last executing test programs: 2m51.798696947s ago: executing program 3 (id=3747): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) recvfrom$inet6(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x10140, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x112}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xffffffffffffff9f, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fcdbdf25690000000c0099003b0000004e000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300), 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) mkdirat$cgroup(r6, &(0x7f00000004c0)='syz1\x00', 0x1ff) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) close(0x4) 2m51.523517836s ago: executing program 3 (id=3750): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000001740)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8090000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000005c0108806800008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c0824000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300020000001400040002004e2464010102000000000000000078000080200004000a004e2100000002fc0200000000000000000000000000010002000008000a00010000002400010000000000000000000000000000000000000000000000000000000000000000001400040002004e21ac1414aa00000000000000001400040002004e207f000001000000000000000078000080500009804c000080060001000a0000001400020000000000000000000000ffffe00000020500030003000000060001000a00000014000200ff020000000000000000000000000001050003000000000024000100"/418], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c0002800800034000000000080002400000000d0800044000000000080005400000000808000140000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f000000000000000c00020001000000150000000c000c8e06000100d43f0000060003000100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) 2m50.886844041s ago: executing program 3 (id=3755): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) unshare(0x2c020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2m49.858396222s ago: executing program 3 (id=3760): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000280)="240000004e002500ec06f4f995b2e8ff0a04f55f08000100025136489fdf7b0208d3fc80", 0x24) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000540)={{r0, &(0x7f0000000180)='skcipher\x00', 0x40c180, &(0x7f0000000280)={@align=0x7, {0x8000, 0x67c, 0x6, 0x7}}, 0x6, &(0x7f0000000480), &(0x7f00000004c0)=0x1}, {[0x7f, 0xfffffeff, 0x0, 0x8]}, 0xe, 0x3f, &(0x7f0000000500)=""/63}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002"], 0x80}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xb}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24044010}, 0x80) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000087a4c820dd1a610c3b393e8c93c0eb4081498e01ffd8cf0988fc724dda8253b16aa35a96c7bfee73d59a0bda7743caa98a1912e6103463e884c9a519a6232e6960bc13653c757c426646826ff54289c6e7330339f23fabb6700824888da35dae112d7bd5f3b6de4dff89ae48ac32dd06d9505ea7435b52a542b5f5560607fd5260f6f39bf244", @ANYRES16=r7, @ANYBLOB="080029bd7000fcdbdf250100000000000000084100000018001800000c266574683a76657468315f766c616e0000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r8 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$nl_route(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@bridge_setlink={0x50, 0x13, 0x300, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x0, 0xe8}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xff}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_OPERSTATE={0x5, 0x10, 0xf9}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x81) 2m49.533613422s ago: executing program 3 (id=3762): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x14, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) 2m49.295029849s ago: executing program 3 (id=3766): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000000021"], 0x10}, 0x1, 0x0, 0x0, 0x14002}, 0x448d0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m34.267230125s ago: executing program 32 (id=3766): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000000021"], 0x10}, 0x1, 0x0, 0x0, 0x14002}, 0x448d0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m26.964228036s ago: executing program 4 (id=3971): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) pipe(&(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4402}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xa0000001}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000480)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000140)={0x4}) 2m25.5046877s ago: executing program 4 (id=3988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x40, 0x4, 0x20, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10080}, 0x4008040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x4}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r4, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket(0x2b, 0x80801, 0x1) listen(r8, 0x9) ioctl$sock_inet_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000080)={0x35, 0xd6, 0xa, 0xb, 0x2800000, 0xc50d17ae88acd0ca}) 2m25.294345955s ago: executing program 4 (id=3994): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xe3, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xb9}, {@local, 0xe1}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xed, [@broadcast, @local, @empty, @private=0xa010102, @loopback]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c0001800600060088470000140002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket(0x1d, 0x2, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x7fff, @none, 0x17b6}, 0xe) (async) sendmsg$can_bcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, r11, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r12 = socket(0xa, 0x3, 