last executing test programs: 12m2.394610506s ago: executing program 2 (id=3434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) 12m2.179640577s ago: executing program 2 (id=3438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 12m1.763604814s ago: executing program 2 (id=3442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) 12m1.424322161s ago: executing program 2 (id=3452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x4040000) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x8040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r5, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) 12m1.256697123s ago: executing program 2 (id=3455): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'pimreg\x00', {'caif0\x00'}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) 12m0.867655603s ago: executing program 2 (id=3463): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000580)="ac0000000000ec67838717bd86ddbd6e902562ac5675da63a84744c677777570e8bd8e1450c4e68db8b8f5853e524b918ea6e4db95eb", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x21) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) 12m0.605028815s ago: executing program 32 (id=3463): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200008f0800000000000000000000850000006100000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000580)="ac0000000000ec67838717bd86ddbd6e902562ac5675da63a84744c677777570e8bd8e1450c4e68db8b8f5853e524b918ea6e4db95eb", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x21) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) 6m27.570948462s ago: executing program 4 (id=7143): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0xcd1, 0x4) 6m27.478688976s ago: executing program 0 (id=7145): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func_proto]}}, 0x0, 0x3e}, 0x20) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18004d7f", @ANYRES16=r2, @ANYBLOB="130f00000000000000000700000004000280"], 0x18}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff"], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x401c5820, &(0x7f0000000040)) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0x4000000b, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x0, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) getpeername$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) (async) accept4(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x70, 0x0) 6m27.476098912s ago: executing program 4 (id=7146): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000000000000009020000000000"], 0x0, 0x96}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0800000c000000023800000000000000000004000000000000"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000630ac8280000000000a0acfd8367094944631cff6a292f5f1ecfbb4cac2dfe275d3e104baf3e988f1bccf21df75dad9b9feacfb09cf072abcfb435ae0000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x8a, 0x0, 0x1}, 0x48) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002280)={0x49, 0x5, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x22000184}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24048000, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @loopback, 0xfdf}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa368100000086dd60010100001611fffe8000000000000000000ffe670df4d06d700716f662924f920000000000bbfe8000000000000000000000000000aa00000e220016907802030000000000007e581ba68817"], 0x0) (async) syz_emit_ethernet(0x50, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa368100000086dd60010100001611fffe8000000000000000000ffe670df4d06d700716f662924f920000000000bbfe8000000000000000000000000000aa00000e220016907802030000000000007e581ba68817"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) 6m27.332157709s ago: executing program 4 (id=7147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900000c19ed5100"/233, @ANYRES32=r1], 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002f000100000000000000000006"], 0x18}], 0x1}, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000240004801386f70062726f5564636173742d6c696e6b0000130007800800050000000000f6970f0acd6b5e0a62a89dc76b3d8e3c3ca75893713bbadfe2133148836f0219858afdf84beadfa8091c418fe11dcc2a9a6f2a"], 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) 6m27.310915014s ago: executing program 0 (id=7148): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x40000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000850}, 0x8040) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xbc, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfe3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400009}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf912}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004050}, 0x4004005) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000000040)=0xd0, 0x4) (async) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) (rerun: 64) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x64, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x81, 0xb, 0x2, 0x9, 0x1, 0x2f, 0x8, 0x3, 0xf7, 0x0, 0xff, 0x84, 0xf2}, 0xe) 6m27.105826834s ago: executing program 4 (id=7150): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095", @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x2, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff2, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000380)=0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000780)={0x661d, 0x1, 0x7, 0xffffffff, 0x3}, 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x1004110, 0x4) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)={0x60, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xe7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x12}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xa}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x87}]}, 0x60}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040830) 6m26.975263606s ago: executing program 0 (id=7152): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) (async) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2) (async) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, ';.;S'}]}}}}}}}}, 0x0) 6m26.890272704s ago: executing program 0 (id=7154): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@hopopts={0x73, 0xa, '\x00', [@generic={0x3, 0x52, "d9b0e3708e54aaf5599a060eb74e7f698352a99d0a8a2c1d6a1ae246fa7e46e2feb6c38b4bc95c84e35fb26e09a40ff5a4947f37a625e332e87b526344b662bf21d0fb35e044bd24b3dad51b575ca717cb6f"}]}, 0x60) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x27) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000640), &(0x7f0000000680)=0x4) 6m26.794267567s ago: executing program 4 (id=7156): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) socket$kcm(0x29, 0x7, 0x0) 6m26.70635256s ago: executing program 0 (id=7157): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111600000000000180000000000000000000000000000009500ed0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 6m26.319561112s ago: executing program 0 (id=7161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c0002800500010000000000440002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0600034000020000080007404e000000"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x28) (async) syz_emit_ethernet(0x1f, &(0x7f0000000b00)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="2115bc9d45510d4a9a2b1cd7e2b93999ae85d848723e32a066c9b77c3dd73c6f3e1f34caa7c61619c881866525787a816f0f72aae4d7244576f1bec722431fe8d0ec5ace73e54010", @ANYRESOCT=r2, @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000340)=""/41, &(0x7f0000000380)=0x29) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "0a8deaf975a09a15b47858aa4353830f1678a9b90221eee1fa86ff2bff8bc7d796140bbaa5014557d71e708685a0c506c9ee1178a3"}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc0}}, 0x0) (async) bind$rds(r4, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434"], 0x54}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7, @ANYRESOCT=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f0000000f80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x2fc, r12, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0x2e0, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @broadcast, @from_mac=@broadcast, {0x2, 0x334}}, @a_msdu=[{@device_b, @device_b, 0xdf, "03f233e31bb0c189ef0b02f2f5a153f1c68efb4296055690b283cf6fc24c1d35baa446e5a9bb176543da68cb5d380cdb89b8bc7e079c894177451a94112b3014cc7e3d92c0ba1b87840e193b8a78dfdad24e606b60bc20785a74a94a4ded0512800548809f5b2cf5530fb5b9d80a2c8a575dbe7bf0d227862c843899e5a910ce65a2e7512cf76c45be09e4916e19e51cbe544bf4b3d9a5150df5b7d821ed50a32fbb2af320ad34d0da9ee8eaa302aa3cc392ebd76bfca1f6c514fc3cb3e891009a25160f35c6d903c301bcebd55a9ca542eb60359d43693eb68fd1de610935"}, {@device_b, @device_a, 0x70, "99e7a79413d817e4f8a49669a1926005661f8f3d87622b2698082863fb0e38602eee7b17a355bb4b5a4e89e24706e4fa5892b48884249396229518b179c894b703ea2c78a4b792a99d5b671b99d9d16f2d0b447e44332b9cdecfd41b576054bf5cb4bf2a8d95b49cc206295ac53cfb0c"}, {@device_a, @device_b, 0x60, "83a6691918d1900fe9a33cf1392d3ac2e669d6fecf81e850b968fb3119b827daf7cf4af9c3b7effd6757cf95079378c83d86ef77a85eba6be204c3afad0ca36ac85ba7079e2d37e138f5975bda4e6835f39f86dc60a4cf562fb7aa27037ed56b"}, {@device_b, @device_a, 0xd6, "5ce7d9803c10e96a6ce6b44951afd77915d98359d9a8ef0dfe30c17e64d880e6be6ffd8ce13fb7bc9f0724d73053b4c80b25fd6b598a8538fc0f82a9712e8e06b658e52b4f0faf932e5e9401c299d758d21301aa31c00f3bbfac9c02050d033c1e0788d169f376fa33272b8e2e71b41afd1793db5d5c6fd819fd07edf76d6c183ef131696c4cc7fc6530d1fa87c7a741160788a371a29dc1acdf938dfee6e0d0f73009095db76fdf28f94c324f8ea85b0fba2582d6779e7e883f84cb75693946c01b9f1e0b5daee0dad4d08c1dd2371657fbc3ca871f"}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x16, &(0x7f0000000480)={0x8, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e20, @local}}}, 0x108) 6m26.318984869s ago: executing program 4 (id=7162): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104001c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e6400000000100002800c0008800a010101ac141443"], 0x40}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040144) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0x1cf1cd988231dbb, 0x1, 0x2, 0xc, 0xffff}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 64) ioctl(r4, 0x8b32, &(0x7f0000000040)) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 6m25.872448628s ago: executing program 33 (id=7161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c0002800500010000000000440002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0600034000020000080007404e000000"], 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x28) (async) syz_emit_ethernet(0x1f, &(0x7f0000000b00)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="2115bc9d45510d4a9a2b1cd7e2b93999ae85d848723e32a066c9b77c3dd73c6f3e1f34caa7c61619c881866525787a816f0f72aae4d7244576f1bec722431fe8d0ec5ace73e54010", @ANYRESOCT=r2, @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000340)=""/41, &(0x7f0000000380)=0x29) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "0a8deaf975a09a15b47858aa4353830f1678a9b90221eee1fa86ff2bff8bc7d796140bbaa5014557d71e708685a0c506c9ee1178a3"}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc0}}, 0x0) (async) bind$rds(r4, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434"], 0x54}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7, @ANYRESOCT=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r11, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f0000000f80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x2fc, r12, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME={0x2e0, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @broadcast, @from_mac=@broadcast, {0x2, 0x334}}, @a_msdu=[{@device_b, @device_b, 0xdf, "03f233e31bb0c189ef0b02f2f5a153f1c68efb4296055690b283cf6fc24c1d35baa446e5a9bb176543da68cb5d380cdb89b8bc7e079c894177451a94112b3014cc7e3d92c0ba1b87840e193b8a78dfdad24e606b60bc20785a74a94a4ded0512800548809f5b2cf5530fb5b9d80a2c8a575dbe7bf0d227862c843899e5a910ce65a2e7512cf76c45be09e4916e19e51cbe544bf4b3d9a5150df5b7d821ed50a32fbb2af320ad34d0da9ee8eaa302aa3cc392ebd76bfca1f6c514fc3cb3e891009a25160f35c6d903c301bcebd55a9ca542eb60359d43693eb68fd1de610935"}, {@device_b, @device_a, 0x70, "99e7a79413d817e4f8a49669a1926005661f8f3d87622b2698082863fb0e38602eee7b17a355bb4b5a4e89e24706e4fa5892b48884249396229518b179c894b703ea2c78a4b792a99d5b671b99d9d16f2d0b447e44332b9cdecfd41b576054bf5cb4bf2a8d95b49cc206295ac53cfb0c"}, {@device_a, @device_b, 0x60, "83a6691918d1900fe9a33cf1392d3ac2e669d6fecf81e850b968fb3119b827daf7cf4af9c3b7effd6757cf95079378c83d86ef77a85eba6be204c3afad0ca36ac85ba7079e2d37e138f5975bda4e6835f39f86dc60a4cf562fb7aa27037ed56b"}, {@device_b, @device_a, 0xd6, "5ce7d9803c10e96a6ce6b44951afd77915d98359d9a8ef0dfe30c17e64d880e6be6ffd8ce13fb7bc9f0724d73053b4c80b25fd6b598a8538fc0f82a9712e8e06b658e52b4f0faf932e5e9401c299d758d21301aa31c00f3bbfac9c02050d033c1e0788d169f376fa33272b8e2e71b41afd1793db5d5c6fd819fd07edf76d6c183ef131696c4cc7fc6530d1fa87c7a741160788a371a29dc1acdf938dfee6e0d0f73009095db76fdf28f94c324f8ea85b0fba2582d6779e7e883f84cb75693946c01b9f1e0b5daee0dad4d08c1dd2371657fbc3ca871f"}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x16, &(0x7f0000000480)={0x8, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e20, @local}}}, 0x108) 6m25.794809379s ago: executing program 34 (id=7162): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104001c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e6400000000100002800c0008800a010101ac141443"], 0x40}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040144) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0x1cf1cd988231dbb, 0x1, 0x2, 0xc, 0xffff}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (rerun: 64) ioctl(r4, 0x8b32, &(0x7f0000000040)) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2.080996211s ago: executing program 7 (id=11695): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="4b0003000000", 0x6) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="140090f9ffffff0700000000000000f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b966080682006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f00000000c0)="4b0003000000", 0x6) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="140090f9ffffff0700000000000000f90324fc60", 0x14}], 0x1}, 0x200a4800) (async) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b966080682006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) (async) 1.848979628s ago: executing program 7 (id=11698): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x4000840) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000c80)=0xf4e) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) 1.7749727s ago: executing program 1 (id=11699): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2001839da2a4b063b280108004500081c00000000000290787f00"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) close(0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x10, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000011c0)="c2fb8e9521", 0x5}], 0x1}}], 0x1, 0x4001c00) listen(r0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) accept4(r0, 0x0, 0x0, 0x80800) 1.723330179s ago: executing program 3 (id=11701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f00000000c0)={0xa, 0x4e22, 0xffffffff, @local, 0x27}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x35, 0x9, 0x70bd29, 0x25dfdbfd, {0x5}}, 0x14}}, 0x0) listen(r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) 1.711008857s ago: executing program 5 (id=11702): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', r1, 0x8000, 0x7, 0x3, 0x8, {{0x27, 0x4, 0x3, 0x2b, 0x9c, 0x68, 0x0, 0x9c, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @local, {[@cipso={0x86, 0x15, 0x1, [{0x6, 0x6, "a663d8d1"}, {0x5, 0x9, "f5b76f06687acd"}]}, @timestamp_addr={0x44, 0x34, 0x21, 0x1, 0x9, [{@local, 0xffff}, {@multicast1, 0xc}, {@rand_addr=0x64010102, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x8}, {@broadcast, 0x7}]}, @lsrr={0x83, 0x1f, 0x56, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @private=0xa010102, @private=0xa010101, @local]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xa8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="09000000100081050060c2100b5fa73f00000f35ef80c76a", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028004001f00ffffff7f0800120003000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 1.521506291s ago: executing program 7 (id=11704): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0xc8, 0xc8, 0x1b8, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_to_team\x00', {}, {0xff}, 0x70, 0x0, 0x10}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "ce5c"}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0x3}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xffffffff, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0xc, 0x3, 0x8}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0xfff8, 0xe, [0x1e, 0x2, 0x2b, 0x30, 0xe, 0x27, 0x15, 0x3d, 0x9, 0x2b, 0x39, 0x2a, 0x2a, 0x36, 0x18, 0x20], 0x1, 0x4, 0xa98}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x4], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x4, 0x6, 0x4, 0x4, 0x6], 0x3, 0x2}, {0x2, [0x2, 0x0, 0x1, 0x0, 0x2], 0x5, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000580)={0x2da, 0x5, 0x4, 0x101}, 0x10) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x12c, 0x12, 0x800, 0x70bd2c, 0x25dfdbff, {@in=@broadcast, 0x4d5, 0x2, 0xff}, [@address_filter={0x28, 0x1a, {@in=@multicast2, @in=@broadcast, 0x2, 0xfe, 0x4}}, @algo_auth_trunc={0xbb, 0x14, {{'sha512_mb\x00'}, 0x378, 0xc0, "9d1ee7232874814ad49b75a00c43874b67ab0ae2f46e6ad70893af060d6cfbbfb677f010e7d2224cd4402ae492916c3397ad81e9e7c101101ae98c06e59e6ba096b2dec3ca03bf416ad5ba1f902284fb9b6654b0b717f7463e3ac0e430465ab14392c2e8d7720de532369916c2596e"}}, @mark={0xc, 0x15, {0x350759, 0x10001}}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x814}, 0x91) (async) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)="ffa7dfefc1c4d876ee418d7a9a61a004de5cb29f945db0c5ac6594d347137145189dfba721934303a23c617f035c78541adb6624cdbd31fdfe05a8ac5c9ddb4359d9d630d41b718c74bcff1f01d8c7cc1a29074f889b4fda65098301c65363b168f533a5", 0x64}, {&(0x7f0000000840)="dbf606a258289c3731732cd7e14f258780df1f583f07f2d5a1896c456e2b87fbff39204006028c2e6855bd6b54349491d1633377a237c20758427597bb5f5bd4686c", 0x42}, {&(0x7f00000008c0)="deb9d1a640740561aca9f3", 0xb}, {&(0x7f0000000900)="8d5dfe31f03bc7df20a5e17cea419c5d71013718d82b2a36ef780e4fdb9da629d9a58aabf604c4a61aadeb2775088a11c46ff76ba80f4e3d8cb3f49c689ba5d85b4886792e4daac3e6340525089bd148716cf61929382007bccbe95ff7d7468c8483b79b2cb53640ec0ea447498d43feff4b29889bc079fc847f56b6573b257684e3520bdc6a9052bed8d1efe515f829d9af94c8e392bbeb8926", 0x9a}, {&(0x7f00000009c0)="b2d38b35964f5babe8829c02a1d32174692090f7f32c25b34b1773ac26b498a3f46d55421692ef688c556a742d43877e61f34fccbdf851188432c859294af5a3b54680a456bbbb45875049228178381af8aed3d195895aeb7bda8d4a3331ff6818efb8714515c0ae4010177d9910b2b65fb56850044e0f19c35d13b360cfc60f7cad", 0x82}, {&(0x7f0000000a80)="8321009a2d3b50d8051535790946bf8c834d75f9c40510ef680bb8988c85ad", 0x1f}, {&(0x7f0000000ac0)="22c007957cc773d9cdaff6571bee0a6e50a15b8ff61dce1ce76109a83b81889399d7135155a22e5c2d2e3a8bf72644f0ec2f0e2158c3d414b3811f5b359f4d7888a2b7773bc2479cd6ca5b132f5f58d8f3c321da27471a1fcfad553304fa85ee2ce2399adb4aebb31370f46106d0f8ef5f8a45343b96fe83e621ceb4633e069d6bcce8121bceb9f79b4530cfd545720a448368bc8f42eb75847c679cfb285bd394715d08f82d44bb", 0xa8}, {&(0x7f0000000b80)="459fa52e83875fb15899ab1cc8127f0232d598e9ec0b53710d3234db73db5e1e92109ae14cf1216de7f8cdbf9833967e0ea758f723b1a22fa282dfe8cbc5499deed6f8abb18a5557988f856d96e698ad81e8f64f8ba6b76e5bc16f4a3d7325a326908be4954e62340cf629706693764a83", 0x71}], 0x8, &(0x7f0000000c80)=[@ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x71, [@multicast2, @multicast1, @multicast1, @multicast2, @multicast1, @rand_addr=0x64010102, @local]}]}}}], 0x30}}], 0x1, 0x30) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={0xffffffffffffffff, 0x0, 0xd7, 0x9a, &(0x7f0000000d00)="e0442b2f5fb0377ca3b65cb5d987269d86080f2c6c22bba0f6c79ffb13ae274de9f666c5aae28a5afd78e5be6b25a496ca3143dfde47112a20ce008dc7a25de4c86d9271851133c0bbb5b228514e74d4d527946032d08b7ca6404b8ff03e66505ce72fd3cac66e56a3a7dbee01da6c0afcb3f96ccc91323310fa2501bd9c3823c71e34e6cc7e6849b361a8a38a4ad9468ce2153c543dfa27e54bcc9fa90fa7e36a89cbccd58b810bc9424492b4f138db9f7a1908be888f956c7f1671513a078145b88ff26eb35563de146ba54b93d55f79b1a507dc27c6", &(0x7f0000000e00)=""/154, 0x8, 0x0, 0x2b, 0xb6, &(0x7f0000000ec0)="34dc059ea8350b53b49b2c9499fbecff5edbcf792883041917a1b3cf4733b9b6e5183850a4e3a9c2400e8e", &(0x7f0000000f00)="8f6c5c0b9e092d602dd4bfa466242a28812d7d25de495483c5483148288fad863a9e3f999521d710c5e5f59f2aae5754b2b822f517f492c93085566e4e055044155c0430da0e5bdc8ed4eb150b00441196affc6eae80017ee1b0aa3ad17e1d20a0ea37321a86dd3762b7a977d4dd6064b13f3849f8f0b2b201e873382c9e28692036e3eceede68c4991889a61aadcecd41021b2400b1d9b961c4e17327733e8005ec63b7108757a2f35168e873163c51e934382536d1", 0x4, 0x0, 0x4cef}, 0x50) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x14) (async) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x318, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x2e0, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x258, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x244, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "08bdb83a72366456367b4fcb8ae56816037f34e6b9f806e22bd96196233518adf9925a64a6736a813519069643dd4bd402836e9c1d71ecbc863a5f75b032a0ea2bba43781137b9b9fb1d896646b3acb67a9577386cf16a4e2ea8a55be42e0c5169da1f115612cab11639fa"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "f049a5a807a16130d447809e1e86f393daed8cc812b6eb12065c1452faa75e9a7a339371a205413aec974f"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_IMMEDIATE_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "fb636886f7bfe5db5dc11cab1966c74280db5de803cb328e1ffc845087bde08f37a90870aa5a23f42bfce8a3c418018804f7703f40d81c036992065c75b20cbad118a80c1a1b529acdc6d26a24832f2619b03ce06a3ae56cb7cee6276a75f5da42b12faf41a4b36bacc96d2e48edf032efa1aac970c8e474120b9415fcef756f0523f1"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x401}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}], {0x14}}, 