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11073'. [ 1680.189670][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11074'. [ 1680.282050][T26761] IPVS: Unknown mcast interface: hsr0 [ 1680.311548][T26766] syzkaller1: entered promiscuous mode [ 1680.311571][T26766] syzkaller1: entered allmulticast mode [ 1680.731141][T26776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11077'. [ 1680.796361][T26776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.816739][T26776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.817276][T26776] tipc: Resetting bearer [ 1680.866945][T10632] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1680.872919][T10632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1680.876893][T10632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1680.906043][T10632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1680.906758][T10632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1681.128261][T26795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11079'. [ 1681.244996][T26776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1681.245023][T26776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1681.342066][T26776] veth1_macvtap: left promiscuous mode [ 1681.392151][T26776] veth0_macvtap: left promiscuous mode [ 1681.419392][T26776] veth0_macvtap: entered promiscuous mode [ 1681.444061][T26776] tipc: Resetting bearer [ 1681.461006][T26776] veth1_macvtap: entered promiscuous mode [ 1681.467842][T26803] netlink: 'syz.2.11080': attribute type 30 has an invalid length. [ 1681.531207][T26776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1681.542816][T26776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1681.555741][T26776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1681.560113][T26776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1681.590070][T26776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1681.611836][T26776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1681.625449][T26776] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1681.874943][ T7132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.874997][ T7132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.875037][ T7132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.016525][T26803] bond15: option arp_missed_max: invalid value (0) [ 1682.016550][T26803] bond15: option arp_missed_max: allowed values 1 - 255 [ 1682.023309][T26803] bond15 (unregistering): Released all slaves [ 1682.105644][T20314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.453874][T26829] syzkaller1: entered promiscuous mode [ 1682.453898][T26829] syzkaller1: entered allmulticast mode [ 1682.773427][T26779] rxe_eth0 speed is unknown, defaulting to 1000 [ 1683.005219][ T5650] Bluetooth: hci6: command tx timeout [ 1683.220424][T26779] erspan0 speed is unknown, defaulting to 1000 [ 1683.222308][T26859] netlink: 'syz.2.11089': attribute type 2 has an invalid length. [ 1683.255123][T26860] netlink: 'syz.2.11089': attribute type 2 has an invalid length. [ 1683.509702][T26779] hsr0 speed is unknown, defaulting to 1000 [ 1683.705264][T26870] __nla_validate_parse: 7 callbacks suppressed [ 1683.705289][T26870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11091'. [ 1683.912977][T26872] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1684.148787][T26872] bond14 (unregistering): Released all slaves [ 1684.670627][T26885] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1684.670892][T26904] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1684.671057][T26888] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1685.085523][ T5650] Bluetooth: hci6: command tx timeout [ 1685.205137][T26939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11103'. [ 1685.307380][T26947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11103'. [ 1685.456690][T26779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.456803][T26779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.456947][T26779] bridge_slave_0: entered allmulticast mode [ 1685.458898][T26779] bridge_slave_0: entered promiscuous mode [ 1685.504282][T26779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.504459][T26779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.504626][T26779] bridge_slave_1: entered allmulticast mode [ 1685.506777][T26779] bridge_slave_1: entered promiscuous mode [ 1685.693758][T26963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11106'. [ 1685.693784][T26963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11106'. [ 