last executing test programs: 4m16.614810746s ago: executing program 0 (id=3434): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x8d}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}]}, &(0x7f0000000200)=0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x7, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000040)=0x7f, 0x4) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 4m15.708206526s ago: executing program 0 (id=3448): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008"], 0x4c}}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @local}, 0x10) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000540)='illinois', 0x8) (async) sendfile(r9, r10, 0x0, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f00000004c0)={{0x1, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e22, 0x0, 'ovf\x00', 0x13, 0x9, 0x2a}, {@local, 0x4e23, 0x1, 0x1, 0xfffffffc, 0x1ff}}, 0x44) (async) sendmsg$xdp(r6, &(0x7f00000007c0)={&(0x7f0000000280)={0x2c, 0x1, r3, 0x2f}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)="2c7aa93e056337a6e6fe611f1d7ed10d250be752686bbd4760da8d6ede779bea72a4abea8b0300542c93fdaaf25f3018f934c2afa46eb53296720d9c8a7d7dbc3e2cdc7363e43b6c00dbe9", 0x4b}, {&(0x7f0000000340)="b33b8ad188b1ddc57556770234800bba3a74098061281113732df44bbaae5d38c1ab31bec85202edd1aa4358eac0b658eade4fada2895fc01e93d0a8a474c60cdb3f0b002eefea0bdf30fbd56c6bb94b481b3cec9f08281ea58838160163fac801c9bee62c2307d532fc7ee47b12e3b7776d65bdb6d49f42f66377dfb515ff83d583716a0b17d6d1754b970ed88fa185297171f4abbd7acdd7e6e543bc9c9d8456d3918f8476f68ce8e814282b85912e0b013f0b8aa4c58f70e378", 0xbb}, {&(0x7f0000000400)="fe2fb935184a79b93ec8914d0d9c086720a7bcfda20308ded418c7ef3d9e681b8d35662bac83738d42378d03bee9db87c8b781e363c99800e561cc98119fb0f74652726eb344d7892fc2cefeea518c816f8afc2aa8566799b7fff14c40901e22d4", 0x61}, {&(0x7f0000000800)="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", 0x14c}, {&(0x7f00000005c0)="578f3de995c80ebbdcf5e879c7696a869a109e9ee95d82ddec6668b5fd4c70a9004097213690a9d00574465127cefefc996f0ccd7ed235e09b929ded71c2200efd3bedadf15acd60f26126116b52cc5156f1bc974ed085150edb1fad85f72fbee187fa583e841f1da0105583082196cc92d3fc51bbd5373258161bdc172a46e4720a17a0d4f87e87311bdcdd72a6f133f5307b", 0x93}, {&(0x7f0000000680)="4e8a4d526b81edebc2f73ca65bfd770b1e3070811dd987eff76aae183874567c0b7ced212fcfedbceeaeaaffcdb7543cd1ba15b100c8df9baba739cbd1011ed90cfa5a296b7e1d23ba939c70fe74bb72a3b73f4f7742df0e0f7516ef62b619a5c39374", 0x63}], 0x6}, 0x20000041) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x188}}, 0x20000040) 4m15.324160916s ago: executing program 0 (id=3453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x0, 0x0, 0x20000000) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r2, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) 4m15.160741631s ago: executing program 0 (id=3455): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4m11.482419996s ago: executing program 0 (id=3496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="5e74752a836e0101fa0082766500000c29048e3bd73125f29e60038129f100020005d800"/50], 0x3c}, 0x1, 0xba01}, 0x810) socketpair(0x6, 0x1, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) 4m10.946845788s ago: executing program 0 (id=3504): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80002, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="2022811b814bb56f7843fd89bcad29149e3240f628495c1cda2c52cbdd2b677be9a5d894ec574c193d7c86deb15fae5dfc32f932e4038e0ad1471a4421a22146e644bfd72f17953af7a919bf07df605788104863531bcbf2afbab0f51aa6cc3a36737a3cfd874b124c180d96c91e9e130c5b467dee532198f66b0a608bdf5a2c1e7f0605456dd5cfda510d9a1d4b", @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r3, @ANYRES8=r0], 0x54}}, 0x0) 3m55.077467623s ago: executing program 32 (id=3504): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80002, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="2022811b814bb56f7843fd89bcad29149e3240f628495c1cda2c52cbdd2b677be9a5d894ec574c193d7c86deb15fae5dfc32f932e4038e0ad1471a4421a22146e644bfd72f17953af7a919bf07df605788104863531bcbf2afbab0f51aa6cc3a36737a3cfd874b124c180d96c91e9e130c5b467dee532198f66b0a608bdf5a2c1e7f0605456dd5cfda510d9a1d4b", @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r3, @ANYRES8=r0], 0x54}}, 0x0) 2m39.527414006s ago: executing program 1 (id=4553): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) splice(r2, 0x0, r4, 0x0, 0x10000000000066, 0xa) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x1, 0x8, 0xa020, 0xffffffffffffffff, 0xd8, '\x00', r1, r2, 0x2, 0x3, 0x1, 0x0, @value=r5}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2m38.583648158s ago: executing program 1 (id=4568): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x2, 0x1}, {0x4, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x28) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x21, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x8}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) write$tun(r3, &(0x7f0000000180)={@void, @void, @ipv4=@tipc={{0x6, 0x4, 0x1, 0x5, 0x47, 0x64, 0x0, 0x0, 0x6, 0x0, @multicast1, @empty, {[@generic={0x7, 0x3, "b9"}]}}, @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x5, 0x0, 0x1, 0x9, 0x2, 0x1, 0x1, 0x2c2, 0x2, 0x4e22, 0x4e21}, 0x1}, 0x1, 0x4}, 0x3}}, [0x0, 0x0, 0x0]}}}, 0x47) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000200)=0x8, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000280)={0x200, 0x28, [0x5, 0xffff, 0xfffffffffffffff7, 0x6], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_mreq(r3, 0x0, 0x54bb068bb704c0fe, &(0x7f00000002c0)={@broadcast, @remote}, &(0x7f0000000300)=0x8) bind$phonet(r1, &(0x7f0000000340)={0x23, 0x3, 0x0, 0x8}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000680)={r4, &(0x7f0000000580)='\x00', 0x1, &(0x7f00000005c0)={@_ha_fsid={[0x4, 0x800]}, {0xb88f, 0x5, 0x80, 0x81}}, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x294}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x1f, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x6, 0x6, 0x6, 0x0, 0xf418}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @jmp={0x5, 0x0, 0x0, 0x1, 0x9, 0x4, 0xffffffffffffffff}, @generic={0x4, 0x6, 0xa, 0x0, 0x100000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x7a87, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x1, 0x4, 0x8, 0x101}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000980)=[r8, r9, r10, r11], &(0x7f00000009c0)=[{0x5, 0x3, 0x9, 0x3}, {0x1, 0x1, 0x5, 0x6}, {0x5, 0x4, 0x9, 0x7}, {0x3, 0x1, 0xb, 0x7}, {0x9, 0x3, 0x7, 0xc}], 0x10, 0x9}, 0x94) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000b00)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x0, 'veth0_to_batadv\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r11) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000004280)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004240)={&(0x7f0000000c80)={0x3518, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x21}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xbcc, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x154, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe6, 0x2, "bc041bd8b60f2b1b7041196259d10aaa0e6b2accbdc703904938fa5513e4726188c340f42912e614701e12950eff1fbc3981237e7c097ed06286501b5eb6be8c47ff5ff1b0943d48ce8d7d9296132e9ce0c4a68478ef96139ed3b59f1bf996e29dc8337d806a53f04b1c8db760d724a12f4ed920a7cd9f9dade7d1b8568780c94c6689773558316af320b31d61c47a9e80afef0b2fc8daaa6f86e9c398d61cdacea0e0ac2bcd1eed31845ec93a950a00b62f87209ea7f352ca75c5927ccf4553b346da945ac7679ea22ea77af358ebbbec83d4a9fe5ee3ac6f008c3a33881b434e58"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x66, 0x3, "1f44c68d000bddc2cf2e1d87552585087bd90933210259f81521b79ea72247076569f0c8fb0d5eef66fc91068f263adc56abbde768189f036a62c2f6cca6f9e4d6a5b519ce043ed31c3aee2e58b3171dbf1b8e4b900e54ed008347ca8f001ca4862c"}]}, @NL80211_ATTR_PROBE_RESP={0x3e, 0x91, "26504bb025c1c84064a2fb36690cbcb546fbddb86a5b854c70b7963b5a06e420a41dfbc25245b8934142ba05bc3bb259d6cd04d9ceef49e3eb12"}, @NL80211_ATTR_PROBE_RESP={0x763, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x2d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xc6, 0x2, "dfc45cec47d46eb78ed3ba597a224d86dd7c6d2742ea42173f888a7978aaee60269ddef65cb87d27f7003e2676592c5f92e81dcd15b9d301a328c5a419c9533a650518dd2fb2a2c666725ee4e506e2c750c203e7a4a19c75be013776ca3a78a3102776a0dfb98aab0e0a36c59fcb76ec3b45f25b80aa95a72ea27c49b21f9ba0547183678f9eee7541b281020d0673ccbbd13b83ae6537d7a154aa9a7d6747f646a53b11cfb31ea6616d38c23d88f6f26c3d108eac29d44e2f28a1e324d49ad0a713"}, @NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "e89666e6b601fd486be0f750432761b00ce61b573f215667afc4c95d4f504e29f512291ce15a7e2a15f76564125939655f4d8ea19d1266918da84f4f864868e87ed0e9fe9f22f5a5aa71"}, @NL80211_FTM_RESP_ATTR_LCI={0xa5, 0x2, "eabf056f0771359bc9c511ce19d7f7b21a9a806bfad7770a7b648270f270301f108c2ef261d8f42c2ce7e64bef3fcf07cc83e99a0326e3ccdf02323bd9e33813aaee1457c9ba365fe65a542508e4e7d2c77ca8bf396cbcf0a55c4eea1796384ef3a33e4d0999e78324eb75aa9fe709bf58b1c01b390afd2bdb0cd1043775d80a2a6809da61c8321679b287975070ffb88f0ef10fc8567a156d5ad5a06e277129b5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "af94eabb4796ef3ddcf7a0c8ad6ddee7106f1823977e09e09a596ef646bf2b09cb7e1d2e00c077a3bda24fd326f7ade9925822713406b8048f2376fd7c489d0bbacf3cb656877617f72f58baa1a8cd69e3ce2eb34dda74d0774290ccc2e3e958a629c875faeacefb56c8da609d1b73e1fd1506092913"}, @NL80211_FTM_RESP_ATTR_LCI={0x8e, 0x2, "9d03cbd67359136223a487789573bad07ec06bc6a5afabab1305fda3f42cf5d909b84ce9c2913bee7a0f489ac6e664488e79164114db5482970f4bfc275b52f5216928cde38e8452aba395bd2f4e32c9b4a636f9796c41b88b6472e9ade81d56d9e58d456330f3ea01b6d93b3f7d884ceee1448f83d87c9a2b38ece5bdbac685bc4a40fa8b3ce4fbb45a"}]}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_CSA_IES={0x28e4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x3, 0x77a]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x10f, 0x7f, [@gcr_ga={0xbd, 0x6}, @perr={0x84, 0xe9, {0x0, 0xf, [{{}, @broadcast, 0x6, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x80000000, @value, 0x41}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x17}, {{}, @device_b, 0x1, @void, 0x28}, {{}, @device_b, 0x1}, {{}, @device_a, 0x800, @void, 0x20}, {{}, @device_b, 0xffff, @void, 0x1d}, {{}, @broadcast, 0x94cf, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x487c, @value=@broadcast, 0x10}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x12}, {{}, @device_a, 0x2, @void, 0x13}, {{}, @device_a, 0x1, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x3}, {{}, @device_a, 0x6, @void, 0x15}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x2d}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x9e, @void, @val=0x4, @val="57110a294da80433b333136a117ef17b"}}]}, @NL80211_ATTR_IE={0x1b3, 0x2a, [@preq={0x82, 0x36, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x7f, @device_b, 0x7ff, @value, 0xe27d, 0x8, 0x2, [{{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{}, @broadcast}]}}, @measure_req={0x26, 0xd6, {0x4, 0x7, 0x10, "4a7520592cea2c7fcb60c5b2ee0d461aff3084efe7f7eac024393672a707c196f8ed27e0cd2fadd87255f595580ca8d30d731875b1cb2e664d3354ad90644ef531d64597175b0122ed125089de31236aa5dac0a7f3a29390f484c18e9c39d98101ba962993692ce3aaa8ee198de928b731d2644cb33d99d301a9cd58e44705a8f498073a69a693496a839086d0800b1b6d41639767f0d73cc7e773fc8f70e4eed6330196db977a33a4f484955cb0dbf5ee6d7c1946d80c01557cc14e9766e5f3d029159cb79348da3c7563525bc2ae1d969186"}}, @tim={0x5, 0x5, {0x6, 0x1c, 0xff, "77b9"}}, @peer_mgmt={0x75, 0x4, {0x0, 0x101, @void, @void, @void}}, @fast_bss_trans={0x37, 0x90, {0x3, 0x2, "3bbe1fc52009def5066ceefc34baec25", "207ccf1a4032d1197e52465cd57d141d18b37c2f550e2bfefdc0c8d2c2d9a4c5", "0cf093c97df7389c7c4a7b8710ecefb0bbd2df5090b561a99edf5dcd2b99eaad", [{0x4, 0x1e, "51cd5dff9ac94edc8d111478d945f6c1f6ea17e897e226f860f6675cf08f"}, {0x3, 0x1c, "ddeb805e601fcaf40ba0bb016149fb8ada56dc8511e8b3df5d11cabb"}]}}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1031, 0x7f, [@measure_req={0x26, 0x1003, {0x8, 0x4, 0x4, "0cf8bf60c46a64442a8e5d4e931864e3062fa0bbd4f067d027a1b9e04d0f8a9e7b4a913bbf747f75e3e060d409474cd69ce9cee8348915602b925ba2e4ede6b3417e9475e58973b4d9694f950e2fa8a76322480f8802b6a506ea8325c63177d67254707ddb4b23a69ddc06b24be7b0835d091001af07bd41261a9091a32df0796de37f367401c9f850e7a7bc03b7514f94f1a86a19dadc3a9d3f1543a46ff0b9de8d511a81e198e566b452353f14e27af8e91b1c1efd0ad80c1f4472e51ebd4ce7b90e36a8b6454ee4167aa5f15ab55221664542822ebad5051dbf45540f0fea033ae071e7ad334bf6e60b8a26142f5e87cc7edd72c63dae6685d4e4e3c17b4c9f9442b9cb77106ce7dfe9cfd8d2389b73a4fff9c96afdadafae1fe41f1424805148923823c5c8a3970f15b56fbdf37875af4b271757eeb31ad765f630b92342c40a66e72f0c9616b6a753aa394ad2da846a94302d79d14ef04ecca1f1d0dec63df5a991712575254b7c2613bde9b2fcd6120be1c08c06e2f271fab92a0453fcae42029e0c43b04d51f25751912ebcdd350c6785550d7e8818d6b13084f9bb8d0eb4b7c874f7cfe3a78b3c49fd9094f8b09aadceea9b22cab67f33a47c9be9608e1502cf984e5219030b1d043bb8e096f1ac862774b5a6d818620db3416da431da325334f23d00992595d220eff2ee6cb72fd3ca1f0cefae66b97d18ab0a142c52c21d4c3a726107fc4313e6f95c9ac142618b2dd0b30ff393df40df3735c3c79b1e0fd2b27c81081c6b24fcd0a072849f1c3c9dd8dec62aed9399ef0c4c430560288ea838e113cb99e52d3c49c528e5203122a15ec8f3cc322d9bdedc2ccadfd243cb589b91bdfcdc4e9c60ba55b4e5f6ddb07e82d9f69cc7045d742248872e46674ecb563f02e9c35345030176dbf0e67c2b362821a4dbdfac953c3f78e2fd5cc9824c0fc9c257f2686bc0602da11fb057c33fca2a9cd6cd2ab1027b7567064d2018891a0e42bfa6bd327e8b2d1f47699f17b1d6568f7833949cc0322c314e7a70e3fb293dadf7c0c01e116a93bd3923829d6c0fcf789ed93ad9768fdfabccf9094954acb7f15562b8efbd2c8e840d166dde3c49454a6d2740b6f905b6a8817a519834e31602f4090e853139ec88e42ee06091006d518625dbb1790bdf8a76be808d244a0c29bc10f81ec0033cabcad1df06016f768f7a516eca10fdc512c87a63ebed196e34daab1bfd74b014c73d84d23d95c3983f6caafc32bc75ded5052d8816d3434a7c8dabdcbacc3116c0fcde918e652344f21cc1294976bd24b89ffa4d645a43be385a833357ce8712536668f1faafc5e117b2a6bf095c913ff4de145ae835654050e853f43e6eeb2e713d185802d81621f13431a0775c83df2acd8a6b3e24f587a4e06b8be62eefef0a675ae1f53809a8c6c5cd72f1a20b2621ccedda4b1164dfb2202a1584d70723d85c67a7d733f0cf81a8d5965d6b5816ee1323193c778a9c5e4e784444f1b2e54d992e01790ce989ee1b5617c1c79fde1e6217811553cf0107771cf7fca06bf94b42a5924bad313aba8f768e10caca1769fd8cef2b4074d07e8cbe6555c36d988755290690bba12862c7baecfb34aa73dc625c94a4ef1144a05cd7cff8025ce76375226a25eeb20975692144cbc719751b20256d3ac64736108c02ee65933ce50ad9d11ceec222378a6b881f1133fb51f225aa334a954183ddf4004320c4b24525eabcc5d86a0e5bdc17edb06860b6735cb7a467245818180ab48777a478d35ecf104ab5a266469963848d00c725a6d1ed6631dc2e0501cb00b92d393252d0ac45d223b019163b01b5804adb18004c6e2a257c7f31f241328e28660814e999775e58b33aca13cd191491e21504771de334c70a12fca24a9681afdb74292c5b5d1741e5b4ee2422479fe1b2f56e8c8017c5454befe7f76523901d48654b3d584f257f6b6b2b7585bf3ea5cd745f5a79151a01a6c13a73d1a41c6bd6401d352132580a43bc26a55d63cbc637884803e1e65e22f6b08e70fbdbc685623f04cf03c43fedff2b6fa93dd6b162fbcdff63594ead843cbc0a0731561136878593c248c28f76f7e7c80d2e81ef88f032ff95a3884b5272d2991bb58be887f3a87d9a7777703b4932cc479d0b35cbddd1ee619d8cfeca5eae0fe6257ff4e6b7e4ce4f37f93755582b8cf3e6197da6783796c391c58b5a2c0be67e568be90974894a042ebdab437e7f5747133366c0c8de6598c8c345e8c4f25ec09b71fa7f1cc844f366274b8ea9004a064a115c4e21cc1734537c29041b30c55204d567caf737cc75af58732ded2322d7c6e6cb65b3a5d1a45347624899a8e2b511e30db7e912651140c7af48031fce24fdc0bf72839707bd1340956f8c5910f5a764dbe7be3429b4fd2d2904b5415dc0aab66b3c147309cfe76cc2cbdd2b6ce37abb636fc751906cfbe0a3d68bcc78ab30931ecc2282ba3e362525eb0b9cd7da51cfddc757e9355b7d06fe6dbd98c14b252af40accbf6f970f929795a983f9137eae9737ba43642a46a765d0e74d71311dafea7c06c918c9a0291fe289a2c1cd76c30d7ee999fb4909b6af47200575f4da32a3d6b9dcea00778b754faaa3d86f5f1ee7ed386c5738f698d4909d6759a559fef58880e4edeac5538e7c6ad7054cd14aca8a87541ee7e0984e4db535460153ba55b2a50f3719e3da7ef0ac1e166409550f326ec88e6a1cb1a0168263bcafcf2675efccee8982f5748eb95b00c219bb7e709ae6acc4621a2a827a247b7d333c46458ddd2cc0a9ccc37375f39c39c2e33ad3b3a160b0611e0cec2d3709a1f1a2b86030e426ab0a8115e24a98c5404a4f4cfff40c40b7dc718e3069a83141343e1d951550a0ec1742db29f41d4c09bd27ebaf5749d18f725b4e8097c1182c36ea30109304b9a7be78f32ca28cf155a2882fe571029a8b618c30a017c951aff04f664cfeb1e82e9fd15409221ab9202a7fc3ba967e37776178e8c7be8277ea757a94eac5be26cdf4c5f562323fad4d7e244de5ad6c4f3325e4fda8e6a8f7cbeb654ff143c11e17b0ad6bf37b599bb49d8c3dc3ca3bef1465d78f1dfd70046529977016d710d360572d619a6408e1235721caa692b710e2efaa400337b9a5060d2a17cd9267fde117df442f9dabe9cd8208a4113cc4aaa270023ff06099167400a9afa08759730404a9815485d619bfb2d5af6f4a424938ecd1305ee66a66ea3d0b0ebe838c14fecb1c06febdc2b926e898190554497954ea456bdfde357b0cb3739227c4ca52a076de1d1a5dc22dfca6f24da0d8e49525a29f1ccab76e059d8536a7fc08f4bcd8c186b21cabb3a02c01bf2c2ea3e7e743aba5cfc2c6bbdc05455574cd8656edce87f30f7e70427c8a692412cca4092351149b2ac5497fb0de6b2d0ecaeb768519d44e04df32896ac541ae73cddadcbd6721675cb31380cf908ed02f147da725f08bf14ddfc7a04874c5487f5e4e44670c57ef01f237cb61877d5617522676a5fba74338bc6e0fbef2d757f5a154e686e5c1b02e91e5d3f1eb213c5e57b64bfcc4864a81309c7eaf7a7d56b8e10f50e8dd21b64997d7e992c88ed94b9f3b39cbcc2d6060e9bae62c7fa5bc7ba9a52f517618f69e81223840ec632fdda6e280092320adb8e0d27a6e3defee4746c9247bb4be83cb4b5266641f9e5e527e84ff90a0a7b88266627dae4fecd1359b0849ab994950b71cc5ddf5d46a1e55427e44d4fe8587cec3e012c4992c3105cb1658e5602ad674a73f886eb3759934a6d15eb0e2c907c8cc523bd453679a1380cc8502e6a504ef1ba884385a14a8fa717fc30b5d3876717fcecda1fa10528ac692b41e866874b80b623e8bbeef5932451d75125cd14d523431e519dfabcb3bc4be75a9cae0a4eb1f6565daa9582649386373fe37922da3a9ea80888f785fff2892a660619b15677ea0a1e4d912ee6c90f2e2b13f0b8350ae9fb90ceaea587fdd564c1bbb776d6498a35fec39aabd890d10a21068565d253c2c0c05c2f508401a6b8d237926609d1879e9ee6fe79f8fce9f3c29805e3fd850226b2616f54ecd9dc0ce377c71d81768d1c867ec5bfb90b8281d4777b6504e74de7e04dd6d8324a98bf898be43f167acf95b1f780cbe58c99669f85c3f47f0d26a6d8415a5c3390d8a66845381e6d17f3b57d85a890e961c74895dc46c58219bce48b03a1941d69e586607b7020838383aabd2e74f841f111d8083a57a78f2284edec9f4e20226d74e41c626f8fc129bb3e1c3840db995263b438e7e19e4841ea8cf2a1c58cbf4241521da1f9eefe0b72ab911175fa8737dcfb896ec53e8f42f1ee915a921924cbbd55aef092f0c75887901408a4001aaa653fc48c3feb02ad2a76152c4919f5edef49788d21884ef0a101ef827fe545ff7666751a9c3a7903a9729636cc59f809e1f88194a36a8d7b039b434b4f040ed09d68c9a64ddd2c2d14efd480da9d7a535e87994606d54d171ac1e6b670d4b2a062a941bb96bfbd23a2768980e66530521ee121db7e00a934339ce8d2374f841bd0d1a062b0c034d33fdeaa7c42bbfaa9f652022a7142374e678c31d1a596e8355e22c648d3ed1cb184afe44fe185450366903e0ad7bee1f32b1bd923e8d17a8f735ff23902ec0c964d688352b1e213961ab3d29348309002ca2e1293ec5523c73e8207e1295106eaf84cbb32169e96e0531ee3fff600bf4566da9a7040353d86930e7b6c1568140a66d92e1ec557bc5691cfdc62868eacf8f37820aaaeadbd8c251f3ce1b00bc2ed98b98ad7086fe7df29dc6c9ecbf2b2531db7b02765a31307381d0c725cd8756766a469f1e0d6f1e4456f24712d2416a65313a37f2ca32e5b6d7f9e2eabd9291fe7eb2e161704d6595944d0e411908144b2315d780adf622a45d18937bf7b85ab5ae5fe482724296028c44967804236c1efc65d702c0bb78d2bcad97d8f8639853657da18a9e7d180e4d7beaa87ea67ec473697751bd701de79f625f1ff56cc1899f36d23802c725325eb952a576003f05bbafe2bf39b53eaeeb0902968da4a4cf75521c43809bf195d9efd7811ace48a95a56b203a689fb8c86b594ba7752344235369d8a06292b27aaf60eaebe681cf4883117efa5eaa201adaa7be00dec08785f619e6375dfffede42b126c0ae07358939caf0c18f97b4daa33b21cd5b35a431af1252309a7ec05cd71daf6314310d078aad0df1fb81672409eb645c2fc1312c683fec9922911d94d60ccfa6eac9da11c76d9e0b5cf45ccfce5f7d1e8aa43ab7587829c202e95422c7763ca24ce69946ae213d5c35f4c6c8e26a9744ac6f5ba1c457280d965f0614c500d042dcad44471d0e5aed6c88442a3693456a350e0a52d0c78dda5c2910cfabd1a402988affa572c5947304385324d65e55ea9c4333def63740e7ee454a4ce0db016ba018b1d93926d76b203f1d4c23e7d1653e6e692a89e54ca57f6bf658f66620fa99784e5ffc7752ba2af216126ce873c6e87cdf37dbe5d3510df4c4d3fd7dffee90e18aa5a89a063b6b252e70e633ea87d7990f72447bd18f687ffad3bea331227c90ac7edc1f62877e1101ded8432307872e97e635996255be521326f07c71e2f918c4b94d12ee9a46beb62cc1b7bccb79d862839c9e660de33c1e292c5d2b6fd0edb1f2777fdddce50a21612f49c31517a45d3da09012144e1a4a25fd5387bb5b42b27f553383cb3be1cc85b2e3bca97bfc852f6533255fc3c5d188fb1ab4e5fb89c03bb048d26d4c767ef248d3911f8843e5e59"}}, @channel_switch={0x25, 0x3, {0x1, 0x8, 0xf4}}, @challenge={0x10, 0x1, 0xd5}, @ibss={0x6, 0x2, 0x3}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x3, 0x0, {0x5, 0x7, 0x0, 0x20f, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x4, 0x2b}}]}, @NL80211_ATTR_BEACON_HEAD={0x421, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x397}, @device_b, @broadcast, @random="32f099956772", {0x7, 0x40}}, 0xfffffffffffffff8, @random=0x7, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x16, 0x1}, {0x12}, {0x3, 0x1}, {0x1}, {0x1}, {0x6, 0x1}, {0x2b, 0x1}]}, @val={0x3, 0x1, 0xb0}, @void, @val={0x6, 0x2, 0xa22}, @void, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x2, 0x0, {0x176a, 0x1, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x0, 0x2}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x0, 0xbe}}, @void, [{0xdd, 0xa4, "d0e323e265754d96ea561b8b6733cc8805ff3d221a618301cd855a07bc5649570a71741f3fb7067513e895d842f4ba1d63415de0ad1715d14506fb8dc3eb08334b8c04145bc4d9dec13551276585a4f4e047fd5d9aaeaf30121be5249a1fd03d80a2d3c18c89891b6ffdf7801c8803b9a9d72535f4b2428e5654cf7992aa719c0ddedb9fc552ad51fafeb683b4329d2901d33ba08d1af3d4e03031909c6654d26242e9a1"}, {0xdd, 0xb6, "9cd15d3bbca66655f328351f8abdb40042a4f7028a7113c5e95a32a4a18e43524c38f3315144c12cb1d17bc31e45a53f76e049362fcbb75150ba09ebb854e979b5dc1739c01e91731d5cb7620d5dde08ecaab58ef41ea7fd99754f05ef2c45ada49ba8aa94a26713298d5ec1b2e0dc426e95929e48624d1925ffca212871f1ace7a3bf99df6a8cfaf4bc667db51eca0403c7b6f050ec3e26abb7f8a9d090285f52e143edc96aaed3dd3e8397efc28df87ca7658e22b5"}, {0xdd, 0xf3, "a10b3d17238384ad8a6c9b513adf0178a7d8f4c9d2d924909f295367080a74d12d0b22e3b39f9c6367b1a8b4baa8c66c13d7a5cd4aba6f78b7bf9720acdc5c47a0353420695d4ddbf922388b8e23eae8ca05a6fb2c717ea1f13a67d0232ebeb2d28a4ec8cb2ac6736d7b2bd6c3916bee99d202a217a38a92e6f24c35b4a22b40241f128ae0c589334a5856ecd750badc9d5781c31fcae60f89a99812dc00c123fe891bdb5ed3f939a824afbddb1f7f1a5ae53b81db43b4a91edb9b07daaabe3c98bb0931d34ac9c192860ea8b3b74a51655c22ecb114934e4204163ccc306c4836a5a88abd9281f2af3bba1fda8776c7231d81"}, {0xdd, 0xae, "d8b96e3e8e136f2799a4c16266fc650f24e3d3c3f0f65681cc132adf2e5878a6855233e57457a884360be91cf73481d84e37783402965bc228d8138becd0fac970e16a633f6ba0c3dc11f918eb0092239830ae09e6fca551d03d8f9d93cece188e60f7df47d2ab5e606a8b9ec73384b58ced9fe9bb845926e76789f8bf427b0eb81dc83df5be81352d79cc7571c7f4c5f485919d75016851cb2c135fbf9fa4d39a6a637be9f3532c221d1f87f8b4"}, {0xdd, 0xb4, "b76dc5663f7831f3e9581e13d9905f159e30aaae20d0a009d94cff87cac52e8fec9d502ddfc8065b90b75cda4fd712c1aa0bc9b5da600507055a511477d52bc96f657bc435ce3f4dc8ff98b30569c67f2ca83e30d9c7d820eb17280caed4ad42746119d3317b83512603821446d8a77eba76710b53436fa7cbde4c079f49258d2911cdc4dfe4a278f27167d116fe85dc16ee6985eed5826edfd0bc5b7df85a1b5224582caa1a73a01b959007ae8e8ba03f953d2b"}]}}, @NL80211_ATTR_PROBE_RESP={0x344, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xe]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x26, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_id={0x72, 0x6}, @perr={0x84, 0x15, {0x7, 0x1, [{{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x3a}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x115, 0x80, [@random={0xb9, 0xfc, "3cd140f89d62b40972956fe31f743c6151ea4532c3a4e47c413e30b8b28e8dc344a033ea76b3f7c379b9add9f2d1e5b52cb23f3ae3ee6ec544bfb65666e2524315d59db8ffdc23af1f4db433b5cedf342aa555190cbe96bdeaa3b35aec94290aa8ca2694adff5696e8abb80620b8e8e43a2c9a3ed6cea7e3468729b9633ec8e9e513e066bfe0f013d1fabfcee9be8421fdf1923c7cb86a8c61d2d208731c556f134facc8f8eb56517b8423732753f329a4c97a93f799cd313f1e39f849989e06243fa9258c385173c06474d921e107a548fa028013e1dc3f9cca325f568ab8849cb7886dac8739596d2f1fe3e51fb4d76c89d353a84e8189ccda8a3d"}, @erp={0x2a, 