0x448}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000017c0)={0xffffffffffffffff, r6, 0x26, 0x0, @void}, 0x10) (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000001800)=0x31b, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000001d80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_DELFLOWTABLE={0x188, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x92c7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}, @NFT_MSG_DELOBJ={0x298, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x9b, 0x8, "ec1481f1aa5d20e95df399a1aed7750d0ca17d535b639b3a9f0f2fb708db7ce1cddaf7870541246e2e545b5994a2d815c82f90867129e1eb1e948acedf6868293b3b40538d9c49cf27d9cc8bccaa7eee83ea211a8f9dbf3cdc58287796ca10cf6ee2c431ab80e3f43bb9407348041f5ce8dda06fd9782a2625fcdc99ef2d7f815f6db5ba859f3e78d5da0fffd28ac0b1dfe449d9b1392f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x20, 0x8, "5763c48e12a45d5960f2d75a479db5a85f1ce66d99cb903e93b96bd3"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xfa, 0x8, "6863cc4fc2f218375f2e0ce7e4cd790b9a55065598dcad3d822c03c41324bbe4f021bcfa440f2f497f702d91b6257e4f0aeb98b447e36964500a28ed7307890f0080df8524af78a30f80d0d9f62599d31f31188063961371c9484b5c6f51152079abc0f8cf5a897f0ad70325443d42a1b2bccaaa01b06dffc993a3c48f99a2c3e1ba1899baa55afd63575554e2c41c2d17e99a97b8cbab355f4d4977e8037245f9c1acb658489eb0e1c303cd1ef442381bfddd9a643aa16225a607c7e6c79b68c500c964c285346b4395ac962a654122c7131386f4568baf37af6cb02f6f8af823cec642ddba84c0c1ec65f8296531113ec67985da55"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x8c, 0x8, "e9cf6332a457cc41b21cea5fafbf8853cc3fe2616313cb48c6194a2b0982ab46c5accd0152860b31d27497cee8f6e884ecf18c7e8fe1963499cef3f4d4035d6a2bb0f75bf511ca25962f05247f3bab9ebb6741d78ca624dff238d627fd5c3e35a800e2c71ce851e85622ddc3cecd52eb2c6f4e6c536e0ff7ec8516ee9a638a0faf644cb088e20dd6"}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4b8}}, 0x20000008) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r3) (rerun: 64) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r8, &(0x7f0000002d40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002d00)={&(0x7f0000001e40)={0xeb8, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x24}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffffffff}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x100, 0x111, 0x0, 0x1, {0xfc, 0x5, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6ef}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x101}, @NL80211_ATTR_PEER_MEASUREMENTS={0xd48, 0x111, 0x0, 0x1, {0xd44, 0x5, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x468, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1c00}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff01}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x86c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9e23}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x49}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}]}]}, {0x39c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd79}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x328, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x29c5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x19c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2001}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_MAC={0xa}]}, 0xeb8}}, 0xc0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x4c, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4882}, 0x5) (async, rerun: 64) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002f00), r8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002f80)={'erspan0\x00', &(0x7f0000002f40)={'erspan0\x00', 0x0, 0x8, 0x1, 0x1, 0x7, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x65, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000002fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003000)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000003200)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x4010080}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0xc0, r10, 0x0, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x25}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x76}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000050}, 0x40004) 1.231204956s ago: executing program 7 (id=11706): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r6 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000080)=[{r6}, {r6}], 0x2, 0xf45) r7 = socket(0x11, 0x2, 0x0) close(r7) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={r9, 0x2}, 0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000009c0)={r9, 0x1}, 0x8) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000240), 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYRES8=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0xe}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) r11 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000000940)={&(0x7f00000005c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000600)="cabbbf419894363118400cc3bff790491f54a41a1aed21bccf7e6f8ea69a235918be1806e8bef4738d40429f82316976a441bcf1f734c6927738638ca1e2ea79102ce4020e2573bf0bbe115096537cc7d2a5129b914e901d38eb3dc5306fb6659607f951543da751c770db036c303b5d510f0ce606a500ef226b3acae19869522738e4defb8c774a7ef4437007ed83b989412369256a5a9b101fac8641a474633231db0ea56d91e2a887062e", 0xac}, {&(0x7f00000006c0)="9bac1e1d0f7e74d2acf7aee38fe5345eadfe838d68e8240fce6d54bb756b8d900e2077a2c648e34e2fc9047358415ea474bafc739f7a1d1dba218670ec505b787fbdd2faaa", 0x45}, {&(0x7f0000000740)="f9c2574d6e0f48a8103ee952b4b45282b6e1255ba2228e7cb8769e688c2ef71a114297d7b287770fd83e38ecdf49d3662873607b5bab8741029b21648313cb8a427e08649e5277b1113bc42e21d2a2dee0999110361e9bbcd84600efaccb7ca2718cd8fd2395fe62f63ed3a3551ac1cee553d64a4cc53daa0cd621d2d31a87b9d91825ca26f7a80b04dffe623ec948e19ef43b6ac3b36b211a953486c7bb46fd9b85891fa89b1a767c95c20d0721c9b03c0376eb589236cedb3cf9a53356", 0xbe}, {&(0x7f0000000800)="6a3f848a02a8f5edaa8295f8c2c97ada854f643048c2594e200aa4c2c6e685831eecfb07278c274445c27ec03da36d756f7e97957417c72a80071a16a7a8297d99d30f0ff1982f7f8bfc7b6d", 0x4c}, {&(0x7f0000000880)="f1e9cfca684a78b9160f1af324de99379029005b4fe23f8a64748e6cd092", 0x1e}], 0x5}, 0x80) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xb, &(0x7f0000000980)={&(0x7f0000000280)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x20048002) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r12, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4844) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r13, 0xc00, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x34}}, 0x800) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000478000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c13024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6174655f3000000000080001"], 0xd4}}, 0x4000010) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x15) 1.212086832s ago: executing program 5 (id=11707): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff0000010003"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 959.446224ms ago: executing program 6 (id=11708): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000080)=0x13, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0xc008) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x3) 919.537541ms ago: executing program 3 (id=11709): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x80, 0x10, 0x2, 0x6, {{0x29, 0x4, 0x2, 0x26, 0xa4, 0x67, 0x0, 0xfa, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x60, 0x1, 0x4, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @rr={0x7, 0x1b, 0xbb, [@rand_addr=0x64010101, @rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @noop, @timestamp_addr={0x44, 0x4c, 0xca, 0x1, 0x5, [{@broadcast}, {@local, 0xf}, {@multicast1, 0x1}, {@rand_addr=0x64010100, 0x32}, {@multicast2, 0x9}, {@broadcast, 0x1}, {@multicast1, 0x4}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xf}]}, @ssrr={0x89, 0xb, 0xce, [@loopback, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x4, 0x96, 0x3, 0x7}, @noop]}}}}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x238, 0x12, 0x400, 0x70bd2c, 0x25dfdbff, {0x21, 0x37, 0xed, 0x4, {0x4e22, 0x4e24, [0x80000001, 0xa91, 0xf178, 0x1], [0x6, 0x8000, 0x7, 0x5], r1, [0xfff, 0x6]}, 0x7, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "ce4080bdbba48636fb958dd4e9e2cec7c6dca7bf46843c251a41fa99ae03bc295f5027c629dbaea087f064462cec38b228952c1e209e660988b2851437588c3f4c52824c4ea33f623b2ffb0be6afb7370fc2d4be3ce5c18e898de8d2840187b45452af6297ea861b0d90eb7e6d0689b6e632a33d62e400beb3172ef894d626153217d84decfeb5ab3b9c57638ea62ae866bb74dae39bafcf456a6b522a48c5f828ebc0b185db413dfa7ea0894eb0e091a0cfd342646c0fefe52af47648d35b6b00e618f41d5fb1500bffb48a8e"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "625f8b78dfa5b3b85a772d9525e2a68ca7c80d440dc8f2"}, @INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "51fcfbeba546f507c2de654506268aad2c014b74ba4acd03d99ddf633fa5129a5287919833a0064271c8a5d454a92ba4fde23d92e0222327c2eb1b15507a86d69e5e85c8a88f889f289355e82c9f7716fe77bbfb23d0bb623ce73aaf5622963a00b23512b8246f776d952af83cea0cfb06876e07997d16ffe8b5c76c0d1f89c98409ae9d04fb5f596a1a70ceae1565d2541332c01d7046774d4d6bab47eb02d9223c26ae8925a215b85b8674a01e38a84f9bd141e59a3b2c65769863a037c1a309ef84bad8b440a3c5349bf47dea39ae6487ec8d6380a5c12945513dfcf5629f3fbd0b201664b2ec7b87cc093491e7a7f65e677189"}]}, 0x238}}, 0x20000000) 872.26044ms ago: executing program 6 (id=11710): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a"], 0x190) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) (async) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000000)={'dvmrp1\x00', @ifru_hwaddr=@remote}) (async) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000040)={0x8, 0x9, 0x5, 0x7f, 0x2, 0xf, 0x8, "2b86480f97707d406439194ff1183754244ef4ca", "897c1e769353327b0fef40bfb11a88d1a82e5706"}) 735.477554ms ago: executing program 1 (id=11711): ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) 734.943895ms ago: executing program 5 (id=11712): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) r1 = socket(0xa, 0x5, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00'}, 0x18) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000c80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000dc0)=0xe8) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = gettid() r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r11}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc40}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r14, @ANYBLOB="15000400030000e00a4100000325175362eb4cf204000000"], 0x44}}, 0x0) r15 = getgid() r16 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r18 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r19, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000f40)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000340)="d06fd53f7b0c13a228edb1bb2412b4665f659d14f44006cd625723da695233a2e21b16dc11fc100637a304f57de6799ce11e98ccd780068d858dffdff541b4ecd369ee00dfe34a3eada85ffc3475747fb703129743ab3ea02b147066b955ca4f7d5e9f92e99668db5a794e8da2175c44fbb953e4d92c3b5e229a1383a94d25610177b500b03238fad539f668bca68da55c62cee81bf31bcf60bb891103c16c8c6b5c9213e5ace7810cacbbebd34473b21e5e39c2857a925fe22734d4c20801c267cc13", 0xc3}, {&(0x7f0000000080)="093be09ca265c2b09277057a09015a56ac", 0x11}, {&(0x7f0000000440)="41551a2aec4f73eabff273a8d091ef3aed8db373fd3d15b8782ef279796ad798b515205c9b16cd19390c375f9c6c4fd10ab2cd5f8efdeb06ba82132f48a94af1f78644e93a02862f725f570cc85e8ba1618d5be2a827a1388a3d903f", 0x5c}, {&(0x7f00000004c0)="3c5a2e95832566b7c2c19bdfe7ff86f53b4297a352913338f1b2992dc31fac4fb7d08d1505a59ce0161a799aac7a7b32a84928bdd6d82f156db2255c1b6d80f37f6360c8eead2b2fe52df27d9e279637ef4436584acd8b3fbcf3f6dde27d3f", 0x5f}, {&(0x7f0000000240)="2403d971a9a9a9572146fdb8695a733e7d75ded480dfb0b2161b89d40e3b671e244c80544647c706a4eb71ed88f0eae15d1761fa874a4ebd6443f1", 0x3b}], 0x5, 0x0, 0x0, 0x24000000}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000005c0)="1fb465f785e30cefbd87bd7ebb812668736b7b72b45b4028c588616346968b058c11e48f6d42716b8d3a8d24edf34d4de8f20120d3eca551fb67953691230be5dac06a64df45af75a1f37c881e5160b9a5f05bd6b17c9ac7e138e436ab9d5918d8703037368e27f1bcfc01163b9976aa5d4bff5f059df5471661a30d312da6416548990073f59fc96c04027d2a0fbaa07addd25582b37bf079bb4b2c4ac3226c22a523f775e046428b8f4ac7b20572832bac2336cf3a780d36a0f42ebdd2d927212ae7191e7099785928acbb419acc859de37dcbdaf7d3402e52df", 0xdb}, {&(0x7f00000006c0)="ac84652f888af4c13ca9c54f009aace0d027cf0f23046e8bab3cc3fbfe004e6d967beb979c48c734a546cb68bd1706c1fc8faa7f6fef0889a4787b28e45091a12d0dea7f17375d87a0b3dbe4e69a25cc101d646f381863304b732df506a03ca2045689c88ea486959d37c900e19e37eb79b87bc11dacb9fa6f9cc414dd3b7a91f9314b942a496464ef9805f6f15d649e17d282b009e64d57ebc20889", 0x9c}, {&(0x7f0000000780)="72f81216ac1d0911d3fd844401675e8f445deeeaaf399186b7ded9ccf23474dd821b", 0x22}, {&(0x7f00000007c0)="7e34e3dd95", 0x5}, {&(0x7f0000000800)="f3d569db026d8d81e27d260b646ca843510b6291ed720a20e766ce", 0x1b}, {&(0x7f0000000840)="416f92a7c7eb95f8d4", 0x9}, {&(0x7f0000000880)="a634753f14393ec734db474600d08cc6f497ceab6f44c092a49fb7190458aeebeabdafead4f5352e8c297ef7bd07ff673ac7d578c802b8f1f62c5014bba5b9d76cca0d16f0741215394dbeb4f805f2ad6c7e6879f95bd89666ad2a011c25e7365caa08f4fa22aced3f103dfea555591a767a9145fa7843c4057f94c6b9db2706a240bba993121e87a8abc6986ce0b8a38fc5e92c24829398bca0fa6c9dc607dfa4a48db521665937f3efa3a3e4663f7628bfc278fc95ad", 0xb7}, {&(0x7f0000000940)="bfe10418cdf0f6b724f8ebda37f8819b2937af541419d6362d80cc487b53c53e3cc0735bdc2fb07da4765cfd519e73c2f3dbdebdb9180c4dfc2068aa598ca4d93c4abd0980ed04c4baa36ae57cc3d56d2cfb416e7155ac45fde24416b768d6ef7cc124d3250e7970884767ba700b55", 0x6f}, {&(0x7f00000009c0)="bf285024cc31ff3a791ebce733ffaca9a4e03dcfa2b2d50c19bd3076c4d053723ea2bfd7480642663e9c3053af05d25c9875d1cda53fbe96ccd8da1b3213319030a4b0dcf89853cd44fabd58cd0f370d0dc859c8a521b75541f97892329cfb805e5623ef3a48878611502a2548a43a7117dcd0c02d333e655508d32539eaaee4ecb5fe64674557689907017f03040c08121c7fa3a77432f06e0336eaa632c648aa93bc548693eeeef9cd796fe4fa53a4f8cc00cd1345d2f194a984f6e4be6f87559ea44094a016a96c4d5ab53d8a95768be7a3066ff71004a9", 0xd9}, {&(0x7f0000000ac0)="fe9dec52f7db1391c00148ffa5d2430b08325b16ab7afff80c8b1fcad5798b95eaf2717bc7a20708ec0e93a1635a8fd9e65834995ba1a5762f309da87dca2a1f792172b7ca8c470c4230bc167bab64f8615ac927e3205a650bbd4657a07d64652ef74cd22c243bc56473eb2ddb8c6b7ebaea2c36e8df8f9a99a783", 0x7b}], 0xa, &(0x7f0000000e00)=[@rights={{0x24, 0x1, 0x1, [r6, r2, r0, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r2, r3, r10, r2, r1, r3, r2, r0]}}, @rights={{0x30, 0x1, 0x1, [r2, r3, r0, r2, r2, r2, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r11, r14, r15}}}, @rights={{0x2c, 0x1, 0x1, [r16, r3, r17, r2, r2, r18, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r19, 0xffffffffffffffff]}}], 0x138, 0x50}}], 0x2, 0x48000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e5012abd7000ffffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0xb, 0xfe00, 0x41}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 734.256642ms ago: executing program 3 (id=11713): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r0, 0x1) socket(0x2, 0x3, 0xff) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x41, 0x4, 0x700000, 0x7, 0x7]}, &(0x7f0000000140)=0x54) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 690.410864ms ago: executing program 6 (id=11714): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000580)={0x0, 'wg1\x00', {0x4}, 0x6}) (async) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000003c0)={r3, 0x80000001, 0xfff, 0xfffffffffffffff6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r4, 0x32, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440), &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0}, 0x40) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback=r2, r4, 0x32, 0x4, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) accept4$alg(r3, 0x0, 0x0, 0x0) (async, rerun: 64) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des-generic)\x00'}, 0x58) (async, rerun: 64) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='^B\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r8, &(0x7f0000000240)="216b084187e5a835009a79ff4e13f86a3ba1c9a24caafcc4a74f9c2056054867d40f82c977d283389058d4011b24327d13162ba00c9aff35550b1af94db7dafc4d867ce12f29ab5b7ca1630c499067dff1ddb4d8e200ca93bf19e630af1f9e54d109fdcff5177aae56391d09a624109df74cc24f9bcd21cb706a21aebc9c4d6fb963aa4dea52524fac006f22be69ab328dd92d4b89ff72888fe0b719955ad6a0643644f39ba38c249753e0e687bb532845e168fc163e36a998619202dedd9a08950907ee72ade714c222ad1f13ea2b0ce08d642dd4c1023b190cc282d9ec3008ab5c3f71d06cc2497e6754d167", &(0x7f0000000100)=""/11, 0x4}, 0x20) (async, rerun: 64) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0xe) (rerun: 64) 612.395077ms ago: executing program 1 (id=11715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x20, 0x72, 0x333, 0x6, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x20000050) 439.156068ms ago: executing program 5 (id=11716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x11a, 0x1, 0xce}}], 0x8}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x1210, 0x1, 0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf251688a300050002000100000018000180140002006e657464657673696d300000000000000500030001000000b99b49e0c7ef7a181d5dcd87865fae774b4e794aff8f0f280452aefaaa6e54"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r8, @ANYBLOB="408052"], 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xa4, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0xf5490617792e4b63) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r9 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@rose, @default, @default, @null, @null, @default, @remote, @default]}, &(0x7f0000000000)=0x48) ioctl$SIOCAX25DELFWD(r9, 0x89eb, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 385.767685ms ago: executing program 3 (id=11717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040500000000000000002c9654320006000640bff200000500010001"], 0x24}}, 0x20000020) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r1, &(0x7f0000000000)='s', 0x1, 0x4801, 0x0, 0x0) close(0x3) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000027ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e8f24a4cf45eec84d95f51021a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 380.526449ms ago: executing program 1 (id=11718): r0 = socket(0x2a, 0x2, 0x0) accept4$llc(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'veth1_to_bridge\x00', {0x1000}, 0x23e}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xc8, 0x2}}}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8b, 0xf, 0x1, 0x0, 0x0, 0x9, 0x6, 0x3}}, {0xa, 0x2, [0x0, 0x3, 0xcb8]}}, {{0x1c, 0x1, {0x66, 0x5b, 0x2, 0x8, 0x2, 0x3, 0x0, 0x3}}, {0xa, 0x2, [0x4, 0x0, 0xfff8]}}, {{0x1c, 0x1, {0xf5, 0x58, 0x47, 0x7, 0x1, 0x7, 0x5, 0x4}}, {0xc, 0x2, [0x6, 0x4, 0x2, 0x5]}}]}]}, 0xc0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r4, 0x720, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40045}, 0xd0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r3) 312.009964ms ago: executing program 6 (id=11719): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x3, 0x12) r1 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000600)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x80, 0x1, 0x48ac, 0x1, 0x855, 0x8, 0x7ff, 0x6, 0x315, 0x9, 0xba, 0x3, 0xf52, 0x2, 0x1, 0x0, 0x200, 0x0, 0x9, 0x8, 0x1, 0x4, 0x9, 0x8, 0x3, 0x3, 0x53000000, 0xd, 0x200, 0x7, 0x1, 0xc2e, 0x1, 0x0, 0xb, 0x10001, 0x4b, 0x8, 0x9, 0x0, 0x4, 0x1, 0xc, 0x1, 0x2, 0xfff, 0x9e, 0xdb8f, 0x8, 0x5, 0x80000, 0x280a, 0x81, 0x4, 0x78f, 0x6, 0x8, 0x1, 0x65aa, 0xfffffff7, 0x400, 0x3bb, 0x7, 0x5de, 0x9, 0x1d6, 0xfffff001, 0x3ff0000, 0x10001, 0x1, 0x0, 0xa330, 0xfffffff8, 0x4, 0x8, 0x5, 0x8000, 0x4, 0xf, 0x7, 0x40, 0x1, 0xfff, 0x6, 0x7, 0x2b4379ae, 0x6, 0x650, 0x92d9, 0x39, 0x3, 0x5, 0xf2fe, 0x40, 0x1, 0x1000, 0xfff, 0x10001, 0x7, 0x1, 0x9, 0x7, 0x7, 0x3, 0x10, 0x4, 0x4, 0xe, 0xf9f, 0xd, 0xa, 0x8, 0x8, 0x9, 0x3, 0x6, 0x5, 0x41502aaf, 0x7ff, 0x7, 0x4, 0x3, 0xf69aeb8, 0x7, 0x80000000, 0x2, 0xb4], "c1b43f6a8516d97da57aab07b51cae956afc7aa3895b14ef95fa777034e351e06fb6a17dacabed1e8e82dded6569c98e30863b9c157913331021de18651d585f3e73cfa74843d306ca2a129c0f540a66fe6f17e6b458809d2ead92eeac2f28ccf56123107b774135"}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32=r2, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x134, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x5b, 0x6, "db4c47688a9394baf16d1c7c9f33ad6c9d710f0b4042f50a11b7f0df9a7d0e9a286f1e5947d4c2600aa262485024edbf8ba1e04d51fca5c7f75a3e35d242a351065619854a8496ee8fb6adf0f396f24a1d524d49df247b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x230}, 0x1, 0x0, 0x0, 0x60048810}, 0x2400c001) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000100)={'macvlan0\x00', 0x2}) 229.688571ms ago: executing program 5 (id=11720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000980)={0x4, 0x0, {0x2, @struct={0xfffffffb, 0x9}, 0x0, 0x6, 0xffff, 0x7, 0x2, 0x6, 0x0, @usage=0x4, 0xffffffff, 0xb, [0x1ff, 0x43, 0x8, 0x7fff, 0x2, 0x8001]}, {0x8000000000000000, @struct={0x7, 0xc}, 0x0, 0x100000000, 0x2bb, 0x80000000, 0x88, 0x629, 0x17352eaae774812c, @struct={0x9b, 0x1}, 0x6, 0x7, [0x4, 0x66f8, 0x7, 0x257, 0xfffffffffffffffd, 0xfffffffffffffffd]}, {0xffff, @struct={0x9, 0x5}, 0x0, 0x10001, 0x7, 0x5, 0xfffffffffffffffa, 0x1d8d, 0x28, @struct={0x23, 0x3}, 0xf, 0x7, [0x2, 0x8, 0x0, 0x2, 0x631, 0x4]}, {0x0, 0x5, 0x3}}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001100)={0x0, 0x4, 0x1, [0x40000000000000, 0x6, 0xb, 0x5, 0x4], [0x4, 0x5, 0x4, 0x0, 0x33, 0x6, 0x26, 0x0, 0x64, 0x40, 0x2, 0x3, 0x7, 0xb, 0x7, 0xa, 0x4, 0xf, 0x1, 0x100, 0x5, 0x10000, 0x11d1, 0x2, 0x9, 0xff, 0xfff, 0x7fff, 0x80000000, 0x2, 0x4, 0x5, 0xfffffffffffffff9, 0x100, 0x5, 0x8, 0x10, 0x2, 0xe, 0x4, 0x4, 0x3, 0x3, 0xa21b, 0x6, 0x2, 0x7ff, 0x6, 0x3, 0xe, 0x5, 0x2, 0x0, 0x2, 0x8, 0x1, 0xaa90, 0x0, 0x5, 0x7, 0xfffffffffffff001, 0xfffffffffffffff0, 0x6, 0x1, 0x9, 0x7fffffffffffffff, 0x8000000000000001, 0x100000000, 0x5, 0x58, 0x0, 0x6, 0x4, 0x3, 0x2, 0x65b7, 0x2, 0xa, 0x10000, 0x3, 0x5e25, 0x6, 0x5, 0x4, 0x8, 0x80000000000, 0x4, 0xc033fa0, 0x7f, 0x5, 0x100000000, 0x7, 0x5, 0xc, 0x223, 