0x87) sendmsg(r12, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)='R', 0x1}], 0x1}, 0x4040010) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r13, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) socket(0x1d, 0x2, 0x6) 2m25.06260009s ago: executing program 4 (id=3997): socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01e4be8da400000000000a0000040900010073797a31000000000900020073797a310000000008000a40fffffffc0800034000000106140800001100010000000000000000000100000aae3304fcf0d45b949198263794b21bd5681a2b9e6538f4c5f46db5307be070f8debe158ef5aca4953223e00890480896e81437a3c1337f010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m24.045644807s ago: executing program 4 (id=4007): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x8, 0x7, 0x1200, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r2}, 0x50) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 2m23.78963858s ago: executing program 4 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000d7220000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000006900850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m8.738490286s ago: executing program 33 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000d7220000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000006900850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20.513665177s ago: executing program 6 (id=5303): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000300000000000014003500766574683100000000000000", @ANYRES32=0x0, @ANYBLOB="0c002b80080004"], 0x48}}, 0x0) 20.246718721s ago: executing program 6 (id=5306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000004", @ANYRES16=r1, @ANYBLOB="050200000000fddbdf251200000008000700010000001800018014000200626f6e645f736c6176655f31000000000800080000400000"], 0x3c}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000100001000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000071420002ebd70f8fd9b48717aa97ab25b9d287d2200fddbdf250900", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x404c000) 19.906571394s ago: executing program 6 (id=5309): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='.:\xec+\x00', 0x41901, &(0x7f0000000040)={@align=0x4, {0x9, 0x9, 0x800, 0x5}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8, 0x8, 0x2, 0x9, {{0x34, 0x4, 0x2, 0xc, 0xd0, 0x65, 0x0, 0x8, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0x23, 0x8e, [@private=0xa010101, @multicast2, @multicast1, @empty, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp={0x44, 0x1c, 0x42, 0x0, 0x8, [0x6, 0x5, 0x8001, 0x1, 0xb940, 0x4]}, @timestamp_addr={0x44, 0x54, 0xe1, 0x1, 0x5, [{@remote, 0x2}, {@loopback, 0x2}, {@local, 0x6}, {@remote, 0xfffffffb}, {@remote, 0x9}, {@multicast1, 0x7}, {@remote, 0x6}, {@private=0xa010100, 0x80000000}, {@multicast2, 0x39}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp={0x44, 0xc, 0x23, 0x0, 0xe, [0xf, 0x7]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0xf79}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x200}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0xff96, 0x5, {{0x39, 0x4, 0x1, 0x6, 0xe4, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x35, [@multicast1, @multicast1, @remote]}, @ssrr={0x89, 0x27, 0xbd, [@dev={0xac, 0x14, 0x14, 0x36}, @remote, @multicast2, @private=0xa010101, @empty, @local, @broadcast, @broadcast, @broadcast]}, @end, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc41}, {@empty, 0x2}, {@broadcast, 0x3ffe}, {@loopback, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x5d, 0x1, 0x9, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xfffffc00}, {@multicast1, 0x401}]}, @cipso={0x86, 0x57, 0xffffffffffffffff, [{0x1, 0x11, "187d4b8d88b66cfe72bd840d64ae74"}, {0x5, 0x5, "e90b01"}, {0x2, 0xd, "06a9eb3bdf284646da604d"}, {0x5, 0x5, "9fc0f2"}, {0x6, 0xb, "1ca40c972c4281e1a8"}, {0x6, 0xb, "91ce4d8cac1688af7e"}, {0x0, 0xc, "1ed3f790928b5c8205e7"}, {0x2, 0x5, "f63ed1"}, {0x7, 0x2}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x7, 0x3, {{0x13, 0x4, 0x1, 0x2, 0x4c, 0x66, 0x0, 0x13, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0x9f, 0x1, 0xa, [{@remote, 0x2d}, {@broadcast, 0x7}, {@local, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x1}]}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0x7, [0x2d01c02c, 0x5]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'ip6tnl0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x2, 0x18d, 0x2c, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8721, 0x9, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x20, 0x7840, 0x2, 0x4, {{0x24, 0x4, 0x1, 0x11, 0x90, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x86, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}]}, @ssrr={0x89, 0x7, 0x43, [@multicast1]}, @timestamp_prespec={0x44, 0x14, 0x4c, 0x3, 0x8, [{@rand_addr=0x64010100, 0x6}, {@rand_addr=0x64010102, 0x15}]}, @generic={0x43, 0x12, "09856ef4d79484a5031dc9c344a5174e"}, @generic={0x88, 0xd, "f3b911762197e4533ff138"}, @rr={0x7, 0x27, 0x52, [@rand_addr=0x64010101, @multicast1, @private=0xa010100, @multicast1, @multicast1, @remote, @broadcast, @remote, @broadcast]}, @cipso={0x86, 0xe, 0x1, [{0x9, 0x8, "1aa466a7a958"}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001480)={0xfffffffffffffffd, 0x0, &(0x7f0000001440)={&(0x7f0000000a00)={0xa24, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9e2b, 0x2c, 0xfe, 0x8}, {0x8, 0xc, 0x3b, 0x7}, {0x69d, 0xdd, 0x4, 0x1}]}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1, 0x7f, 0x5, 0x6}, {0x2, 0x8, 0x3, 0x8}, {0x23d, 0xb, 0xfc, 0x1}, {0x6, 0x6, 0x40, 0xc8d1}, {0x6, 0x3, 0x24}, {0x1000, 0x8, 0x0, 0x5}, {0xe, 0x8, 0x1, 0x3}, {0x5, 0x4, 0xd7, 