0x1, {0x0, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x7f, 0x2, 0x3, 0x9, 0x8ba]}, @beacon_params=[@NL80211_ATTR_IE={0x46, 0x2a, [@preq={0x82, 0x25, {{0x1, 0x1, 0x1}, 0xf3, 0x2c, 0xfffffffe, @device_b, 0x709, @void, 0x3, 0x10001, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x1339}]}}, @mic={0x8c, 0x10, {0xff1f, "afcc546517f3", @short="0f73701c9b772184"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8e, 0x29}}]}, @NL80211_ATTR_PROBE_RESP={0x124, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@ssid={0x0, 0x1c, @random="ef6ea2b5981f44df3c49b27919ea24f78f9c3ac4e0d4bdecd4bcc7b3"}, @dsss={0x3, 0x1, 0xb8}, @challenge={0x10, 0x1, 0x99}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x0, 0x5}}]}, @NL80211_ATTR_BEACON_HEAD={0xdc, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xd, 0x1d7}}, 0x6, @default, 0x820, @void, @val={0x1, 0x4, [{0x1b}, {0x16}, {0x30}, {0x1}]}, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0x7, 0x9, 0x7ff, 0x8}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x99, "a6c007769a664a2ca6297f3c21fb3b88b4dc260eb01d20169b3a630913fc9751411ff2f2086d179651f3543971ed09a937485724007bb931b8485798f8a75857f02a9d7ab5fac7ea49974519f85c040851b311f3ecdf32da125fbf5f111accacb6406aadd11c764858824631bd197f9bbce0a613208f361c13477673e0543922cffc2b3d04fc9f53640049e0200658223605d139df665d5367"}]}}, @NL80211_ATTR_IE={0xa6, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0xf7, 0xb2, @broadcast, 0x0, 0x56c28415, 0x4}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @cf={0x4, 0x6, {0x6, 0x4, 0x2, 0x3}}, @cf={0x4, 0x6, {0x2, 0x7, 0xfff9, 0x9}}, @measure_req={0x26, 0x59, {0x1, 0x9, 0x60, "67497fc0aff3f0a91afa176b026443eba6cce321ac5d34d40b51a0586f864584bb625b97238f47d692582a30cc39a9aea9f4bbcd875a94903b2d42dfc208dbbd031deb1eacdf8c4949511a2de1c43232beaa139b8f2f"}}, @mic={0x8c, 0x10, {0x985, "373369c0b36f", @short="0ad9ff1c323a94b7"}}]}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_IE={0x1f2, 0x2a, [@ssid={0x0, 0x6, @random="e24de23d4e3a"}, @mic={0x8c, 0x18, {0x5a9, "e121ce731dc0", @long="0184195803f411064811b0aa202ec0e4"}}, @fast_bss_trans={0x37, 0x56, {0x7, 0x1, "ef34c9721c6dcf848b8c54f11863c03b", "40b52340be0a9e2d9bd565f670b109db5adf15eab0f99cad721e381497d0cae4", "2bc3f54c5cfe14b528ecd1adba5337c30e1109e7777fbe0b4d002e5fb5dea117", [{0x1, 0x2, "769d"}]}}, @gcr_ga={0xbd, 0x6}, @cf={0x4, 0x6, {0xa, 0xc, 0xcb, 0xfff8}}, @perr={0x84, 0xf6, {0x5, 0x10, [{{0x0, 0x1}, @device_b, 0x8000, @value=@device_b, 0x18}, {{}, @device_b, 0x2, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x39}, {{}, @broadcast, 0x3, @void, 0x6}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x2a}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x26}, {{}, @device_a, 0x2, @void, 0x10}, {{}, @device_b, 0x2, @void, 0x17}, {{}, @broadcast, 0x7, @void, 0x38}, {{}, @device_b, 0x8, @void, 0x13}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0xfffe}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b}, {{}, @broadcast, 0x113, @void, 0x27}, {{}, @device_b, 0x4, @void, 0x2d}, {{}, @device_b, 0xfff, @void, 0x28}, {{}, @broadcast, 0x7cb1, @void, 0x11}]}}, @random={0x3, 0x33, "319990c25643980776760f26f6ebe047788e425faf03163146f48ddb46bece4eb82f2c17958d2ce371a25d10083cd9735e6f9a"}, @mic={0x8c, 0x18, {0x809, "0192c85627c1", @long="045e982f4b9de95ef56a4164fa11473f"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x3c, 0xff}}, @rann={0x7e, 0x15, {{0x1, 0x7b}, 0x10, 0x2, @broadcast, 0x7fff, 0x20000000, 0xa}}]}, @NL80211_ATTR_BEACON_HEAD={0xf1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc}, @device_b, @broadcast, @from_mac, {0xd, 0x1}}, 0x2640e27b, @random=0x5, 0x4300, @void, @void, @val={0x3, 0x1, 0x9}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x5, 0x9}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xa7, 0x7, 0xf}}, @val={0x2d, 0x1a, {0x400, 0x2, 0x6, 0x0, {0x65, 0x8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0x2}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x92, "b7a7168cef3ab4186b0b7705bce7a467cb966cbfd8ab3f0bceb66aaa16e422af22ac03c16848ddf39723ddb76bc1be443062e3ce91cc2cd88d793b6ba68fa99c4095cda2ba2df0d147613e5c4b0c6db1c70614ba205f2ef8ab7649a382c2dae25d6ac3594dde0cc76e685e7b81368f05154a632a7a4520c9cd232380d9747ca0f2bb7b7c20c82ee8ed25e6da17cb03e7ce83"}]}}, @NL80211_ATTR_PROBE_RESP={0x537, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1b4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x96, 0x2, "721f088e40e53b099a698d31051783cd5f36ccc59639dfbfffb52ded7931269aa508e79323a117c47517f20863ac3a95bbfe3c469e468387fe07399eaf9552c104a4fa81b7bd3b92587fe1bacddfd22bce323b3f459295adeb71f25053bca6ae4f95aeb7ace59bd5a06844fb50859213ffa0c25b6a4c4c8381c0aced9b769c218021a521953c5d5fa19adc1035eeab1a993e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x76, 0x2, "682c912a5054994fb704237b3a1b353a65ab97f559bdad7ee9549d1005ca7187b7c51b8b5cfac2b595a9ee44edb8a84fcbc7feafaf479a3a60685f1fc8b6a63f04c74d586da6e414b100740d69b3c156ef90e6763d5d561788bbdb6f33cdeb31d251c84077d58a531f272ff4aacd680d2252"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x87, 0x3, "233ddef23ac97120b4b6564903119a26b125a9688c2f21f97fc348fc4f5fc93771598f454ea7b6fc56797aa9383ddfa9eabd4b7c375bba0b945c150752f3587ad5f933d46d8be5d15f0c0e05d957a2a23941087551ae250861353e7ffa6e11d4440a723272bb5e47441aaa13ef00565e3a27f28adc74f9747f9c8a848d3db708a1a8e7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x18, 0xba, [0x3, 0x81, 0xfffd, 0x7, 0x17b8, 0x5, 0xe40, 0xfe01, 0x3ff, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xfffb, 0xd, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd3}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x3518}, 0x1, 0x0, 0x0, 0x8c0}, 0x880) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f00000043c0)={r11, &(0x7f00000042c0)='y]}//{&\x16#\x00', 0x141000, &(0x7f0000004300)={@_ha_fsid={[0x7fffffff]}, {0x400, 0x3, 0xc4, 0x1}}, 0xc, &(0x7f0000004340)={@_ha_fsid}, &(0x7f0000004380)=0x2}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x1010, r13, 0x1869d000) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000004400)=0x80000000) getsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f0000004440)={@initdev, @remote}, &(0x7f0000004480)=0x8) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f00000044c0)={'gretap0\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000004600)={r0, &(0x7f0000004500)=':},&.\x00', 0x208003, &(0x7f0000004540)={@_ha_fsid={[0x5, 0x17]}, {0xa, 0x81, 0x6ded, 0xd08a}}, 0xc, &(0x7f0000004580)={@_ha_fsid}, &(0x7f00000045c0)=0xf}) setsockopt$netrom_NETROM_T2(r14, 0x103, 0x2, &(0x7f0000004640)=0x5, 0x4) 2m38.283695476s ago: executing program 1 (id=4575): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x29, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m37.905022194s ago: executing program 1 (id=4580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c08}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 2m37.770410795s ago: executing program 1 (id=4581): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1], 0x26}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSACCEPT(r1, 0x89e3) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1], 0x26}}, 0x0) (async) 2m37.620316817s ago: executing program 1 (id=4584): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket(0x14, 0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 2m22.549273698s ago: executing program 33 (id=4584): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) socket(0x14, 0xa, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 50.779931426s ago: executing program 3 (id=5867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close(0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, 0xffffffffffffffff, 0xa3eed000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000012000301000000000000000000009db7000000cd6c587200040700000000000000000000000000000000000000000000c2002af23800000000691d0076e77044a80094e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68b7a5b89686c2fb8fc7384adaeb000000050601010000000000000000030000040900020073797a32000000000900030073797a30000000000900020073797a30000000000900020073797a31000000000900020273797a30000000000900030073797a31000000000900030073797a3100000000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r9, 0x89fc, &(0x7f00000001c0)="10020000002dbe53613561823180c5f1cf9ceb6c02cbdb2a0f8317290f13cc058a79262d17bed2f82f75a9620a557ddcf8825c75bc00c1f8ce41b4d739b484fb9aae4a8388599a799868bc240eee97ef4c43bf933cf95c930a4764") sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newchain={0x24, 0x64, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0xfff1, 0xf}, {0x1, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084009}, 0x40cc) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 50.247432943s ago: executing program 3 (id=5874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x3, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) 49.887548654s ago: executing program 3 (id=5877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r1, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@empty, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x0, 0x1}}, {@canfd={0xd, {{0x3, 0x1, 0x1}, 0x1c, 0x1, 0x0, 0x0, "52e27202a075a2b39af647fc7114967d11ab57012b8a49589b63a129d7ad72479fdf241b41c1e6bc96eb01a8b7c49e0b93a2cf5379df3bf13f41564d99526cd5"}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0x10, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x404}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 49.594101974s ago: executing program 3 (id=5882): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 49.532034557s ago: executing program 3 (id=5883): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@bcast, @remote, @netrom, @null, @null, @netrom, @default, @netrom]}, &(0x7f00000000c0)=0x48, 0xc0000) r5 = socket(0x22, 0x2, 0x3) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000340)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x5c, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5bdb3f98cc31dfcc}, 0x40001) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f00000003c0)) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r9}]}, 0x1c}}, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000100)={0x3, @bcast, r9}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) 49.223055965s ago: executing program 3 (id=5889): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r2) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 34.149433771s ago: executing program 34 (id=5889): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r2) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 15.681647269s ago: executing program 4 (id=6239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000006f31263375601ce7de70b48c91d0f2958996d3f0f13022bda8d1c9b80d90054d6eb1c579ed220d6b047f9a43f34f68c26521", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x2000800) close(r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 15.324876377s ago: executing program 4 (id=6244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x20}, 0x1, 0x0, 0x0, 0x24000084}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r3, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x4c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x58}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xee}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x40}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x9c}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4008810) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r7, 0x60b, 0x70bd2d, 0x4000}, 0x14}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e00090027bd70000000000004000000080018000cac0f00f73761b25333f740b1f42631aca1702d1b88c4d002c14c7cf1b67383356aa4976b21a9812165955b1884b4c2ebcf417c3afe9da9935cf230771f4bbc702b122fda32979c0d72fc57"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 14.664980477s ago: executing program 4 (id=6250): r0 = socket(0x11, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600000, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r4}, 0x10) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x2, @local, 'dummy0\x00'}}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES8=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 14.656456953s ago: executing program 4 (id=6252): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, 0x1}, 0x6) bind$unix(r0, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x2e4}}, 0x811) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x2, {0x9, 0x20, 0x50, 0xff}}, 0x18}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001000000000000000000780000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110022d591f25b6ee2d2cc"], 0x7c}}, 0x4000000) bind$unix(r0, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018df03e0294fa2d7610000001800000002000000000000000200000700000000000000000000000b000000000000bed36228c3889dc748eed1be17d4fc435eb98262f23ee8915d8bc4cceb57b344efc5f0f0168236fcd1f041c595eccfc675927cfb965a612bf8285c743124e33bd8476676c3e1a6e223790580d60eb669f6c7ea1c0d3479b1036102bec94d1a7c99ceed4c00b7e957e6dd5168d49ffc857ce9c86c47e3a618ef4ecc4d0830645be211f84ba440b605ab512dc8fe8793128962620991daefb36dd2c8"], 0x0, 0x32}, 0x28) r6 = socket$nl_audit(0x10, 0x3, 0x9) recvfrom(r6, &(0x7f00000006c0)=""/71, 0x47, 0x1000, &(0x7f0000000740)=@generic={0x10, "f46263368ac498f295e04f18163f1e4cc83ba8244fa5020dba134aaae1152219df146f7124d2b56baaf7999d271f88606de6d960ea33658d75d3374c9fb05c581017bc0db326bdb564f5051c0cd5700f5d419c150be377a65ec6ac4053d1245543d6b81ca8de265a57dba871fa1dc276ef688250776483047f167d7f541b"}, 0x80) getpid() r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r7, 0x89ed, &(0x7f0000000000)) 13.825962524s ago: executing program 4 (id=6256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000900766c616e300000000000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12.907755828s ago: executing program 4 (id=6257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000040)=0xb7, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 1.455371153s ago: executing program 5 (id=6391): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000540)=0x3) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x8, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0xccb, 0x4) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/190, 0xbe}, 0x7f}], 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x18, 0x9f, 0x0, 0xa, [0x800, 0x3, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x4, 0x67, 0x3, 0x7}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x20000000}}], 0x68}, 0x4) r6 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can, &(0x7f0000000140)=0x80, 0x800) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x124, 0x2, 0x1, 0xabc272972bd2b3cd, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x8c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x14}, 0x1) 1.440783008s ago: executing program 6 (id=6392): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0xf0, 0xf0, 0xf0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@rand_addr=0x64010100, @rand_addr=0x64010102, 0x0, 0xff, 0xd, 0x8, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x58f, 0x3, 0x1, 0x1, 0x7, 'ipvlan1\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffc, 0x8, 0x0, 0x2}}}, {{@arp={@local, @remote, 0x0, 0xffffff00, 0x7, 0xd, {@empty, {[0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x9, 0x4, 0x2, 0xc3a, 0x442f, 'syz_tun\x00', 'pimreg0\x00', {0x59022136530fc105}, {}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast1, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x1000}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x4}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)={r0, 0xd7, "47e5d4b64bd9633ee02e199145c88638c31d7f70ad97a6641f55549f41e77b4e771c333cd886c4c50ea47333bbef84d31504e073df43dc7a9243fbf31a1e8faf213cd4e10041c276fb39aad46a60ed8053f7a3544902436b2fec12e2d67dd8e4e13822632113c6083546a917d16bb2f4985f25e2dcc1324e59c2a9a106a1e8bd7821a735d2077fb03c1138b1e3e5ab96dbe5d2faf1a12bee8d71cdc0e73de982b8e5631bae08d131759d5d350c06607705406719bf6ac1b4dd00f6455e36c6d2e46c9c87d86f2971f8d9b5b7168b60082916790b8717ab"}, &(0x7f0000000600)=0xdf) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000780), &(0x7f00000007c0)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000800), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000005) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000e00)={r0, 0x1000, "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"}, &(0x7f0000001e40)=0x1008) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r9, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x791f, 0x1a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x40) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x20, r11, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x76}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002140)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000021c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002200)={0xfc, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x696c8298}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x78, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfe8edc69c92098d}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000844) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r13, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x6a108c}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)={0xa4, 0x0, 0x100, 0xe0f, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8811}, 0x1) 1.376518013s ago: executing program 7 (id=6394): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x3, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "49242175ae156e36"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @broadcast}, &(0x7f00000001c0)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000200)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, r2}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) recvmsg(r1, &(0x7f0000000880)={&(0x7f0000000280)=@pppoe, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000004c0)=""/201, 0xc9}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/58, 0x3a}, {&(0x7f0000000700)=""/30, 0x1e}], 0x8, &(0x7f00000007c0)=""/139, 0x8b}, 0x100) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000900), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000009c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'syzkaller0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '\\o7\'(,)'}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'syzkaller0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008880) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000d80)={&(0x7f0000000b80)=0x6, 0x9, &(0x7f0000000bc0)=[{}, {}], &(0x7f0000000d40)}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000dc0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000e00)=0x24) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000e40)={0x0, 0xd23}, &(0x7f0000000e80)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ec0)={r9, 0xcb, 0x4, 0x0, 0x3, 0x6, 0xeae, 0x10000, {r10, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x1000, 0x8, 0xbc94, 0x1, 0x81}}, &(0x7f0000000f80)=0xb0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) write$nci(r11, &(0x7f0000001000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x8, {0x0, 0x2}}, 0x5) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000001040), r12) bind$bt_sco(0xffffffffffffffff, &(0x7f0000001080), 0x8) listen(r0, 0x2) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r13, 0x6, 0x1, &(0x7f00000010c0)={0x42f, 0x37, 0x1, 0x2, 0x0, 0x7, 0x9}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000001100)={0x2, 0x8000, 0xb, 0x0, 0x8, 0x71, 0x9}, 0xc) accept4(r13, &(0x7f0000001140)=@pppol2tpin6, &(0x7f00000011c0)=0x80, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000001200)={0x0, 0x1000, "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"}) 1.279474982s ago: executing program 5 (id=6395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000387f48358e67c01e1f480400", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r6, &(0x7f0000000080), 0x0}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c000780180001800800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa0000000037a7bc30be8baad5adf8616285a17e660ffe2dd87d4311f192af61ab3f917b8d159032cefbe89ac19fc3ef2eb6de504ae3e32cfe34f4c819", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001809c40005020000fffd000000000002d58838068b91000000"], 0x4e) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448df, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000380)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7e31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a91798c0ed677ea15ed538fca08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x93}, {&(0x7f0000000900)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 976.961956ms ago: executing program 2 (id=6397): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2b36, 0x4, [0xd6, 0x9, 0xb09, 0xee5]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x200, 0x1, 0x9, 0x2, 0x6, 0x9, 0x3, 0x5, r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x40040f4) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000300)={0x8, 0x3ff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000340)=0x40, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x19c, 0x0, 0x1, 0xa03, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x32}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x28000}, 0x40814) sendto$inet6(r4, &(0x7f0000000600), 0x0, 0x4040005, &(0x7f0000000640)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}, 0x1c) socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r3) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x200, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x1ec, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}]}, {0x1c4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @local, 0x10}}, @WGPEER_A_ALLOWEDIPS={0x15c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4961b8952dc5f12c1ba5c563c83b24643bfbcc0d9c929e243587bd3affe3eff9"}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x3, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044810}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bind$packet(r7, &(0x7f0000000b00)={0x11, 0x7, r1, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2800}, 0x40000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "9358cab8af99af468f83920987a8d4e8"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001c80)={r9, 0x9, 0x1, [0x8000000000000000, 0xc6, 0x40000000, 0x7, 0x1ff], [0x10, 0x71d21dd1, 0x5, 0xa3f8, 0x42, 0x401, 0x2, 0x0, 0x2, 0xffff, 0x6, 0x8, 0x1, 0x80000000, 0x7, 0x2, 0x2, 0x8, 0x5, 0x7, 0xfffffffffffffffc, 0x6, 0x7, 0x0, 0x4, 0x1, 0xffffffffffffffff, 0xb4f, 0x4, 0x6, 0x0, 0x7, 0xa, 0x75, 0xc1, 0x2, 0x3, 0xd9b, 0x6, 0x9, 0x364, 0xbde, 0x200, 0x5, 0xfffffffffffffffd, 0x4, 0x1, 0x5, 0x3, 0x5, 0x4, 0x2, 0x7, 0xe, 0x2, 0x4, 0x6, 0x6, 0x8, 0x0, 0x1, 0x80000000, 0xa, 0x4, 0x8a, 0x1, 0x800, 0x5, 0x9, 0x3, 0x200, 0x49, 0x6, 0x80, 0x80, 0xf98, 0x7fffffffffffffff, 0xffffffffb96060ad, 0x4, 0xfbf, 0x3, 0x21, 0x8, 0x800, 0x0, 0x80000000, 0x8, 0x8, 0x5b, 0x6, 0x8000, 0x0, 0xffffffffffff1458, 0x10, 0x80000000, 0x2, 0xff, 0x10001, 0x5, 0x5, 0x7, 0x2, 0xfffffffffffffff9, 0x8001, 0x4, 0xe47f, 0x3, 0x26, 0x5, 0x5, 0x0, 0x8, 0x140000000000000, 0x8000000000000001, 0x104, 0x752e, 0x7, 0x4, 0x8000, 0x3a98717d, 0x2]}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)=@getroute={0x14, 0x1a, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x1860) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0xac, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_OBJ_USERDATA={0x8e, 