0xfffffffffffffffa, 0x2, 0x7, 0x81, 0x1, 0x6, 0x8, 0x4, 0x55e, 0x1, 0x8, 0x1, 0x5, 0x3ff, 0x4, 0xf8a, 0x80000001, 0x8, 0x6, 0x1, 0x4, 0x7, 0x5, 0x800, 0x6, 0xe52]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001540)={0x0, 0x0, {0x0, @usage, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001940)={0x5, 0x5, {0x1, @struct={0x1, 0xf}, r2, 0x1, 0xffffffffffffabff, 0x5, 0x5, 0x1000, 0x440, @struct={0x9b, 0x5bc7}, 0xe, 0x9, [0x2, 0x101, 0x1, 0xffffffffffffffff, 0xc0, 0xffffffffffff2981]}, {0x4, @usage=0x100, r3, 0x2, 0x9, 0x8, 0x2, 0x8, 0x40, @struct={0x7, 0x835}, 0x7, 0x8, [0x4, 0x9, 0x5, 0xc2c, 0xa00000000, 0x8]}, {0x1, @struct={0xeac, 0x80000000}, r4, 0x8001, 0x2, 0x8972, 0xfff, 0x6, 0x41, @struct={0x2, 0x80}, 0x3, 0x6382, [0x5, 0xaf35, 0x800, 0x6b7, 0x1, 0x100000000]}, {0x5, 0x3, 0x401}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) (async) socket$inet(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) r11 = gettid() ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=r11) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="f6ff0001", @ANYRES16=r6, @ANYBLOB="010000000000000000000300000004000180"], 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, r6, 0x820, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x6, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaa0}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2000004c) 204.099431ms ago: executing program 3 (id=11721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac05}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 148.231122ms ago: executing program 6 (id=11722): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) (async) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="a6dc628a600b17cbe584d2e73c68fe1865f3fbcf0e16db6e759d420151c6c5750400000000000008", 0x28}], 0x1}}], 0x1, 0x4040880) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000) (async) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) 147.622485ms ago: executing program 7 (id=11723): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-5lx \x00'}, 0x20) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0xda1c5000) shutdown(r4, 0x0) splice(r4, 0x0, r3, 0x0, 0x100000003, 0xa) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x24, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2100000014000000090000000000000020000400", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000000010000000400000000000000000000000000000300000000"], 0x50) 146.084128ms ago: executing program 1 (id=11724): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 27.494553ms ago: executing program 6 (id=11725): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) (async) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004016) (async) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 26.970423ms ago: executing program 1 (id=11726): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001300000000000800120000000000"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128015000100697036746e6c00000c00028008000100", @ANYRES32=0x0, @ANYBLOB="eeff140000000000"], 0x44}, 0x9}, 0x0) r2 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xbd, 0xa7, &(0x7f0000000140)="a7b7519397c4e5122b957874086787489f545a2abb4a9249a777131cbd84ce898252b6cefac9c1377da072ed2eeb08fa475b669579f10adadfac29e82310f9c15af50974f210829f58ce7602603c7400dc37efe67789fcd0afed1822657683661038b79c3330d3391d488393d0678c09b784f3e494bd35236d3787555c7ef3a0e9b0ab59147ceb33cb9fd3e1e4a082a7cb14c6eb33ba167767c104d6a5b98eb18bc7bf4639a0554ee085cea77df2de0d7966bc540b519da189cee8ba7f", &(0x7f00000003c0)=""/167, 0x7, 0x0, 0x7b, 0x9c, &(0x7f0000000480)="e55a3a18458742f80ddc5875fd5bd82abf82ce57fec951ee36d3aa84927a7b0e7b532078d6a221c79d6b330dde56179f9fb9dd0b2078d013665d0b953d31ac67fa07a755c2b5a3a76a581004e7f945c57b16358827a6749ec08fbe7f023dddcb0bd1c9fa57c1da8388fe3bfbdb8ff907f986e154123c1c496637d7", &(0x7f0000000500)="0fdc0cf92f9d48eba9b41067c4cda0b3383c887db8302e7f2a43dc6f2030ea8cf7d4ad6d08c46fdb77e818d0bd9c8ca2873edc5d89b71d170312e6f664d8dff3bb6e9ab216bf18f9d3b3e5ea324298d423981b697b88e5f7ecb624ca8637ded7a7e6215cb8c35fbdcf8075c7273873ea33c073790ae2a1c401e8b97256634acd2eee7939fba526e4543441ac0f086b9c35f418716507fa4805a9e09d", 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x444, 0x8}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001300000000000800120000000000"], 0x44}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128015000100697036746e6c00000c00028008000100", @ANYRES32=0x0, @ANYBLOB="eeff140000000000"], 0x44}, 0x9}, 0x0) (async) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xbd, 0xa7, &(0x7f0000000140)="a7b7519397c4e5122b957874086787489f545a2abb4a9249a777131cbd84ce898252b6cefac9c1377da072ed2eeb08fa475b669579f10adadfac29e82310f9c15af50974f210829f58ce7602603c7400dc37efe67789fcd0afed1822657683661038b79c3330d3391d488393d0678c09b784f3e494bd35236d3787555c7ef3a0e9b0ab59147ceb33cb9fd3e1e4a082a7cb14c6eb33ba167767c104d6a5b98eb18bc7bf4639a0554ee085cea77df2de0d7966bc540b519da189cee8ba7f", &(0x7f00000003c0)=""/167, 0x7, 0x0, 0x7b, 0x9c, &(0x7f0000000480)="e55a3a18458742f80ddc5875fd5bd82abf82ce57fec951ee36d3aa84927a7b0e7b532078d6a221c79d6b330dde56179f9fb9dd0b2078d013665d0b953d31ac67fa07a755c2b5a3a76a581004e7f945c57b16358827a6749ec08fbe7f023dddcb0bd1c9fa57c1da8388fe3bfbdb8ff907f986e154123c1c496637d7", &(0x7f0000000500)="0fdc0cf92f9d48eba9b41067c4cda0b3383c887db8302e7f2a43dc6f2030ea8cf7d4ad6d08c46fdb77e818d0bd9c8ca2873edc5d89b71d170312e6f664d8dff3bb6e9ab216bf18f9d3b3e5ea324298d423981b697b88e5f7ecb624ca8637ded7a7e6215cb8c35fbdcf8075c7273873ea33c073790ae2a1c401e8b97256634acd2eee7939fba526e4543441ac0f086b9c35f418716507fa4805a9e09d", 0x0, 0x0, 0x3}, 0x50) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x444, 0x8}) (async) 26.487989ms ago: executing program 5 (id=11727): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x1, 'pimreg1\x00', {}, 0x2}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x8, 0x0, 0x3}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x543504b4}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4deef2039e9c5aca}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x51}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f00000004c0)=0x4) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local, {[@rr={0x7, 0x3, 0x2b}]}}, @redirect={0x8, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x1, 0x64, 0xff, 0x0, 0x89, 0x0, @remote, @remote}}}}}}, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xfffffffffffffedb, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24048094) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, [0x0, 0xff, 0x2, 0x8001, 0x7, 0x2, 0x5, 0x6, 0xf22, 0x9f21, 0x1, 0x4, 0x1000, 0x2, 0x8]}, &(0x7f0000000480)=0x100) 8.927632ms ago: executing program 3 (id=11728): syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf251e00000004002f802c002f801c0003800500020002000000080001000200000008000400020000000c0002000200aaaaaaaaaaaa08000300", @ANYRES32=0x0, @ANYBLOB="503bc5cf267ddeddc457b59a18121f3b14f474c0d883ed3929f2765f062d81bb826f3302d4e4b2149e1b5aae0aacd1e5f4992d44a9b47986e125f2307a241204"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x16) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56641, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0xc, 0xffff}, {0x4, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r10, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002060500000000000000000000000000110003006861736a3a69702c6d61726b000000000900020073797a30000000000500040000000000050005000280000005000100060000000c0007800800080000000000"], 0x58}}, 0x0) 0s ago: executing program 7 (id=11729): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289", 0x1f}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0xdac}], 0x1, 0x0, 0x0) r2 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x0, 0x2, 0x7, 0x5, 0x4, 0x0, [{0x0, 0x9, 0x5, '\x00', 0x800}, {0x20000000000, 0x101, 0x2, '\x00', 0x3}, {0x5, 0x6, 0xffffffffffffffff, '\x00', 0x1200}, {0x5, 0x66, 0x239, '\x00', 0x6400}]}) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.6.9816'. [ 1037.073018][T15640] tipc: Node number set to 4162900891 [ 1037.401005][ T7579] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1037.483947][ T7582] tipc: Enabling of bearer rejected, failed to enable media [ 1037.642732][ T7591] x_tables: duplicate underflow at hook 1 [ 1037.741716][ T7597] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1037.868623][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9832'. [ 1037.887050][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9832'. [ 1037.899634][ T7605] openvswitch: netlink: Message has 4 unknown bytes. [ 1038.065795][ T7612] gtp0: entered promiscuous mode [ 1038.075120][ T7616] netlink: 'syz.3.9836': attribute type 1 has an invalid length. [ 1038.093067][ T7612] gtp0: entered allmulticast mode [ 1038.161305][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9838'. [ 1038.435375][ T7637] netlink: 159888 bytes leftover after parsing attributes in process `syz.5.9845'. [ 1038.442882][ T7639] netlink: 'syz.6.9846': attribute type 30 has an invalid length. [ 1038.465851][ T7637] netlink: 159888 bytes leftover after parsing attributes in process `syz.5.9845'. [ 1038.550450][ T7644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1038.591492][ T7648] netlink: 'syz.3.9849': attribute type 1 has an invalid length. [ 1038.656459][ T7644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1038.689721][ T7644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1038.709830][ T7648] bond1: entered promiscuous mode [ 1038.715186][ T7648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1038.728556][ T7644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1038.835550][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9849'. [ 1038.838652][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9850'. [ 1038.845651][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9849'. [ 1039.096381][ T7676] netlink: 'syz.5.9854': attribute type 3 has an invalid length. [ 1039.153069][ T7676] netlink: zone id is out of range [ 1039.158835][ T7676] netlink: zone id is out of range [ 1039.164062][ T7676] netlink: zone id is out of range [ 1039.172089][ T7676] netlink: zone id is out of range [ 1039.177611][ T7676] netlink: zone id is out of range [ 1039.184487][ T7676] netlink: zone id is out of range [ 1039.190572][ T7676] netlink: zone id is out of range [ 1039.195904][ T7676] netlink: zone id is out of range [ 1039.210797][ T7676] netlink: zone id is out of range [ 1039.217119][ T7676] netlink: zone id is out of range [ 1039.224747][ T7639] netlink: 'syz.6.9846': attribute type 30 has an invalid length. [ 1039.238797][ T7639] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1039.281376][ T7684] netlink: 'syz.1.9856': attribute type 1 has an invalid length. [ 1039.324786][ T7684] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1039.418173][ T7690] Unsupported ieee802154 address type: 0 [ 1039.594015][ T7698] netlink: 'syz.3.9860': attribute type 11 has an invalid length. [ 1039.765717][ T7710] bridge6: entered allmulticast mode [ 1039.867986][ T7717] ieee802154 phy0 wpan0: encryption failed: -22 [ 1039.961931][ T7718] v: renamed from vlan0 [ 1040.433592][ T7745] __nla_validate_parse: 1 callbacks suppressed [ 1040.433613][ T7745] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9870'. [ 1040.438714][ T7749] netlink: 'syz.3.9872': attribute type 1 has an invalid length. [ 1040.506967][ T7749] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1040.661324][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9872'. [ 1040.777145][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 1041.012760][ T7751] bond2 (unregistering): Released all slaves [ 1041.073281][ T7774] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9877'. [ 1041.115225][ T7753] ip6tnl1: entered promiscuous mode [ 1041.125313][ T7753] ip6tnl1: entered allmulticast mode [ 1041.211616][ T7756] bond6: entered promiscuous mode [ 1041.216995][ T7756] bond6: entered allmulticast mode [ 1041.222979][ T7756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1041.438758][ T7790] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9882'. [ 1041.594898][ T7806] netlink: 'syz.7.9887': attribute type 33 has an invalid length. [ 1042.237475][ T7835] IPVS: Unknown mcast interface: pim6reg [ 1042.243957][ T7835] netlink: 'syz.5.9892': attribute type 4 has an invalid length. [ 1042.276570][ T7835] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9892'. [ 1042.432445][ T7838] syzkaller1: entered promiscuous mode [ 1042.476551][ T7838] syzkaller1: entered allmulticast mode [ 1042.570285][ T7853] netlink: 'syz.6.9897': attribute type 1 has an invalid length. [ 1042.587215][ T7853] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9897'. [ 1042.727976][ T7853] nbd3: detected capacity change from 0 to 127 [ 1042.767246][ T52] block nbd3: Receive control failed (result -104) [ 1042.917078][ T30] audit: type=1107 audit(1766762679.834:13): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='K/kOtX\'ͬ"6Q9#*!"jҫ;DF~ɵf4oQh~"/u#ߨ]17 hy&J-l [ 1042.917078][ T30] ' [ 1043.128927][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1043.211775][ T7885] netlink: 16179 bytes leftover after parsing attributes in process `syz.7.9905'. [ 1043.338955][ T7890] syzkaller1: entered promiscuous mode [ 1043.356807][ T7890] syzkaller1: entered allmulticast mode [ 1043.386893][ T7894] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9908'. [ 1043.816362][ T7896] batman_adv: batadv0: Interface deactivated: dummy0 [ 1044.295295][ T7896] team1: left promiscuous mode [ 1044.310885][ T7896] bond1: left promiscuous mode [ 1044.315862][ T7896] bridge3: left promiscuous mode [ 1044.677570][ T7908] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9906'. [ 1044.762738][T20739] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.774726][T20739] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.791512][T20739] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.802085][T20739] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.890664][T20739] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.902850][T20739] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.911770][T20739] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.953452][T20739] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.121963][ T7956] syzkaller1: entered promiscuous mode [ 1045.134784][ T7956] syzkaller1: entered allmulticast mode [ 1045.435386][ T7979] pimreg: left allmulticast mode [ 1045.458724][ T7983] __nla_validate_parse: 2 callbacks suppressed [ 1045.458749][ T7983] netlink: 19 bytes leftover after parsing attributes in process `syz.6.9929'. [ 1045.781751][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9932'. [ 1045.925820][ T7996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1046.395134][ T8043] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1046.491149][ T8047] dvmrp0: entered allmulticast mode [ 1046.577306][ T8056] lo: entered allmulticast mode [ 1046.582887][ T8056] tunl0: entered allmulticast mode [ 1046.590589][ T8056] gre0: entered allmulticast mode [ 1046.601348][ T8056] gretap0: entered allmulticast mode [ 1046.612497][ T8056] erspan0: entered allmulticast mode [ 1046.621960][ T8056] ip6_vti0: entered allmulticast mode [ 1046.636146][ T8056] sit0: entered allmulticast mode [ 1046.642419][ T8056] ip6tnl0: entered allmulticast mode [ 1046.649462][ T8056] ip6gre0: entered allmulticast mode [ 1046.655274][ T8056] ip6gretap0: entered allmulticast mode [ 1046.663438][ T8056] bridge0: entered allmulticast mode [ 1046.670407][ T8056] vcan0: entered allmulticast mode [ 1046.680041][ T8056] bond0: entered allmulticast mode [ 1046.692120][ T8056] nlmon0: entered allmulticast mode [ 1046.706904][ T8056] caif0: entered allmulticast mode [ 1046.712936][ T8056] batadv0: entered allmulticast mode [ 1046.724171][ T8056] vxcan0: entered allmulticast mode [ 1046.731623][ T8056] vxcan1: entered allmulticast mode [ 1046.740464][ T8056] wg0: entered allmulticast mode [ 1046.754038][ T8056] wg1: entered allmulticast mode [ 1046.762100][ T8056] wg2: entered allmulticast mode [ 1046.769093][ T8056] veth0_to_bridge: entered allmulticast mode [ 1046.781443][ T8056] bridge_slave_0: entered allmulticast mode [ 1046.791021][ T8056] veth1_to_bridge: entered allmulticast mode [ 1046.801940][ T8056] bridge_slave_1: entered allmulticast mode [ 1046.810814][ T8056] veth0_to_bond: entered allmulticast mode [ 1046.822353][ T8056] : entered allmulticast mode [ 1046.827907][ T8056] veth1_to_bond: entered allmulticast mode [ 1046.836312][ T8056] bond_slave_1: entered allmulticast mode [ 1046.843771][ T8056] veth0_to_team: entered allmulticast mode [ 1046.850518][ T8056] C: entered allmulticast mode [ 1046.855857][ T8056] veth1_to_team: entered allmulticast mode [ 1046.864854][ T8056] team_slave_1: entered allmulticast mode [ 1046.871901][ T8056] veth0_to_batadv: entered allmulticast mode [ 1046.881876][ T8056] batadv_slave_0: entered allmulticast mode [ 1046.890849][ T8056] veth1_to_batadv: entered allmulticast mode [ 1046.913854][ T8056] batadv_slave_1: entered allmulticast mode [ 1046.927530][ T8056] xfrm0: entered allmulticast mode [ 1046.936117][ T8056] veth0_to_hsr: entered allmulticast mode [ 1046.949050][ T8056] hsr_slave_0: entered allmulticast mode [ 1046.960732][ T8056] veth1_to_hsr: entered allmulticast mode [ 1046.972418][ T8056] hsr_slave_1: entered allmulticast mode [ 1046.982817][ T8056] veth1_virt_wifi: entered allmulticast mode [ 1046.994218][ T8056] veth0_virt_wifi: entered allmulticast mode [ 1047.005185][ T8056] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1047.013975][ T8056] veth1_vlan: entered allmulticast mode [ 1047.024875][ T8056] veth0_vlan: entered allmulticast mode [ 1047.031821][ T8056] vlan0: entered allmulticast mode [ 1047.041669][ T8056] vlan1: entered allmulticast mode [ 1047.050111][ T8056] macvlan0: entered allmulticast mode [ 1047.059336][ T8056] macvlan1: entered allmulticast mode [ 1047.067872][ T8056] ipvlan0: entered allmulticast mode [ 1047.073625][ T8056] ipvlan1: entered allmulticast mode [ 1047.080689][ T8056] veth1_macvtap: entered allmulticast mode [ 1047.087916][ T8056] veth0_macvtap: entered allmulticast mode [ 1047.098677][ T8056] macvtap0: entered allmulticast mode [ 1047.108228][ T8056] macsec0: entered allmulticast mode [ 1047.113790][ T8056] geneve0: entered allmulticast mode [ 1047.124866][ T8056] geneve1: entered allmulticast mode [ 1047.133404][ T8056] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1047.142343][ T8056] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1047.150946][ T8056] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1047.162037][ T8056] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1047.173755][ T8056] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 1047.185773][ T8056] mac80211_hwsim hwsim107 wlan0: entered allmulticast mode [ 1047.193632][ T8056] mac80211_hwsim hwsim108 wlan1: entered allmulticast mode [ 1047.202991][ T8056] veth2: entered allmulticast mode [ 1047.208564][ T8056] veth3: entered allmulticast mode [ 1047.214383][ T8056] vxlan0: entered allmulticast mode [ 1047.222226][ T8056] vti60: entered allmulticast mode [ 1047.228809][ T8056] veth4: entered allmulticast mode [ 1047.234624][ T8056] veth5: entered allmulticast mode [ 1047.243015][ T8056] @: entered allmulticast mode [ 1047.249785][ T8056] mac80211_hwsim hwsim118 wlan2: entered allmulticast mode [ 1047.259273][ T8056] mac80211_hwsim hwsim119 wlan3: entered allmulticast mode [ 1047.267378][ T8056] gre1: entered allmulticast mode [ 1047.273537][ T8056] bond1: entered allmulticast mode [ 1047.280260][ T8056] : entered allmulticast mode [ 1047.289189][ T8056] mac80211_hwsim hwsim122 wlan4: entered allmulticast mode [ 1047.298334][ T8056] mac80211_hwsim hwsim107 pim6reg0: entered allmulticast mode [ 1047.306243][ T8056] veth0: entered allmulticast mode [ 1047.312316][ T8056] veth1: entered allmulticast mode [ 1047.318754][ T8056] geneve2: entered allmulticast mode [ 1047.325498][ T8056] gre2: entered allmulticast mode [ 1047.343694][ T8056] bond2: entered allmulticast mode [ 1047.350569][ T8056] syztnl2: entered allmulticast mode [ 1047.356969][ T8056] bond3: entered allmulticast mode [ 1047.362854][ T8056] gretap1: entered allmulticast mode [ 1047.371750][ T8056] veth6: entered allmulticast mode [ 1047.377586][ T8056] veth7: entered allmulticast mode [ 1047.384883][ T8056] team0: left promiscuous mode [ 1047.391651][ T8056] ip6gre1: entered allmulticast mode [ 1047.399484][ T8056] gre3: entered allmulticast mode [ 1047.420439][ T8056] xfrm1: entered allmulticast mode [ 1047.426240][ T8056] gretap2: entered allmulticast mode [ 1047.432111][ T8056] bond4: entered allmulticast mode [ 1047.438829][ T8056] ip6tnl1: entered allmulticast mode [ 1047.446512][ T8056] bridge1: entered allmulticast mode [ 1047.453101][ T8056] veth8: entered allmulticast mode [ 1047.459780][ T8056] veth9: entered allmulticast mode [ 1047.465297][ T8056] veth10: entered allmulticast mode [ 1047.471353][ T8056] veth11: entered allmulticast mode [ 1047.478992][ T8056] veth12: entered allmulticast mode [ 1047.484553][ T8056] veth13: entered allmulticast mode [ 1047.490798][ T8056] veth14: entered allmulticast mode [ 1047.497202][ T8056] veth15: entered allmulticast mode [ 1047.502739][ T8056] veth16: entered allmulticast mode [ 1047.509002][ T8056] veth17: entered allmulticast mode [ 1047.514504][ T8056] veth18: entered allmulticast mode [ 1047.520259][ T8056] veth19: entered allmulticast mode [ 1047.525871][ T8056] veth20: entered allmulticast mode [ 1047.531775][ T8056] veth21: entered allmulticast mode [ 1047.537710][ T8056] veth22: entered allmulticast mode [ 1047.543127][ T8056] veth23: entered allmulticast mode [ 1047.548837][ T8056] veth24: entered allmulticast mode [ 1047.554212][ T8056] veth25: entered allmulticast mode [ 1047.559988][ T8056] veth26: entered allmulticast mode [ 1047.566001][ T8056] veth27: entered allmulticast mode [ 1047.572321][ T8056] veth28: entered allmulticast mode [ 1047.578020][ T8056] veth29: entered allmulticast mode [ 1047.583569][ T8056] veth30: entered allmulticast mode [ 1047.589346][ T8056] veth31: entered allmulticast mode [ 1047.595239][ T8056] veth32: entered allmulticast mode [ 1047.601293][ T8056] veth33: entered allmulticast mode [ 1047.607194][ T8056] veth34: entered allmulticast mode [ 1047.612803][ T8056] veth35: entered allmulticast mode [ 1047.618236][ T8056] syztnl0: entered allmulticast mode [ 1047.623643][ T8056] virt_wifi0.4: entered allmulticast mode [ 1047.630952][ T8056] veth36: entered allmulticast mode [ 1047.637641][ T8056] veth37: left promiscuous mode [ 1047.644394][ T8056] bond5: left promiscuous mode [ 1047.649911][ T8056] bond5: entered allmulticast mode [ 1047.663784][ T8056] bridge2: entered allmulticast mode [ 1047.671864][ T8056] 9: entered allmulticast mode [ 1047.677492][ T8056] bond6: entered allmulticast mode [ 1047.682841][ T8056] bond7: entered allmulticast mode [ 1047.707545][ T8061] veth3: entered allmulticast mode [ 1047.730229][T20743] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1047.755087][T20743] netdevsim netdevsim6 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1047.765472][T20743] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.802606][T20743] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1047.828418][T20743] netdevsim netdevsim6 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1047.849769][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9957'. [ 1047.862895][T20743] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.946775][T20743] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1047.965595][T20743] netdevsim netdevsim6 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1047.995932][T20743] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.019909][T20743] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1048.057481][T20743] netdevsim netdevsim6 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1048.078928][T20743] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.552956][ T8128] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1048.589603][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9975'. [ 1048.823811][ T8149] net_ratelimit: 45 callbacks suppressed [ 1048.823829][ T8149] netlink: zone id is out of range [ 1048.855831][ T8149] netlink: zone id is out of range [ 1048.876193][ T8149] netlink: zone id is out of range [ 1048.882968][ T8149] netlink: zone id is out of range [ 1048.895505][ T8149] netlink: zone id is out of range [ 1048.912238][ T8149] netlink: zone id is out of range [ 1048.932512][ T8149] netlink: zone id is out of range [ 1048.940738][ T8149] netlink: zone id is out of range [ 1048.946221][ T8149] netlink: zone id is out of range [ 1048.951665][ T8149] netlink: zone id is out of range [ 1049.328081][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9985'. [ 1049.450045][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9985'. [ 1049.554539][ T8183] bond7: Invalid ad_actor_system MAC address. [ 1049.566320][ T8183] bond7: option ad_actor_system: invalid value (1) [ 1049.602983][ T8183] bond7 (unregistering): Released all slaves [ 1049.851202][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9992'. [ 1049.905650][ T8211] validate_nla: 3 callbacks suppressed [ 1049.905667][ T8211] netlink: 'syz.1.9993': attribute type 1 has an invalid length. [ 1050.240034][ T8240] tipc: Failed to remove unknown binding: 66,1,1/0:3428980056/3428980058 [ 1050.464881][ T8250] syzkaller0: entered promiscuous mode [ 1050.473582][ T8250] syzkaller0: entered allmulticast mode [ 1050.502834][ T8250] xt_socket: unknown flags 0x50 [ 1050.642930][ T8260] netlink: 348 bytes leftover after parsing attributes in process `syz.5.10007'. [ 1050.712236][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1050.712711][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10009'. [ 1050.746345][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10009'. [ 1050.933854][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10015'. [ 1051.074816][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10016'. [ 1051.400747][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10019'. [ 1051.557100][ T8304] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1051.563046][ T8304] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1051.991894][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10025'. [ 1052.871929][ T8384] xt_TCPMSS: Only works on TCP SYN packets [ 1052.890836][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1052.915932][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1053.015753][ T8370] team0 (unregistering): Port device team_slave_0 removed [ 1053.032201][ T8370] team0 (unregistering): Port device team_slave_1 removed [ 1053.059003][ T8381] vlan3: entered promiscuous mode [ 1053.064659][ T8381] vlan3: entered allmulticast mode [ 1053.070247][ T8381] hsr_slave_1: entered allmulticast mode [ 1053.252223][ T8400] netlink: 408 bytes leftover after parsing attributes in process `syz.7.10048'. [ 1053.281575][ T8400] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1053.885829][ T8453] nbd: couldn't find a device at index 0 [ 1054.025029][ T8459] sock: sock_timestamping_bind_phc: sock not bind to device [ 1054.119750][ T8467] netlink: 'syz.1.10067': attribute type 6 has an invalid length. [ 1054.212877][ T8473] Bluetooth: MGMT ver 1.23 [ 1054.374539][ T8488] net_ratelimit: 44 callbacks suppressed [ 1054.374558][ T8488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.385676][ T8484] bond8: entered promiscuous mode [ 1054.461541][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.471776][ T8484] bond8: entered allmulticast mode [ 1054.493406][ T8484] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1054.989178][ T8526] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1055.383139][ T8565] : entered promiscuous mode [ 1055.528466][ T8574] netlink: 'syz.5.10097': attribute type 1 has an invalid length. [ 1055.787377][ T8590] netlink: 'syz.5.10103': attribute type 5 has an invalid length. [ 1055.813432][ T8590] __nla_validate_parse: 7 callbacks suppressed [ 1055.813454][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10103'. [ 1055.965879][ T8595] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10105'. [ 1056.029805][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1056.041389][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1056.051252][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1056.061292][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1056.075376][ T8597] syzkaller1: entered promiscuous mode [ 1056.086475][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1056.091563][ T8597] syzkaller1: entered allmulticast mode [ 1056.176466][ T8605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1056.203379][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1056.215546][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1056.227840][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1056.240958][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1056.255784][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1056.333161][ T8612] netlink: 'syz.1.10110': attribute type 1 has an invalid length. [ 1056.493358][ T8598] wlan0 speed is unknown, defaulting to 1000 [ 1056.512106][ T8598] wg1 speed is unknown, defaulting to 1000 [ 1056.824378][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10119'. [ 1056.854909][ T8637] netlink: 'syz.5.10119': attribute type 5 has an invalid length. [ 1056.864147][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10119'. [ 1056.979085][ T8639] netlink: 277 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1057.029191][ T8639] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1057.053311][ T8639] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1057.079273][ T8639] netlink: 'syz.3.10120': attribute type 6 has an invalid length. [ 1057.110204][ T8639] netlink: 'syz.3.10120': attribute type 5 has an invalid length. [ 1057.134989][ T8639] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1057.269413][ T8656] can: request_module (can-proto-0) failed. [ 1057.322308][ T8666] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10124'. [ 1057.583502][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 1057.724133][ T8696] syzkaller1: entered promiscuous mode [ 1057.730047][ T8696] syzkaller1: entered allmulticast mode [ 1057.879138][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.887022][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.894379][ T8598] bridge_slave_0: entered allmulticast mode [ 1057.903422][ T8598] bridge_slave_0: entered promiscuous mode [ 1057.914529][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.922948][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.931763][ T8598] bridge_slave_1: entered allmulticast mode [ 1057.948293][ T8598] bridge_slave_1: entered promiscuous mode [ 1058.038886][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.053013][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.179956][ T8598] team0: Port device team_slave_0 added [ 1058.215769][ T8598] team0: Port device team_slave_1 added [ 1058.297774][ T5841] Bluetooth: hci0: command tx timeout [ 1058.318562][ T8739] veth0_macvtap: entered promiscuous mode [ 1058.324525][ T8739] macvtap1: entered allmulticast mode [ 1058.358057][ T8739] veth0_macvtap: entered allmulticast mode [ 1058.371354][ T8744] netlink: 'syz.6.10146': attribute type 1 has an invalid length. [ 1058.404623][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.419998][ T8744] netlink: 'syz.6.10146': attribute type 2 has an invalid length. [ 1058.423319][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.430430][ T8744] netlink: 'syz.6.10146': attribute type 1 has an invalid length. [ 1058.481865][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.494272][ T8744] netlink: 'syz.6.10146': attribute type 3 has an invalid length. [ 1058.514175][ T8747] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1058.540551][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.557269][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.586236][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.615150][ T8744] team0: Mode changed to "loadbalance" [ 1058.729619][ T8598] hsr_slave_0: entered promiscuous mode [ 1058.736960][ T8598] hsr_slave_1: entered promiscuous mode [ 1058.743536][ T8598] debugfs: 'hsr0' already exists in 'hsr' [ 1058.766809][ T8598] Cannot create hsr debugfs directory [ 1059.473578][ T8790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.604714][ T8795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.808274][ T8598] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1059.883878][ T8598] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1059.912728][ T8598] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1059.943628][ T8598] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1060.192881][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.242220][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.259096][T14868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.266255][T14868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.295136][T14868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.302364][T14868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.342306][ T8598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1060.354384][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1060.377688][ T5841] Bluetooth: hci0: command tx timeout [ 1060.695766][ T8834] netlink: 'syz.3.10170': attribute type 3 has an invalid length. [ 1060.848972][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.498148][ T8598] veth0_vlan: entered promiscuous mode [ 1061.563134][ T8598] veth1_vlan: entered promiscuous mode [ 1061.640593][ T8598] veth0_macvtap: entered promiscuous mode [ 1061.674321][ T8598] veth1_macvtap: entered promiscuous mode [ 1061.729400][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.766136][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.769259][ T8861] netlink: 'syz.3.10178': attribute type 2 has an invalid length. [ 1061.805340][T20728] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.810228][ T8861] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1061.833454][T20728] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.868016][T20728] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.913249][T20728] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.039748][T11624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.055510][T11624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.121323][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.129740][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.150914][ T8872] x_tables: unsorted underflow at hook 4 [ 1062.178371][ T8873] x_tables: unsorted underflow at hook 4 [ 1062.269473][ T8875] netlink: 'syz.7.10102': attribute type 2 has an invalid length. [ 1062.283725][ T8877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1062.286859][ T8875] __nla_validate_parse: 119 callbacks suppressed [ 1062.286875][ T8875] netlink: 244 bytes leftover after parsing attributes in process `syz.7.10102'. [ 1062.411526][ T8856] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1062.457051][ T5841] Bluetooth: hci0: command tx timeout [ 1062.471566][ T8881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1062.662054][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10186'. [ 1062.837569][ T8891] netlink: 'syz.1.10187': attribute type 1 has an invalid length. [ 1062.854682][ T8891] netlink: 'syz.1.10187': attribute type 11 has an invalid length. [ 1062.885606][ T8891] netlink: 'syz.1.10187': attribute type 4 has an invalid length. [ 1062.887577][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1062.905293][ T8891] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.10187'. [ 1062.906402][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1062.925765][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1062.935958][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1062.946055][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1063.001501][ T8892] wlan0 speed is unknown, defaulting to 1000 [ 1063.010201][ T8892] wg1 speed is unknown, defaulting to 1000 [ 1063.389930][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10191'. [ 1063.959036][ T8927] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1064.018063][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 1064.493701][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.518668][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.526023][ T8892] bridge_slave_0: entered allmulticast mode [ 1064.536939][ T52] Bluetooth: hci0: command tx timeout [ 1064.552315][ T8892] bridge_slave_0: entered promiscuous mode [ 1064.563809][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.572214][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.588077][ T8892] bridge_slave_1: entered allmulticast mode [ 1064.607333][ T8892] bridge_slave_1: entered promiscuous mode [ 1064.979644][ T8988] syzkaller0: entered promiscuous mode [ 1064.986117][ T8988] syzkaller0: entered allmulticast mode [ 1064.998588][T11624] batadv1: left allmulticast mode [ 1065.004931][T11624] batadv1: left promiscuous mode [ 1065.012687][T11624] bridge0: port 1(batadv1) entered disabled state [ 1065.021687][ T52] Bluetooth: hci2: command tx timeout [ 1065.515853][T11624] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1066.123595][T11624] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1066.133566][T11624] bridge3 (unregistering): left promiscuous mode [ 1067.097610][ T52] Bluetooth: hci2: command 0x041b tx timeout [ 1067.891404][T11624] bond0 (unregistering): Released all slaves [ 1067.921802][T11624] bond1 (unregistering): Released all slaves [ 1067.942874][T11624] bond2 (unregistering): Released all slaves [ 1068.155014][T11624] bond3 (unregistering): Released all slaves [ 1068.302628][T11624] bond4 (unregistering): Released all slaves [ 1068.315055][T11624] bond5 (unregistering): Released all slaves [ 1068.447388][T11624] bond6 (unregistering): Released all slaves [ 1068.603163][T11624] bond7 (unregistering): Released all slaves [ 1068.630268][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.187239][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 1070.831944][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.863380][T11624] 9: left promiscuous mode [ 1070.980300][T11624] tipc: Disabling bearer [ 1071.010813][T11624] tipc: Disabling bearer [ 1071.026496][T11624] tipc: Left network mode [ 1071.033262][ T8892] team0: Port device team_slave_0 added [ 1071.058362][T11624] IPVS: stopping backup sync thread 27179 ... [ 1071.071853][ T8892] team0: Port device team_slave_1 added [ 1071.270512][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 1071.288946][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.297275][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.328278][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.343081][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.352976][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.383818][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10222'. [ 1071.393313][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.785763][ T9038] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10225'. [ 1071.800925][ T9041] netlink: 51 bytes leftover after parsing attributes in process `syz.7.10226'. [ 1071.803714][ T8892] hsr_slave_0: entered promiscuous mode [ 1071.835553][ T8892] hsr_slave_1: entered promiscuous mode [ 1071.845932][ T8892] debugfs: 'hsr0' already exists in 'hsr' [ 1071.856887][ T8892] Cannot create hsr debugfs directory [ 1072.143071][ T9052] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10229'. [ 1072.371344][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10233'. [ 1072.384405][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10233'. [ 1072.447712][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10231'. [ 1072.460820][ T9056] netlink: 'syz.7.10233': attribute type 1 has an invalid length. [ 1072.512172][ T9057] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10233'. [ 1073.018404][ T11] block nbd3: Possible stuck request ffff8880364d8000: control (read@0,1024B). Runtime 30 seconds [ 1073.031704][ T11] block nbd3: Possible stuck request ffff8880364d8200: control (read@1024,1024B). Runtime 30 seconds [ 1073.042747][ T11] block nbd3: Possible stuck request ffff8880364d8400: control (read@2048,1024B). Runtime 30 seconds [ 1073.053817][ T11] block nbd3: Possible stuck request ffff8880364d8600: control (read@3072,1024B). Runtime 30 seconds [ 1073.073898][T11624] hsr_slave_0: left promiscuous mode [ 1073.084842][T11624] hsr_slave_1: left promiscuous mode [ 1073.127258][T11624] vlan0: left allmulticast mode [ 1073.132169][T11624] veth0_vlan: left allmulticast mode [ 1073.137859][T11624] vlan0: left promiscuous mode [ 1073.143219][T11624] veth0_macvtap: left promiscuous mode [ 1073.149228][T11624] veth1_vlan: left promiscuous mode [ 1073.154587][T11624] veth0_vlan: left promiscuous mode [ 1073.343790][ T5841] Bluetooth: hci2: command 0x041b tx timeout [ 1074.120224][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10244'. [ 1075.019484][ T9106] netlink: 165 bytes leftover after parsing attributes in process `syz.3.10247'. [ 1075.380848][ T8892] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1075.458264][ T8892] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1075.485401][ T8892] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1075.513143][ T8892] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1075.604964][T11624] IPVS: stop unused estimator thread 0... [ 1075.814498][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.879550][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.902826][T20728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.909978][T20728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.929279][T17294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.936477][T17294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.366670][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.395356][ T9184] __nla_validate_parse: 6 callbacks suppressed [ 1076.396008][ T9184] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10265'. [ 1076.520869][ T9189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1076.630456][ T9202] syzkaller1: entered promiscuous mode [ 1076.643967][ T9202] syzkaller1: entered allmulticast mode [ 1076.911886][ T8892] veth0_vlan: entered promiscuous mode [ 1076.955316][ T8892] veth1_vlan: entered promiscuous mode [ 1077.006887][ T8892] veth0_macvtap: entered promiscuous mode [ 1077.047265][ T8892] veth1_macvtap: entered promiscuous mode [ 1077.113838][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.146185][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.186204][T20745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.219478][T20745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.246865][T20745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.833118][T20745] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.030039][ T9239] netlink: 'syz.5.10278': attribute type 21 has an invalid length. [ 1078.064417][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.075716][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10278'. [ 1078.094069][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.266096][T20736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.306526][T20736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.497722][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10286'. [ 1078.534393][ T9269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10285'. [ 1078.763686][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10289'. [ 1078.776193][ T9275] delete_channel: no stack [ 1078.833001][ T9280] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1078.930087][ T9282] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1078.967345][ T9282] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1079.033816][ T9285] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1079.229719][ T9296] netlink: 'syz.6.10295': attribute type 11 has an invalid length. [ 1079.239048][ T9296] netlink: 199788 bytes leftover after parsing attributes in process `syz.6.10295'. [ 1079.269599][ T9300] netlink: 'syz.5.10298': attribute