1685.718990][T26779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.722591][T26779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.781322][T26779] team0: Port device team_slave_0 added [ 1685.795878][T26779] team0: Port device team_slave_1 added [ 1685.917539][T26779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.917560][T26779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.917589][T26779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1685.924084][T26779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1685.927465][T26779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1685.927563][T26779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.251128][T26779] hsr_slave_0: entered promiscuous mode [ 1686.257821][T26779] hsr_slave_1: entered promiscuous mode [ 1686.271529][T26779] debugfs: 'hsr0' already exists in 'hsr' [ 1686.271551][T26779] Cannot create hsr debugfs directory [ 1686.982761][T27001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11110'. [ 1687.164767][ T5650] Bluetooth: hci6: command tx timeout [ 1687.303908][T27011] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11113'. [ 1687.459733][T27019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11115'. [ 1687.600088][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11115'. [ 1687.843265][T27035] netlink: 'syz.5.11119': attribute type 11 has an invalid length. [ 1688.526904][T27059] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002 [ 1688.528102][T26779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1688.559411][T26779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1688.561965][T26779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1688.587231][T26779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1688.588241][T26779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1688.603376][T27059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11123'. [ 1688.631800][T26779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1688.644601][T26779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1688.683977][T26779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1688.832282][T27079] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.11126'. [ 1688.855299][T27085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11127'. [ 1688.931616][T27079] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1688.957080][T27079] 0ªX¹¦Dö»: entered allmulticast mode [ 1688.978061][T27085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11127'. [ 1689.090523][T27094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11128'. [ 1689.158273][T27096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11128'. [ 1689.158301][T27096] netlink: 'syz.4.11128': attribute type 1 has an invalid length. [ 1689.158316][T27096] netlink: 272 bytes leftover after parsing attributes in process `syz.4.11128'. [ 1689.162973][T27094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11128'. [ 1689.162996][T27094] netlink: 'syz.4.11128': attribute type 1 has an invalid length. [ 1689.163011][T27094] netlink: 272 bytes leftover after parsing attributes in process `syz.4.11128'. [ 1689.246239][ T5650] Bluetooth: hci6: command tx timeout [ 1689.826971][T26779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.910427][T26779] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.950573][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.950708][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.991820][T26413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.991936][T26413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.105195][T27115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11133'. [ 1690.193290][T27126] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11137'. [ 1690.763831][T27150] bond4: entered promiscuous mode [ 1690.766621][T27150] bond4: entered allmulticast mode [ 1690.767014][T27150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1690.820395][T27150] netlink: 'syz.5.11142': attribute type 8 has an invalid length. [ 1691.127624][T27169] syzkaller1: entered promiscuous mode [ 1691.127652][T27169] syzkaller1: entered allmulticast mode [ 1691.202605][T27170] netlink: 'syz.5.11144': attribute type 1 has an invalid length. [ 1691.404693][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1692.002386][T26779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.395359][T27217] nbd9: detected capacity change from 0 to 63 [ 1692.493759][ T5650] block nbd9: Receive control failed (result -104) [ 1692.842657][T27240] x_tables: duplicate underflow at hook 1 [ 1693.024103][T26779] veth0_vlan: entered promiscuous mode [ 1693.070519][T26779] veth1_vlan: entered promiscuous mode [ 1693.214551][T26779] veth0_macvtap: entered promiscuous mode [ 1693.283135][T26779] veth1_macvtap: entered promiscuous mode [ 1693.396979][T26779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1693.450173][T26779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.560989][T20282] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.626251][T20282] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.626883][T20282] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.735318][T26414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.797928][T27269] ip_tables: iptables: counters copy to user failed while replacing table [ 1693.798145][T27268] ip_tables: iptables: counters copy to user failed while replacing table [ 1694.091778][T26414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.091803][T26414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.392601][T20283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1694.392624][T20283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1695.241623][T27307] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 1695.364877][T27314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11165'. [ 1695.959798][T27345] žÿ: renamed from team_slave_1 [ 1696.077428][T27349] sctp: [Deprecated]: syz.1.11173 (pid 27349) Use of int in max_burst socket option. [ 1696.077428][T27349] Use struct sctp_assoc_value instead [ 1696.235933][T27353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11174'. [ 1696.427043][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11175'. [ 1696.462161][T27360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.462816][T27360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.902123][ T30] audit: type=1107 audit(1794030478.461:66): pid=27414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1698.267325][T27442] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1699.379256][T27486] syzkaller1: entered promiscuous mode [ 1699.379283][T27486] syzkaller1: entered allmulticast mode [ 1700.069932][T27518] netlink: 'syz.4.11197': attribute type 21 has an invalid length. [ 1700.069959][T27518] IPv6: NLM_F_CREATE should be specified when creating new route [ 1700.403577][T27535] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11199'. [ 1700.418003][T27535] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11199'. [ 1700.682067][T27551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11201'. [ 1700.683861][T27551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11201'. [ 1700.683895][T27551] netlink: 'syz.4.11201': attribute type 30 has an invalid length. [ 1700.741763][T27554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11201'. [ 1700.741813][T27554] netlink: 'syz.4.11201': attribute type 30 has an invalid length. [ 1700.781256][T27551] vxlan3: entered promiscuous mode [ 1700.781283][T27551] vxlan3: entered allmulticast mode [ 1700.843215][T27554] vxlan4: entered promiscuous mode [ 1700.843244][T27554] vxlan4: entered allmulticast mode [ 1701.561368][T27588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1701.586485][T27588] netlink: 'syz.6.11206': attribute type 27 has an invalid length. [ 1701.942121][T27600] Cannot find add_set index 0 as target [ 1702.096327][T27603] ip6gre1: entered allmulticast mode [ 1702.098313][T20281] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1702.221815][T27606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11211'. [ 1702.389649][T27616] netlink: 'syz.2.11214': attribute type 1 has an invalid length. [ 1702.572716][T27616] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1702.710344][T27621] bond15: (slave erspan1): making interface the new active one [ 1702.723215][T27621] bond15: (slave erspan1): Enslaving as an active interface with an up link [ 1702.990744][T27616] syzkaller1: entered promiscuous mode [ 1702.990769][T27616] syzkaller1: entered allmulticast mode [ 1703.266830][T27657] bridge_slave_0: default FDB implementation only supports local addresses [ 1703.278081][T27659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11224'. [ 1703.503100][T27659] syzkaller1: entered promiscuous mode [ 1703.503126][T27659] syzkaller1: entered allmulticast mode [ 1703.800028][T27652] syzkaller1: entered promiscuous mode [ 1703.800052][T27652] syzkaller1: entered allmulticast mode [ 