0x8, "53aa79b6fab3a43b834510d8e35df7259a9355e508edf000d94d549d8d1724711fef4e63502d748be448f10c8dbf3b0fafddedc9a6928cb522d4b67e0fdd66d83f832d607d085c71ab1b3f0b323cc7555a0ac49148b7c2971b91db177e548755a27c7f8ee1b1dae8a6f8685ba8b943a23f84347c3ef02d88e1b54529b611ebb359031d6c9d796fdf0e31"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x11) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000002340)={0x1d, r1, 0x0, {0x2, 0xfe, 0x3}, 0x1}, 0x18) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000002380)={0x3}, 0x4) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000023c0)={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0xe2}, 0x2}, {0xa, 0x4e23, 0x3d, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x0, {[0x2, 0x3, 0x3, 0xf, 0xeb0, 0x101, 0x7f, 0xfffffff8]}}, 0x5c) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000026c0)={&(0x7f0000002440), 0xc, &(0x7f0000002680)={&(0x7f00000024c0)={0x1a4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) 870.955936ms ago: executing program 7 (id=6398): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async, rerun: 32) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 869.944389ms ago: executing program 5 (id=6399): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001140)={'wg1\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601030000006eb0657e1205ecae7cef7467145c780000000000000000000c00078008001240000000060500010006000000050073b9ba05000a00000005000400000000000900020073797a300000000015000300686173683a69702c360072742c6e657400000000e1fbb35bc28eadb8a84d9fa22bc5f350e236d7213077e80bd396b795350b552abfb22ec8aeb1f56631744cddd271190446154562413b1eb0b875a16a68dedbc47256b1e5801914e39cf908"], 0x5c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000600)=0x50d, 0x4) listen(r6, 0xffffffff) bind$packet(r4, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r7 = socket(0x2, 0x2, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r9, 0x1, 0xfffffffc, 0x2, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x24000010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="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", 0x1000) 864.788502ms ago: executing program 6 (id=6400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x90ec0c8f4b23e26b, 0x20, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000}, @generic={0x7, 0xd, 0xc, 0xeb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec400000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x8, 0x5, 0x0, 0x40, 0xfffffffffffffffc}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x661, 0xee, &(0x7f0000000400)=""/238, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[{0x3, 0x4, 0x10, 0x5}, {0x0, 0x3, 0x6, 0xc}, {0x4, 0x5, 0x2, 0x4}, {0x4, 0x2, 0x4, 0xb}, {0x5, 0x3, 0x3, 0x6}, {0x5, 0x5, 0xa}, {0x4, 0x1, 0xd, 0x4}, {0x0, 0x4, 0x2, 0x5}], 0x10, 0x9}, 0x94) 830.795311ms ago: executing program 2 (id=6401): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) read(r2, &(0x7f00000001c0)=""/93, 0x5d) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100010000000081901f565794fede51d40c"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 758.493511ms ago: executing program 7 (id=6402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'veth0_to_team\x00', @ifru_mtu=0x80000000}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x15, 0x242, 0x7, 0x1c3, 0x0, r2, 0x8001, '\x00', 0x0, r2, 0x1, 0x1, 0x3}, 0x50) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000001c0)={0x342, 0xfffffff8, 0xbdf}, 0xc) openat$cgroup_type(r2, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f00000002c0)={0x3, 0x3, 0x4}) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000340)={0x1, 0x8000000000000001}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x5, 0x8001, 0x28, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x6, 0x4}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x2, r6, 0xdf1}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x6, 0x3, [0x9, 0x8001, 0x8]}, &(0x7f00000004c0)=0xe) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000500)={r7, 0x5, 0xbb, 0x7, 0x8, 0xc1, 0x9b, 0x9, {r4, @in6={{0xa, 0x4e20, 0x8841, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x6, 0x400, 0x5, 0x5}}, &(0x7f00000005c0)=0xb0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4091}, 0x20080000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) getsockname$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa4, r10, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_MODES_OURS={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'pim6reg\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x90, r10, 0xa4cd6895b46763b7, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x5c, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="d1e06a4faa"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x30, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1e}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x12}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x29}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x8000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x20000040) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r13, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, r8, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xe38, 0x37}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x8040) 698.677245ms ago: executing program 6 (id=6403): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) 622.584388ms ago: executing program 2 (id=6404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = socket$inet(0x2, 0x800, 0xfffffff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4f20, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4f20, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}], 0x1c) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1bc, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa4, 0x4, "125b08fc1b16adc5ae23aefe150c67d13e076ce0cafa94da81567384abfab51265d4ecd1153c4710ef38363cb8d4d40a9a8a62b0b110d23207ac9fb33902ab71376f1373f06fd271abe1b5f7acc216d025176d923e7b0983884f18d2c92c8902334d00d29cff47f964d28916e7450fdb1a3cdb83488961c70610e9a8bc9b82cbd0b800d77c2624171336cc082eb76fb245545bce15664dad153612f1f3e2fc61"}]}, @ETHTOOL_A_WOL_SOPASS={0xff, 0x3, "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"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x0, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r1, 0x0, 0x0) (async) r6 = accept$alg(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b143b7dc90b1d33a89485c5cc55e123b068a3b18014feaec354831f813df1e23d2036d39706361097d281ed9394da183e8c7db9005", 0x35) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f0000000500)="1a4cf331728a2ab98f4b19a5a033e412b2a11fbbb6a3a9c9e6bea5f37dbca046"}) ioctl$sock_netdev_private(r7, 0x89f1, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmmsg$alg(r6, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4014) (async) sendmmsg$alg(r6, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4014) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f00000003c0)=""/245, 0xf5}, {&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000000840)=""/150, 0x96}], 0x8, &(0x7f0000000980)=""/207, 0xcf}, 0xda}], 0x1, 0x2001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000a80)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x360b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e22, 0x200, @local}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @broadcast}], 0x98) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYBLOB="cc638982054d618c1cb3362e62117aa2040f828e9fd7974408eea6c9e89183114b9bab9331d14a9915dfbd07cc844498a6d129f85ff9ba5168262ae9254306d819f0a247614ce6ea52182dcb448b5fe7f1df375d569af74d268cfefbe196cd5b02efb068a1da82cf6ec3a146e2"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x800) 617.266975ms ago: executing program 6 (id=6405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x200, 0x0, 0x25dfdbfb, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x6, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x2) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000100)={'wlan1\x00', @broadcast}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="880000002d0001002dbd7000fddbdf25000000001800ef8014002500fc0200000000000000000000000000015a003c8009330d0ea00a2860b46acfc0cc1cd6de44c3f23a7117f83f4938b0227d9cb800000000c2ccded6380fe2dcb17c0562d28018167ab861423802add1ec2568fc51ae3c05d727c5a2ce0335681f506c948534577cc06f43000044f1d32a4d979e663c4268e7932f9467bc0f111a71ac958c1b2c7bfb66181998de77efaab054718aede3362162343839"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005", 0x2b}], 0x1}, 0x48000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r8, 0x200000000000000}, 0x38) writev(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ff050000200000000e0001006e657464657673696d0000000f0002006e657464657673696d300000360087006c325f64726f70730000f2472d37d66865000005008e"], 0x4c}}, 0x8000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'full', 0x20, 0xfffffffffffffffd, 0x20, 0x8}, 0x2f) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01040000000000000000000040000000000900020073797a300000000008000440fffffffe08000540000000000900010073797a3100000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000005c0)={0x0, 0x1, 0x0, [0x6, 0x10, 0x0, 0x80000001, 0xe82], [0x8000000000000001, 0x53, 0x2, 0x10000, 0x2000000000000, 0x80000000, 0x6, 0x5c, 0xfffffffffffffff2, 0xffff, 0x9, 0x9, 0x80000000, 0x9, 0x0, 0x8, 0x40, 0x8, 0x1, 0xffff, 0x9, 0x6, 0x4d, 0x5, 0x5, 0x5, 0xf, 0x1, 0x12, 0x5, 0x124c, 0x1000, 0xb7, 0xffffffffffffff01, 0x7, 0x4, 0x2, 0x35f5f53a, 0x401, 0x2, 0x6, 0x8, 0x42de, 0x6, 0x7, 0x9, 0x2, 0xad00000000000, 0xfa98, 0x9, 0xffff, 0x4, 0xb09, 0xbc0f, 0x200, 0x8, 0x8, 0x7fffffff, 0x22f4, 0x7fffffffffffffff, 0x6, 0xe3644c2, 0x3, 0x22f, 0x3, 0x4, 0x5, 0x25d, 0x1, 0x9, 0x8a, 0x1ff, 0x5, 0xffffffff, 0xffffffffffffffff, 0xffffffffffff8ce1, 0x0, 0x94f, 0x2c, 0x40, 0x7, 0x1000, 0x2, 0x7cf, 0x80, 0x1, 0x2, 0x0, 0xf, 0x3, 0x100, 0x0, 0x7, 0x2, 0x5, 0x6, 0xfffffffffffffff9, 0x8, 0x360, 0x6, 0x101, 0xfc, 0x1, 0x6, 0x9, 0x6, 0x1, 0x0, 0x1, 0x800080000, 0x1, 0x1000, 0x4, 0x4, 0x0, 0x9, 0xe, 0xa0, 0x1, 0x5, 0x40]}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000a00)={r11, 0x100000000, 0x8}) 483.368446ms ago: executing program 5 (id=6406): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x41}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x108) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x52}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @mcast1, 0x82}, 0x1c) 441.898556ms ago: executing program 7 (id=6407): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000000)="b86bc0", 0x3) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$kcm(0x10, 0x2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newchain={0x1794, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff2}, {0x10, 0xffe0}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x1764, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x885}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x1}}, @TCA_BASIC_ACT={0x1710, 0x3, [@m_connmark={0x184, 0xd, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40000000, 0xc61, 0x7, 0x1, 0x7}, 0xd3f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa68, 0x8835, 0x79bfd1737f106994, 0x40, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x47, 0xffff1b1b}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x3, 0x8, 0x985, 0xe58d}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x800, 0x4, 0x8, 0xd1}, 0xa82c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x7, 0xd70, 0x6}, 0x1}}]}, {0xab, 0x6, "ba635ab8480407ce2535582228202ef8d7a9f437c3f667b85484b991c5ab7924af69deb0199101d914ff7b78b680bde5f90ca91d3ec0d8f308f62077265146e6e8484760c4a957205ad4f20102c0682808d275a06ff953356f81285f0e2d7f751b2acf20986895b3b938591adf5c7ec275a8080af7eb5f49ddb5918d80a9362f0d32ef6099ca9091b529b9378ba1c6b22d4b6e5400eae6d6cbbbd4348b9ba6ad22f3c0cf16c48c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xb8, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x10, 0x7, 0x1, 0x54}, 0xfffd}}]}, {0x6c, 0x6, "38c6edcf45805fcb2323beb8ad7e369ea4a2fd94d310fb48e98d955f96328871980fdc0c713fee1fe9950e896b0af7ab1b402a9cecc38d41d3e5ae94c625a5c5586ca662db08c907c8a400e3a51073587bbd7c0af7f4539c4c1d87c692291940701aafceda44ce02"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x140, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xc4, 0x0, 0x7, 0x93, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0xef, 0x6, "e72ec08c6cfcd3a2f80bbfb196952b2ea5b39fe53e39d9e6af89dd2e3a547710eab11f43e06dec7031a308ef2f926d528d5b56a83fbee44da88c872b22e8b3d8dd33533127b58b24bb4e384b7862239a67475d398eec641b02b7e43ebc8245d0b13dee41e5364060c78c4e5b8592176097d1c3c4b03c08194a82179f6f3a8df173f7f17f70d8593ee4f8761c7895cd51b82c845db3e10a57d5e77d32574a53f37f15fa57b077400e9731e865a573d2f6fa72c6d9f5735e8940922f842a3d5f8c3f93f358f56369c2619ecae48e64f066d0443bee390fd4a339dc504d9344606a08bf6f102b7ac15e169d88"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x210, 0xb, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x584, 0x1ff, 0x8, 0x9, 0x2}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x40, 0x0, 0x7ff, 0x91a}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x7, 0x0, 0x4, 0xffffffff}, 0x6, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x1, 0x4, 0x0, 0x4a}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x0, 0xc1d0, 0xe06}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x789, 0x5, 0x1, 0x7}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x6, 0x8, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x1, 0x101, 0x4a}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x2, 0xb3, 0xff}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa091, 0x9, 0x2, 0xffffffb0, 0x6}, 0x4, r9}}]}, {0xa1, 0x6, "1a0b01d8b25fc80f86de436fcc5843f825b335c0c2f9748acc95c5af571d91bb6ab8fcbc04d8ffa41c61bcb3154c717a9e60ca5283040febb34c4edf4b8326a066b70b6f246af871eb4e508459306b3c0d072bcc65c13e27e5771f88bce615e85ba50fea8fcf10b17d63ecc37560eb1046ffa760ae98698a8bca993ceae485eb20f86325bab72bcec45de7a82a57ed7c1ee422e78995eba173cabd74cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_ife={0xa4, 0x1e, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffffff80, 0x2, 0x20000000, 0xa, 0x3d3d}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}, {0x51, 0x6, "b6a8a5f57d80836940ddcc114b96ade659fe65fa5d5794fbbcb2d1626d20c5774a90d762bdfd3223dd862d7bf748f0eba674a64022cd9111f84ef96097e185dc7699299a141ae71ae91aa656b9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x1070, 0x2, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x970, 0x3, 0x1, 0x6, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x6c, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x43, 0x6, "cab82a63200a69e11af9bc75c0deb84b497ac3a158045aefbf45c55c4a802e1138aa15950b075354d7b1ce50863dc312d5a4d360450401a5c5522532bf61f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}]}, 0x1794}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 358.889917ms ago: executing program 2 (id=6408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$nfc_llcp(r6, 0x118, 0x1, &(0x7f00000000c0)=""/100, 0x64) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001194797267db0856fefbdf2500007400", @ANYRES32=r1, @ANYBLOB="820a080000000000280012800b00010062726964676500001800028005001900020000000c0023000f00000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 307.865396ms ago: executing program 6 (id=6409): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xe8, 0x8, 0xffffffffffffff86, &(0x7f0000000580)}}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r6, &(0x7f00000007c0), 0x0}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r3, 0x4) (async, rerun: 64) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000200)) (async, rerun: 64) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', r2, @sched_cls=0x2f, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r13, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (async) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 298.320426ms ago: executing program 5 (id=6410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x10d00, 0xf) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x7fffffff, 0x6, 0x765490dd, 0x204, r1, 0x1000, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0xe}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x20}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r11, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r11, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfd68, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfd68, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x1, 0x0, 0x9, 0x50, 0x1}, @ldst={0x2, 0x3, 0x6, 0x4, 0x3, 0x20}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0x10000, 0x5f, &(0x7f00000002c0)=""/95, 0x41100, 0x62, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000340)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xf, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r5, r7, r8, r9, 0x1, r10, r11, r12, r1], &(0x7f0000000700)=[{0x5, 0x3, 0x3, 0x4}, {0x2, 0x2, 0x4}, {0x5, 0x2, 0xa, 0x6}, {0x2, 0x2, 0x5, 0x1}, {0x0, 0x3, 0xd, 0x3}, {0x4, 0x1, 0xe, 0x6}], 0x10, 0x7}, 0x94) 229.933744ms ago: executing program 2 (id=6411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff1, 0xb}, {0xfff3, 0xd}, {0xffe0, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc5}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x3}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x6}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x64}, 0x1, 0x0, 0x0, 0x280000c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0xd8, 0x19, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x80, 0x10, 0x5, 0xfe, 0x2, 0xfd, 0xe, 0x800}, [@RTA_DST={0x8, 0x1, {0x30000, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0xd}, {0x8}, {0x102f}, {0x100}, {0x3, 0x0, 0x1}, {0x3ff}, {0x2, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x9}, {0x81, 0x0, 0x1}, {0x7}, {0x5, 0x0, 0x1}, {0x258, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1ff}, {0xf088, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0x11c1, 0x0, 0x1}, {0x3}, {0x100, 0x0, 0x1}, {0x60dd}, {0x10, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0x26e}, {0x0, 0x0, 0x1}, {0xf1ae6}, {0x1, 0x0, 0x1}, {0x4}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x0, r4}}, @RTA_VIA={0x14, 0x12, {0x2b, "2ea82108364c759cd401b06b1730"}}, @RTA_DST={0x8, 0x1, {0x7ff, 0x0, 0x1}}]}, 0xd8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 138.53016ms ago: executing program 5 (id=6412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000000c0)={0x6a4, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_PEER_MEASUREMENTS={0x668, 0x111, 0x0, 0x1, {0x664, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x125}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb31}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x500, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7b19}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbe06}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x364, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x23eb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3ff}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10001}]}, 0x6a4}, 0x1, 0x0, 0x0, 0xc000}, 0x8010) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r1, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x29}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95b76c00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000c80), 0x400) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000cc0)=0x6, 0x4) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x1402, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4024}, 0x20040080) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x71}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f00000010c0)={'sit0\x00', &(0x7f0000001000)={@private=0xa010101, 0x1, 0x0, 0x80, 0x0, [{@remote}, {@empty}, {@broadcast}, {@empty}, {@empty}, {@remote}, {@local}, {@multicast1}]}}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x90, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "0600120bca62a2402673ab834126c311"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "cdd7104d9b356dc31f86eed4d7ff7e6a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "69bff51abd23d08d8e4a5ccf992424b3"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "622955c2e708eb447f6cce8bac04cf63"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "10915fe1c5ff850751189985b29d9511"}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4050) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000001280)={@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "d0d15def99080afbfe40d3635ff9bfac0226050bae3b119285bc707b445e6eaf", 0x4, 0xec, 0x5, 0x1}, 0x3c) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f00000012c0), 0x4) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000001300)={0x73, 0x5, 0x2, 0x1, 0x2}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000001700)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f00000014c0)={0x1f4, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x174, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xaa5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x800) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0xffffffffffffffff, 0x7fffffff, 0x8}, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001780)={"fd38a2de3d7eca88b1e155d1d5213780", 0x0, 0x0, {0x6, 0x672f}, {0xfffffffffffffffe, 0x5}, 0x1000, [0x200, 0xfffffffffffffffb, 0x8, 0x8, 0x7, 0x6, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x80000000, 0x9, 0x7ff, 0x7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r12, 0x40089416, &(0x7f0000001880)=r13) 137.208191ms ago: executing program 6 (id=6413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'batadv0\x00', {0x1}, 0x2854}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a400000066016c6a9293454200010104000000000000000002000000440001801400018008000100ac1414bb08000200ac0314bb2c00018014000300fe8000000000000000000000000000bb14000400ff0100000000000000000000000000012400028014000180080001000000000008000200ac1414000c000280050001000000000008000740004c5c80060002004e220000060001000000000008000100e0000002"], 0xa4}}, 0x0) 136.639165ms ago: executing program 7 (id=6414): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x20075}, 0x38) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000000000000009801940000000000000000000000000080000000000000000002a769de40735b5600"/53, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 16.435537ms ago: executing program 2 (id=6415): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000001900)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 0s ago: executing program 7 (id=6416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0xd6]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x9000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x8, 0x6}, {0x3, 0x2}, {0x0, 0x6}, {0xa, 0x2}], "6a23aa519b87df45"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x73, 0x5}, {0x9, 0x3}, {0x5, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0x6, 0x3}, {0x6}, {0xb, 0x7}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x40}, {0x81, 0x3}, {0xb8, 0x7}, {0x6, 0x1}, {0x7, 0x5}, {0x5, 0x7}, {0xc9}, {0xdd, 0x1}, {0x9, 0x3}], "e66fc4ecee376f74"}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) kernel console output (not intermixed with test programs): ble to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.979055][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 522.042245][T23277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.051708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.117190][T23280] can: request_module (can-proto-0) failed. [ 522.184524][T23278] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4640'. [ 522.328880][T23299] tunl0: Caught tx_queue_len zero misconfig [ 522.525609][T23307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4646'. [ 522.787053][T23312] team0: Device