type 1 has an invalid length. [ 1079.390704][ T9300] bond1 (unregistering): Released all slaves [ 1079.475386][ T9310] netlink: 'syz.6.10301': attribute type 10 has an invalid length. [ 1079.505804][ T9315] netlink: 'syz.7.10303': attribute type 1 has an invalid length. [ 1079.514791][ T9315] netlink: 'syz.7.10303': attribute type 2 has an invalid length. [ 1079.621142][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10304'. [ 1080.002411][ T9350] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1080.035967][ T9356] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.10315'. [ 1080.066898][ T9356] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1080.125211][ T9364] netlink: 'syz.3.10318': attribute type 9 has an invalid length. [ 1080.149434][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10319'. [ 1080.164243][ T9364] netlink: 'syz.3.10318': attribute type 11 has an invalid length. [ 1080.202032][ T9364] netlink: 'syz.3.10318': attribute type 12 has an invalid length. [ 1080.241034][ T9364] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.10318'. [ 1080.282452][ T9374] x_tables: duplicate underflow at hook 1 [ 1080.314874][ T9374] geneve2: entered promiscuous mode [ 1080.320735][ T9374] geneve2: entered allmulticast mode [ 1080.330134][ T9377] ip6t_srh: unknown srh invflags 4000 [ 1080.448956][ T9387] openvswitch: netlink: IP tunnel dst address not specified [ 1080.658212][ T9406] tipc: Enabling of bearer rejected, failed to enable media [ 1080.673279][ T9406] C: renamed from lo (while UP) [ 1080.681062][ T9406] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1080.701281][ T9408] netlink: 'syz.7.10332': attribute type 1 has an invalid length. [ 1080.741162][ T9406] tipc: Enabling of bearer rejected, failed to enable media [ 1080.763171][ T9408] bond1: (slave gretap1): making interface the new active one [ 1080.771839][ T9408] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1080.781486][ T9411] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1081.288503][ T9435] bridge0: port 3(syz_tun) entered blocking state [ 1081.295150][ T9435] bridge0: port 3(syz_tun) entered disabled state [ 1081.309617][ T9435] syz_tun: entered allmulticast mode [ 1081.356224][ T9435] syz_tun: entered promiscuous mode [ 1081.484002][ T9452] syz.6.10349: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1081.501990][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: syz.6.10349 Not tainted syzkaller #0 PREEMPT(full) [ 1081.502019][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1081.502032][ T9452] Call Trace: [ 1081.502041][ T9452] [ 1081.502051][ T9452] dump_stack_lvl+0x189/0x250 [ 1081.502091][ T9452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.502124][ T9452] ? __pfx__printk+0x10/0x10 [ 1081.502151][ T9452] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1081.502173][ T9452] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1081.502196][ T9452] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1081.502220][ T9452] warn_alloc+0x214/0x310 [ 1081.502242][ T9452] ? stack_trace_save+0x9c/0xe0 [ 1081.502271][ T9452] ? __pfx_warn_alloc+0x10/0x10 [ 1081.502299][ T9452] ? kasan_save_track+0x4f/0x80 [ 1081.502315][ T9452] ? kasan_save_track+0x3e/0x80 [ 1081.502330][ T9452] ? __kasan_kmalloc+0x93/0xb0 [ 1081.502345][ T9452] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1081.502359][ T9452] ? xskq_create+0x56/0x170 [ 1081.502382][ T9452] ? xsk_setsockopt+0x4dc/0x8d0 [ 1081.502403][ T9452] ? do_sock_setsockopt+0x17c/0x1b0 [ 1081.502420][ T9452] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1081.502439][ T9452] ? do_syscall_64+0xfa/0xf80 [ 1081.502462][ T9452] __vmalloc_node_range_noprof+0x134/0x16a0 [ 1081.502517][ T9452] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1081.502545][ T9452] ? __kasan_kmalloc+0x93/0xb0 [ 1081.502571][ T9452] vmalloc_user_noprof+0xad/0xf0 [ 1081.502599][ T9452] ? xskq_create+0xbf/0x170 [ 1081.502626][ T9452] xskq_create+0xbf/0x170 [ 1081.502656][ T9452] xsk_init_queue+0xb0/0x110 [ 1081.502703][ T9452] xsk_setsockopt+0x4dc/0x8d0 [ 1081.502733][ T9452] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1081.502762][ T9452] ? __pfx_aa_sk_perm+0x10/0x10 [ 1081.502788][ T9452] ? aa_sock_opt_perm+0xff/0x1a0 [ 1081.502815][ T9452] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1081.502837][ T9452] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1081.502862][ T9452] do_sock_setsockopt+0x17c/0x1b0 [ 1081.502889][ T9452] __x64_sys_setsockopt+0x13f/0x1b0 [ 1081.502916][ T9452] do_syscall_64+0xfa/0xf80 [ 1081.502937][ T9452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.502957][ T9452] ? clear_bhb_loop+0x60/0xb0 [ 1081.502980][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.502999][ T9452] RIP: 0033:0x7f68da98f749 [ 1081.503018][ T9452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.503034][ T9452] RSP: 002b:00007f68db798038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1081.503055][ T9452] RAX: ffffffffffffffda RBX: 00007f68dabe5fa0 RCX: 00007f68da98f749 [ 1081.503075][ T9452] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1081.503088][ T9452] RBP: 00007f68daa13f91 R08: 0000000000000004 R09: 0000000000000000 [ 1081.503101][ T9452] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.503113][ T9452] R13: 00007f68dabe6038 R14: 00007f68dabe5fa0 R15: 00007ffd6c074348 [ 1081.503149][ T9452] [ 1081.503390][ T9452] Mem-Info: [ 1081.819110][ T9452] active_anon:5152 inactive_anon:0 isolated_anon:0 [ 1081.819110][ T9452] active_file:2951 inactive_file:40202 isolated_file:0 [ 1081.819110][ T9452] unevictable:768 dirty:61 writeback:0 [ 1081.819110][ T9452] slab_reclaimable:14619 slab_unreclaimable:220366 [ 1081.819110][ T9452] mapped:29121 shmem:1378 pagetables:1474 [ 1081.819110][ T9452] sec_pagetables:0 bounce:0 [ 1081.819110][ T9452] kernel_misc_reclaimable:0 [ 1081.819110][ T9452] free:1186621 free_pcp:17336 free_cma:0 [ 1081.829016][ T9461] __nla_validate_parse: 3 callbacks suppressed [ 1081.832366][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10348'. [ 1081.895603][ T9452] Node 0 active_anon:20708kB inactive_anon:0kB active_file:11804kB inactive_file:160612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116484kB dirty:244kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17576kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1081.963042][ T9461] tipc: Enabling of bearer rejected, media not registered [ 1082.027655][ T9452] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1082.063474][ T9452] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.095459][ T9452] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 1082.105342][ T9452] Node 0 DMA32 free:842472kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20404kB inactive_anon:0kB active_file:11804kB inactive_file:160620kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:58988kB local_pcp:18136kB free_cma:0kB [ 1082.192853][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10353'. [ 1082.206357][ T9452] lowmem_reserve[]: 0 0 1 1 1 [ 1082.211781][ T9452] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.289845][ T9452] lowmem_reserve[]: 0 0 0 0 0 [ 1082.294656][ T9452] Node 1 Normal free:3888564kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10404kB local_pcp:2084kB free_cma:0kB [ 1082.357681][ T9452] lowmem_reserve[]: 0 0 0 0 0 [ 1082.371527][ T9452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1082.385774][ T9452] Node 0 DMA32: 11774*4kB (UME) 8572*8kB (UME) 4545*16kB (UME) 1090*32kB (UME) 73*64kB (UE) 201*128kB (U) 532*256kB (UM) 216*512kB (UM) 148*1024kB (UM) 61*2048kB (UM) 16*4096kB (UM) = 842472kB [ 1082.435077][ T9452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1082.472710][ T9494] netlink: 'syz.3.10358': attribute type 13 has an invalid length. [ 1082.478808][ T9452] Node 1 Normal: 209*4kB (UME) 56*8kB (UME) 49*16kB (UME) 233*32kB (UME) 84*64kB (UME) 17*128kB (UME) 7*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 943*4096kB (M) = 3888564kB [ 1082.530157][ T9452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.552398][ T9452] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1082.613394][ T9452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.649344][ T9452] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1082.673231][ T9452] 44530 total pagecache pages [ 1082.679080][ T9504] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1082.694524][ T9452] 0 pages in swap cache [ 1082.696110][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10363'. [ 1082.732970][ T9452] Free swap = 124996kB [ 1082.738208][ T9452] Total swap = 124996kB [ 1082.744024][ T9452] 2097051 pages RAM [ 1082.788765][ T9452] 0 pages HighMem/MovableOnly [ 1082.804896][ T9452] 425122 pages reserved [ 1082.818466][ T9452] 0 pages cma reserved [ 1082.881971][ T9516] xt_ecn: cannot match TCP bits for non-tcp packets [ 1082.992347][ T9526] xt_TCPMSS: Only works on TCP SYN packets [ 1083.068471][ T9532] validate_nla: 2 callbacks suppressed [ 1083.068491][ T9532] netlink: 'syz.3.10371': attribute type 4 has an invalid length. [ 1083.280201][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10375'. [ 1083.330940][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10375'. [ 1083.418041][ T52] Bluetooth: hci2: command 0x041b tx timeout [ 1083.480500][ T9564] sock: sock_timestamping_bind_phc: sock not bind to device [ 1083.542358][ T9561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1083.571130][ T9569] netlink: 232 bytes leftover after parsing attributes in process `syz.6.10380'. [ 1083.606794][ T9573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10383'. [ 1083.651569][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10382'. [ 1084.382158][ T9618] netlink: 'syz.7.10395': attribute type 1 has an invalid length. [ 1084.503710][ T9631] bond2: (slave geneve2): making interface the new active one [ 1084.542432][ T9631] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1084.572342][ T496] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1084.608211][ T496] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1084.640955][ T496] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1084.664542][ T496] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1084.805508][ T9649] netlink: 'syz.3.10403': attribute type 8 has an invalid length. [ 1084.834524][ T9653] netlink: 'syz.7.10401': attribute type 10 has an invalid length. [ 1084.863164][ T9653] team0: Port device dummy0 added [ 1084.871589][ T9647] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10402'. [ 1084.900798][ T9648] tipc: Started in network mode [ 1084.906107][ T9648] tipc: Node identity 86ea1b5c4242, cluster identity 4711 [ 1084.914056][ T9648] tipc: Enabled bearer , priority 0 [ 1084.921379][ T9647] tipc: Enabling of bearer rejected, already enabled [ 1084.931354][ T9655] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10405'. [ 1084.933213][ T9648] syzkaller0: entered promiscuous mode [ 1084.946468][ T9648] syzkaller0: entered allmulticast mode [ 1084.958263][ T9647] tipc: Resetting bearer [ 1084.988569][ T9645] tipc: Resetting bearer [ 1085.033214][ T9645] tipc: Disabling bearer [ 1085.192306][ T9668] netlink: 'syz.5.10410': attribute type 11 has an invalid length. [ 1085.768464][ T9704] netlink: 'syz.7.10419': attribute type 1 has an invalid length. [ 1086.129634][ T9724] sctp: [Deprecated]: syz.7.10427 (pid 9724) Use of int in max_burst socket option deprecated. [ 1086.129634][ T9724] Use struct sctp_assoc_value instead [ 1086.492707][ T9747] netlink: 'syz.6.10435': attribute type 29 has an invalid length. [ 1086.631055][ T9761] netlink: 'syz.6.10440': attribute type 1 has an invalid length. [ 1086.662593][ T9759] bond1: entered allmulticast mode [ 1086.668561][ T9759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1086.730092][ T9769] team0: No ports can be present during mode change [ 1086.862017][ T9779] netlink: 'syz.7.10445': attribute type 1 has an invalid length. [ 1086.924418][ T9776] __nla_validate_parse: 5 callbacks suppressed [ 1086.924436][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10444'. [ 1086.988375][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10445'. [ 1087.009586][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10445'. [ 1087.021945][ T9779] bond3: entered promiscuous mode [ 1087.028001][ T9779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1087.297858][ T9800] syzkaller0: entered promiscuous mode [ 1087.305272][ T9800] syzkaller0: entered allmulticast mode [ 1087.315015][ T9808] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1087.374374][ T9803] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1087.528039][ T9819] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1087.658652][ T9823] Cannot find del_set index 4 as target [ 1087.789562][ T9835] syzkaller1: entered promiscuous mode [ 1087.806270][ T9835] syzkaller1: entered allmulticast mode [ 1087.894349][ T9842] netlink: 'syz.7.10464': attribute type 1 has an invalid length. [ 1087.922522][ T9842] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10464'. [ 1087.970102][ T9842] netlink: 'syz.7.10464': attribute type 1 has an invalid length. [ 1088.055259][ T9851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.100546][ T9851] validate_nla: 2 callbacks suppressed [ 1088.100564][ T9851] netlink: 'syz.3.10468': attribute type 1 has an invalid length. [ 1088.150357][ T9855] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10469'. [ 1088.167327][ T9851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.633650][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10477'. [ 1088.661468][ T9869] team0 (unregistering): Port device team_slave_0 removed [ 1088.673166][ T9869] team0 (unregistering): Port device team_slave_1 removed [ 1088.686835][ T9869] team0 (unregistering): Port device dummy0 removed [ 1088.704313][ T9865] netlink: 'syz.7.10472': attribute type 5 has an invalid length. [ 1088.726298][ T9873] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1088.742265][ T9873] bond2: entered promiscuous mode [ 1088.748317][ T9873] bond2: entered allmulticast mode [ 1088.757384][ T9873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1088.834810][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10479'. [ 1089.207443][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10483'. [ 1089.289156][ T9916] syz_tun: left allmulticast mode [ 1089.294236][ T9916] syz_tun: left promiscuous mode [ 1089.322137][ T9916] bridge0: port 3(syz_tun) entered disabled state [ 1089.329627][ T9925] netlink: 'syz.6.10488': attribute type 1 has an invalid length. [ 1089.383201][ T9916] bridge_slave_1: left allmulticast mode [ 1089.403939][ T9916] bridge_slave_1: left promiscuous mode [ 1089.414326][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.457630][ T9916] bridge_slave_0: left allmulticast mode [ 1089.483277][ T9916] bridge_slave_0: left promiscuous mode [ 1089.507040][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.642343][ T9925] bond1: entered promiscuous mode [ 1089.651037][ T9925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1089.742375][ T9943] bond1: (slave bridge1): making interface the new active one [ 1089.780082][ T9943] bridge1: entered promiscuous mode [ 1089.820364][ T9943] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1089.970180][ T9973] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10500'. [ 1089.987117][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10500'. [ 1090.126136][ T9981] tipc: Started in network mode [ 1090.133863][ T9981] tipc: Node identity 0260f32c2d1b, cluster identity 4711 [ 1090.141880][ T9981] tipc: Enabled bearer , priority 0 [ 1090.155777][ T9981] syzkaller0: entered promiscuous mode [ 1090.173531][ T9981] syzkaller0: entered allmulticast mode [ 1090.204623][ T9981] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1090.238632][ T9981] tipc: Resetting bearer [ 1090.260668][ T9980] tipc: Resetting bearer [ 1090.288221][ T9991] ksmbd: Unknown IPC event: 3, ignore. [ 1090.294633][ T9980] tipc: Disabling bearer [ 1090.403255][T20728] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.600255][T20728] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.693903][T10012] tipc: Started in network mode [ 1090.699689][T10012] tipc: Node identity a2c19c15cd1e, cluster identity 4711 [ 1090.710465][T10012] tipc: Enabled bearer , priority 0 [ 1090.739214][T20728] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.760576][T10012] syzkaller0: entered promiscuous mode [ 1090.766361][T10012] syzkaller0: entered allmulticast mode [ 1090.783774][T10017] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1090.784479][T10016] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1090.944486][T10012] tipc: Resetting bearer [ 1090.963260][T10011] tipc: Resetting bearer [ 1091.022396][T10011] tipc: Disabling bearer [ 1091.105614][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.174727][T10036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.185439][T20736] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.251892][ T6145] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.326173][T20736] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.380283][ T6145] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.409509][T20728] bridge_slave_1: left allmulticast mode [ 1091.425435][T20728] bridge_slave_1: left promiscuous mode [ 1091.435784][T20728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.467792][T20728] bridge_slave_0: left allmulticast mode [ 1091.473484][T20728] bridge_slave_0: left promiscuous mode [ 1091.502138][T20728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.163074][T20728] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1092.364943][T20728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.375183][T20728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.384898][T20728] bond0 (unregistering): Released all slaves [ 1092.400662][T20728] bond1 (unregistering): Released all slaves [ 1092.526531][T20728] bond2 (unregistering): Released all slaves [ 1092.541600][T20728] bond3 (unregistering): Released all slaves [ 1092.628376][T20728] : left promiscuous mode [ 1092.791384][T20728] tipc: Left network mode [ 1093.043881][T10118] __nla_validate_parse: 10 callbacks suppressed [ 1093.043898][T10118] netlink: 548 bytes leftover after parsing attributes in process `syz.5.10537'. [ 1093.102603][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10540'. [ 1093.148319][T10107] netlink: 'syz.5.10537': attribute type 29 has an invalid length. [ 1093.331174][T10116] netlink: 'syz.5.10537': attribute type 29 has an invalid length. [ 1093.404503][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10542'. [ 1093.523823][T10143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.531642][T10143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.616312][T10147] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10544'. [ 1093.678632][T10143] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1093.687425][T10155] netlink: 'syz.3.10547': attribute type 10 has an invalid length. [ 1093.729784][T10155] bridge0: port 2(.) entered disabled state [ 1093.737421][T10155] .: left allmulticast mode [ 1093.753773][T10155] .: left promiscuous mode [ 1093.787362][T10155] bridge0: port 2(.) entered disabled state [ 1093.805511][T10155] bond0: (slave .): Enslaving as an active interface with an up link [ 1093.815072][T10142] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1093.919229][T20728] hsr_slave_0: left promiscuous mode [ 1093.939050][T20728] hsr_slave_1: left promiscuous mode [ 1093.950486][T20728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.982677][T20728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.192207][T20728] pimreg (unregistering): left allmulticast mode [ 1094.770921][T20728] team0 (unregistering): Port device team_slave_1 removed [ 1094.823578][T20728] team0 (unregistering): Port device team_slave_0 removed [ 1095.439179][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10559'. [ 1095.482967][T10210] netlink: 2 bytes leftover after parsing attributes in process `syz.6.10559'. [ 1095.522931][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10559'. [ 1095.615630][T10223] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1095.640486][T10219] netlink: 'syz.6.10559': attribute type 1 has an invalid length. [ 1095.701845][T10226] netlink: 'syz.3.10563': attribute type 1 has an invalid length. [ 1095.718280][T10226] netlink: 'syz.3.10563': attribute type 2 has an invalid length. [ 1095.744733][T10226] netlink: 'syz.3.10563': attribute type 1 has an invalid length. [ 1095.773762][T10226] netlink: 'syz.3.10563': attribute type 2 has an invalid length. [ 1095.933643][T10232] syzkaller0: entered promiscuous mode [ 1095.941161][T10232] syzkaller0: entered allmulticast mode [ 1096.350579][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10572'. [ 1098.379135][T10255] 8021q: VLANs not supported on ip6gre0 [ 1098.391872][T10267] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1098.408088][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10570'. [ 1098.418483][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10570'. [ 1098.428415][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10570'. [ 1098.568039][T10290] netlink: 'syz.5.10577': attribute type 3 has an invalid length. [ 1098.626517][T10298] x_tables: unsorted underflow at hook 3 [ 1098.750701][T10306] sctp: [Deprecated]: syz.7.10584 (pid 10306) Use of int in max_burst socket option deprecated. [ 1098.750701][T10306] Use struct sctp_assoc_value instead [ 1099.376337][T10348] x_tables: unsorted underflow at hook 2 [ 1099.627703][T10365] syzkaller0: entered promiscuous mode [ 1099.633422][T10365] syzkaller0: entered allmulticast mode [ 1099.644482][T10352] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 1099.761000][T10373] netlink: 312 bytes leftover after parsing attributes in process `syz.3.10600'. [ 1100.149131][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10607'. [ 1100.340372][T10396] IPVS: Unknown mcast interface: pim6reg [ 1100.397690][T10404] openvswitch: netlink: Flow key attr not present in new flow. [ 1100.455234][T10403] xfrm1: entered allmulticast mode [ 1100.496575][T10409] tipc: Enabling of bearer rejected, media not registered [ 1100.662677][T10419] IPVS: set_ctl: invalid protocol: 50 172.30.0.7:20000 [ 1101.142703][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10627'. [ 1101.221570][T10455] netlink: 'syz.7.10627': attribute type 9 has an invalid length. [ 1101.246964][T10455] netlink: 'syz.7.10627': attribute type 11 has an invalid length. [ 1101.247324][T10457] x_tables: duplicate underflow at hook 2 [ 1101.263364][T10455] netlink: 'syz.7.10627': attribute type 12 has an invalid length. [ 1101.263388][T10455] netlink: 199144 bytes leftover after parsing attributes in process `syz.7.10627'. [ 1101.499984][T10469] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10634'. [ 1101.517627][T10472] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10636'. [ 1101.529493][T10472] xt_hashlimit: size too large, truncated to 1048576 [ 1101.837747][T10489] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10642'. [ 1102.571615][T10522] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1102.597709][T10524] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1102.682648][T10532] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1102.722818][T10525] netlink: 'syz.6.10656': attribute type 1 has an invalid length. [ 1103.103109][ T11] block nbd3: Possible stuck request ffff8880364d8000: control (read@0,1024B). Runtime 60 seconds [ 1103.116397][ T11] block nbd3: Possible stuck request ffff8880364d8200: control (read@1024,1024B). Runtime 60 seconds [ 1103.128048][ T11] block nbd3: Possible stuck request ffff8880364d8400: control (read@2048,1024B). Runtime 60 seconds [ 1103.139194][ T11] block nbd3: Possible stuck request ffff8880364d8600: control (read@3072,1024B). Runtime 60 seconds [ 1103.215060][T10551] netlink: 'syz.6.10664': attribute type 1 has an invalid length. [ 1103.230034][T10551] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1103.374693][T10568] tls_set_device_offload: netdev not found [ 1103.393935][T10568] x_tables: unsorted underflow at hook 4 [ 1103.632607][T10585] __nla_validate_parse: 2 callbacks suppressed [ 1103.632626][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10673'. [ 1103.660583][T10586] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10673'. [ 1103.670712][T10586] netlink: 43 bytes leftover after parsing attributes in process `syz.7.10673'. [ 1103.673424][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10674'. [ 1103.680187][T10586] netlink: 'syz.7.10673': attribute type 5 has an invalid length. [ 1103.697659][T10586] netlink: 43 bytes leftover after parsing attributes in process `syz.7.10673'. [ 1103.715229][T10590] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10674'. [ 1103.728823][T10590] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10674'. [ 1103.890977][T10542] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1104.028526][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10678'. [ 1104.039036][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10679'. [ 1104.076107][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10680'. [ 1104.302487][T10625] ieee802154 phy0 wpan0: encryption failed: -22 [ 1104.628408][T10651] sctp: [Deprecated]: syz.3.10693 (pid 10651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1104.628408][T10651] Use struct sctp_sack_info instead [ 1104.720761][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.728511][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.788265][T10635] bridge_slave_0: left allmulticast mode [ 1104.793956][T10635] bridge_slave_0: left promiscuous mode [ 1104.800295][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.821497][T10635] bridge_slave_1: left allmulticast mode [ 1104.828131][T10635] bridge_slave_1: left promiscuous mode [ 1104.833881][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.852732][T10635] bond0: (slave bond_slave_0): Releasing backup interface [ 1104.863279][ T5197] udevd[5197]: worker [7557] /devices/virtual/block/nbd3 is taking a long time [ 1104.877978][T10635] bond0: (slave bond_slave_1): Releasing backup interface [ 1104.895866][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.908145][T10635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.921934][T10635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.933489][T10635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.953622][T10635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1104.992448][T10662] vlan0: entered promiscuous mode [ 1105.047663][T10662] bridge0: entered promiscuous mode [ 1105.096790][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 1105.509914][T10696] veth1_macvtap: left promiscuous mode [ 1105.515502][T10696] macsec0: entered promiscuous mode [ 1105.540973][T10696] macsec0: entered allmulticast mode [ 1105.595612][T10696] veth1_macvtap: entered promiscuous mode [ 1105.612211][T10696] veth1_macvtap: entered allmulticast mode [ 1105.623241][T10696] macsec0: left promiscuous mode [ 1105.629808][T10696] macsec0: left allmulticast mode [ 1105.635032][T10696] veth1_macvtap: left allmulticast mode [ 1105.777367][T10709] ksmbd: Unknown IPC event: 3, ignore. [ 1105.802123][T10707] xt_connbytes: Forcing CT accounting to be enabled [ 1105.902523][T10713] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1105.924677][T10713] bond4 (unregistering): Released all slaves [ 1106.507599][T10755] netlink: 'syz.3.10722': attribute type 30 has an invalid length. [ 1106.517674][T10756] bond_slave_0: default FDB implementation only supports local addresses [ 1106.833652][T10780] : entered promiscuous mode [ 1107.071295][T10805] syzkaller0: entered promiscuous mode [ 1107.079802][T10805] syzkaller0: entered allmulticast mode [ 1107.291862][T10817] netlink: 'syz.3.10740': attribute type 6 has an invalid length. [ 1107.445528][T10828] netlink: 'syz.1.10745': attribute type 3 has an invalid length. [ 1107.568163][T10833] netlink: 'syz.3.10747': attribute type 1 has an invalid length. [ 1107.760499][T10851] bond4 (unregistering): Released all slaves [ 1107.771394][T10860] netlink: 'syz.5.10753': attribute type 1 has an invalid length. [ 1107.780960][T10860] netlink: 'syz.5.10753': attribute type 2 has an invalid length. [ 1107.824209][T10857] netlink: 'syz.7.10751': attribute type 2 has an invalid length. [ 1108.028199][T10873] ip6gre1: entered allmulticast mode [ 1108.170441][T10883] netlink: 'syz.3.10758': attribute type 1 has an invalid length. [ 1108.202654][T10883] netlink: 'syz.3.10758': attribute type 2 has an invalid length. [ 1108.740304][T10922] __nla_validate_parse: 21 callbacks suppressed [ 1108.740324][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10769'. [ 1108.831647][T10927] veth0: entered promiscuous mode [ 1108.847681][T10926] veth0: left promiscuous mode [ 1108.923955][T10929] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1108.936049][T10929] bond8 (unregistering): Released all slaves [ 1108.951913][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10773'. [ 1108.962217][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10773'. [ 1109.076080][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10774'. [ 1109.107186][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10774'. [ 1109.127039][T10941] can: request_module (can-proto-0) failed. [ 1111.374976][T10956] gretap0: entered promiscuous mode [ 1111.381699][T10956] vlan2: entered promiscuous mode [ 1111.560793][T10973] validate_nla: 1 callbacks suppressed [ 1111.560812][T10973] netlink: 'syz.1.10782': attribute type 8 has an invalid length. [ 1111.631963][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10785'. [ 1111.720640][T10985] sctp: [Deprecated]: syz.3.10786 (pid 10985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1111.720640][T10985] Use struct sctp_sack_info instead [ 1111.736163][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10788'. [ 1111.749574][T10987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1111.774945][T10987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.104223][T11010] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10795'. [ 1112.131362][T11015] ip6gre1: entered promiscuous mode [ 1112.146018][T11017] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1112.147513][T11015] ip6gre1: entered allmulticast mode [ 1112.219183][T11015] batadv1: entered allmulticast mode [ 1112.407352][T11027] netlink: 'syz.5.10799': attribute type 1 has an invalid length. [ 1112.416265][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10799'. [ 1112.582873][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10804'. [ 1112.605232][T11239] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.624478][T11239] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.646391][T11239] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.662895][T11239] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.915880][T11069] sctp: [Deprecated]: syz.7.10812 (pid 11069) Use of int in maxseg socket option. [ 1112.915880][T11069] Use struct sctp_assoc_value instead [ 1113.085700][T11091] netlink: 'syz.7.10819': attribute type 6 has an invalid length. [ 1113.289885][T11103] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1113.594177][T11114] vxcan2: entered allmulticast mode [ 1113.684262][T11118] vxcan2: entered allmulticast mode [ 1114.131953][T11155] __nla_validate_parse: 16 callbacks suppressed [ 1114.131973][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10832'. [ 1114.174648][T11155] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10832'. [ 1114.189467][T14843] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.197865][T11152] can: request_module (can-proto-5) failed. [ 1114.339044][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10836'. [ 1114.452928][T11177] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10839'. [ 1114.455076][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10837'. [ 1114.766196][T11196] netlink: 348 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1114.800351][T11197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1114.897046][T11208] IPVS: set_ctl: invalid protocol: 16 172.20.20.170:20007 [ 1114.918345][T11208] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 1115.005397][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10847'. [ 1115.041249][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10848'. [ 1115.201162][T11224] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10851'. [ 1115.296101][T11232] team1: entered promiscuous mode [ 1115.301441][T11232] team1: entered allmulticast mode [ 1115.415069][T11240] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1115.457789][T11242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 1115.552286][T11250] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1115.588305][T11250] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1115.733188][T11264] openvswitch: netlink: Message has 592 unknown bytes. [ 1115.741183][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.754924][T11265] openvswitch: netlink: Message has 592 unknown bytes. [ 1115.762563][T11265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1115.881269][T11273] syzkaller0: entered promiscuous mode [ 1115.887434][T11273] syzkaller0: entered allmulticast mode [ 1115.902512][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.332953][T11295] Bluetooth: MGMT ver 1.23 [ 1116.849088][T11329] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1117.347625][T11361] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002 [ 1117.371411][T11361] openvswitch: netlink: Message has 4 unknown bytes. [ 1118.185142][T11413] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 1118.220181][T11413] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 1118.740325][T11447] netlink: 'syz.5.10916': attribute type 1 has an invalid length. [ 1118.998881][T11465] syzkaller1: entered promiscuous mode [ 1119.010671][T11465] syzkaller1: entered allmulticast mode [ 1119.311280][T11498] __nla_validate_parse: 49 callbacks suppressed [ 1119.311305][T11498] netlink: 124 bytes leftover after parsing attributes in process `syz.5.10922'. [ 1119.440073][T11484] syzkaller0: entered promiscuous mode [ 1119.455886][T11484] syzkaller0: entered allmulticast mode [ 1119.468362][T11504] tipc: Enabling of bearer rejected, media not registered [ 1119.598552][T11510] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10932'. [ 1119.613579][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10932'. [ 1119.628405][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10932'. [ 1119.678592][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10934'. [ 1119.689363][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10934'. [ 1120.022893][T11531] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10935'. [ 1121.906455][T11510] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1121.914938][T11510] team0: Port device batadv1 added [ 1122.112963][T11550] geneve2: entered promiscuous mode [ 1122.195636][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10945'. [ 1122.235590][T11562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1122.482698][T11583] netlink: 'syz.7.10951': attribute type 39 has an invalid length. [ 1122.489710][T11585] tipc: Enabling of bearer rejected, failed to enable media [ 1122.568212][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10952'. [ 1123.069012][T11623] Unsupported ieee802154 address type: 0 [ 1123.144096][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10964'. [ 1124.153134][T11700] netlink: 'syz.3.10987': attribute type 2 has an invalid length. [ 1124.277911][T11705] netlink: 'syz.7.10988': attribute type 1 has an invalid length. [ 1124.306827][T11705] netlink: 'syz.7.10988': attribute type 2 has an invalid length. [ 1124.314682][T11705] netlink: 'syz.7.10988': attribute type 2 has an invalid length. [ 1124.357951][T11705] netlink: 'syz.7.10988': attribute type 1 has an invalid length. [ 1124.427064][T11710] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1124.435974][T11716] __nla_validate_parse: 5 callbacks suppressed [ 1124.435992][T11716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10992'. [ 1124.485643][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10993'. [ 1124.635346][T11716] sit1: entered promiscuous mode [ 1124.654783][T11716] sit1: entered allmulticast mode [ 1124.795341][T11737] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10998'. [ 1124.938188][T11746] bridge4: entered promiscuous mode [ 1124.943691][T11746] bridge4: entered allmulticast mode [ 1125.142037][T11762] IPVS: set_ctl: invalid protocol: 470 127.0.0.1:20001 [ 1125.169826][T11752] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1125.355015][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11009'. [ 1125.384246][T11770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.464084][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11014'. [ 1125.477109][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11014'. [ 1125.525497][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11016'. [ 1125.529438][T11770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.541740][T11791] netlink: 'syz.3.11016': attribute type 7 has an invalid length. [ 1125.541762][T11791] netlink: 'syz.3.11016': attribute type 8 has an invalid length. [ 1125.541773][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11016'. [ 1125.630377][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11014'. [ 1125.650109][T11791] erspan0: entered promiscuous mode [ 1125.666223][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11014'. [ 1125.667931][T11791] batadv_slave_1: entered promiscuous mode [ 1125.682279][T11791] batadv_slave_1: left promiscuous mode [ 1125.688856][T11791] erspan0: left promiscuous mode [ 1125.698239][T14868] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.707653][T14868] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.736014][T14868] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.751427][T11799] openvswitch: netlink: IP tunnel TTL not specified. [ 1125.979168][T11812] netlink: 'syz.5.11023': attribute type 2 has an invalid length. [ 1126.005363][T11817] netlink: 'syz.3.11024': attribute type 83 has an invalid length. [ 1126.005600][T11812] 9: entered promiscuous mode [ 1126.109386][T11814] scsi_nl_rcv_msg: discarding partial skb [ 1126.116292][T11814] netlink: 'syz.6.11022': attribute type 4 has an invalid length. [ 1126.394921][T11829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1126.477925][ T6145] tipc: Resetting bearer [ 1126.755835][T11850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1127.288086][ T6145] gretap0 (unregistering): left promiscuous mode [ 1127.591345][ T6145] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 1127.741605][ T6145] bridge6 (unregistering): left allmulticast mode [ 1127.871420][ T6145] bond0 (unregistering): Released all slaves [ 1128.003063][ T6145] bond1 (unregistering): Released all slaves [ 1128.015464][ T6145] bond2 (unregistering): Released all slaves [ 1128.029205][ T6145] bond3 (unregistering): Released all slaves [ 1128.156289][ T6145] bond4 (unregistering): (slave veth5): Releasing active interface [ 1128.165224][ T6145] bond4 (unregistering): Released all slaves [ 1128.179441][ T6145] bond5 (unregistering): Released all slaves [ 1128.312537][ T6145] bond6 (unregistering): Released all slaves [ 1128.435437][ T6145] bond7 (unregistering): Released all slaves [ 1128.448419][ T6145] bond8 (unregistering): Released all slaves [ 1128.579235][ T6145] bond9 (unregistering): Released all slaves [ 1128.674017][ T6145] tipc: Disabling bearer [ 1128.808075][ T6145] bond3 (unregistering): (slave gretap3): Releasing active interface [ 1128.930451][ T6145] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1129.019391][ T6145] bond3 (unregistering): (slave bridge4): Releasing active interface [ 1129.129472][ T6145] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 1129.381678][ T6145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.392887][ T6145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.403339][ T6145] bond0 (unregistering): Released all slaves [ 1129.419564][ T6145] bond1 (unregistering): Released all slaves [ 1129.433002][ T6145] bond2 (unregistering): Released all slaves [ 1129.445853][ T6145] bond3 (unregistering): Released all slaves [ 1129.461381][ T6145] bond4 (unregistering): Released all slaves [ 1129.477304][ T6145] bond5 (unregistering): Released all slaves [ 1129.633680][ T6145] bond6 (unregistering): Released all slaves [ 1129.651421][ T6145] bond7 (unregistering): Released all slaves [ 1129.664421][ T6145] bond8 (unregistering): Released all slaves [ 1129.794082][ T6145] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1129.803149][ T6145] bond9 (unregistering): Released all slaves [ 1129.931924][ T6145] bond10 (unregistering): Released all slaves [ 1129.944490][ T6145] bond11 (unregistering): Released all slaves [ 1129.958303][ T6145] bond12 (unregistering): Released all slaves [ 1130.001882][T15636] wg1 speed is unknown, defaulting to 1000 [ 1130.008894][T15636] syz2: Port: 1 Link DOWN [ 1130.091457][T11865] __nla_validate_parse: 7 callbacks suppressed [ 1130.091475][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11038'. [ 1130.111205][T11864] netlink: 13 bytes leftover after parsing attributes in process `syz.5.11037'. [ 1130.245561][T11870] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11039'. [ 1130.370928][ T6145] : left promiscuous mode [ 1130.441046][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11046'. [ 1130.594889][ T6145] tipc: Left network mode [ 1130.598945][T11897] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1130.678835][T11902] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11047'. [ 1130.735150][T11897] bond3: (slave lo): Enslaving as a backup interface with an up link [ 1130.769284][T11897] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1130.839430][ T6145] tipc: Disabling bearer [ 1130.878847][ T6145] tipc: Left network mode [ 1130.898596][T11908] netlink: 'syz.6.11049': attribute type 1 has an invalid length. [ 1131.012778][T11908] bond3: entered promiscuous mode [ 1131.016132][ T6145] IPVS: stopping backup sync thread 29456 ... [ 1131.019372][T11908] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1131.074939][T11922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11052'. [ 1131.241454][T11922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11052'. [ 1131.292897][T11922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11052'. [ 1131.323360][T11922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11052'. [ 1131.382000][T11922] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11052'. [ 1131.725580][T11957] nbd: must specify an index to disconnect [ 1131.727275][T11938] syzkaller0: entered promiscuous mode [ 1131.743848][T11957] netlink: 'syz.5.11057': attribute type 5 has an invalid length. [ 1131.775258][T11957] netlink: 'syz.5.11057': attribute type 6 has an invalid length. [ 1131.786482][T11938] syzkaller0: entered allmulticast mode [ 1131.801669][T11962] netlink: 'syz.3.11063': attribute type 1 has an invalid length. [ 1131.807406][T11959] netlink: 'syz.7.11062': attribute type 3 has an invalid length. [ 1131.933239][T11962] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1133.186732][ T11] block nbd3: Possible stuck request ffff8880364d8000: control (read@0,1024B). Runtime 90 seconds [ 1133.198060][ T11] block nbd3: Possible stuck request ffff8880364d8200: control (read@1024,1024B). Runtime 90 seconds [ 1133.209218][ T11] block nbd3: Possible stuck request ffff8880364d8400: control (read@2048,1024B). Runtime 90 seconds [ 1133.220452][ T11] block nbd3: Possible stuck request ffff8880364d8600: control (read@3072,1024B). Runtime 90 seconds [ 1134.292811][T11982] syzkaller0: entered promiscuous mode [ 1134.302284][T11982] syzkaller0: entered allmulticast mode [ 1134.384038][T11995] netlink: 'syz.6.11070': attribute type 4 has an invalid length. [ 1134.435582][T12003] netlink: 'syz.6.11070': attribute type 4 has an invalid length. [ 1136.304525][T12000] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1136.633642][T12034] netlink: 'syz.5.11083': attribute type 10 has an invalid length. [ 