0x4af}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xde53}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x63}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x33af7f2c}}}]}}, {{0x8, 0x1, r9}, {0x208, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x85d1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r13}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc9}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000014c0)=""/92, &(0x7f0000001540)=0x5c) write(r0, &(0x7f0000001580)="bd2e91fdd971833e7ab665ec5e3ea24650496b7f7f17a0a6e855e816c72c8e82a4b2f654af3b85bcab0a4d20e733ddf06ee215477e99b9dccdbf378731cd4c3f3fc26103294a3b65b8d7ad64e8b9dd6a6d709a08b58db0834220bc1812e64d1400c7ac20c57c4802ea5bfb165d82545641", 0x71) r18 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001600)={0x0, @in6={{0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, 0x2, 0x6fb}, &(0x7f00000016c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r18, 0x84, 0x18, &(0x7f0000001700)={r19, 0x5}, 0x8) getsockname$packet(r0, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001780)=0x14) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000017c0)={r19, @in6={{0xa, 0x4e24, 0x9, @remote, 0x5}}, 0x9, 0x9}, &(0x7f0000001880)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000018c0)={r20, 0xd, 0x79}, &(0x7f0000001900)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001940)=0x8, 0x4) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x40c0) 19.627235804s ago: executing program 6 (id=5313): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040), &(0x7f0000000080)=@buf="85e85aecff80837adc98a565d6e60fa0e68c5f12379f18907fb5b797529722b7f28deda8b946a296218da0f170eff9293ebc4da36770d954e17b37325263045d23d3bd203dcec81f9fa779d502e720f9d283d34cdca1a1e9d64fe2b56b6719", 0x2}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r2, &(0x7f0000000140)="d274214a1a7ef72d93ece8119ba752ed8dc982ff40ecce81ff43b08364d0f4ff0149c4358793bc09244754bc552d74d29ab04e357f1e23db4a5e98c1109fd036a060fe810b0d1ac3388bb9988b2b6d29991b24beb23f3860f57563ceaa2b216c1b98b6130ce79734b110b13340d56f47fe08a63cc9da4531c7b415cf1eab1a36f9b9ae126aa8f013b7", 0x89, 0x4491, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @bcast}, 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000240)={@default, @default}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x8001, 0x8, 0x40000, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x3, 0x2, 0x4, 0x7}, 0x50) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000300)={0x3d3, 0x1800000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000006080)={{r1, &(0x7f0000005f00)='\x00', 0x40600, &(0x7f0000005f40)={@align=0x9cdd, {0x4, 0x27, 0x0, 0x3}}, 0x4, &(0x7f0000005f80), &(0x7f0000005fc0)=0x5}, {[0x10, 0x4, 0x7fff, 0x6]}, 0x6, 0x66, &(0x7f0000006000)=""/102}) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000006100)={r3, 0xfffff801, 0x9, "5fc0666fbfd03c88316b0226e731abe91e5c435a120f5165d0d24865e208d7646ac41b4ef9abe5108b0854cc4748c86b68318f65951f3a84c850afd131ce18c7dc1f1f177e21dcf84d09cf302ba63405add4b0c43e69aa5c59820dc185"}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000006280)={r5, &(0x7f0000006180)='\x00', 0x2, &(0x7f00000061c0)={@_ha_fsid={[0x8, 0xfffffff8]}, {0xbac9, 0x40, 0x4, 0x5}}, 0x9, &(0x7f0000006200)={@_ha_fsid}, &(0x7f0000006240)=0x60}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006300), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000063c0)={'ip6tnl0\x00', &(0x7f0000006340)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x9, 0x687d068e, 0x9, @dev={0xfe, 0x80, '\x00', 0xf}, @remote, 0x7, 0x80, 0x0, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000006500)={'ip_vti0\x00', &(0x7f0000006400)={'gre0\x00', 0x0, 0x700, 0x7, 0x100, 0x75b2, {{0x31, 0x4, 0x3, 0x1, 0xc4, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x23, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @remote, @private=0xa010102, @local]}, @timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x0, [{@private=0xa010100, 0xffff8000}, {@loopback, 0x5}, {@loopback, 0xfffffff7}, {@private=0xa010101, 0x6}]}, @ssrr={0x89, 0x17, 0x51, [@private=0xa010102, @private=0xa010100, @loopback, @local, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x7, [{@empty, 0x9}, {@loopback}, {@remote, 0x1ff}, {@loopback, 0x5}, {@broadcast, 0x7ff}, {@empty, 0xffffffff}]}, @generic={0x82, 0x12, "276cbe8ef0030e2c84a6aa33e6daaf37"}, @rr={0x7, 0xb, 0x63, [@rand_addr=0x64010100, @multicast2]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000065c0)={r4, 0x58, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000006700)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000066c0)={&(0x7f0000006600)={0xa4, r7, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r11 = socket$inet6_sctp(0xa, 0x69446aca9de29f46, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000006740), &(0x7f0000006780)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f00000067c0), 0x6000, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000006840)=@generic={&(0x7f0000006800)='./file0\x00', 0x0, 0x8}, 0x18) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006b40)={&(0x7f0000006ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x0]}}, &(0x7f0000006b00)=""/1, 0x2e, 0x1, 0x0, 0x3}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006c80)={0x6, 0x1b, &(0x7f0000006880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x84}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x0, 0x3, 0x1, 0xfe00, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4484}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000006980)='syzkaller\x00', 0x94, 0xe3, &(0x7f00000069c0)=""/227, 0x41000, 0x11, '\x00', 0x0, 0x25, r14, 0x8, &(0x7f0000006b80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000006bc0)={0x0, 