ip6gre2 is of different type [ 522.859455][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.230417][T23324] validate_nla: 4 callbacks suppressed [ 523.230439][T23324] netlink: 'syz.4.4653': attribute type 13 has an invalid length. [ 523.317225][T23324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.407160][T23324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.559942][T23352] syzkaller0: entered promiscuous mode [ 523.566044][T23352] syzkaller0: entered allmulticast mode [ 523.764999][T23366] netlink: 'syz.4.4665': attribute type 10 has an invalid length. [ 523.803450][T23366] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 523.899310][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.134987][T23387] netlink: zone id is out of range [ 524.140568][T23387] netlink: zone id is out of range [ 524.348202][T23394] netlink: 'syz.4.4675': attribute type 29 has an invalid length. [ 524.359365][T23394] netlink: 'syz.4.4675': attribute type 29 has an invalid length. [ 524.371319][T23394] tunl0: Caught tx_queue_len zero misconfig [ 524.618827][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.900262][T23410] netlink: 'syz.4.4681': attribute type 1 has an invalid length. [ 524.938072][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.241899][T23435] syzkaller0: entered promiscuous mode [ 525.249767][T23435] syzkaller0: entered allmulticast mode [ 525.274792][T23435] __nla_validate_parse: 10 callbacks suppressed [ 525.274811][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4689'. [ 525.309310][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4689'. [ 525.551283][T23453] netlink: 'syz.5.4691': attribute type 15 has an invalid length. [ 525.566317][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4691'. [ 525.576435][T23443] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4693'. [ 525.587234][T23443] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4693'. [ 525.607349][T23448] ip6tnl0: Caught tx_queue_len zero misconfig [ 525.653883][ T83] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 525.664475][T23453] netlink: 'syz.5.4691': attribute type 15 has an invalid length. [ 525.674269][ T83] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 525.690680][ T83] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 525.708459][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4691'. [ 525.722086][ T83] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 525.998211][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 526.006297][ C1] lec:lec_tx_timeout: lec0 [ 526.011161][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 526.534833][T23507] netlink: 'syz.3.4704': attribute type 1 has an invalid length. [ 526.640985][T23512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4705'. [ 526.661362][T23515] netlink: 'syz.3.4707': attribute type 5 has an invalid length. [ 526.732985][T23518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4708'. [ 526.752190][T23524] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4710'. [ 526.766851][T23524] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4710'. [ 526.933723][T23534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 527.023146][ T5910] net_ratelimit: 5 callbacks suppressed [ 527.023167][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.059484][T23542] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 527.229914][T23553] netlink: 'syz.4.4721': attribute type 1 has an invalid length. [ 527.247410][T23549] xfrm1: entered promiscuous mode [ 527.268194][T23549] xfrm1: entered allmulticast mode [ 527.598424][T23581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.660920][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.772384][ T30] audit: type=1800 audit(1773101776.449:6): pid=23599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4733" name="memory.events" dev="tmpfs" ino=1986 res=0 errno=0 [ 527.848264][ T30] audit: type=1804 audit(1773101776.489:7): pid=23599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4733" name="/newroot/387/memory.events" dev="tmpfs" ino=1986 res=1 errno=0 [ 528.038736][T23611] bond5: option resend_igmp: invalid value (32767) [ 528.054403][T23611] bond5: option resend_igmp: allowed values 0 - 255 [ 528.063031][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.077563][T23611] bond5 (unregistering): Released all slaves [ 528.103491][T23619] IPv6: NLM_F_CREATE should be specified when creating new route [ 528.177117][T23622] sctp: [Deprecated]: syz.4.4740 (pid 23622) Use of int in maxseg socket option. [ 528.177117][T23622] Use struct sctp_assoc_value instead [ 528.235873][T23614] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 528.248564][T23614] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 528.301017][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.339855][T23617] bond7: (slave bridge5): Enslaving as an active interface with a down link [ 528.369978][T23625] bond7: (slave gretap2): making interface the new active one [ 528.388091][T23625] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 528.448725][T23637] vlan1: entered allmulticast mode [ 528.454425][T23637] gretap0: entered allmulticast mode [ 528.552589][T23644] xt_hashlimit: size too large, truncated to 1048576 [ 528.595778][T23645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.622554][T23648] ip6t_srh: unknown srh invflags 4000 [ 528.829193][T23655] ip6tnl0: Caught tx_queue_len zero misconfig [ 528.892293][T23658] validate_nla: 4 callbacks suppressed [ 528.892308][T23658] netlink: 'syz.5.4750': attribute type 11 has an invalid length. [ 528.910129][T23658] netlink: 'syz.5.4750': attribute type 11 has an invalid length. [ 528.919004][T23658] netlink: 'syz.5.4750': attribute type 64 has an invalid length. [ 529.108309][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.139017][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.698306][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.178401][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.328542][T23632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.537286][T23685] __nla_validate_parse: 86 callbacks suppressed [ 531.537308][T23685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4759'. [ 531.635277][T23685] syzkaller0: entered promiscuous mode [ 531.641825][T23685] syzkaller0: entered allmulticast mode [ 531.797186][T23702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4762'. [ 532.142595][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 532.150865][ C1] lec:lec_tx_timeout: lec0 [ 532.156386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 532.228452][ T5910] net_ratelimit: 1 callbacks suppressed [ 532.228474][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.258096][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.270670][T23691] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 533.281570][T23691] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 533.291846][T23691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 533.450854][T23710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4764'. [ 533.468885][T23712] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 533.727538][T23730] netlink: 6264 bytes leftover after parsing attributes in process `syz.3.4774'. [ 533.740977][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.769642][T23730] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 533.969742][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 533.983975][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.000361][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.030203][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.049673][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.160978][T23748] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4779'. [ 534.299435][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.308775][T23751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4780'. [ 534.383358][T23757] netlink: 'syz.4.4781': attribute type 6 has an invalid length. [ 534.541785][T23765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4783'. [ 534.660958][T23742] chnl_net:caif_netlink_parms(): no params data found [ 534.913193][T23742] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.924551][T23742] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.949785][T23742] bridge_slave_0: entered allmulticast mode [ 534.959435][T23742] bridge_slave_0: entered promiscuous mode [ 534.972698][T23742] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.980763][T23742] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.988130][T23742] bridge_slave_1: entered allmulticast mode [ 534.996029][T23742] bridge_slave_1: entered promiscuous mode [ 535.097493][T23742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.128604][T23742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.240399][T23742] team0: Port device team_slave_0 added [ 535.267277][T23798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4793'. [ 535.272607][T23742] team0: Port device team_slave_1 added [ 535.284172][T23801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4794'. [ 535.341183][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.416772][T23742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.445804][T23742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.509067][T23742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.529599][T23742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.536705][T23742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.574705][T23742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.613990][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4800'. [ 535.629883][T23815] veth0_macvtap: left promiscuous mode [ 535.644473][T23822] netlink: 'syz.2.4802': attribute type 2 has an invalid length. [ 535.686852][T23812] xt_hashlimit: size too large, truncated to 1048576 [ 535.880221][T23742] hsr_slave_0: entered promiscuous mode [ 535.889111][T23742] hsr_slave_1: entered promiscuous mode [ 535.896354][T23742] debugfs: 'hsr0' already exists in 'hsr' [ 535.938142][T23742] Cannot create hsr debugfs directory [ 536.071738][T23845] netlink: 'syz.4.4806': attribute type 30 has an invalid length. [ 536.146571][ T5838] Bluetooth: hci6: command tx timeout [ 536.333173][T23853] netlink: Unknown conntrack attr (0) [ 536.380671][T23850] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 536.422584][T23850] bond8: (slave lo): Enslaving as an active interface with an up link [ 536.446110][T23850] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 536.659488][T23865] __nla_validate_parse: 4 callbacks suppressed [ 536.659508][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4812'. [ 536.823571][T23742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 536.848602][T23742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 536.895580][T23742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 536.904485][T23876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4815'. [ 536.919612][T23874] netlink: 'syz.3.4814': attribute type 1 has an invalid length. [ 536.932258][T23742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.949472][T23876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4815'. [ 536.949675][T23874] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4814'. [ 537.003534][T23883] syz_tun: entered promiscuous mode [ 537.009192][T23883] macvtap0: entered promiscuous mode [ 537.025460][T23883] syz_tun: left promiscuous mode [ 537.155905][T23897] openvswitch: netlink: Key type 106 is out of range max 32 [ 537.185979][T23898] openvswitch: netlink: Key type 106 is out of range max 32 [ 537.286531][T23742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.322891][T23903] vlan1: entered promiscuous mode [ 537.331753][T23903] bridge0: entered promiscuous mode [ 537.382443][T23742] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.407520][T23909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4822'. [ 537.434443][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.441666][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.452516][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.459735][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.625206][T23913] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 537.712352][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4827'. [ 537.735476][T10293] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 537.757643][T10293] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 537.775486][T10293] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 537.785544][T10293] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 537.897776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 537.905930][ C1] lec:lec_tx_timeout: lec0 [ 537.911504][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 537.918102][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.156528][T23742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.218060][ T5838] Bluetooth: hci6: command tx timeout [ 538.388256][T23954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.412384][T23952] syzkaller0: entered promiscuous mode [ 538.419748][T23952] syzkaller0: entered allmulticast mode [ 538.428369][T23954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4835'. [ 538.473752][T23952] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4836'. [ 538.494458][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4836'. [ 538.765470][T23968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4839'. [ 538.869646][T23742] veth0_vlan: entered promiscuous mode [ 538.895845][T23742] veth1_vlan: entered promiscuous mode [ 538.957475][T23742] veth0_macvtap: entered promiscuous mode [ 538.969783][T23975] block nbd2: not configured, cannot reconfigure [ 538.988846][T23742] veth1_macvtap: entered promiscuous mode [ 539.035291][T23742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.081005][T23742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.093377][T23948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.136885][ T8332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.174984][ T8332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.215062][ T8332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.242561][ T8332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.305762][T23990] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 539.376749][T23992] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 539.443037][ T8332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.467156][ T8332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.576276][T24004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.600364][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.609108][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.028213][T24026] netlink: 'syz.3.4855': attribute type 7 has an invalid length. [ 540.061427][T24026] tunl0: entered promiscuous mode [ 540.224804][T24038] veth0: entered promiscuous mode [ 540.281966][T24037] veth0: left promiscuous mode [ 540.298371][ T5838] Bluetooth: hci6: command tx timeout [ 540.802219][ T5896] IPVS: starting estimator thread 0... [ 540.897910][T24075] IPVS: using max 27 ests per chain, 64800 per kthread [ 540.934944][ T9524] nci: nci_rx_work: unknown MT 0x1 [ 542.379472][ T5838] Bluetooth: hci6: command tx timeout [ 542.447402][T24142] bond6: option all_slaves_active: invalid value (222) [ 542.455839][T24142] bond6 (unregistering): Released all slaves [ 542.483760][T24144] lo speed is unknown, defaulting to 1000 [ 542.490386][T24144] lo speed is unknown, defaulting to 1000 [ 542.497013][T24144] lo speed is unknown, defaulting to 1000 [ 542.524044][T24144] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 542.558720][T24144] lo speed is unknown, defaulting to 1000 [ 542.566205][T24144] lo speed is unknown, defaulting to 1000 [ 542.574102][T24144] lo speed is unknown, defaulting to 1000 [ 542.581466][T24144] lo speed is unknown, defaulting to 1000 [ 542.589179][T24144] lo speed is unknown, defaulting to 1000 [ 542.596347][T24144] lo speed is unknown, defaulting to 1000 [ 542.604253][T24144] lo speed is unknown, defaulting to 1000 [ 542.611679][T24144] lo speed is unknown, defaulting to 1000 [ 542.619568][T24144] lo speed is unknown, defaulting to 1000 [ 542.627156][T24144] lo speed is unknown, defaulting to 1000 [ 542.917965][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 542.926066][ C1] lec:lec_tx_timeout: lec0 [ 542.930703][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 543.418096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.704477][T24068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.857100][T24149] netlink: 'syz.6.4889': attribute type 11 has an invalid length. [ 543.866756][T24149] netlink: 'syz.6.4889': attribute type 11 has an invalid length. [ 543.875872][T24149] __nla_validate_parse: 22 callbacks suppressed [ 543.875891][T24149] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4889'. [ 544.324216][T24183] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 544.459315][T24185] syzkaller0: entered promiscuous mode [ 544.464877][T24185] syzkaller0: entered allmulticast mode [ 544.483861][ T30] audit: type=1804 audit(1773101793.159:8): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4900" name="/newroot/429/cgroup.controllers" dev="tmpfs" ino=2201 res=1 errno=0 [ 544.515217][ T30] audit: type=1800 audit(1773101793.159:9): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4900" name="cgroup.controllers" dev="tmpfs" ino=2201 res=0 errno=0 [ 544.671531][T24200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4901'. [ 544.788593][T24210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4904'. [ 544.919731][T24209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4901'. [ 545.035059][T24209] nbd: device at index 64 is going down [ 545.306121][T23641] udevd[23641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 545.566550][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4913'. [ 545.701659][T24250] syzkaller0: entered promiscuous mode [ 545.714019][T24250] syzkaller0: entered allmulticast mode [ 545.851089][T24261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4915'. [ 545.992417][T24273] netlink: 'syz.5.4919': attribute type 1 has an invalid length. [ 546.151891][T24278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.236098][T24284] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4923'. [ 546.866008][T24327] syzkaller1: entered promiscuous mode [ 546.924073][T24327] syzkaller1: entered allmulticast mode [ 547.188123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.196637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.501382][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.835778][T24386] xt_cgroup: xt_cgroup: no path or classid specified [ 547.937783][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 547.945865][ C1] lec:lec_tx_timeout: lec0 [ 547.950883][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 548.087073][T24399] netlink: 'syz.4.4950': attribute type 1 has an invalid length. [ 548.117956][T24400] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4951'. [ 548.163125][T24399] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 548.191578][T24399] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 548.206256][T24399] bond7: (slave ip6gre1): making interface the new active one [ 548.233021][T24399] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 548.276433][T24406] netlink: 'syz.6.4952': attribute type 4 has an invalid length. [ 548.322659][T24406] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4952'. [ 548.349371][T24407] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4952'. [ 548.626838][T24422] macvlan0: entered promiscuous mode [ 548.734500][T24422] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 548.760995][T24422] bond1 (unregistering): Released all slaves [ 548.781624][T24428] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 548.922740][T24430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 549.061458][T24445] netlink: 'syz.2.4961': attribute type 1 has an invalid length. [ 549.252365][T24458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.368203][T24463] __nla_validate_parse: 1 callbacks suppressed [ 549.368224][T24463] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4967'. [ 549.404463][T24467] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4969'. [ 549.652841][T24481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4974'. [ 549.709153][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4974'. [ 549.720744][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4975'. [ 549.730009][T24484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4974'. [ 549.790090][T24476] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.797630][T24476] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.888657][T24476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.902380][T24476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.036246][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.054513][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.116027][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.160563][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.204112][T24496] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 550.321127][T24501] Cannot find add_set index 0 as target [ 550.351595][T24504] sctp: [Deprecated]: syz.5.4982 (pid 24504) Use of int in max_burst socket option deprecated. [ 550.351595][T24504] Use struct sctp_assoc_value instead [ 550.802948][T24531] netlink: 'syz.6.4990': attribute type 29 has an invalid length. [ 550.813050][T24531] netlink: 'syz.6.4990': attribute type 29 has an invalid length. [ 550.824118][T24531] netlink: 'syz.6.4990': attribute type 29 has an invalid length. [ 550.838387][T24531] netlink: 'syz.6.4990': attribute type 29 has an invalid length. [ 550.848637][T24531] netlink: 'syz.6.4990': attribute type 29 has an invalid length. [ 550.864753][T24531] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 550.903489][T24533] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4991'. [ 550.913340][T24533] netlink: 'syz.2.4991': attribute type 1 has an invalid length. [ 550.966473][T24533] bond6: entered promiscuous mode [ 550.972428][T24533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 550.999202][T24537] bond6: (slave bridge4): making interface the new active one [ 551.006711][T24537] bridge4: entered promiscuous mode [ 551.012888][T24537] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 551.082599][T24541] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4993'. [ 551.257372][T24546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4995'. [ 551.300044][T24546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4995'. [ 551.539598][T24558] dvmrp0: entered allmulticast mode [ 552.272251][T24617] bridge0: port 1(veth0_to_bridge) entered blocking state [ 552.381640][T24617] bridge0: port 1(veth0_to_bridge) entered disabled state [ 552.449002][T24617] veth0_to_bridge: entered allmulticast mode [ 552.492173][T24617] veth0_to_bridge: entered promiscuous mode [ 552.546542][T24617] bridge0: port 1(veth0_to_bridge) entered blocking state [ 552.553876][T24617] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 552.936268][ T1211] IPVS: starting estimator thread 0... [ 552.957970][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 552.966059][ C1] lec:lec_tx_timeout: lec0 [ 552.970724][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 553.057994][T24643] IPVS: using max 28 ests per chain, 67200 per kthread [ 553.995347][T10292] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 554.672702][T24678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.769094][T24707] __nla_validate_parse: 4 callbacks suppressed [ 554.769115][T24707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5031'. [ 