1136.706532][T12029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.719504][T12029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.746979][T12042] __nla_validate_parse: 37 callbacks suppressed [ 1136.746991][T12042] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11082'. [ 1136.780907][T12041] batadv_slave_0: entered promiscuous mode [ 1136.800033][T12041] batadv_slave_0: entered allmulticast mode [ 1136.881102][T12029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.894167][T12029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.001686][T12029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.014544][T12029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.095966][T12029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.128452][T12029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.144429][T12053] netlink: 'syz.5.11087': attribute type 11 has an invalid length. [ 1137.156140][T12053] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.11087'. [ 1137.500988][T20728] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.518389][T20728] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.571443][T12066] syzkaller0: entered promiscuous mode [ 1137.580252][T12066] syzkaller0: entered allmulticast mode [ 1137.659217][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11090'. [ 1137.688131][T17294] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.709248][T17294] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.782402][T17294] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.805815][T17294] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.879443][T17294] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1137.907197][T17294] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.938173][T12084] netlink: 'syz.6.11095': attribute type 11 has an invalid length. [ 1137.946231][T12084] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11095'. [ 1138.167503][T12090] netlink: 404 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1138.198952][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1138.206415][T12096] netlink: 'syz.1.11097': attribute type 10 has an invalid length. [ 1138.264200][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1138.287232][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1138.331395][T12090] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1138.399234][T12096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.448440][T12096] team0: entered promiscuous mode [ 1138.453605][T12096] team_slave_0: entered promiscuous mode [ 1138.472238][T12096] team_slave_1: entered promiscuous mode [ 1138.482887][T12096] bond0: (slave team0): Enslaving as an active interface with an up link [ 1138.503412][T12113] netlink: 'syz.5.11104': attribute type 39 has an invalid length. [ 1138.513247][T12107] tipc: Enabling of bearer rejected, failed to enable media [ 1138.705662][ T6145] hsr_slave_0: left promiscuous mode [ 1138.720715][ T6145] batman_adv: batadv0: Removing interface: dummy0 [ 1138.829399][ T6145] veth0_macvtap: left promiscuous mode [ 1138.845250][ T6145] veth1_vlan: left promiscuous mode [ 1138.862778][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11110'. [ 1138.891216][T12140] sctp: [Deprecated]: syz.1.11111 (pid 12140) Use of int in max_burst socket option. [ 1138.891216][T12140] Use struct sctp_assoc_value instead [ 1139.809416][ T6145] lo (unregistering): left allmulticast mode [ 1140.232740][ T6145] team0 (unregistering): Port device team_slave_1 removed [ 1140.277174][ T6145] team0 (unregistering): Port device team_slave_0 removed [ 1140.566436][ T6145] team0 (unregistering): Port device dummy0 removed [ 1140.739801][T12156] netlink: 'syz.1.11115': attribute type 1 has an invalid length. [ 1141.112753][T12182] netlink: 'syz.1.11120': attribute type 23 has an invalid length. [ 1141.117192][T12179] pim6reg: entered allmulticast mode [ 1141.516423][T12200] dvmrp0: left allmulticast mode [ 1141.808043][T12227] netlink: 'syz.6.11130': attribute type 5 has an invalid length. [ 1141.915233][ T6145] IPVS: stop unused estimator thread 0... [ 1141.931037][ T6145] IPVS: stop unused estimator thread 0... [ 1141.967286][T12236] __nla_validate_parse: 7 callbacks suppressed [ 1141.967306][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11135'. [ 1142.021451][T12242] netlink: 'syz.5.11137': attribute type 21 has an invalid length. [ 1142.075669][T12242] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11137'. [ 1142.202530][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11140'. [ 1142.294766][T12250] openvswitch: netlink: Message has 592 unknown bytes. [ 1142.316743][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.396138][T12236] bond0 (unregistering): left promiscuous mode [ 1142.403057][T12236] bond_slave_0: left promiscuous mode [ 1142.411105][T12236] bond_slave_1: left promiscuous mode [ 1142.419032][T12236] team0: left promiscuous mode [ 1142.423962][T12236] team_slave_0: left promiscuous mode [ 1142.430126][T12236] team_slave_1: left promiscuous mode [ 1142.439231][T12236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.456515][T12236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.472406][T12236] bond0 (unregistering): (slave team0): Releasing backup interface [ 1142.484671][T12236] bond0 (unregistering): Released all slaves [ 1142.670498][T12277] sctp: [Deprecated]: syz.5.11147 (pid 12277) Use of int in max_burst socket option. [ 1142.670498][T12277] Use struct sctp_assoc_value instead [ 1142.753810][T12281] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 1142.776309][T12281] bond6 (unregistering): Released all slaves [ 1142.880304][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11151'. [ 1142.901283][T12291] netlink: 'syz.5.11153': attribute type 2 has an invalid length. [ 1142.910653][T12291] netlink: 244 bytes leftover after parsing attributes in process `syz.5.11153'. [ 1142.939440][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11151'. [ 1142.980552][T12289] netlink: 'syz.7.11151': attribute type 11 has an invalid length. [ 1143.011408][T12296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11154'. [ 1143.070750][T12299] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1143.084482][T12299] syzkaller1: Refused to change device type [ 1143.448767][T12331] tipc: Enabling of bearer rejected, failed to enable media [ 1143.461300][T12331] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11164'. [ 1143.508623][T12333] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11165'. [ 1143.626370][T12338] netlink: 156 bytes leftover after parsing attributes in process `syz.5.11167'. [ 1143.841496][T12353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.914099][T12359] netlink: 'syz.5.11172': attribute type 16 has an invalid length. [ 1144.033663][T12362] xt_hashlimit: size too large, truncated to 1048576 [ 1144.198356][T12375] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1144.359338][T12371] veth5: entered promiscuous mode [ 1144.398584][T12383] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1144.674282][T12401] netlink: 'syz.3.11187': attribute type 33 has an invalid length. [ 1144.774979][T12401] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1144.803123][T12401] bond6 (unregistering): Released all slaves [ 1145.705644][T12449] veth1_macvtap: left promiscuous mode [ 1145.730607][T12449] macsec0: entered promiscuous mode [ 1145.735853][T12449] macsec0: entered allmulticast mode [ 1145.760880][T12454] veth1_macvtap: entered promiscuous mode [ 1145.767023][T12454] veth1_macvtap: entered allmulticast mode [ 1145.773294][T12454] macsec0: left promiscuous mode [ 1145.778742][T12454] macsec0: left allmulticast mode [ 1145.783887][T12454] veth1_macvtap: left allmulticast mode [ 1145.840050][T12452] syzkaller0: entered promiscuous mode [ 1145.845566][T12452] syzkaller0: entered allmulticast mode [ 1146.080333][T12469] openvswitch: netlink: IP tunnel dst address not specified [ 1148.259529][T12469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1148.581816][T12510] netlink: 'syz.7.11219': attribute type 20 has an invalid length. [ 1148.590474][T12510] __nla_validate_parse: 3 callbacks suppressed [ 1148.590493][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11219'. [ 1148.653808][T12510] netlink: 'syz.7.11219': attribute type 1 has an invalid length. [ 1148.675908][T12510] netlink: 228 bytes leftover after parsing attributes in process `syz.7.11219'. [ 1148.710144][T12524] openvswitch: netlink: Missing valid actions attribute. [ 1148.731457][T12524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.740059][T12518] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11223'. [ 1148.741733][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11225'. [ 1148.761866][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11225'. [ 1148.803103][T12510] tipc: Started in network mode [ 1148.810925][T12510] tipc: Node identity , cluster identity 4711 [ 1148.819357][T12510] tipc: Failed to obtain node identity [ 1148.824876][T12510] tipc: Enabling of bearer rejected, failed to enable media [ 1148.834081][T12528] macvlan1: entered allmulticast mode [ 1148.840694][T12528] veth1_vlan: entered allmulticast mode [ 1148.849320][T12510] syzkaller0: entered promiscuous mode [ 1148.854847][T12510] syzkaller0: entered allmulticast mode [ 1148.881865][T12528] netlink: 'syz.6.11226': attribute type 4 has an invalid length. [ 1149.071811][T12543] netlink: 'syz.6.11231': attribute type 1 has an invalid length. [ 1149.140588][T12543] bond4: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1149.153260][T12543] bond4: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 1149.164278][T12543] bond4: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 1149.311197][T12553] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11234'. [ 1149.589145][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11239'. [ 1149.708259][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11239'. [ 1149.827487][T12567] bond4: option xmit_hash_policy: invalid value (64) [ 1149.839243][T12567] bond4 (unregistering): Released all slaves [ 1149.866708][T12599] can: request_module (can-proto-0) failed. [ 1150.053272][T12611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11250'. [ 1150.080729][T12612] bond4: Removing last arp target with arp_interval on [ 1150.111939][T15634] IPVS: starting estimator thread 0... [ 1150.118611][T12614] netdevsim netdevsim3: Direct firmware load for ey failed with error -2 [ 1150.140984][T12614] netdevsim netdevsim3: Falling back to sysfs fallback for: ey [ 1150.217072][T12618] IPVS: using max 34 ests per chain, 81600 per kthread [ 1150.239423][T12621] team0 (unregistering): Port device team_slave_0 removed [ 1150.268776][T12621] team0 (unregistering): Port device team_slave_1 removed [ 1150.319486][T12621] team0 (unregistering): Port device veth0_virt_wifi removed [ 1150.350279][T12621] team0 (unregistering): Port device batadv1 removed [ 1150.545163][T12643] netlink: 2 bytes leftover after parsing attributes in process `syz.6.11257'. [ 1150.683980][T12657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.342969][T12692] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 1151.372214][T12692] bond5: (slave vcan1): Error -95 calling set_mac_address [ 1151.874591][T12696] tipc: Enabling of bearer rejected, failed to enable media [ 1151.913569][T12700] vlan0: entered promiscuous mode [ 1151.919001][T12700] bridge0: entered promiscuous mode [ 1152.068706][T12713] netlink: 'syz.6.11276': attribute type 2 has an invalid length. [ 1152.100434][T12713] netlink: 'syz.6.11276': attribute type 2 has an invalid length. [ 1152.145261][T12719] netlink: 'syz.3.11277': attribute type 2 has an invalid length. [ 1152.156291][T12719] netlink: 'syz.3.11277': attribute type 2 has an invalid length. [ 1152.165251][T12719] netlink: 'syz.3.11277': attribute type 1 has an invalid length. [ 1152.854126][T12771] openvswitch: netlink: Missing valid actions attribute. [ 1152.870330][T12771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1152.902772][T12774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1153.083663][T12778] netlink: 'syz.5.11292': attribute type 2 has an invalid length. [ 1153.593220][T12822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1153.704625][T12823] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1153.760616][T12823] bond5 (unregistering): Released all slaves [ 1153.768649][T12835] __nla_validate_parse: 13 callbacks suppressed [ 1153.768699][T12835] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11311'. [ 1153.818512][T12838] validate_nla: 1 callbacks suppressed [ 1153.818530][T12838] netlink: 'syz.1.11313': attribute type 83 has an invalid length. [ 1153.995999][T12846] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.11317'. [ 1154.063880][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11314'. [ 1154.090567][T12849] netlink: 'syz.5.11316': attribute type 21 has an invalid length. [ 1154.112790][T12853] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1154.116719][T12849] netlink: 'syz.5.11316': attribute type 22 has an invalid length. [ 1154.147239][T12849] netlink: 'syz.5.11316': attribute type 23 has an invalid length. [ 1154.161679][T12849] netlink: 'syz.5.11316': attribute type 25 has an invalid length. [ 1154.174971][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11318'. [ 1154.206950][T12849] netlink: 96 bytes leftover after parsing attributes in process `syz.5.11316'. [ 1154.271901][T12857] netlink: 'syz.3.11319': attribute type 1 has an invalid length. [ 1154.281924][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11319'. [ 1154.421479][T12871] syzkaller0: entered promiscuous mode [ 1154.431396][T12871] syzkaller0: entered allmulticast mode [ 1154.534610][T12872] netlink: 'syz.7.11323': attribute type 10 has an invalid length. [ 1154.558034][T12876] syzkaller1: entered promiscuous mode [ 1154.563696][T12876] syzkaller1: entered allmulticast mode [ 1154.659504][T12880] xt_nat: multiple ranges no longer supported [ 1154.796025][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11328'. [ 1154.818619][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11330'. [ 1154.843304][T12896] netlink: 'syz.5.11330': attribute type 7 has an invalid length. [ 1154.866171][T12896] netlink: 'syz.5.11330': attribute type 8 has an invalid length. [ 1154.883651][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11330'. [ 1155.147381][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11333'. [ 1156.561021][T13019] netlink: 'syz.7.11363': attribute type 18 has an invalid length. [ 1156.568596][T13017] openvswitch: netlink: Flow actions attr not present in new flow. [ 1157.403837][T13070] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1157.536374][T13077] x_tables: unsorted entry at hook 2 [ 1157.564498][T13080] xt_hashlimit: size too large, truncated to 1048576 [ 1157.752703][T13087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1158.206380][T13116] ip6gretap0: entered promiscuous mode [ 1158.227444][T13116] ip6gretap0: left promiscuous mode [ 1158.255214][T13119] xt_cgroup: xt_cgroup: no path or classid specified [ 1158.530273][T13087] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1158.792019][T13147] __nla_validate_parse: 17 callbacks suppressed [ 1158.792033][T13147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11403'. [ 1158.968303][T13154] x_tables: duplicate underflow at hook 1 [ 1159.219869][T13156] sctp: [Deprecated]: syz.3.11407 (pid 13156) Use of int in maxseg socket option. [ 1159.219869][T13156] Use struct sctp_assoc_value instead [ 1159.298597][T13155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1159.503877][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11417'. [ 1159.867793][ T8600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1159.878334][ T8600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1159.891062][ T8600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.900745][ T8600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.909158][ T8600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1160.418375][T13223] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11427'. [ 1160.428704][T13223] validate_nla: 6 callbacks suppressed [ 1160.428723][T13223] netlink: 'syz.5.11427': attribute type 7 has an invalid length. [ 1160.464746][T13223] netlink: 'syz.5.11427': attribute type 8 has an invalid length. [ 1160.481731][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11427'. [ 1160.607915][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11433'. [ 1160.607964][T13232] netlink: 'syz.3.11431': attribute type 15 has an invalid length. [ 1161.154717][T13273] x_tables: duplicate underflow at hook 1 [ 1161.258464][T13277] !: renamed from dummy0 [ 1161.298704][T13195] chnl_net:caif_netlink_parms(): no params data found [ 1161.651565][T13195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.659404][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.667144][T13195] bridge_slave_0: entered allmulticast mode [ 1161.676549][T13195] bridge_slave_0: entered promiscuous mode [ 1161.690401][T13195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.698016][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.705355][T13195] bridge_slave_1: entered allmulticast mode [ 1161.713457][T13195] bridge_slave_1: entered promiscuous mode [ 1161.846342][T13195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.865880][T13195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.967862][T13195] team0: Port device team_slave_0 added [ 1161.979360][ T52] Bluetooth: hci1: command tx timeout [ 1161.994653][T13319] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11456'. [ 1162.046043][T13195] team0: Port device team_slave_1 added [ 1162.191353][T13195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.237064][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.281481][T13195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.303782][T13195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.313641][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.316180][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11461'. [ 1162.340688][T13195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.533896][T13343] netlink: 'syz.5.11462': attribute type 1 has an invalid length. [ 1162.557239][T13343] netlink: 'syz.5.11462': attribute type 2 has an invalid length. [ 1162.579129][T13195] hsr_slave_0: entered promiscuous mode [ 1162.599700][T13343] netlink: 'syz.5.11462': attribute type 1 has an invalid length. [ 1162.606534][T13195] hsr_slave_1: entered promiscuous mode [ 1162.608320][T13343] netlink: 'syz.5.11462': attribute type 2 has an invalid length. [ 1162.647528][T13353] Set syz1 is full, maxelem 14 reached [ 1162.945061][T13374] netlink: 'syz.3.11469': attribute type 4 has an invalid length. [ 1163.161947][T13195] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.181973][T13195] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.276219][ T11] block nbd3: Possible stuck request ffff8880364d8000: control (read@0,1024B). Runtime 120 seconds [ 1163.287619][ T11] block nbd3: Possible stuck request ffff8880364d8200: control (read@1024,1024B). Runtime 120 seconds [ 1163.299110][ T11] block nbd3: Possible stuck request ffff8880364d8400: control (read@2048,1024B). Runtime 120 seconds [ 1163.299769][T13195] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.310634][ T11] block nbd3: Possible stuck request ffff8880364d8600: control (read@3072,1024B). Runtime 120 seconds [ 1163.332657][T13195] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.413333][T13195] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.439625][T13195] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.513833][T13407] ip6gre1: entered promiscuous mode [ 1163.527624][T13407] ip6gre1: entered allmulticast mode [ 1163.535909][T11624] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.547363][T13407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.556448][T11624] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.568448][T15636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.639323][T13195] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1163.670271][T13195] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.794377][T13423] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.11483'. [ 1163.858562][T15636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1164.044449][T13195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1164.061930][ T52] Bluetooth: hci1: command tx timeout [ 1164.077134][T13195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1164.107988][T13195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1164.131835][T13435] veth0_to_bond: entered allmulticast mode [ 1164.146375][T13195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1164.187139][T15636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1164.367886][T13195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.414296][T13195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.438061][T20728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.445290][T20728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.463085][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.470272][T11624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.496077][T13469] netlink: 'syz.7.11495': attribute type 1 has an invalid length. [ 1164.509618][T13469] netlink: 244 bytes leftover after parsing attributes in process `syz.7.11495'. [ 1164.914714][T13195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.978158][T13195] veth0_vlan: entered promiscuous mode [ 1165.003626][T13195] veth1_vlan: entered promiscuous mode [ 1165.059337][T13195] veth0_macvtap: entered promiscuous mode [ 1165.080603][T13195] veth1_macvtap: entered promiscuous mode [ 1165.126197][T13195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.153827][T13195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.171461][ T5986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.191967][ T5986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.206994][ T5986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.215787][ T5986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.245362][T13510] netlink: 