1704.343824][T27698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11230'. [ 1704.412702][T27711] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11230'. [ 1704.465326][T27692] digital: digital_start_poll: Unknown protocol [ 1704.578611][T27692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11229'. [ 1704.779483][T27723] sctp: [Deprecated]: syz.2.11235 (pid 27723) Use of int in max_burst socket option. [ 1704.779483][T27723] Use struct sctp_assoc_value instead [ 1705.772437][T27785] __nla_validate_parse: 5 callbacks suppressed [ 1705.772458][T27785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11246'. [ 1706.134624][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1706.256603][T27809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11251'. [ 1706.310721][T27808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11252'. [ 1706.368833][T27810] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11250'. [ 1706.601078][T27819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11253'. [ 1706.802949][T27821] bond2: entered promiscuous mode [ 1706.802974][T27821] bond2: entered allmulticast mode [ 1707.436058][T27843] syz_tun: entered promiscuous mode [ 1708.308346][T27877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11263'. [ 1708.994397][T27797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1709.026781][T27878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1709.317319][T27892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11266'. [ 1709.559847][T27897] netlink: zone id is out of range [ 1709.559872][T27897] netlink: zone id is out of range [ 1709.562206][ T30] audit: type=1804 audit(1794030490.121:67): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11269" name="/newroot/326/memory.events" dev="tmpfs" ino=1676 res=1 errno=0 [ 1709.562260][ T30] audit: type=1800 audit(1794030490.121:68): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11269" name="memory.events" dev="tmpfs" ino=1676 res=0 errno=-22 [ 1709.781950][T27909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11274'. [ 1709.889092][T27914] syzkaller0: entered promiscuous mode [ 1709.889117][T27914] syzkaller0: entered allmulticast mode [ 1709.953284][T27916] netlink: 'syz.6.11275': attribute type 21 has an invalid length. [ 1709.953326][T27916] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11275'. [ 1709.953401][T27916] netlink: 3 bytes leftover after parsing attributes in process `syz.6.11275'. [ 1710.163926][T27920] bond14: option ad_select: invalid value (34) [ 1710.172995][T27920] bond14 (unregistering): Released all slaves [ 1710.251267][T27932] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 1710.340735][T27919] team0: Device macvlan2 failed to change mtu [ 1711.455944][T27970] __nla_validate_parse: 1 callbacks suppressed [ 1711.455967][T27970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1711.733836][T27977] syzkaller0: entered promiscuous mode [ 1711.733861][T27977] syzkaller0: entered allmulticast mode [ 1712.478372][T28000] netlink: 15672 bytes leftover after parsing attributes in process `syz.5.11291'. [ 1712.478401][T28000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11291'. [ 1712.478421][T28000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11291'. [ 1712.481303][T28002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11293'. [ 1712.573201][T28011] netlink: 'syz.6.11294': attribute type 1 has an invalid length. [ 1712.573219][T28011] netlink: 'syz.6.11294': attribute type 4 has an invalid length. [ 1712.573229][T28011] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.11294'. [ 1712.652704][T28000] bond5 (unregistering): Released all slaves [ 1712.750069][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11295'. [ 1712.821128][T28010] vti0: entered promiscuous mode [ 1712.821151][T28010] vti0: entered allmulticast mode [ 1712.979644][T28014] tipc: Started in network mode [ 1712.979678][T28014] tipc: Node identity 2ebc65c3ea92, cluster identity 4711 [ 1712.979842][T28014] tipc: Enabled bearer , priority 0 [ 1713.343390][T28040] bond14: entered allmulticast mode [ 1713.353633][T28021] syzkaller0: entered promiscuous mode [ 1713.353657][T28021] syzkaller0: entered allmulticast mode [ 1713.407126][T28053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1713.411602][T28008] tipc: Resetting bearer [ 1713.503140][T28008] tipc: Disabling bearer [ 1713.660171][T28058] dvmrp6: left allmulticast mode [ 1713.939627][T28067] netlink: zone id is out of range [ 1713.939650][T28067] netlink: zone id is out of range [ 1713.940624][ T30] audit: type=1804 audit(1794030494.501:69): pid=28067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.11304" name="/newroot/29/memory.events" dev="tmpfs" ino=164 res=1 errno=0 [ 1713.943401][ T30] audit: type=1800 audit(1794030494.501:70): pid=28067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.11304" name="memory.events" dev="tmpfs" ino=164 res=0 errno=-22 [ 1714.333444][T28083] set_target_v1_checkentry: 23 callbacks suppressed [ 1714.333467][T28083] Cannot find add_set index 2 as target [ 1714.357727][T28083] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11308'. [ 1714.357979][T28084] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11308'. [ 1714.358024][T28083] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1714.444477][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1714.642056][T28096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1714.729810][T28096] ipip0: entered promiscuous mode [ 1714.833170][T28104] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1715.549897][T28137] ip_tables: iptables: counters copy to user failed while replacing table [ 1715.804266][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1716.143012][T28154] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 1716.538654][T28167] __nla_validate_parse: 5 callbacks suppressed [ 1716.538675][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11330'. [ 1716.538692][T28167] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11330'. [ 1716.828996][T28180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11335'. [ 1716.854360][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1717.066343][T28185] Cannot find set identified by id 0 to match [ 1717.066724][T28187] Cannot find set identified by id 0 to match [ 1717.401680][T28206] tap0: tun_chr_ioctl cmd 21731 [ 1717.577535][T28213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11344'. [ 1717.691437][T28220] syzkaller0: left promiscuous mode [ 1717.691463][T28220] syzkaller0: left allmulticast mode [ 1717.727369][T28219] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1717.884316][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1718.496135][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11355'. [ 1718.919591][T28270] netlink: 'syz.1.11361': attribute type 21 has an invalid length. [ 1718.919617][T28270] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11361'. [ 1718.919703][T28270] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11361'. [ 1718.925339][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1719.339461][T28275] syzkaller1: entered promiscuous mode [ 1719.339486][T28275] syzkaller1: entered allmulticast mode [ 1719.713773][T26414] IPVS: starting estimator thread 0... [ 1719.719343][T28304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1719.792561][T28308] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1719.794659][T28305] IPVS: using max 26 ests per chain, 62400 per kthread [ 1719.830570][T28314] netlink: 'syz.2.11371': attribute type 1 has an invalid length. [ 1719.830593][T28314] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11371'. [ 1719.923598][T28314] [ 1719.926012][T28314] ====================================================== [ 1719.933060][T28314] WARNING: possible circular locking dependency detected [ 1719.940125][T28314] syzkaller #0 Not tainted [ 1719.944569][T28314] ------------------------------------------------------ [ 1719.951612][T28314] syz.2.11371/28314 is trying to acquire lock: [ 1719.957798][T28314] ffff88807581a318 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 1719.966750][T28314] [ 1719.966750][T28314] but task is already holding lock: [ 1719.974140][T28314] ffff88802c898588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1719.983693][T28314] [ 1719.983693][T28314] which lock already depends on the new lock. [ 1719.983693][T28314] [ 1719.994116][T28314] [ 1719.994116][T28314] the existing dependency chain (in reverse order) is: [ 1720.003162][T28314] [ 1720.003162][T28314] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1720.011069][T28314] __mutex_lock+0x197/0x15a0 [ 1720.016231][T28314] elevator_change+0x1af/0x480 [ 1720.021564][T28314] elevator_set_none+0xb5/0x140 [ 1720.027024][T28314] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1720.033445][T28314] nbd_start_device+0x189/0xb30 [ 1720.038937][T28314] nbd_genl_connect+0x167d/0x1cd0 [ 1720.044512][T28314] genl_family_rcv_msg_doit+0x233/0x340 [ 