554.900041][T24712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5033'. [ 554.982201][T24716] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5034'. [ 555.000905][T24721] veth0: entered promiscuous mode [ 555.013596][T24721] veth0: left promiscuous mode [ 555.185858][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5039'. [ 555.210110][T24734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.232079][T24734] netlink: 'syz.6.5039': attribute type 10 has an invalid length. [ 555.254961][T24734] team0: Device vxcan1 is of different type [ 555.388382][T24745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5043'. [ 555.428058][T24745] netlink: 'syz.3.5043': attribute type 5 has an invalid length. [ 555.448352][T24745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5043'. [ 555.497578][T24745] geneve2: entered promiscuous mode [ 555.508551][T24745] geneve2: entered allmulticast mode [ 555.584516][T24759] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5048'. [ 555.736384][T24765] IPv6: sit1: Disabled Multicast RS [ 555.756555][T24768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5050'. [ 555.941252][T24777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5053'. [ 555.954109][T24779] netlink: 'syz.6.5054': attribute type 1 has an invalid length. [ 555.967623][T24777] vlan2: entered allmulticast mode [ 555.972898][T24779] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5054'. [ 556.013526][T24777] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 556.559586][T24771] netlink: 'syz.2.5051': attribute type 21 has an invalid length. [ 556.621886][T24771] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 556.676191][T24813] sctp: [Deprecated]: syz.3.5063 (pid 24813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.676191][T24813] Use struct sctp_sack_info instead [ 556.757487][T24813] netlink: 'syz.3.5063': attribute type 1 has an invalid length. [ 557.036470][T24829] veth0_to_bond: entered allmulticast mode [ 557.062900][T24831] netlink: 'syz.4.5070': attribute type 21 has an invalid length. [ 557.106095][T24836] netlink: 'syz.4.5070': attribute type 21 has an invalid length. [ 557.121979][ T6410] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 557.189201][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.373668][T24851] delete_channel: no stack [ 557.817020][T24871] netlink: 'syz.4.5083': attribute type 23 has an invalid length. [ 557.898495][T24871] lo: Caught tx_queue_len zero misconfig [ 557.977951][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 557.986097][ C1] lec:lec_tx_timeout: lec0 [ 557.991096][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 558.030494][T24876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.300582][ T5838] block nbd2: Receive control failed (result -32) [ 558.506846][T24904] syzkaller0: entered promiscuous mode [ 558.512570][T24904] syzkaller0: entered allmulticast mode [ 558.534252][T24905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.543630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.689798][T24904] netlink: 'syz.4.5095': attribute type 2 has an invalid length. [ 558.704728][T24904] vþ: entered promiscuous mode [ 558.884516][T24916] delete_channel: no stack [ 558.900248][T24916] delete_channel: no stack [ 559.258229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.456424][T24951] 0·: renamed from hsr_slave_1 (while UP) [ 559.514879][T24951] 0·: entered allmulticast mode [ 559.575085][T24951] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 559.864463][T24976] __nla_validate_parse: 23 callbacks suppressed [ 559.864486][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5115'. [ 559.921428][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.939113][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.965113][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.976682][T24985] block nbd0: reconnected socket [ 559.976811][ T5838] block nbd0: Receive control failed (result -107) [ 560.032347][T24984] tipc: Started in network mode [ 560.047319][T24984] tipc: Node identity faca1de86b37, cluster identity 4711 [ 560.057583][T24984] tipc: Enabled bearer , priority 0 [ 560.198838][T24994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5116'. [ 560.221703][T24981] net_ratelimit: 356 callbacks suppressed [ 560.221725][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.236655][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.245232][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.255285][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.267119][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.269127][ T6420] team0: Port device ip6gre2 removed [ 560.290319][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.301637][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.305783][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5118'. [ 560.310594][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.310831][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.310982][T24981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.693850][ T6420] bond7 (unregistering): (slave geneve2): Releasing active interface [ 560.913938][ T6420] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 561.102916][ T6420] bond1 (unregistering): Released all slaves [ 561.119607][ T6420] bond2 (unregistering): Released all slaves [ 561.135191][ T6420] bond3 (unregistering): Released all slaves [ 561.161573][ T6420] bond0 (unregistering): Released all slaves [ 561.179986][ T6420] bond4 (unregistering): Released all slaves [ 561.200946][ T6420] bond5 (unregistering): Released all slaves [ 561.219542][ T6420] bond6 (unregistering): Released all slaves [ 561.244539][ T6420] bond7 (unregistering): Released all slaves [ 561.266407][T24984] syzkaller0: MTU too low for tipc bearer [ 561.277145][T24984] tipc: Disabling bearer [ 561.307453][ T5910] tipc: Node number set to 2449284584 [ 561.394735][ T6420] tipc: Left network mode [ 561.476125][T25028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 561.483419][T25028] IPv6: NLM_F_CREATE should be set when creating new route [ 561.573517][T25031] netlink: 'syz.6.5125': attribute type 17 has an invalid length. [ 561.610442][T25031] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5125'. [ 561.638919][T25031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5125'. [ 561.758864][T25028] netlink: 'syz.2.5124': attribute type 5 has an invalid length. [ 561.811047][T25039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5128'. [ 561.857687][T25039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5128'. [ 561.976387][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5130'. [ 562.005613][T25045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5130'. [ 562.063097][T25050] netlink: 'syz.3.5132': attribute type 25 has an invalid length. [ 562.071487][T25051] netlink: 'syz.3.5132': attribute type 25 has an invalid length. [ 562.171969][T25047] veth5: entered allmulticast mode [ 562.446101][T25077] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5139'. [ 562.997846][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 563.005968][ C1] lec:lec_tx_timeout: lec0 [ 563.010809][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 563.039987][ T6420] hsr_slave_0: left promiscuous mode [ 563.046463][ T6420] hsr_slave_1: left promiscuous mode [ 563.133260][ T6420] pim6reg (unregistering): left allmulticast mode [ 563.607642][ T6420] lo (unregistering): left allmulticast mode [ 563.813177][T25125] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 564.283215][T25157] xt_check_table_hooks: 23 callbacks suppressed [ 564.283236][T25157] x_tables: duplicate underflow at hook 1 [ 564.607330][T25165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.716623][T25182] sctp: [Deprecated]: syz.2.5168 (pid 25182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.716623][T25182] Use struct sctp_sack_info instead [ 564.829768][T25161] syzkaller0: entered promiscuous mode [ 564.835686][T25161] syzkaller0: entered allmulticast mode [ 564.843828][T25179] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 564.900760][ T6420] IPVS: stop unused estimator thread 0... [ 565.498508][ C1] net_ratelimit: 235 callbacks suppressed [ 565.498532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.535803][T25220] IPVS: persistence engine module ip_vs_pe_À not found [ 566.662975][T25226] netlink: 'syz.6.5175': attribute type 1 has an invalid length. [ 566.699322][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.092017][T25213] pimreg5: entered allmulticast mode [ 567.226048][T25227] bond1: (slave geneve2): making interface the new active one [ 567.234581][T25227] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 567.249964][T25228] __nla_validate_parse: 2 callbacks suppressed [ 567.249982][T25228] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5175'. [ 567.290772][ T9524] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 567.320857][ T9524] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 567.354894][T25239] netlink: 'syz.2.5177': attribute type 5 has an invalid length. [ 567.390782][ T9524] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 567.433905][ T9524] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 567.560260][T25254] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5184'. [ 567.602752][T25254] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 567.697678][T25258] bond9 (unregistering): Released all slaves [ 567.877322][T25270] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 567.969280][T25279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5188'. [ 568.177220][T25287] netlink: 'syz.4.5193': attribute type 30 has an invalid length. [ 568.252909][T25298] netlink: 'syz.4.5193': attribute type 30 has an invalid length. [ 568.292490][T25287] bond9: option arp_missed_max: invalid value (0) [ 568.299455][T25287] bond9: option arp_missed_max: allowed values 1 - 255 [ 568.313684][T25287] bond9 (unregistering): Released all slaves [ 568.425249][T25298] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 568.610437][T25322] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5199'. [ 568.698036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.713974][T25325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5198'. [ 568.807408][T25330] team_slave_1: Caught tx_queue_len zero misconfig [ 568.864205][T25330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5202'. [ 569.078999][T25342] openvswitch: netlink: EtherType 50a is less than min 600 [ 569.099610][T25342] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.5204'. [ 569.111012][T25342] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5204'. [ 569.120147][T25342] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5204'. [ 569.129413][T25342] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5204'. [ 569.151632][T25342] netlink: 'syz.4.5204': attribute type 1 has an invalid length. [ 569.257890][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 569.266055][ C1] lec:lec_tx_timeout: lec0 [ 569.270887][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 569.783781][T25385] netlink: 'syz.6.5217': attribute type 1 has an invalid length. [ 569.817199][T25385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.843743][T25385] bond2: (slave bridge2): making interface the new active one [ 569.852564][T25385] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 569.912157][T25387] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 570.016175][T25391] IPVS: set_ctl: invalid protocol: 76 224.0.0.1:20002 [ 570.310629][T25411] netlink: 'syz.5.5223': attribute type 39 has an invalid length. [ 570.335936][T25412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.345950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.434551][T25416] netlink: 'syz.6.5224': attribute type 9 has an invalid length. [ 570.492727][T25422] tipc: Enabled bearer , priority 14 [ 570.949944][T25433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.059433][T25433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.234310][T25465] netlink: 'syz.4.5237': attribute type 8 has an invalid length. [ 571.246718][T25466] netlink: 'syz.2.5238': attribute type 1 has an invalid length. [ 572.757934][T25527] syzkaller0: entered promiscuous mode [ 572.773535][T25527] syzkaller0: entered allmulticast mode [ 572.830653][T25531] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 573.448269][T25548] __nla_validate_parse: 10 callbacks suppressed [ 573.448293][T25548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5262'. [ 573.626530][T25562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5263'. [ 573.691141][T25562] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5263'. [ 573.769397][T25569] netlink: 'syz.5.5268': attribute type 21 has an invalid length. [ 573.781720][T25562] veth3: entered promiscuous mode [ 573.791335][T25569] netlink: 'syz.5.5268': attribute type 1 has an invalid length. [ 573.828182][T25569] Unsupported ieee802154 address type: 0 [ 574.185917][T25600] netlink: 'syz.5.5275': attribute type 1 has an invalid length. [ 574.194754][T25596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5276'. [ 574.210004][T25601] sctp: [Deprecated]: syz.2.5273 (pid 25601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.210004][T25601] Use struct sctp_sack_info instead [ 574.224703][T25596] netlink: 'syz.6.5276': attribute type 30 has an invalid length. [ 574.269382][T25601] IPv6: NLM_F_REPLACE set, but no existing node found! [ 574.282441][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5276'. [ 574.319685][T25605] netlink: 'syz.6.5276': attribute type 30 has an invalid length. [ 574.347393][ T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.358779][ T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.402379][ T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.433895][ T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.519360][T25611] netlink: 'syz.2.5278': attribute type 11 has an invalid length. [ 574.635323][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5280'. [ 574.874563][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5285'. [ 574.892824][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5285'. [ 575.017759][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 575.025930][ C1] lec:lec_tx_timeout: lec0 [ 575.030844][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 575.465949][T25666] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.649530][T25674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5298'. [ 575.744508][T25679] netlink: 'syz.5.5299': attribute type 11 has an invalid length. [ 575.800194][T25683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.817228][T25679] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.5299'. [ 575.984779][T25694] netlink: 'syz.2.5305': attribute type 2 has an invalid length. [ 576.242525][T25704] vlan3: entered allmulticast mode [ 576.260423][T25704] bridge0: entered allmulticast mode [ 576.276445][T25704] bridge0: port 3(vlan3) entered blocking state [ 576.314051][T25704] bridge0: port 3(vlan3) entered disabled state [ 576.660650][T25733] netlink: 'syz.3.5318': attribute type 3 has an invalid length. [ 576.677429][T25734] team0: Device gtp1 is up. Set it down before adding it as a team port [ 576.740139][T25733] netlink: 'syz.3.5318': attribute type 3 has an invalid length. [ 576.768205][T25733] netlink: 'syz.3.5318': attribute type 3 has an invalid length. [ 576.788461][T25733] netlink: 'syz.3.5318': attribute type 3 has an invalid length. [ 576.865464][T25742] ip6t_srh: unknown srh match flags 4000 [ 576.872257][T25742] "syz.4.5321" (25742) uses obsolete ecb(arc4) skcipher [ 576.886145][T25734] team0: Device gtp1 is up. Set it down before adding it as a team port [ 577.039974][T25734] team0: Device gtp1 is up. Set it down before adding it as a team port [ 577.094717][T25753] Cannot find add_set index 2 as target [ 577.139243][T25734] team0: Device gtp1 is up. Set it down before adding it as a team port [ 577.216067][T25757] tipc: Enabled bearer , priority 0 [ 577.233729][T25734] team0: Device gtp1 is up. Set it down before adding it as a team port [ 577.298986][T25757] syzkaller0: entered promiscuous mode [ 577.304715][T25757] syzkaller0: entered allmulticast mode [ 577.332701][T25757] tipc: Resetting bearer [ 577.358777][T25734] team0: Device gtp1 is up. Set it down before adding it as a team port [ 577.386341][T25756] tipc: Resetting bearer [ 577.431360][T25756] tipc: Disabling bearer [ 577.480354][T25734] team0: Device gtp1 is up. Set it down before adding it as a team port [ 577.734373][T25774] Cannot find set identified by id 65534 to match [ 577.757220][T25774] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 577.768397][T25781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.162052][T25799] "syz.6.5341" (25799) uses obsolete ecb(arc4) skcipher [ 578.468687][T25818] bond8: (slave lo): Releasing backup interface [ 578.499153][T25818] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 578.576960][T25818] bridge_slave_0: left allmulticast mode [ 578.585366][T25818] bridge_slave_0: left promiscuous mode [ 578.600688][T25818] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.656136][T25818] bridge_slave_1: left allmulticast mode [ 578.670272][T25818] bridge_slave_1: left promiscuous mode [ 578.684992][T25818] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.739871][T25818] bond0: (slave bond_slave_0): Releasing backup interface [ 578.786297][T25818] bond0: (slave bond_slave_1): Releasing backup interface [ 578.893591][T25818] team0: Port device team_slave_0 removed [ 578.940401][T25818] team0: Port device team_slave_1 removed [ 578.949205][T25818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.974163][T25818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.987432][T25818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 579.048323][T25822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.069208][T25822] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 579.331699][T25850] validate_nla: 70 callbacks suppressed [ 579.331724][T25850] netlink: 'syz.2.5352': attribute type 3 has an invalid length. [ 579.703132][T25876] __nla_validate_parse: 14 callbacks suppressed [ 579.703152][T25876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5361'. [ 579.735366][T25876] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5361'. [ 579.746481][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5361'. [ 579.757640][T25876] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5361'. [ 579.772523][T25876] netlink: 'syz.3.5361': attribute type 3 has an invalid length. [ 579.791183][T25876] netlink: 'syz.3.5361': attribute type 2 has an invalid length. [ 579.799538][T25876] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5361'. [ 579.847305][T25882] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5363'. [ 579.933659][T25888] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 580.156319][T25898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5369'. [ 580.305256][T25907] syzkaller1: entered promiscuous mode [ 580.311043][T25907] syzkaller1: entered allmulticast mode [ 580.733095][T25937] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5376'. [ 580.777802][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 580.785910][ C1] lec:lec_tx_timeout: lec0 [ 580.790979][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 580.883933][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5382'. [ 580.894011][T25942] netlink: 'syz.5.5382': attribute type 1 has an invalid length. [ 580.920607][T25942] netlink: 'syz.5.5382': attribute type 2 has an invalid length. [ 580.960503][T25947] bond0: Caught tx_queue_len zero misconfig [ 581.110028][T25956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5388'. [ 581.217081][T25954] bond10: option resend_igmp: invalid value (32767) [ 581.266390][T25954] bond10: option resend_igmp: allowed values 0 - 255 [ 581.322237][T25954] bond10 (unregistering): Released all slaves [ 581.374025][T25959] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 582.291983][T26025] xt_hashlimit: size too large, truncated to 1048576 [ 582.302422][T26022] syzkaller0: entered promiscuous mode [ 582.308223][T26022] syzkaller0: entered allmulticast mode [ 582.687981][T26047] openvswitch: netlink: Flow key attr not present in new flow. [ 582.918688][T26055] netlink: 'syz.3.5414': attribute type 1 has an invalid length. [ 583.300706][T26078] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 584.035687][T26118] netlink: 'syz.6.5429': attribute type 10 has an invalid length. [ 584.473136][T26118] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 584.712527][T26128] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 584.824596][T26137] netlink: 'syz.2.5436': attribute type 1 has an invalid length. [ 584.841102][T26136] __nla_validate_parse: 11 callbacks suppressed [ 584.841120][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5436'. [ 584.881114][T26139] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5437'. [ 584.916691][T26137] bond7: entered promiscuous mode [ 584.923498][T26137] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.010690][T26136] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.029820][T26136] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 585.050402][T26136] bond7: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 585.063544][T26136] bond7: (slave vcan0): making interface the new active one [ 585.071794][T26136] vcan0: entered promiscuous mode [ 585.082676][T26136] bond7: (slave vcan0): Enslaving as an active interface with an up link [ 585.118271][T26145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5438'. [ 585.253150][T26161] nftables ruleset with unbound chain [ 585.301768][T26148] IPVS: set_ctl: invalid protocol: 227 255.255.255.255:20001 [ 585.399211][T26167] syzkaller1: entered promiscuous mode [ 585.408165][T26167] syzkaller1: entered allmulticast mode [ 585.592091][T26173] bond11: Removing last arp target with arp_interval on [ 585.608889][T26178] netlink: 'syz.6.5448': attribute type 29 has an invalid length. [ 585.667673][T26179] netlink: 'syz.6.5448': attribute type 29 has an invalid length. [ 585.720517][T26178] netlink: 500 bytes leftover after parsing attributes in process `syz.6.5448'. [ 585.817784][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 585.825881][ C1] lec:lec_tx_timeout: lec0 [ 585.830695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 585.960869][ T5842] block nbd5: Receive control failed (result -32) [ 586.127259][T26202] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5453'. [ 586.430876][T26219] syz_tun: refused to change device tx_queue_len [ 586.675269][T26230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5461'. [ 586.710598][T26230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5461'. [ 587.091584][T26242] netlink: 'syz.5.5463': attribute type 3 has an invalid length. [ 587.118696][T26242] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5463'. [ 587.171680][T26244] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 587.198794][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5464'. [ 587.208628][T26247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5465'. [ 587.233371][T26244] bond3 (unregistering): Released all slaves [ 587.365653][T26247] vxcan0: entered allmulticast mode [ 587.562160][T26264] tipc: Started in network mode [ 587.567190][T26264] tipc: Node identity 1ed6d16bfaec, cluster identity 4711 [ 587.602884][T26264] tipc: Enabled bearer , priority 0 [ 587.647111][T26264] +: renamed from syzkaller0 [ 587.699230][T26264] tipc: Disabling bearer [ 587.785370][T26276] netlink: 'syz.6.5471': attribute type 1 has an invalid length. [ 587.859572][T26276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 587.885894][T26276] bond3: (slave geneve3): making interface the new active one [ 587.895018][T26276] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 587.947571][ T6420] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 587.987548][T26283] openvswitch: netlink: IP tunnel dst address not specified [ 588.001201][ T6420] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.075911][T26285] lo speed is unknown, defaulting to 1000 [ 588.082347][ T6420] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.097966][ T6420] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 588.373771][T26306] netlink: 'syz.4.5481': attribute type 15 has an invalid length. [ 588.397688][T26306] netlink: 'syz.4.5481': attribute type 15 has an invalid length. [ 588.414781][ T6420] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 588.437691][ T6420] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 588.733848][ T6420] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 588.755617][ T6420] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 588.905512][T26327] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 588.971758][T26327] syzkaller0: entered promiscuous mode [ 588.977321][T26327] syzkaller0: entered allmulticast mode [ 589.210878][T26345] vlan3: entered promiscuous mode [ 589.216085][T26345] geneve1: entered promiscuous mode [ 589.222611][T26345] vlan3: entered allmulticast mode [ 589.229901][T26345] geneve1: entered allmulticast mode [ 589.236821][T26354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.412369][T26362] netlink: 'syz.6.5495': attribute type 1 has an invalid length. [ 589.458038][T26362] NCSI netlink: No device for ifindex 0 [ 589.707487][T26382] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 589.845598][T26393] netlink: 'syz.4.5505': attribute type 4 has an invalid length. [ 589.891534][T26393] netlink: 'syz.4.5505': attribute type 4 has an invalid length. [ 589.957168][T26393] __nla_validate_parse: 12 callbacks suppressed [ 589.957189][T26393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5505'. [ 589.993627][T26393] netlink: 424 bytes leftover after parsing attributes in process `syz.4.5505'. [ 590.061675][T26402] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5508'. [ 590.146259][T26410] ipt_REJECT: TCP_RESET invalid for non-tcp [ 590.159321][T26411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5511'. [ 590.176118][ T5992] IPVS: starting estimator thread 0... [ 590.204322][T26405] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5509'. [ 590.226001][T26416] sctp: [Deprecated]: syz.4.5512 (pid 26416) Use of int in maxseg socket option. [ 590.226001][T26416] Use struct sctp_assoc_value instead [ 590.278129][T26413] IPVS: using max 28 ests per chain, 67200 per kthread [ 590.739803][T26440] bridge_slave_1: left allmulticast mode [ 590.745731][T26440] bridge_slave_1: left promiscuous mode [ 590.752642][T26440] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.762475][T26440] bridge_slave_0: left allmulticast mode [ 590.768342][T26440] bridge_slave_0: left promiscuous mode [ 590.774101][T26440] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.837807][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 590.845909][ C1] lec:lec_tx_timeout: lec0 [ 590.850708][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 591.169115][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5528'. [ 591.201226][T26466] netlink: 'syz.5.5528': attribute type 1 has an invalid length. [ 591.216880][T26466] netlink: 'syz.5.5528': attribute type 2 has an invalid length. [ 591.426207][T26479] openvswitch: netlink: Missing key (keys=40, expected=80) [ 591.472750][T26479] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5531'. [ 591.674764][T26490] veth0: entered promiscuous mode [ 591.680628][T26495] netlink: 'syz.5.5537': attribute type 3 has an invalid length. [ 591.776223][T26493] veth0: left promiscuous mode [ 591.956957][T26504] veth1_to_bond: entered allmulticast mode [ 591.965199][T26504] veth1_to_bond: left allmulticast mode [ 592.361047][T26537] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5549'. [ 592.605715][T26547] xt_hashlimit: size too large, truncated to 1048576 [ 594.034214][T26544] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 594.327275][T26578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.450908][T26583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5565'. [ 594.684627][ T9524] nci: nci_ntf_packet: unknown ntf opcode 0xa03 [ 594.696456][T26607] netlink: 296 bytes leftover after parsing attributes in process `syz.2.5563'. [ 594.965002][T26618] __nla_validate_parse: 2 callbacks suppressed [ 594.965017][T26618] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5569'. [ 594.982419][T26618] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5569'. [ 595.287050][T26635] syzkaller0: entered promiscuous mode [ 595.292973][T26635] syzkaller0: entered allmulticast mode [ 595.301639][T26629] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5573'. [ 595.314460][T26635] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 595.857846][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 595.875033][ C1] lec:lec_tx_timeout: lec0 [ 595.879873][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.485976][T26597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.692453][T26650] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 597.709635][T26649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 598.080861][T26675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5584'. [ 598.090280][T26675] netlink: 'syz.5.5584': attribute type 7 has an invalid length. [ 598.098806][T26675] netlink: 'syz.5.5584': attribute type 8 has an invalid length. [ 598.106722][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5584'. [ 598.374464][T26691] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5590'. [ 598.522097][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5593'. [ 598.606381][T26708] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5592'. [ 598.619877][T26703] gre1: entered promiscuous mode [ 598.635000][T26703] gre1: entered allmulticast mode [ 599.123732][T26730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5601'. [ 599.593204][T26759] bond4: option fail_over_mac: invalid value (16) [ 599.597093][T26757] netlink: 'syz.3.5606': attribute type 1 has an invalid length. [ 599.612642][T26759] bond4 (unregistering): Released all slaves [ 599.620039][T26757] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5606'. [ 600.201442][T26791] __nla_validate_parse: 1 callbacks suppressed [ 600.201457][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5616'. [ 600.217570][T26791] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5616'. [ 600.566655][T26811] syzkaller0: entered promiscuous mode [ 600.600004][T26811] syzkaller0: entered allmulticast mode [ 600.887972][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 600.896080][ C1] lec:lec_tx_timeout: lec0 [ 600.901513][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 601.183069][T26837] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 601.374115][T26845] netlink: 'syz.6.5632': attribute type 2 has an invalid length. [ 601.411528][T26848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5631'. [ 601.515390][T26847] netlink: 'syz.2.5633': attribute type 33 has an invalid length. [ 601.526241][T26847] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5633'. [ 601.567488][T26851] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5633'. [ 601.704068][T26857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5636'. [ 602.043592][T26883] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 602.151436][T26883] s5ÿÿø: renamed from vlan1 (while UP) [ 602.243815][T26891] geneve3: entered promiscuous mode [ 602.269776][ T6420] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 48803 - 0 [ 602.291224][ T6420] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 48803 - 0 [ 602.310239][T26893] netlink: 416 bytes leftover after parsing attributes in process `syz.3.5649'. [ 602.350057][T26897] SET target dimension over the limit! [ 602.395451][T26899] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5652'. [ 602.419579][T26891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 602.430819][T26891] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.457970][ T6420] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 48803 - 0 [ 602.607387][T26910] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.5654'. [ 602.792548][T26917] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5657'. [ 603.252669][T26945] sit2: entered promiscuous mode [ 603.257680][T26945] sit2: entered allmulticast mode [ 603.441269][T26956] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 603.574747][T26960] lo speed is unknown, defaulting to 1000 [ 603.831991][T26931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.033307][T26891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 604.059758][T26891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.076839][T26891] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48803 - 0 [ 604.282031][T26985] nbd: illegal input index -8454144 [ 604.295628][T26891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 604.328951][T26891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.359377][T26891] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48803 - 0 [ 604.443760][T26982] lo speed is unknown, defaulting to 1000 [ 604.530049][T26891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 604.542296][T26891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.555473][T26891] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48803 - 0 [ 604.813239][T27014] netlink: 'syz.4.5685': attribute type 10 has an invalid length. [ 605.060304][ T1133] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 605.081633][ T1133] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 48803 - 0 [ 605.106229][ T1133] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.172505][ T83] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 605.191347][ T83] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 48803 - 0 [ 605.214198][ T83] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.224484][ T83] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 605.233151][ T83] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 48803 - 0 [ 605.246511][ T83] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.262163][T27032] __nla_validate_parse: 15 callbacks suppressed [ 605.262179][T27032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5692'. [ 605.271179][T27034] netlink: 'syz.6.5691': attribute type 1 has an invalid length. [ 605.301323][T27034] netlink: 'syz.6.5691': attribute type 2 has an invalid length. [ 605.323909][ T1133] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 605.346919][ T1133] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 48803 - 0 [ 605.357209][ T1133] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 605.536170][T27041] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5696'. [ 605.842327][T27065] netlink: 'syz.6.5702': attribute type 3 has an invalid length. [ 605.855464][T27065] netlink: 666 bytes leftover after parsing attributes in process `syz.6.5702'. [ 605.907820][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 605.915894][ C1] lec:lec_tx_timeout: lec0 [ 605.920534][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 606.104126][T27068] syzkaller1: entered promiscuous mode [ 606.128036][T27068] syzkaller1: entered allmulticast mode [ 606.559222][T27096] syzkaller0: entered promiscuous mode [ 606.564759][T27096] syzkaller0: entered allmulticast mode [ 606.909162][T27117] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 607.136115][T27126] xt_hashlimit: invalid interval [ 607.219502][T27127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5719'. [ 607.352300][T27143] netlink: 'syz.3.5723': attribute type 1 has an invalid length. [ 607.429782][T27145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5724'. [ 607.643464][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5725'. [ 608.596917][T27171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5730'. [ 609.282807][T27143] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 609.629506][T27188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5737'. [ 609.650582][T27185] netlink: 'syz.4.5735': attribute type 1 has an invalid length. [ 609.659108][T27185] netlink: 1868 bytes leftover after parsing attributes in process `syz.4.5735'. [ 609.894625][T27201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5739'. [ 610.927909][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 610.936046][ C1] lec:lec_tx_timeout: lec0 [ 610.941112][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 613.275000][T27227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.527444][T27260] __nla_validate_parse: 1 callbacks suppressed [ 613.527465][T27260] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5755'. [ 613.622377][T27267] syzkaller0: entered promiscuous mode [ 613.637019][T27267] syzkaller0: entered allmulticast mode [ 613.713291][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5760'. [ 613.774590][T27286] erspan2: entered allmulticast mode [ 613.900503][T27287] erspan2: entered allmulticast mode [ 614.072257][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 614.090468][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 614.099380][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 614.113468][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 614.125061][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 614.194514][T27296] lo speed is unknown, defaulting to 1000 [ 614.408432][T27309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5767'. [ 614.507003][T27296] chnl_net:caif_netlink_parms(): no params data found [ 614.653363][T27296] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.661714][T27296] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.670004][T27296] bridge_slave_0: entered allmulticast mode [ 614.677669][T27296] bridge_slave_0: entered promiscuous mode [ 614.686638][T27296] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.712948][T27296] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.720794][T27296] bridge_slave_1: entered allmulticast mode [ 614.730548][T27296] bridge_slave_1: entered promiscuous mode [ 614.774490][T27296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.791200][T27296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.827492][T27296] team0: Port device team_slave_0 added [ 614.837980][T27296] team0: Port device team_slave_1 added [ 614.879479][T27296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.886479][T27296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.901777][T27324] IPVS: ip_vs_edit_dest(): server weight less than zero [ 614.929129][T27296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.941886][T27324] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5770'. [ 614.954406][T27324] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5770'. [ 614.965379][T27296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.972774][T27296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.000311][T27296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.057545][T27296] hsr_slave_0: entered promiscuous mode [ 615.066215][T27296] hsr_slave_1: entered promiscuous mode [ 615.072873][T27296] debugfs: 'hsr0' already exists in 'hsr' [ 615.078792][T27296] Cannot create hsr debugfs directory [ 615.209952][T27296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 615.285683][T27296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 615.331792][T27296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 615.374610][T27296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 615.947797][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 615.955863][ C1] lec:lec_tx_timeout: lec0 [ 615.960674][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 616.217988][ T5838] Bluetooth: hci7: command tx timeout [ 616.559181][T27269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.591252][T27296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 616.691967][T27296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 616.745799][T27296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 616.790252][T27331] vlan0: entered allmulticast mode [ 616.796669][T27331] bond0: entered allmulticast mode [ 616.805544][T27331] bond_slave_0: entered allmulticast mode [ 616.813074][T27331] bond_slave_1: entered allmulticast mode [ 616.819908][T27331] batadv0: entered allmulticast mode [ 616.826067][T27338] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5772'. [ 616.829327][T27331] mac80211_hwsim hwsim64 wlan1: entered allmulticast mode [ 616.844904][T27296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.897647][T27338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.907233][T27338] bond_slave_0: left allmulticast mode [ 616.937331][T27338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.947182][T27337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5771'. [ 616.956500][T27337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5771'. [ 616.966587][T27338] bond_slave_1: left allmulticast mode [ 616.974450][T27338] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 616.985252][T27338] batadv0: left allmulticast mode [ 616.993726][T27342] netlink: 'syz.5.5776': attribute type 1 has an invalid length. [ 617.010226][T27338] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 617.022438][T27338] mac80211_hwsim hwsim64 wlan1: left allmulticast mode [ 617.041613][T27338] bond0 (unregistering): Released all slaves [ 617.172059][T27352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5778'. [ 617.196221][T27345] bond10: (slave ip6gretap1): making interface the new active one [ 617.205193][T27345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 617.214159][T27345] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 617.223168][T27345] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 617.243663][T27349] netlink: 252 bytes leftover after parsing attributes in process `syz.5.5776'. [ 617.461238][T27296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.507488][T27296] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.527636][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.534815][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.555745][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.562958][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.742868][T27380] vlan4: entered promiscuous mode [ 617.748690][T27380] gretap0: entered promiscuous mode [ 617.948370][T27296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.104827][T27393] netlink: 'syz.5.5788': attribute type 1 has an invalid length. [ 618.112863][T27395] netlink: 'syz.5.5788': attribute type 1 has an invalid length. [ 618.195020][T27395] 8021q: adding VLAN 0 to HW filter on device bond11 [ 618.302130][ T5838] Bluetooth: hci7: command tx timeout [ 618.361783][T27401] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 618.555588][T27296] veth0_vlan: entered promiscuous mode [ 618.590735][T27296] veth1_vlan: entered promiscuous mode [ 618.599559][T27421] __nla_validate_parse: 2 callbacks suppressed [ 618.599578][T27421] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5794'. [ 618.621717][T27418] vcan1: entered promiscuous mode [ 618.643178][T27418] vcan1: entered allmulticast mode [ 618.686442][T27421] netlink: 'syz.6.5794': attribute type 21 has an invalid length. [ 618.714856][T27421] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5794'. [ 618.745575][T27418] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5793'. [ 618.790261][T27418] netlink: 'syz.2.5793': attribute type 1 has an invalid length. [ 618.817104][T27296] veth0_macvtap: entered promiscuous mode [ 618.859488][T27296] veth1_macvtap: entered promiscuous mode [ 618.914365][T27435] netlink: 'syz.6.5797': attribute type 4 has an invalid length. [ 618.932378][T27296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.946929][T27435] netlink: 'syz.6.5797': attribute type 16 has an invalid length. [ 618.955382][T27435] netlink: 'syz.6.5797': attribute type 17 has an invalid length. [ 618.963993][T27296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.974169][T27437] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5796'. [ 619.007217][T27435] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.022780][T27435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.105143][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.125949][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.153420][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.165920][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.425922][T10292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.458762][T10292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.649660][T10292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.680523][T10292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.968167][T27485] netlink: 'syz.3.5809': attribute type 4 has an invalid length. [ 619.991065][T27485] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5809'. [ 620.115953][T27485] .