596 bytes leftover after parsing attributes in process `syz.5.11505'. [ 1165.275643][T13510] netlink: 596 bytes leftover after parsing attributes in process `syz.5.11505'. [ 1165.286068][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11504'. [ 1165.297750][T13511] veth7: entered allmulticast mode [ 1165.304270][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11504'. [ 1165.404432][T14877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.426464][T14877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.475503][T10438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.489769][T10438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.893234][T13539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11510'. [ 1165.973677][T13543] netlink: 'syz.5.11511': attribute type 39 has an invalid length. [ 1166.009418][T13546] netlink: 'syz.1.11512': attribute type 21 has an invalid length. [ 1166.027399][T13547] netlink: 'syz.1.11512': attribute type 21 has an invalid length. [ 1166.035391][T13547] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1166.098981][T13546] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1166.149817][ T52] Bluetooth: hci1: command tx timeout [ 1166.161020][T13547] netlink: 'syz.1.11512': attribute type 4 has an invalid length. [ 1166.170059][T13547] netlink: 'syz.1.11512': attribute type 5 has an invalid length. [ 1166.179903][T13547] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1166.189016][T15634] IPVS: starting estimator thread 0... [ 1166.194902][T13546] netlink: 'syz.1.11512': attribute type 4 has an invalid length. [ 1166.206237][T13546] netlink: 'syz.1.11512': attribute type 5 has an invalid length. [ 1166.240277][T13546] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1166.287703][T13557] IPVS: using max 31 ests per chain, 74400 per kthread [ 1166.397430][T13565] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 1166.609908][T13584] netlink: 'syz.7.11524': attribute type 10 has an invalid length. [ 1167.111068][T13608] veth1_to_bond: entered allmulticast mode [ 1167.124425][T13612] IPv6: sit2: Disabled Multicast RS [ 1167.140725][T13607] veth1_to_bond: left allmulticast mode [ 1167.560735][T13629] hsr_slave_0 (unregistering): left promiscuous mode [ 1167.620583][T15634] IPVS: starting estimator thread 0... [ 1167.712025][T13643] geneve3: entered promiscuous mode [ 1167.717615][T13641] IPVS: using max 34 ests per chain, 81600 per kthread [ 1167.735562][ T13] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 20002 - 0 [ 1167.745201][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1167.756367][ T13] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 20002 - 0 [ 1167.802796][ T13] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 20002 - 0 [ 1167.813439][ T13] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 20002 - 0 [ 1167.919025][T13655] Cannot find set identified by id 65534 to match [ 1167.927854][T13656] netlink: 'syz.7.11545': attribute type 1 has an invalid length. [ 1167.977788][T13656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1168.104414][T13668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1168.137145][T13673] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1168.218724][ T52] Bluetooth: hci1: command tx timeout [ 1168.241279][T13676] netlink: 'syz.7.11552': attribute type 7 has an invalid length. [ 1168.292684][T13676] syz_tun: entered promiscuous mode [ 1168.327158][T13676] batadv_slave_1: entered promiscuous mode [ 1168.343934][T13676] syz_tun: left promiscuous mode [ 1168.370171][T13676] batadv_slave_1: left promiscuous mode [ 1168.421790][T13682] IPVS: Unknown mcast interface: pim6reg [ 1168.565967][T13701] netlink: 'syz.7.11558': attribute type 11 has an invalid length. [ 1169.081576][T13733] team0: Device veth1_macvtap failed to register rx_handler [ 1169.805193][T13783] __nla_validate_parse: 11 callbacks suppressed [ 1169.805212][T13783] netlink: 277 bytes leftover after parsing attributes in process `syz.5.11582'. [ 1170.049982][T13806] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11585'. [ 1170.496462][T13845] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11593'. [ 1170.912061][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11602'. [ 1173.550660][T11624] bridge_slave_1: left allmulticast mode [ 1173.570085][T11624] bridge_slave_1: left promiscuous mode [ 1173.575921][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.634233][T11624] bridge_slave_0: left allmulticast mode [ 1173.638582][T13925] validate_nla: 8 callbacks suppressed [ 1173.638599][T13925] netlink: 'syz.1.11616': attribute type 1 has an invalid length. [ 1173.649720][T11624] bridge_slave_0: left promiscuous mode [ 1173.677099][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.768077][T13937] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1173.786429][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11616'. [ 1174.454727][T11624] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1174.764702][T11624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1174.787962][T11624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.800377][T11624] bond0 (unregistering): Released all slaves [ 1174.952025][T11624] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1174.961012][T11624] bond1 (unregistering): Released all slaves [ 1175.093597][T11624] bond2 (unregistering): Released all slaves [ 1175.228507][T11624] bond3 (unregistering): Released all slaves [ 1175.361468][T11624] bond4 (unregistering): Released all slaves [ 1175.375037][T11624] bond5 (unregistering): Released all slaves [ 1175.507525][T11624] bond6 (unregistering): Released all slaves [ 1175.521457][T11624] bond7 (unregistering): Released all slaves [ 1175.655500][T11624] bond8 (unregistering): Released all slaves [ 1175.668606][T11624] bond9 (unregistering): Released all slaves [ 1175.681752][T11624] bond10 (unregistering): Released all slaves [ 1175.694768][T11624] bond11 (unregistering): (slave bond12): Releasing backup interface [ 1175.704800][T11624] bond11 (unregistering): Released all slaves [ 1175.843448][T11624] bond12 (unregistering): Released all slaves [ 1175.856318][T13925] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1175.857716][T13935] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1175.917561][T15636] sy: Port: 1 Link DOWN [ 1176.134093][T13987] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1176.151404][T11624] tipc: Disabling bearer [ 1176.161982][T11624] tipc: Left network mode [ 1176.184967][T13984] tipc: Enabling of bearer rejected, failed to enable media [ 1176.301409][T11624] IPVS: stopping master sync thread 2105 ... [ 1176.350288][T13999] x_tables: duplicate underflow at hook 2 [ 1176.437709][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11644'. [ 1176.454529][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11644'. [ 1176.477775][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11644'. [ 1176.503919][T14007] ip6gre2: entered promiscuous mode [ 1176.529535][T14007] ip6gre2: entered allmulticast mode [ 1176.612470][T14016] syzkaller1: entered promiscuous mode [ 1176.646762][T14016] syzkaller1: entered allmulticast mode [ 1176.663313][T14016] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 56 [ 1176.697760][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1176.759607][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11648'. [ 1176.789953][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11648'. [ 1176.819649][T14016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11648'. [ 1177.102526][T14052] netlink: 'syz.1.11657': attribute type 1 has an invalid length. [ 1177.519047][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11662'. [ 1177.602656][T14085] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.11666'. [ 1177.661830][T14085] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1177.688077][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11666'. [ 1177.698146][T14089] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11666'. [ 1177.727728][T14091] veth0: entered promiscuous mode [ 1177.750786][T14091] veth0: left promiscuous mode [ 1177.863430][T11624] hsr_slave_0: left promiscuous mode [ 1177.883797][T11624] hsr_slave_1: left promiscuous mode [ 1177.911805][T11624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.927300][T11624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.943058][T11624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.951932][T11624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.972969][T11624] veth1_macvtap: left promiscuous mode [ 1177.980582][T11624] veth0_macvtap: left promiscuous mode [ 1178.363750][T11624] team0 (unregistering): Port device team_slave_1 removed [ 1178.414583][T11624] team0 (unregistering): Port device team_slave_0 removed [ 1178.504125][T17294] smc: removing ib device sy [ 1178.802157][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.809671][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.876255][T14078] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1179.138785][T14123] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1180.505078][T14186] netlink: 'syz.3.11696': attribute type 13 has an invalid length. [ 1180.518634][T14189] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 1181.051747][T14212] x_tables: duplicate underflow at hook 2 [ 1181.390624][T14220] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1181.601139][T14221] __nla_validate_parse: 14 callbacks suppressed [ 1181.601157][T14221] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11706'. [ 1181.942590][T11624] IPVS: stop unused estimator thread 0... [ 1182.315160][T14262] netlink: 'syz.3.11721': attribute type 11 has an invalid length. [ 1182.341242][T14262] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11721'. [ 1182.458385][ C1] ------------[ cut here ]------------ [ 1182.464302][ C1] ODEBUG: free active (active state 0) object: ffff88807cf6ec90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1182.474968][T14278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1182.477228][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.6.11725/14275 [ 1182.497058][ C1] Modules linked in: [ 1182.497550][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1182.501493][ C1] CPU: 1 UID: 0 PID: 14275 Comm: syz.6.11725 Not tainted syzkaller #0 PREEMPT(full) [ 1182.519976][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.528617][T14279] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1182.530104][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1182.544207][ C1] Code: 89 44 24 20 e8 87 04 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 89 c0 8b 48 c7 c2 c0 8e c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1182.549247][T14278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1182.563891][ C1] RSP: 0000:ffffc90000a08a70 EFLAGS: 00010246 [ 1182.563917][ C1] RAX: ffffffff8a4c89b0 RBX: ffffffff99b18038 RCX: 0000000000000000 [ 1182.563932][ C1] RDX: ffffffff8bc08ec0 RSI: ffffffff8bc089a0 RDI: ffffffff8f8c80f0 [ 1182.563946][ C1] RBP: ffffffff8b6d2440 R08: ffff88807cf6ec90 R09: ffffffff8b6d35a0 [ 1182.563961][ C1] R10: dffffc0000000000 R11: ffffffff81aeb860 R12: ffff88807cf6ee00 [ 1182.563976][ C1] R13: ffffffff8f8c80f0 R14: ffff88807cf6e000 R15: ffff88807cf6ec90 [ 1182.563992][ C1] FS: 00007f68db7986c0(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 1182.564011][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.564026][ C1] CR2: 00007f68da9750e0 CR3: 000000001ffd0000 CR4: 00000000003526f0 [ 1182.564044][ C1] Call Trace: [ 1182.564055][ C1] [ 1182.564064][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1182.564108][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1182.564133][ C1] kfree+0x13b/0x660 [ 1182.564168][ C1] rose_timer_expiry+0x4cb/0x600 [ 1182.668865][ C1] ? call_timer_fn+0x159/0x590 [ 1182.673658][ C1] call_timer_fn+0x16e/0x590 [ 1182.678326][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1182.678692][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11728'. [ 1182.683809][ C1] ? call_timer_fn+0xbe/0x590 [ 1182.683839][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1182.702736][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1182.708025][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1182.713263][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1182.718806][ C1] __run_timer_base+0x61a/0x860 [ 1182.723708][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1182.729144][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1182.735453][ C1] run_timer_softirq+0xb7/0x180 [ 1182.740375][ C1] handle_softirqs+0x27d/0x850 [ 1182.745170][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1182.750012][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1182.755347][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1182.760647][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1182.765272][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1182.770551][ C1] irq_exit_rcu+0x9/0x30 [ 1182.774820][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1182.780505][ C1] [ 1182.783462][ C1] [ 1182.786500][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1182.792556][ C1] RIP: 0010:lock_is_held_type+0x137/0x190 [ 1182.798357][ C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 49 ea 22 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1182.818203][ C1] RSP: 0000:ffffc90004d67858 EFLAGS: 00000206 [ 1182.824268][ C1] RAX: d2742a6e77bc3100 RBX: 0000000000000001 RCX: d2742a6e77bc3100 [ 1182.832290][ C1] RDX: ffff88802abc8000 RSI: ffffffff8d979282 RDI: ffffffff8bc08360 [ 1182.840420][ C1] RBP: 00000000ffffffff R08: ffffea0001f705c7 R09: 1ffffd40003ee0b8 [ 1182.848414][ C1] R10: dffffc0000000000 R11: fffff940003ee0b9 R12: 0000000000000246 [ 1182.856382][ C1] R13: ffff88802abc8000 R14: ffffffff8df41a20 R15: 0000000000000001 [ 1182.864439][ C1] xas_reload+0x19f/0x470 [ 1182.868850][ C1] next_uptodate_folio+0x15f/0x5d0 [ 1182.873997][ C1] filemap_map_pages+0x14d7/0x1fd0 [ 1182.879156][ C1] ? security_file_alloc+0x34/0x330 [ 1182.884352][ C1] ? filemap_map_pages+0x160/0x1fd0 [ 1182.889581][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1182.895052][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1182.900543][ C1] ? do_pte_missing+0x11a9/0x3330 [ 1182.905566][ C1] do_pte_missing+0x20b0/0x3330 [ 1182.910482][ C1] ? handle_mm_fault+0xdb/0x32b0 [ 1182.915447][ C1] handle_mm_fault+0x1b26/0x32b0 [ 1182.920452][ C1] ? handle_mm_fault+0xdb/0x32b0 [ 1182.925400][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1182.930737][ C1] ? lock_vma_under_rcu+0x42c/0x4a0 [ 1182.935977][ C1] ? do_user_addr_fault+0x1a8/0x1380 [ 1182.941298][ C1] do_user_addr_fault+0xa7c/0x1380 [ 1182.946415][ C1] ? rcu_is_watching+0x15/0xb0 [ 1182.951215][ C1] ? trace_page_fault_user+0x84/0x1c0 [ 1182.956592][ C1] exc_page_fault+0x82/0x100 [ 1182.961233][ C1] asm_exc_page_fault+0x26/0x30 [ 1182.966109][ C1] RIP: 0033:0x7f68da9750e0 [ 1182.970589][ C1] Code: 4c 89 c0 c5 f8 77 c3 0f 1f 00 f3 0f bc c0 48 39 c6 0f 42 c6 c5 f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 84 00 00 00 00 00 <48> 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 [ 1182.990231][ C1] RSP: 002b:00007f68db796f58 EFLAGS: 00010246 [ 1182.996300][ C1] RAX: 0000000000050010 RBX: 00007f68db797024 RCX: 0000000000000000 [ 1183.004298][ C1] RDX: 00002000000002c0 RSI: 000000000000000f RDI: 00002000000002c0 [ 1183.012311][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1183.020321][ C1] R10: 00002000000002c0 R11: 0000000000000286 R12: 00002000000002c0 [ 1183.028331][ C1] R13: 00007f68db796fc0 R14: 00007f68dabe5fa0 R15: 0000000000000000 [ 1183.036343][ C1] [ 1183.039404][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1183.046685][ C1] CPU: 1 UID: 0 PID: 14275 Comm: syz.6.11725 Not tainted syzkaller #0 PREEMPT(full) [ 1183.056143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.066190][ C1] Call Trace: [ 1183.069462][ C1] [ 1183.072292][ C1] dump_stack_lvl+0x99/0x250 [ 1183.076877][ C1] ? __asan_memcpy+0x40/0x70 [ 1183.081455][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1183.086667][ C1] ? __pfx__printk+0x10/0x10 [ 1183.091254][ C1] vpanic+0x237/0x6d0 [ 1183.095240][ C1] ? __pfx_vpanic+0x10/0x10 [ 1183.099736][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1183.105049][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1183.110268][ C1] panic+0xb9/0xc0 [ 1183.113983][ C1] ? __pfx_panic+0x10/0x10 [ 1183.118400][ C1] __warn+0x317/0x4b0 [ 1183.122394][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1183.128125][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1183.133840][ C1] __report_bug+0x288/0x500 [ 1183.138334][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1183.144055][ C1] ? __pfx___report_bug+0x10/0x10 [ 1183.149097][ C1] ? call_timer_fn+0x16e/0x590 [ 1183.153875][ C1] ? __run_timer_base+0x61a/0x860 [ 1183.158890][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1183.163910][ C1] report_bug_entry+0x19a/0x290 [ 1183.168751][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1183.174469][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1183.180212][ C1] handle_bug+0xca/0x200 [ 1183.184545][ C1] exc_invalid_op+0x1a/0x50 [ 1183.189052][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1183.193899][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1183.200228][ C1] Code: 89 44 24 20 e8 87 04 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 89 c0 8b 48 c7 c2 c0 8e c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1183.219826][ C1] RSP: 0000:ffffc90000a08a70 EFLAGS: 00010246 [ 1183.225888][ C1] RAX: ffffffff8a4c89b0 RBX: ffffffff99b18038 RCX: 0000000000000000 [ 1183.233852][ C1] RDX: ffffffff8bc08ec0 RSI: ffffffff8bc089a0 RDI: ffffffff8f8c80f0 [ 1183.241815][ C1] RBP: ffffffff8b6d2440 R08: ffff88807cf6ec90 R09: ffffffff8b6d35a0 [ 1183.249778][ C1] R10: dffffc0000000000 R11: ffffffff81aeb860 R12: ffff88807cf6ee00 [ 1183.257743][ C1] R13: ffffffff8f8c80f0 R14: ffff88807cf6e000 R15: ffff88807cf6ec90 [ 1183.265707][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1183.271075][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1183.276711][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1183.282359][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1183.287458][ C1] kfree+0x13b/0x660 [ 1183.291347][ C1] rose_timer_expiry+0x4cb/0x600 [ 1183.296283][ C1] ? call_timer_fn+0x159/0x590 [ 1183.301044][ C1] call_timer_fn+0x16e/0x590 [ 1183.305625][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1183.311075][ C1] ? call_timer_fn+0xbe/0x590 [ 1183.315742][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1183.320845][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.326041][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 1183.331253][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1183.336710][ C1] __run_timer_base+0x61a/0x860 [ 1183.341578][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1183.346955][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1183.353221][ C1] run_timer_softirq+0xb7/0x180 [ 1183.358064][ C1] handle_softirqs+0x27d/0x850 [ 1183.362820][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1183.367583][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1183.372877][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1183.378070][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1183.382647][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1183.387840][ C1] irq_exit_rcu+0x9/0x30 [ 1183.392073][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1183.397727][ C1] [ 1183.400659][ C1] [ 1183.403586][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.409579][ C1] RIP: 0010:lock_is_held_type+0x137/0x190 [ 1183.415295][ C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 49 ea 22 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1183.434917][ C1] RSP: 0000:ffffc90004d67858 EFLAGS: 00000206 [ 1183.440979][ C1] RAX: d2742a6e77bc3100 RBX: 0000000000000001 RCX: d2742a6e77bc3100 [ 1183.448954][ C1] RDX: ffff88802abc8000 RSI: ffffffff8d979282 RDI: ffffffff8bc08360 [ 1183.456943][ C1] RBP: 00000000ffffffff R08: ffffea0001f705c7 R09: 1ffffd40003ee0b8 [ 1183.464917][ C1] R10: dffffc0000000000 R11: fffff940003ee0b9 R12: 0000000000000246 [ 1183.472920][ C1] R13: ffff88802abc8000 R14: ffffffff8df41a20 R15: 0000000000000001 [ 1183.481075][ C1] xas_reload+0x19f/0x470 [ 1183.485404][ C1] next_uptodate_folio+0x15f/0x5d0 [ 1183.490512][ C1] filemap_map_pages+0x14d7/0x1fd0 [ 1183.495620][ C1] ? security_file_alloc+0x34/0x330 [ 1183.500814][ C1] ? filemap_map_pages+0x160/0x1fd0 [ 1183.506008][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1183.511460][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1183.517175][ C1] ? do_pte_missing+0x11a9/0x3330 [ 1183.522199][ C1] do_pte_missing+0x20b0/0x3330 [ 1183.527069][ C1] ? handle_mm_fault+0xdb/0x32b0 [ 1183.532003][ C1] handle_mm_fault+0x1b26/0x32b0 [ 1183.536937][ C1] ? handle_mm_fault+0xdb/0x32b0 [ 1183.541868][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1183.547148][ C1] ? lock_vma_under_rcu+0x42c/0x4a0 [ 1183.552359][ C1] ? do_user_addr_fault+0x1a8/0x1380 [ 1183.557636][ C1] do_user_addr_fault+0xa7c/0x1380 [ 1183.562742][ C1] ? rcu_is_watching+0x15/0xb0 [ 1183.567494][ C1] ? trace_page_fault_user+0x84/0x1c0 [ 1183.572865][ C1] exc_page_fault+0x82/0x100 [ 1183.577447][ C1] asm_exc_page_fault+0x26/0x30 [ 1183.582288][ C1] RIP: 0033:0x7f68da9750e0 [ 1183.586690][ C1] Code: 4c 89 c0 c5 f8 77 c3 0f 1f 00 f3 0f bc c0 48 39 c6 0f 42 c6 c5 f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 84 00 00 00 00 00 <48> 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 [ 1183.606283][ C1] RSP: 002b:00007f68db796f58 EFLAGS: 00010246 [ 1183.612440][ C1] RAX: 0000000000050010 RBX: 00007f68db797024 RCX: 0000000000000000 [ 1183.620403][ C1] RDX: 00002000000002c0 RSI: 000000000000000f RDI: 00002000000002c0 [ 1183.628367][ C1] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1183.636325][ C1] R10: 00002000000002c0 R11: 0000000000000286 R12: 00002000000002c0 [ 1183.644288][ C1] R13: 00007f68db796fc0 R14: 00007f68dabe5fa0 R15: 0000000000000000 [ 1183.652267][ C1] [ 1183.655866][ C1] Kernel Offset: disabled [ 1183.660181][ C1] Rebooting in 86400 seconds..