1720.050622][T28314] genl_rcv_msg+0x614/0x7a0 [ 1720.055678][T28314] netlink_rcv_skb+0x226/0x4a0 [ 1720.061020][T28314] genl_rcv+0x28/0x40 [ 1720.065559][T28314] netlink_unicast+0x8ef/0xa80 [ 1720.070885][T28314] netlink_sendmsg+0x7f0/0xb20 [ 1720.076206][T28314] sock_sendmsg_nosec+0x14e/0x190 [ 1720.081783][T28314] ____sys_sendmsg+0x54e/0x850 [ 1720.087139][T28314] ___sys_sendmsg+0x2a5/0x360 [ 1720.092374][T28314] __x64_sys_sendmsg+0x1b1/0x290 [ 1720.097867][T28314] do_syscall_64+0x166/0x520 [ 1720.103020][T28314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.109474][T28314] [ 1720.109474][T28314] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1720.118114][T28314] blk_alloc_queue+0x544/0x690 [ 1720.123505][T28314] __blk_mq_alloc_disk+0x194/0x390 [ 1720.129177][T28314] nbd_dev_add+0x494/0xb60 [ 1720.134175][T28314] nbd_init+0x168/0x1f0 [ 1720.138901][T28314] do_one_initcall+0x250/0x870 [ 1720.144252][T28314] do_initcall_level+0x10a/0x1a0 [ 1720.149754][T28314] do_initcalls+0x59/0xa0 [ 1720.154645][T28314] kernel_init_freeable+0x29d/0x3e0 [ 1720.160398][T28314] kernel_init+0x22/0x1d0 [ 1720.165291][T28314] ret_from_fork+0x514/0xb70 [ 1720.170461][T28314] ret_from_fork_asm+0x1a/0x30 [ 1720.175773][T28314] [ 1720.175773][T28314] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1720.183022][T28314] fs_reclaim_acquire+0x71/0x100 [ 1720.188509][T28314] __kmalloc_cache_node_noprof+0x66/0x620 [ 1720.194805][T28314] create_worker+0x112/0x7c0 [ 1720.200004][T28314] workqueue_prepare_cpu+0xe4/0x170 [ 1720.205773][T28314] cpuhp_invoke_callback+0x434/0x810 [ 1720.211627][T28314] _cpu_up+0x2ce/0x5b0 [ 1720.216262][T28314] cpu_up+0x1d2/0x220 [ 1720.220819][T28314] cpuhp_bringup_mask+0xb2/0x1a0 [ 1720.226336][T28314] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1720.232712][T28314] bringup_nonboot_cpus+0x17/0x30 [ 1720.238292][T28314] smp_init+0x32/0x110 [ 1720.242914][T28314] kernel_init_freeable+0x27f/0x3e0 [ 1720.248673][T28314] kernel_init+0x22/0x1d0 [ 1720.253557][T28314] ret_from_fork+0x514/0xb70 [ 1720.258696][T28314] ret_from_fork_asm+0x1a/0x30 [ 1720.264035][T28314] [ 1720.264035][T28314] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1720.271824][T28314] cpus_read_lock+0x3d/0x160 [ 1720.276985][T28314] static_key_slow_inc+0x12/0x30 [ 1720.282486][T28314] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1720.288774][T28314] nbd_genl_foreach_sock+0x265/0x450 [ 1720.294617][T28314] nbd_genl_reconfigure+0xbbb/0x1040 [ 1720.300463][T28314] genl_family_rcv_msg_doit+0x233/0x340 [ 1720.306572][T28314] genl_rcv_msg+0x614/0x7a0 [ 1720.311631][T28314] netlink_rcv_skb+0x226/0x4a0 [ 1720.317014][T28314] genl_rcv+0x28/0x40 [ 1720.321555][T28314] netlink_unicast+0x8ef/0xa80 [ 1720.326901][T28314] netlink_sendmsg+0x7f0/0xb20 [ 1720.332221][T28314] sock_sendmsg_nosec+0x14e/0x190 [ 1720.337825][T28314] ____sys_sendmsg+0x54e/0x850 [ 1720.343156][T28314] ___sys_sendmsg+0x2a5/0x360 [ 1720.348384][T28314] __x64_sys_sendmsg+0x1b1/0x290 [ 1720.353870][T28314] do_syscall_64+0x166/0x520 [ 1720.359029][T28314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.365467][T28314] [ 1720.365467][T28314] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1720.373140][T28314] __mutex_lock+0x197/0x15a0 [ 1720.378289][T28314] nbd_queue_rq+0x373/0xff0 [ 1720.383350][T28314] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1720.389520][T28314] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1720.396458][T28314] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1720.403001][T28314] blk_mq_run_work_fn+0x167/0x2f0 [ 1720.408575][T28314] process_scheduled_works+0xc3d/0x1630 [ 1720.414679][T28314] worker_thread+0xa47/0xfb0 [ 1720.419833][T28314] kthread+0x38b/0x480 [ 1720.424508][T28314] ret_from_fork+0x514/0xb70 [ 1720.429646][T28314] ret_from_fork_asm+0x1a/0x30 [ 1720.434958][T28314] [ 1720.434958][T28314] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1720.442201][T28314] __mutex_lock+0x197/0x15a0 [ 1720.447341][T28314] nbd_queue_rq+0xc1/0xff0 [ 1720.452304][T28314] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1720.458414][T28314] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1720.465297][T28314] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1720.471832][T28314] blk_mq_run_work_fn+0x167/0x2f0 [ 1720.477427][T28314] process_scheduled_works+0xc3d/0x1630 [ 1720.483525][T28314] worker_thread+0xa47/0xfb0 [ 1720.488666][T28314] kthread+0x38b/0x480 [ 1720.493280][T28314] ret_from_fork+0x514/0xb70 [ 1720.498415][T28314] ret_from_fork_asm+0x1a/0x30 [ 1720.503721][T28314] [ 1720.503721][T28314] -> #0 (set->srcu){.