`: renamed from bond0 (while UP) [ 620.378202][ T5838] Bluetooth: hci7: command tx timeout [ 620.433646][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.446865][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.457428][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.477679][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.487424][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.534610][T27509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5813'. [ 620.544784][T27509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5813'. [ 620.662480][T27500] lo speed is unknown, defaulting to 1000 [ 620.882971][T27516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5815'. [ 620.967734][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 620.975794][ C1] lec:lec_tx_timeout: lec0 [ 620.980702][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 621.130532][T27527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5817'. [ 621.159114][T27535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5819'. [ 621.236122][T27500] chnl_net:caif_netlink_parms(): no params data found [ 621.899914][T27561] 8021q: adding VLAN 0 to HW filter on device bond12 [ 621.946456][T27569] 8021q: VLANs not supported on ip_vti0 [ 621.986986][T27500] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.995382][T27500] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.003226][T27500] bridge_slave_0: entered allmulticast mode [ 622.013180][T27500] bridge_slave_0: entered promiscuous mode [ 622.026121][T27500] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.033857][T27500] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.041459][T27500] bridge_slave_1: entered allmulticast mode [ 622.054981][T27500] bridge_slave_1: entered promiscuous mode [ 622.113701][T27500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.132537][T27500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.320351][T27500] team0: Port device team_slave_0 added [ 622.357199][T27500] team0: Port device team_slave_1 added [ 622.459681][ T5838] Bluetooth: hci7: command tx timeout [ 622.538945][ T5838] Bluetooth: hci2: command tx timeout [ 622.583073][T27500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.615567][T27500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.723913][T27500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.792210][T27500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.815780][T27500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.903607][T27500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.042258][T27619] lo speed is unknown, defaulting to 1000 [ 623.050666][T27616] syzkaller0: entered promiscuous mode [ 623.056185][T27616] syzkaller0: entered allmulticast mode [ 623.538552][T27639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.594070][T27500] hsr_slave_0: entered promiscuous mode [ 623.603910][T27500] hsr_slave_1: entered promiscuous mode [ 623.607220][T27641] netlink: 'syz.4.5840': attribute type 10 has an invalid length. [ 623.619964][T27500] debugfs: 'hsr0' already exists in 'hsr' [ 623.625816][T27500] Cannot create hsr debugfs directory [ 623.655700][T27643] __nla_validate_parse: 4 callbacks suppressed [ 623.655718][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 623.697125][T27643] netlink: 'syz.3.5841': attribute type 1 has an invalid length. [ 624.085318][T27663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.156827][T27665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.274543][T27500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.311629][T27500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.377687][T27675] syzkaller0: entered promiscuous mode [ 624.383480][T27675] syzkaller0: entered allmulticast mode [ 624.468249][T27500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.496091][T27500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.622260][ T5838] Bluetooth: hci2: command tx timeout [ 624.695483][T27692] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5857'. [ 624.724517][T27500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.737673][T27500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.740319][T27692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5857'. [ 624.826190][T27699] xt_l2tp: invalid flags combination: 8 [ 624.901019][T27500] batman_adv: batadv0: Removing interface: netdevsim0 [ 624.915039][T27500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.930427][T27500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.034641][T27702] bond12 (unregistering): Released all slaves [ 625.082173][T27701] syzkaller0: entered promiscuous mode [ 625.087681][T27701] syzkaller0: entered allmulticast mode [ 625.283479][T27500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 625.297015][T27500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 625.340480][T27500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 625.370251][T27500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 625.532843][T27500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.630729][T27500] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.664795][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.672000][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.706156][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.713427][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.987918][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 625.996005][ C1] lec:lec_tx_timeout: lec0 [ 626.000646][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 626.373113][T27772] netlink: 'syz.3.5877': attribute type 1 has an invalid length. [ 626.392189][T27772] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5877'. [ 626.411182][T27772] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5877'. [ 626.438770][T27772] netlink: 'syz.3.5877': attribute type 1 has an invalid length. [ 626.457379][T27772] netlink: 'syz.3.5877': attribute type 8 has an invalid length. [ 626.478905][T27772] netlink: 606 bytes leftover after parsing attributes in process `syz.3.5877'. [ 626.500508][T27500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.620706][T27500] veth0_vlan: entered promiscuous mode [ 626.648134][T27500] veth1_vlan: entered promiscuous mode [ 626.695899][T27789] syzkaller0: entered promiscuous mode [ 626.702840][T27789] syzkaller0: entered allmulticast mode [ 626.710329][ T5838] Bluetooth: hci2: command tx timeout [ 626.724941][T27788] netlink: 'syz.5.5881': attribute type 5 has an invalid length. [ 626.805833][T27500] veth0_macvtap: entered promiscuous mode [ 626.885148][T27500] veth1_macvtap: entered promiscuous mode [ 626.932358][T27500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.000963][T27500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.038196][T10292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.060122][T10292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.080775][T27805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5888'. [ 627.089838][T10292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.089886][T10292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.152138][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5887'. [ 627.277427][T27815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5890'. [ 627.316915][ T8331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.327628][ T8331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.349267][T27805] atomic_op ffff888057355198 conn xmit_atomic 0000000000000000 [ 627.419409][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.427420][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.444959][T27817] tipc: Enabled bearer , priority 10 [ 628.146380][T27857] xt_check_match: 55 callbacks suppressed [ 628.146406][T27857] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 628.173636][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5900'. [ 628.558404][ T1211] tipc: Node number set to 3829059947 [ 628.624138][T27886] delete_channel: no stack [ 628.673814][T27892] __nla_validate_parse: 1 callbacks suppressed [ 628.673836][T27892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5912'. [ 628.780299][ T5838] Bluetooth: hci2: command tx timeout [ 628.895270][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5918'. [ 628.909273][T27906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5918'. [ 628.943562][ T1151] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 628.952872][ T1151] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 628.966838][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5918'. [ 628.981233][ T1151] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 629.011912][T27906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5918'. [ 629.023251][ T1151] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 629.512466][T27932] syzkaller0: entered promiscuous mode [ 629.518545][T27932] syzkaller0: entered allmulticast mode [ 629.945500][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 630.650433][T27997] bond1: Unable to set down delay as MII monitoring is disabled [ 630.661395][T27997] bond1 (unregistering): Released all slaves [ 630.679934][T28006] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5939'. [ 630.716452][T28004] netlink: 'syz.2.5938': attribute type 1 has an invalid length. [ 630.725538][T28008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5937'. [ 630.734919][T28008] openvswitch: netlink: Flow actions attr not present in new flow. [ 630.795367][T28004] netlink: 'syz.2.5938': attribute type 1 has an invalid length. [ 630.894896][T28013] netlink: 'syz.4.5942': attribute type 1 has an invalid length. [ 630.905123][T28013] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5942'. [ 630.946929][T28013] netlink: 'syz.4.5942': attribute type 1 has an invalid length. [ 630.957416][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5942'. [ 631.140849][T28024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.171854][T28030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.751866][T28062] netlink: 'syz.5.5956': attribute type 21 has an invalid length. [ 631.761001][T28065] netlink: 'syz.5.5956': attribute type 21 has an invalid length. [ 631.775668][T28061] tipc: Resetting bearer [ 631.790390][T28061] tipc: Resetting bearer [ 631.817795][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 631.825880][ C1] lec:lec_tx_timeout: lec0 [ 631.830562][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 631.887477][T28065] netlink: 'syz.5.5956': attribute type 4 has an invalid length. [ 631.895557][T28065] netlink: 'syz.5.5956': attribute type 5 has an invalid length. [ 631.950115][T28072] netlink: 'syz.6.5957': attribute type 64 has an invalid length. [ 631.994665][T28062] netlink: 'syz.5.5956': attribute type 4 has an invalid length. [ 632.023300][T28072] block nbd6: Unsupported socket: should be TCP or UNIX. [ 632.663328][T28095] sctp: [Deprecated]: syz.4.5963 (pid 28095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.663328][T28095] Use struct sctp_sack_info instead [ 633.221316][T28122] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 633.415342][T28128] bond1: entered promiscuous mode [ 633.503641][T28128] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 633.648080][T28141] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 633.680780][T28141] bond1 (unregistering): Released all slaves [ 633.830201][T28157] __nla_validate_parse: 18 callbacks suppressed [ 633.830222][T28157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5981'. [ 633.875403][T28161] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.5983'. [ 634.199397][T28178] pim6reg1: entered promiscuous mode [ 634.204758][T28178] pim6reg1: entered allmulticast mode [ 634.249097][T28178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5988'. [ 635.171885][T28204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.185695][T28204] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 635.273060][T28215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5992'. [ 635.372630][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880b4244000: rx timeout, send abort [ 635.382880][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880b4244000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 635.554784][T28229] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5995'. [ 635.612748][T28231] tipc: Started in network mode [ 635.619487][T28231] tipc: Node identity ac141441, cluster identity 4711 [ 635.627402][T28231] tipc: Enabled bearer , priority 10 [ 635.735037][T28236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.844636][T28239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5999'. [ 636.035626][T28249] lo speed is unknown, defaulting to 1000 [ 636.469910][T28275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6003'. [ 636.657425][T28288] validate_nla: 7 callbacks suppressed [ 636.657445][T28288] netlink: 'syz.5.6005': attribute type 12 has an invalid length. [ 636.681852][T28290] netlink: 'syz.6.6006': attribute type 21 has an invalid length. [ 636.720682][T28288] bond13: option primary_reselect: invalid value (255) [ 636.757369][T28288] bond13 (unregistering): Released all slaves [ 636.797382][T28290] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 636.799445][ T29] tipc: Node number set to 2886997057 [ 636.847737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 636.855792][ C1] lec:lec_tx_timeout: lec0 [ 636.861064][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 636.942540][T28300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6007'. [ 636.964284][T28300] nbd: couldn't find a device at index 1717991472 [ 637.079230][T28308] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.6011'. [ 637.159879][T28313] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6012'. [ 637.286172][T28318] syzkaller0: entered promiscuous mode [ 637.292087][T28318] syzkaller0: entered allmulticast mode [ 637.764074][T28341] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 639.868284][T28376] __nla_validate_parse: 1 callbacks suppressed [ 639.868308][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6031'. [ 640.013881][T28378] netlink: 'syz.5.6032': attribute type 32 has an invalid length. [ 640.237493][T28387] x_tables: unsorted underflow at hook 1 [ 640.271883][T28389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6034'. [ 640.318119][T28390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6034'. [ 640.464531][T28395] netlink: 'syz.6.6035': attribute type 1 has an invalid length. [ 640.550037][T28397] netlink: 'syz.2.6036': attribute type 1 has an invalid length. [ 640.594411][ T9524] bond2 (unregistering): (slave gretap1): Releasing active interface [ 640.605430][T28404] netlink: 'syz.2.6036': attribute type 28 has an invalid length. [ 640.626496][T28404] netlink: 'syz.2.6036': attribute type 3 has an invalid length. [ 640.657962][T28404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6036'. [ 640.672397][ T9524] bond4 (unregistering): (slave gretap3): Releasing active interface [ 640.704622][ T9524] bond9 (unregistering): (slave gretap4): Releasing active interface [ 640.760643][ T9524] dvmrp0 (unregistering): left allmulticast mode [ 640.770344][ T9524] dvmrp6 (unregistering): left allmulticast mode [ 640.963042][ T9524] bond9 (unregistering): (slave bridge3): Releasing active interface [ 641.004632][ T9524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.014956][ T9524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.024765][ T9524] bond0 (unregistering): Released all slaves [ 641.037668][ T9524] bond1 (unregistering): (slave veth3): Releasing active interface [ 641.047104][ T9524] bond1 (unregistering): (slave veth5): Releasing active interface [ 641.062823][ T9524] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 641.073180][ T9524] bond1 (unregistering): Released all slaves [ 641.088552][ T9524] bond2 (unregistering): Released all slaves [ 641.104447][ T9524] bond3 (unregistering): (slave lo): Releasing backup interface [ 641.114054][ T9524] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 641.125916][ T9524] bond3 (unregistering): Released all slaves [ 641.143101][ T9524] bond4 (unregistering): Released all slaves [ 641.161155][ T9524] bond5 (unregistering): Released all slaves [ 641.183699][ T9524] bond6 (unregistering): Released all slaves [ 641.199613][ T9524] bond7 (unregistering): Released all slaves [ 641.214609][ T9524] bond8 (unregistering): Released all slaves [ 641.229625][ T9524] bond9 (unregistering): Released all slaves [ 641.246792][T28397] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 641.424007][ T9524] tipc: Left network mode [ 641.539295][T28419] netlink: 'syz.2.6040': attribute type 25 has an invalid length. [ 641.641450][T28425] netlink: 'syz.5.6044': attribute type 4 has an invalid length. [ 641.656633][T28421] wg1 speed is unknown, defaulting to 1000 [ 641.666052][T28425] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6044'. [ 641.685805][T28421] wg1 speed is unknown, defaulting to 1000 [ 641.746930][T28421] wg1 speed is unknown, defaulting to 1000 [ 641.785655][T28421] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 641.821572][ T9524] IPVS: stopping backup sync thread 15550 ... [ 641.871379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 641.879483][ C1] lec:lec_tx_timeout: lec0 [ 641.884253][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 641.951962][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.062722][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.106560][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.128855][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.156617][T28443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6050'. [ 642.166762][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.174593][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.201706][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.209230][T28443] netlink: 'syz.5.6050': attribute type 1 has an invalid length. [ 642.228724][T28443] netlink: 'syz.5.6050': attribute type 2 has an invalid length. [ 642.251490][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.274570][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.287441][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.328395][T28421] wg1 speed is unknown, defaulting to 1000 [ 642.456183][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 642.466391][T28449] netlink: 'syz.5.6051': attribute type 10 has an invalid length. [ 642.477360][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 642.485684][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 642.508779][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 642.527041][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.572679][T28449] batadv_slave_0: left allmulticast mode [ 642.608613][T28449] batadv_slave_0: left promiscuous mode [ 642.665779][T28449] team0 (unregistering): Port device macvlan2 removed [ 642.886258][T28448] lo speed is unknown, defaulting to 1000 [ 642.920148][T28448] wg1 speed is unknown, defaulting to 1000 [ 643.056275][T28464] syzkaller0: entered promiscuous mode [ 643.066433][T28464] syzkaller0: entered allmulticast mode [ 643.756366][ T9524] hsr_slave_0: left promiscuous mode [ 643.768925][ T9524] hsr_slave_1: left promiscuous mode [ 643.775138][ T9524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.795827][ T9524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.833994][T28493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6062'. [ 643.855407][ T9524] vlan0: left allmulticast mode [ 643.868250][ T9524] veth0_vlan: left allmulticast mode [ 643.873598][ T9524] vlan0: left promiscuous mode [ 643.914914][T28495] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6063'. [ 644.533782][ T9524] pim6reg (unregistering): left allmulticast mode [ 644.618617][ T5842] Bluetooth: hci0: command tx timeout [ 644.704926][ T9524] team0 (unregistering): Port device team_slave_1 removed [ 644.728344][ T9524] team0 (unregistering): Port device team_slave_0 removed [ 644.855722][ T36] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.865549][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 644.878580][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.887604][ T36] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.903730][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 644.913551][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 644.955449][T28493] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 644.974692][ T36] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.998131][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 645.007401][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.023473][ T36] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.034366][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 645.064234][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.182911][T28509] netlink: 'syz.6.6064': attribute type 19 has an invalid length. [ 645.329015][T28448] chnl_net:caif_netlink_parms(): no params data found [ 645.423858][ T9524] IPVS: stop unused estimator thread 0... [ 645.483721][T28523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6068'. [ 645.533268][T28448] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.540619][T28448] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.548312][T28448] bridge_slave_0: entered allmulticast mode [ 645.555844][T28448] bridge_slave_0: entered promiscuous mode [ 645.572118][T28448] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.579757][T28448] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.587020][T28448] bridge_slave_1: entered allmulticast mode [ 645.595590][T28448] bridge_slave_1: entered promiscuous mode [ 645.630263][T28448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.644235][T28525] bond0: (slave vcan1): refused to change device type [ 645.659434][T28448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.692798][T28448] team0: Port device team_slave_0 added [ 645.704627][T28448] team0: Port device team_slave_1 added [ 645.733576][T28448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.741200][T28448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.768784][T28448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.781637][T28448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.789106][T28448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.815880][T28448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.867430][T28448] hsr_slave_0: entered promiscuous mode [ 645.875343][T28448] hsr_slave_1: entered promiscuous mode [ 645.973572][T28471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 646.351643][T28448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 646.399074][T28542] sock: sock_timestamping_bind_phc: sock not bind to device [ 646.419844][T28448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 646.510200][T28448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 646.560864][T28448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 646.591839][T28552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6076'. [ 646.602597][T28552] bridge_slave_0: entered promiscuous mode [ 646.611383][T28554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6076'. [ 646.699344][ T5838] Bluetooth: hci0: command tx timeout [ 646.768818][T28566] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 646.816193][T28448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.852794][T28572] netlink: 'syz.4.6080': attribute type 29 has an invalid length. [ 646.863784][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6080'. [ 646.869037][T23153] Bluetooth: hci4: command 0x0405 tx timeout [ 646.893413][T28448] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.902486][T28572] netlink: 'syz.4.6080': attribute type 29 has an invalid length. [ 646.908005][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 646.918371][ C1] lec:lec_tx_timeout: lec0 [ 646.923230][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 646.949944][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6080'. [ 646.965204][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.972426][ T6410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.995342][T28572] netlink: 'syz.4.6080': attribute type 1 has an invalid length. [ 647.083545][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.090743][ T9524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.319454][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6084'. [ 647.367891][T28587] openvswitch: netlink: EtherType 0 is less than min 600 [ 647.390990][T28587] Bluetooth: MGMT ver 1.23 [ 647.456268][T28599] netlink: 'syz.4.6086': attribute type 1 has an invalid length. [ 647.672319][T28448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.163619][T28448] veth0_vlan: entered promiscuous mode [ 648.195773][T28448] veth1_vlan: entered promiscuous mode [ 648.219364][T28592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.260747][T28448] veth0_macvtap: entered promiscuous mode [ 648.283897][T28448] veth1_macvtap: entered promiscuous mode [ 648.316619][T28448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.339737][T28448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.391673][ T9524] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.415051][ T9524] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.600075][T28630] netlink: 'syz.6.6094': attribute type 1 has an invalid length. [ 648.632325][ T9524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.649298][ T9524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.669247][T28632] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6094'. [ 648.778348][ T5842] Bluetooth: hci0: command tx timeout [ 648.852702][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.898603][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.967199][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.984098][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.131011][T28642] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6101'. [ 649.176951][T28644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6100'. [ 649.246801][T28648] bond0: option ad_select: unable to set because the bond device is up [ 649.576597][T28665] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 649.598318][T28665] Cannot find add_set index 0 as target [ 649.604897][T28667] netlink: 'syz.4.6108': attribute type 29 has an invalid length. [ 649.620044][T28667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6108'. [ 649.662210][T28668] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 649.682252][T28671] netlink: 'syz.4.6108': attribute type 29 has an invalid length. [ 649.811303][T28679] syzkaller0: entered promiscuous mode [ 649.817026][T28679] syzkaller0: entered allmulticast mode [ 650.005398][T28683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.239369][T28683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.403761][T28683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.499545][T28713] __nla_validate_parse: 2 callbacks suppressed [ 650.499565][T28713] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6120'. [ 650.583194][T28683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.766521][ T83] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.809451][ T8332] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.852836][ T83] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.867806][ T5842] Bluetooth: hci0: command tx timeout [ 650.941440][T28738] xt_cgroup: invalid path, errno=-2 [ 650.971816][ T8332] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.201718][T28748] s5ÿÿø: renamed from vlan1 (while UP) [ 651.218003][T28750] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6131'. [ 651.264089][ T8332] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.278514][ T8332] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.306665][ T8332] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.328850][ T8332] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 651.362211][T28758] netlink: 1044 bytes leftover after parsing attributes in process `syz.7.6134'. [ 651.947750][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 651.955916][ C1] lec:lec_tx_timeout: lec0 [ 651.961112][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 652.254365][T28801] netlink: 'syz.2.6148': attribute type 15 has an invalid length. [ 652.263010][T28801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6148'. [ 652.328510][T28804] netlink: 'syz.2.6148': attribute type 1 has an invalid length. [ 652.336549][T28804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6148'. [ 652.346684][T28804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'. [ 652.363975][T28804] netlink: 'syz.2.6148': attribute type 2 has an invalid length. [ 652.372610][T28804] netlink: 'syz.2.6148': attribute type 2 has an invalid length. [ 652.381321][T28804] netlink: 'syz.2.6148': attribute type 2 has an invalid length. [ 652.681569][T28812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6152'. [ 652.693650][T28812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6152'. [ 653.216578][T28829] netlink: 'syz.4.6157': attribute type 4 has an invalid length. [ 653.353189][T28836] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6158'. [ 653.374870][T28837] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6159'. [ 653.789920][T28850] IPv6: Can't replace route, no match found [ 653.796230][T28850] IPv6: Can't replace route, no match found [ 654.336049][T28870] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 654.346486][T22087] IPVS: starting estimator thread 0... [ 654.402036][T28870] : entered promiscuous mode [ 654.438223][T28871] IPVS: using max 28 ests per chain, 67200 per kthread [ 654.932097][T28887] Cannot find map_set index 65533 as target [ 654.952849][T28892] sch_tbf: burst 4 is lower than device syz_tun mtu (1514) ! [ 655.165777][T28892] syzkaller0: entered promiscuous mode [ 655.172688][T28892] syzkaller0: entered allmulticast mode [ 655.595108][T28911] __nla_validate_parse: 8 callbacks suppressed [ 655.595130][T28911] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.6182'. [ 655.648473][T28911] xt_recent: Unsupported userspace flags (000000b1) [ 655.891595][T28922] openvswitch: netlink: Duplicate key (type 2). [ 656.884889][T28937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6191'. [ 656.977860][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 656.985992][ C1] lec:lec_tx_timeout: lec0 [ 656.990918][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 657.124777][T28941] netlink: 'syz.2.6191': attribute type 29 has an invalid length. [ 657.149075][T28941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6191'. [ 657.504580][T28934] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 657.601920][T28938] bridge1: port 1(veth3) entered blocking state [ 657.609582][T28938] bridge1: port 1(veth3) entered disabled state [ 657.616129][T28938] veth3: entered allmulticast mode [ 657.631265][T28938] veth3: entered promiscuous mode [ 657.666430][T28939] bridge1: port 2(veth0_to_bond) entered blocking state [ 657.681064][T28939] bridge1: port 2(veth0_to_bond) entered disabled state [ 657.689935][T28939] veth0_to_bond: entered allmulticast mode [ 657.699825][T28939] veth0_to_bond: entered promiscuous mode [ 657.717129][T28946] netlink: 'syz.5.6193': attribute type 3 has an invalid length. [ 657.751423][T28946] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6193'. [ 658.122663][T28972] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6202'. [ 658.145915][T28948] syzkaller1: entered promiscuous mode [ 658.156616][T28948] syzkaller1: entered allmulticast mode [ 658.193305][T28975] netlink: 'syz.4.6203': attribute type 4 has an invalid length. [ 658.208128][T28948] xt_HMARK: spi-set and port-set can't be combined [ 658.242839][T28975] netlink: 'syz.4.6203': attribute type 4 has an invalid length. [ 658.256249][T28975] netlink: 'syz.4.6203': attribute type 1 has an invalid length. [ 658.266190][T28975] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6203'. [ 658.275762][T28975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6203'. [ 658.349990][T28985] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6206'. [ 658.498799][T28991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6209'. [ 658.551668][T28994] netlink: 'syz.6.6210': attribute type 21 has an invalid length. [ 658.559922][T28991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6209'. [ 658.671841][T28994] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 658.740417][T28994] bond4 (unregistering): Released all slaves [ 658.852343][T29004] tipc: Enabling of bearer rejected, failed to enable media [ 658.880571][T29016] syzkaller1: entered promiscuous mode [ 658.886100][T29016] syzkaller1: entered allmulticast mode [ 659.103785][T29020] vlan0: entered promiscuous mode [ 659.110630][T29020] bridge0: entered promiscuous mode [ 660.014733][T29061] xt_TPROXY: Can be used only with -p tcp or -p udp [ 660.862538][T29104] __nla_validate_parse: 6 callbacks suppressed [ 660.862559][T29104] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6243'. [ 660.930508][T29112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6244'. [ 660.945499][T29104] veth0_to_team: entered promiscuous mode [ 661.002221][T29104] veth0_to_team: left promiscuous mode [ 661.080157][T29121] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 661.135121][T29115] batadv1: entered allmulticast mode [ 661.163824][T29125] netlink: 'syz.6.6246': attribute type 1 has an invalid length. [ 661.285397][T29125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.414269][T29118] bond4: (slave veth5): Enslaving as an active interface with a down link [ 661.427313][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6249'. [ 661.452147][T29125] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 661.497598][T29141] bond4: (slave veth7): Enslaving as an active interface with a down link [ 661.508275][T29141] netlink: 'syz.6.6246': attribute type 1 has an invalid length. [ 661.516447][T29141] netlink: 'syz.6.6246': attribute type 2 has an invalid length. [ 662.007787][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 662.015874][ C1] lec:lec_tx_timeout: lec0 [ 662.020809][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 662.404888][T29162] netlink: 'syz.4.6256': attribute type 9 has an invalid length. [ 664.283498][T29133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.353292][T29151] netlink: 'syz.7.6253': attribute type 2 has an invalid length. [ 664.370091][T29151] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6253'. [ 664.579296][T29178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6260'. [ 664.742120][T29188] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.6262'. [ 664.811634][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6263'. [ 664.846968][T29192] netlink: 13 bytes leftover after parsing attributes in process `syz.6.6264'. [ 664.877613][T29192] netlink: 13 bytes leftover after parsing attributes in process `syz.6.6264'. [ 664.920366][T29194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6265'. [ 664.953687][T29194] s5ÿÿø: renamed from vlan1 (while UP) [ 665.164820][T29211] netlink: 'syz.6.6268': attribute type 7 has an invalid length. [ 665.392912][T29222] wireguard0: entered promiscuous mode [ 665.414556][T29222] wireguard0: entered allmulticast mode [ 665.433175][T29222] team0: Device wireguard0 is of different type [ 666.119328][T29269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6283'. [ 666.215297][T29269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6283'. [ 666.287125][T29275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6285'. [ 666.602102][T29294] netlink: 'syz.6.6290': attribute type 4 has an invalid length. [ 666.799764][T29301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6292'. [ 666.875668][T29305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6294'. [ 666.892434][T29303] netlink: 'syz.7.6293': attribute type 32 has an invalid length. [ 666.909820][T29303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6293'. [ 667.032085][T29303] bond1: Setting coupled_control to off (0) [ 667.637390][T29347] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6304'. [ 667.817830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 667.826062][ C1] lec:lec_tx_timeout: lec0 [ 667.831392][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 667.865238][T29355] syzkaller1: entered promiscuous mode [ 667.874388][T29355] syzkaller1: entered allmulticast mode [ 667.882379][T29358] netlink: 'syz.5.6310': attribute type 1 has an invalid length. [ 667.900052][T29357] netlink: 'syz.5.6310': attribute type 1 has an invalid length. [ 668.280161][T29381] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6317'. [ 668.292607][T29379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6318'. [ 668.316134][T29379] hsr_slave_0 (unregistering): left promiscuous mode [ 668.354863][T29383] veth1_to_bridge: entered promiscuous mode [ 668.718854][T29397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.730054][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6325'. [ 668.741643][T29399] netlink: 'syz.2.6325': attribute type 30 has an invalid length. [ 668.761762][T29401] netlink: 'syz.6.6326': attribute type 29 has an invalid length. [ 668.777017][T29399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 669.052676][T29420] bond0: entered allmulticast mode [ 669.132389][T29424] netlink: 'syz.5.6333': attribute type 1 has an invalid length. [ 669.164101][T29424] bond13: entered promiscuous mode [ 669.169949][T29424] 8021q: adding VLAN 0 to HW filter on device bond13 [ 669.226197][T29424] bond13: (slave bridge7): making interface the new active one [ 669.234769][T29424] bridge7: entered promiscuous mode [ 669.242320][T29424] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 669.268010][T29425] bond13: (slave bridge8): Enslaving as a backup interface with an up link [ 669.396440][T29436] vlan0: Caught tx_queue_len zero misconfig [ 669.930945][T29451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.059758][T29456] lo speed is unknown, defaulting to 1000 [ 670.067507][T29456] wg1 speed is unknown, defaulting to 1000 [ 670.597312][T29473] netlink: 'syz.5.6346': attribute type 10 has an invalid length. [ 670.631444][T29473] bridge0: entered allmulticast mode [ 670.637310][T29473] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 671.838024][T29404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.001218][T29502] __nla_validate_parse: 4 callbacks suppressed [ 672.001238][T29502] netlink: 284 bytes leftover after parsing attributes in process `syz.6.6351'. [ 672.125269][T29520] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6352'. [ 672.241782][T29520] bond2 (unregistering): Released all slaves [ 672.282187][T29522] vcan0: entered allmulticast mode [ 672.626595][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6359'. [ 672.677570][T29546] netlink: 'syz.7.6362': attribute type 39 has an invalid length. [ 672.837737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 672.845840][ C1] lec:lec_tx_timeout: lec0 [ 672.850757][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 673.041079][T29559] netlink: 'syz.7.6365': attribute type 2 has an invalid length. [ 673.056074][T29559] netlink: 119 bytes leftover after parsing attributes in process `syz.7.6365'. [ 673.102851][T29565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6367'. [ 673.177390][T29565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6367'. [ 673.341944][T29577] syzkaller0: entered promiscuous mode [ 673.358440][T29577] syzkaller0: entered allmulticast mode [ 673.483791][T29580] syzkaller0: entered promiscuous mode [ 673.489428][T29580] syzkaller0: entered allmulticast mode [ 673.533781][T29585] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 673.969507][T29606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6374'. [ 674.111403][T29616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6380'. [ 674.259031][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6383'. [ 674.326824][T29625] netlink: 'syz.2.6384': attribute type 1 has an invalid length. [ 674.337641][T29626] netlink: 'syz.2.6384': attribute type 1 has an invalid length. [ 674.382207][T29625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.391823][T29626] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 674.791189][T29652] netlink: 14500 bytes leftover after parsing attributes in process `syz.5.6391'. [ 675.015016][T29666] syzkaller1: entered promiscuous mode [ 675.024963][T29666] syzkaller1: entered allmulticast mode [ 675.035206][T29666] syzkaller1: left promiscuous mode [ 675.040603][T29666] syzkaller1: left allmulticast mode [ 675.488983][T29690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.664714][T29705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.927514][T29716] netlink: 'syz.6.6409': attribute type 21 has an invalid length. [ 675.960649][T29716] netlink: 'syz.6.6409': attribute type 1 has an invalid length. [ 676.140220][ T31] INFO: task syz.1.4584:23071 blocked for more than 143 seconds. [ 676.162158][ T31] Not tainted syzkaller #0 [ 676.167178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.249041][ T31] task:syz.1.4584 state:D stack:27432 pid:23071 tgid:23070 ppid:16647 task_flags:0x400140 flags:0x00080002 [ 676.283276][ T31] Call Trace: [ 676.289447][ T31] [ 676.293629][ T31] __schedule+0x15dd/0x52d0 [ 676.304215][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.313516][ T31] ? irqentry_exit+0x59e/0x620 [ 676.323245][ T31] ? __pfx___schedule+0x10/0x10 [ 676.331857][ T31] ? schedule+0x90/0x360 [ 676.336192][ T31] schedule+0x164/0x360 [ 676.340839][ T31] schedule_preempt_disabled+0x13/0x30 [ 676.346353][ T31] __mutex_lock+0x7fe/0x1300 [ 676.351725][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.357932][ T31] ? __mutex_lock+0x5ac/0x1300 [ 676.362820][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 676.368597][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 676.374850][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 676.381844][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 676.389465][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 676.395857][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 676.402077][ T31] ? __asan_memcpy+0x40/0x70 [ 676.406721][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 676.413949][ T31] ? bpf_lsm_capable+0x9/0x20 [ 676.418943][ T31] ? security_capable+0x7e/0x2c0 [ 676.424012][ T31] genl_rcv_msg+0x61c/0x7a0 [ 676.431331][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.438715][T29734] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 676.447345][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 676.453871][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.460222][ T31] netlink_rcv_skb+0x232/0x4b0 [ 676.465147][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.470660][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.475084][T29734] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 676.476291][ T31] ? down_read+0x272/0x2e0 [ 676.489421][ T31] ? genl_rcv+0xd/0x40 [ 676.493617][ T31] genl_rcv+0x28/0x40 [ 676.497757][ T31] netlink_unicast+0x80f/0x9b0 [ 676.502647][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 676.509836][ T31] ? netlink_sendmsg+0x650/0xb40 [ 676.515034][ T31] ? skb_put+0x11b/0x210 [ 676.519560][ T31] netlink_sendmsg+0x813/0xb40 [ 676.524453][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.530435][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.535506][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.541458][ T31] ____sys_sendmsg+0x972/0x9f0 [ 676.546355][ T31] ? futex_unqueue+0x211/0x240 [ 676.551943][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.557357][ T31] ? import_iovec+0x73/0xa0 [ 676.562637][ T31] ___sys_sendmsg+0x2a5/0x360 [ 676.567445][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.574574][ T31] ? futex_wait+0x29a/0x380 [ 676.586354][ T31] ? __fget_files+0x2a/0x420 [ 676.592026][ T31] ? __fget_files+0x3a0/0x420 [ 676.596771][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 676.601862][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.607375][ T31] do_syscall_64+0x14d/0xf80 [ 676.612279][ T31] ? trace_irq_disable+0x3b/0x150 [ 676.617370][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.624285][ T31] ? clear_bhb_loop+0x40/0x90 [ 676.629684][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.635636][ T31] RIP: 0033:0x7fa6b139c799 [ 676.640487][ T31] RSP: 002b:00007fa6b229e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.649381][ T31] RAX: ffffffffffffffda RBX: 00007fa6b1615fa0 RCX: 00007fa6b139c799 [ 676.657390][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 676.665720][ T31] RBP: 00007fa6b1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 676.673976][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.682645][ T31] R13: 00007fa6b1616038 R14: 00007fa6b1615fa0 R15: 00007ffcd07d5a68 [ 676.692742][ T31] [ 676.695897][ T31] [ 676.695897][ T31] Showing all locks held in the system: [ 676.704591][ T31] 1 lock held by khungtaskd/31: [ 676.710410][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 676.720645][ T31] 2 locks held by getty/5582: [ 676.725351][ T31] #0: ffff8880346db0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.735728][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 676.746940][ T31] 1 lock held by syz-executor/5811: [ 676.752635][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 676.763314][ T31] 2 locks held by syz.0.3504/19122: [ 676.769580][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.781115][ T31] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 676.791626][ T31] 2 locks held by syz.1.4584/23071: [ 676.798626][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.806882][ T31] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 676.816982][ T31] 2 locks held by syz.3.5889/27809: [ 676.822473][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.831338][ T31] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 676.841472][ T31] 2 locks held by syz.4.6257/29166: [ 676.846693][ T31] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.855365][ T31] #1: ffffffff8ea875e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 676.866533][ T31] [ 676.870545][ T31] ============================================= [ 676.870545][ T31] [ 676.880933][ T31] NMI backtrace for cpu 1 [ 676.880956][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 676.880979][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.880992][ T31] Call Trace: [ 676.881000][ T31] [ 676.881010][ T31] dump_stack_lvl+0xe8/0x150 [ 676.881044][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 676.881073][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 676.881103][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 676.881134][ T31] sys_info+0x135/0x170 [ 676.881155][ T31] watchdog+0xfd9/0x1030 [ 676.881194][ T31] ? watchdog+0x21a/0x1030 [ 676.881243][ T31] kthread+0x388/0x470 [ 676.881265][ T31] ? __pfx_watchdog+0x10/0x10 [ 676.881294][ T31] ? __pfx_kthread+0x10/0x10 [ 676.881316][ T31] ret_from_fork+0x51e/0xb90 [ 676.881348][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 676.881374][ T31] ? __switch_to+0xc7d/0x1450 [ 676.881401][ T31] ? __pfx_kthread+0x10/0x10 [ 676.881423][ T31] ret_from_fork_asm+0x1a/0x30 [ 676.881472][ T31] [ 676.881482][ T31] Sending NMI from CPU 1 to CPUs 0: [ 676.993920][ C0] NMI backtrace for cpu 0 [ 676.993937][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 676.993957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.993971][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 676.994003][ C0] Code: 0e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 a0 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 676.994019][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 676.994035][ C0] RAX: 0000000000253651 RBX: ffffffff819a88ed RCX: 0000000080000001 [ 676.994048][ C0] RDX: 0000000000000001 RSI: ffffffff8def3498 RDI: ffffffff8c27b280 [ 676.994061][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 676.994074][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901196b0 [ 676.994087][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 676.994098][ C0] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 676.994113][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.994125][ C0] CR2: 0000000000000000 CR3: 000000002fdce000 CR4: 00000000003526f0 [ 676.994139][ C0] Call Trace: [ 676.994146][ C0] [ 676.994153][ C0] default_idle+0x9/0x20 [ 676.994171][ C0] default_idle_call+0x72/0xb0 [ 676.994191][ C0] do_idle+0x1bd/0x500 [ 676.994221][ C0] ? __pfx_do_idle+0x10/0x10 [ 676.994246][ C0] ? do_idle+0x10/0x500 [ 676.994272][ C0] cpu_startup_entry+0x43/0x60 [ 676.994297][ C0] rest_init+0x2de/0x300 [ 676.994318][ C0] start_kernel+0x385/0x3d0 [ 676.994338][ C0] x86_64_start_reservations+0x24/0x30 [ 676.994362][ C0] x86_64_start_kernel+0x143/0x1c0 [ 676.994386][ C0] common_startup_64+0x13e/0x147 [ 676.994414][ C0] [ 677.175575][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 677.182550][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.191690][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.201776][ T31] Call Trace: [ 677.205075][ T31] [ 677.208046][ T31] vpanic+0x56c/0xa60 [ 677.212096][ T31] ? __pfx___schedule+0x10/0x10 [ 677.217000][ T31] ? __pfx_vpanic+0x10/0x10 [ 677.221530][ T31] ? __pfx_console_unlock+0x10/0x10 [ 677.226792][ T31] panic+0xc5/0xd0 [ 677.230561][ T31] ? __pfx_panic+0x10/0x10 [ 677.235002][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 677.240395][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 677.246575][ T31] watchdog+0x1023/0x1030 [ 677.251024][ T31] ? watchdog+0x21a/0x1030 [ 677.255476][ T31] kthread+0x388/0x470 [ 677.259563][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.264270][ T31] ? __pfx_kthread+0x10/0x10 [ 677.268881][ T31] ret_from_fork+0x51e/0xb90 [ 677.273496][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 677.278632][ T31] ? __switch_to+0xc7d/0x1450 [ 677.283344][ T31] ? __pfx_kthread+0x10/0x10 [ 677.287954][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.292781][ T31] [ 677.296612][ T31] Kernel Offset: disabled [ 677.300998][ T31] Rebooting in 86400 seconds..