+.+}-{0:0}: [ 1720.510879][T28314] __lock_acquire+0x164c/0x2de0 [ 1720.516285][T28314] lock_sync+0xb3/0x130 [ 1720.521013][T28314] __synchronize_srcu+0xca/0x2f0 [ 1720.526511][T28314] elevator_switch+0x1e8/0x7b0 [ 1720.531880][T28314] elevator_change+0x2fa/0x480 [ 1720.537207][T28314] elevator_set_default+0x375/0x440 [ 1720.542964][T28314] blk_register_queue+0x404/0x4f0 [ 1720.548542][T28314] __add_disk+0x6b8/0xdb0 [ 1720.553432][T28314] add_disk_fwnode+0x100/0x3a0 [ 1720.558738][T28314] nbd_dev_add+0x733/0xb60 [ 1720.563701][T28314] nbd_genl_connect+0x96c/0x1cd0 [ 1720.569177][T28314] genl_family_rcv_msg_doit+0x233/0x340 [ 1720.575276][T28314] genl_rcv_msg+0x614/0x7a0 [ 1720.580333][T28314] netlink_rcv_skb+0x226/0x4a0 [ 1720.585654][T28314] genl_rcv+0x28/0x40 [ 1720.590188][T28314] netlink_unicast+0x8ef/0xa80 [ 1720.595503][T28314] netlink_sendmsg+0x7f0/0xb20 [ 1720.600818][T28314] sock_sendmsg_nosec+0x14e/0x190 [ 1720.606402][T28314] ____sys_sendmsg+0x54e/0x850 [ 1720.611723][T28314] ___sys_sendmsg+0x2a5/0x360 [ 1720.616990][T28314] __x64_sys_sendmsg+0x1b1/0x290 [ 1720.622485][T28314] do_syscall_64+0x166/0x520 [ 1720.627639][T28314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.634099][T28314] [ 1720.634099][T28314] other info that might help us debug this: [ 1720.634099][T28314] [ 1720.644379][T28314] Chain exists of: [ 1720.644379][T28314] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 1720.644379][T28314] [ 1720.658067][T28314] Possible unsafe locking scenario: [ 1720.658067][T28314] [ 1720.665534][T28314] CPU0 CPU1 [ 1720.670951][T28314] ---- ---- [ 1720.676352][T28314] lock(&q->elevator_lock); [ 1720.680977][T28314] lock(&q->q_usage_counter(io)#50); [ 1720.688900][T28314] lock(&q->elevator_lock); [ 1720.696030][T28314] sync(set->srcu); [ 1720.699958][T28314] [ 1720.699958][T28314] *** DEADLOCK *** [ 1720.699958][T28314] [ 1720.708125][T28314] locks held by syz.2.11371/28314: 6, last CPU#1: [ 1720.714568][T28314] #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1720.722815][T28314] #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1720.731823][T28314] #2: ffff888054e101c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1720.742255][T28314] #3: ffff88802c898610 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 1720.752164][T28314] #4: ffff88802c898098 (&q->q_usage_counter(queue)#61){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1720.763127][T28314] #5: ffff88802c898588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1720.772995][T28314] [ 1720.772995][T28314] stack backtrace: [ 1720.778899][T28314] CPU: 1 UID: 0 PID: 28314 Comm: syz.2.11371 Not tainted syzkaller #0 PREEMPT(full) [ 1720.788373][T28314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1720.798445][T28314] Call Trace: [ 1720.801742][T28314] [ 1720.804698][T28314] dump_stack_lvl+0xe8/0x150 [ 1720.809334][T28314] print_circular_bug+0x2e2/0x300 [ 1720.814409][T28314] check_noncircular+0x12f/0x150 [ 1720.819388][T28314] __lock_acquire+0x164c/0x2de0 [ 1720.824272][T28314] ? lockdep_unlock+0x5c/0xd0 [ 1720.828973][T28314] ? __lock_acquire+0x1511/0x2de0 [ 1720.834037][T28314] lock_sync+0xb3/0x130 [ 1720.838226][T28314] ? __synchronize_srcu+0xb6/0x2f0 [ 1720.843377][T28314] ? __synchronize_srcu+0xb6/0x2f0 [ 1720.848529][T28314] __synchronize_srcu+0xca/0x2f0 [ 1720.853508][T28314] ? __pfx___synchronize_srcu+0x10/0x10 [ 1720.859089][T28314] ? do_raw_spin_lock+0x12b/0x2f0 [ 1720.864171][T28314] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1720.870015][T28314] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1720.875594][T28314] ? synchronize_srcu+0x20c/0x270 [ 1720.880639][T28314] elevator_switch+0x1e8/0x7b0 [ 1720.885458][T28314] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1720.890940][T28314] elevator_change+0x2fa/0x480 [ 1720.895743][T28314] ? do_raw_spin_unlock+0xf5/0x200 [ 1720.900898][T28314] elevator_set_default+0x375/0x440 [ 1720.906150][T28314] ? __pfx_elevator_set_default+0x10/0x10 [ 1720.911906][T28314] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1720.919017][T28314] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1720.924917][T28314] blk_register_queue+0x404/0x4f0 [ 1720.929967][T28314] __add_disk+0x6b8/0xdb0 [ 1720.934327][T28314] add_disk_fwnode+0x100/0x3a0 [ 1720.939132][T28314] nbd_dev_add+0x733/0xb60 [ 1720.943571][T28314] ? __pfx_nbd_dev_add+0x10/0x10 [ 1720.948535][T28314] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1720.954376][T28314] ? bpf_lsm_capable+0x9/0x20 [ 1720.959069][T28314] ? security_capable+0x7e/0x2c0 [ 1720.964051][T28314] ? radix_tree_lookup+0x240/0x290 [ 1720.969182][T28314] nbd_genl_connect+0x96c/0x1cd0 [ 1720.974189][T28314] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1720.979599][T28314] ? rcu_is_watching+0x16/0xb0 [ 1720.984396][T28314] ? trace_kmalloc+0x2a/0xf0 [ 1720.989013][T28314] ? __kmalloc_noprof+0x387/0x710 [ 1720.994070][T28314] ? __nla_parse+0x40/0x60 [ 1720.998574][T28314] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1721.004937][T28314] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1721.011305][T28314] genl_family_rcv_msg_doit+0x233/0x340 [ 1721.016872][T28314] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1721.022970][T28314] ? radix_tree_lookup+0x118/0x290 [ 1721.028102][T28314] genl_rcv_msg+0x614/0x7a0 [ 1721.032628][T28314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1721.037676][T28314] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1721.043074][T28314] netlink_rcv_skb+0x226/0x4a0 [ 1721.047872][T28314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1721.052965][T28314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1721.058305][T28314] ? down_read+0x2b9/0x320 [ 1721.062757][T28314] genl_rcv+0x28/0x40 [ 1721.066771][T28314] netlink_unicast+0x8ef/0xa80 [ 1721.071599][T28314] netlink_sendmsg+0x7f0/0xb20 [ 1721.076448][T28314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.081746][T28314] ? aa_sock_msg_perm+0x144/0x210 [ 1721.086788][T28314] ? apparmor_socket_sendmsg+0x98/0x360 [ 1721.092397][T28314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.097697][T28314] sock_sendmsg_nosec+0x14e/0x190 [ 1721.102768][T28314] ____sys_sendmsg+0x54e/0x850 [ 1721.107557][T28314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1721.112894][T28314] ? import_iovec+0x73/0xa0 [ 1721.117439][T28314] ___sys_sendmsg+0x2a5/0x360 [ 1721.122141][T28314] ? __lock_acquire+0x747/0x2de0 [ 1721.127103][T28314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1721.132337][T28314] ? futex_wait+0x2a2/0x390 [ 1721.136876][T28314] ? __fget_files+0x3a2/0x420 [ 1721.141588][T28314] ? __fget_files+0x2a/0x420 [ 1721.146221][T28314] __x64_sys_sendmsg+0x1b1/0x290 [ 1721.151182][T28314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1721.156703][T28314] do_syscall_64+0x166/0x520 [ 1721.161325][T28314] ? trace_irq_disable+0x3b/0x140 [ 1721.166383][T28314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.172479][T28314] ? clear_bhb_loop+0x70/0xc0 [ 1721.177188][T28314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.183107][T28314] RIP: 0033:0x7f3521d9fb19 [ 1721.187549][T28314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.207181][T28314] RSP: 002b:00007f3522c01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1721.215631][T28314] RAX: ffffffffffffffda RBX: 00007f3522025fa0 RCX: 00007f3521d9fb19 [ 1721.223620][T28314] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 000000000000000a [ 1721.231649][T28314] RBP: 00007f3521e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1721.239642][T28314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1721.247652][T28314] R13: 00007f3522026038 R14: 00007f3522025fa0 R15: 00007ffce21aa718 [ 1721.255656][T28314] [ 1721.263633][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1721.487744][T28328] xt_IDLETIMER: timeout value is zero [ 1722.285361][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1722.773292][ T1704] block nbd9: Possible stuck request ffff888029060000: control (read@0,1024B). Runtime 30 seconds [ 1722.774236][ T1704] block nbd9: Possible stuck request ffff8880290601c0: control (read@1024,1024B). Runtime 30 seconds [ 1722.774267][ T1704] block nbd9: Possible stuck request ffff888029060380: control (read@2048,1024B). Runtime 30 seconds [ 1722.774294][ T1704] block nbd9: Possible stuck request ffff888029060540: control (read@3072,1024B). Runtime 30 seconds [ 1723.324776][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1724.365649][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1725.404783][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1726.455083][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1727.484330][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1728.524497][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1728.525232][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 1729.564793][ C1] IPVS: mh: UDP 127.0.0.1:20000 - no destination available