0x10, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000006c00)=[r6], &(0x7f0000006c40)=[{0x1, 0x5, 0x8, 0x4}, {0x5, 0x2, 0x10, 0x5}], 0x10, 0x4}, 0x94) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006d80), r6) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000006dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000008340)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008300)={&(0x7f0000006e00)={0x14f4, r15, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x888, 0x111, 0x0, 0x1, {0x884, 0x5, 0x0, 0x1, [{0x720, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x124}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xab}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x99}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x328, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe5cc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x92}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x12837f28c85e95a1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x6e8, 0x111, 0x0, 0x1, {0x6e4, 0x5, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x160, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x72bf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x38}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3db3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}]}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x298}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x10000}, @NL80211_ATTR_PEER_MEASUREMENTS={0x558, 0x111, 0x0, 0x1, {0x554, 0x5, 0x0, 0x1, [{0x550, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x268, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff7f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x36c3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}]}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0x40805}, 0x44800) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000008380)=0x7fff, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000009440)={'nat\x00', 0x0, 0x4, 0x1000, [0x3, 0xaecc, 0x8001, 0x8, 0x3, 0x101], 0x5, &(0x7f00000083c0)=[{}, {}, {}, {}, {}], &(0x7f0000008440)=""/4096}, &(0x7f00000094c0)=0x78) 19.406459212s ago: executing program 6 (id=5318): r0 = socket(0x1, 0x6, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="8000000000128008000100679947796e70001400020000000000", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000fe80000000000000000000000000003ffe8000000000000000000000000000aa00000000000000000a00103000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000010000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000008feffffffff7f40000200000000000008feffffff000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0x2000c0d1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000440012800c0001006d6163766c616e0034000280280005800a000400aaaaaaaab3aa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa0000080003000f"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 19.287840831s ago: executing program 6 (id=5319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) unshare(0x8040480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x0, 0x5}]}]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x44}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x0, 0x5}]}]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x44}, 0x28) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8000000, 0x0, 0xff, 0x2, 0x0, 0x1}, 0x20) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x2c) 6.860310331s ago: executing program 0 (id=5489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom$packet(r4, 0x0, 0x0, 0x20, 0x0, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 6.593963003s ago: executing program 0 (id=5491): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1}, &(0x7f0000000a40), &(0x7f0000000a80)=r2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000640)) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000440)={r7, &(0x7f0000000180)='/dev/net/tun\x00', 0x801, &(0x7f0000000380)={@align=0x4, {0xebc0, 0x9, 0x401, 0xffffffffffffffff}}, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x7}) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x5f}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f00000005c0)={r13, 0x3}, 0x8) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) 6.441131706s ago: executing program 0 (id=5494): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x28) poll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x404) shutdown(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="60a072b1", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fcdbdf25070000009100038006000400dc0e00001400020076657468305f746f5f7465616d0000000800030000000000050008000400000005000800090000001400018006000200a3000000060004004e200000"], 0x60}, 0x1, 0x0, 0x0, 0x24008000}, 0x801) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x4) tee(r1, r6, 0x8f5, 0x0) pread64(r6, &(0x7f00000004c0)=""/229, 0xe5, 0x8) write(r3, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4000003}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x8000, 0x7, 0x760, 0x48000, r1, 0x800, '\x00', r10, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @value=r5}, 0x50) r11 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x14, 0xfc, 0x0, 0xfffffffc}, {0x6, 0x6, 0x7, 0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000000000aa240002800c00028005000100000000001400018008000100ac1e00df070002"], 0xc0}}, 0x0) 5.778324288s ago: executing program 0 (id=5499): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000180)=0xa8, 0x2) sendmsg$inet(r3, &(0x7f0000003200)={&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003100)=[{&(0x7f0000000200)="aeacf09793e6b755bb8bc4b06e8545e41ace15f0d9862ac7ee9f3a36ed1ec82e2080e2b51f5d102d99dbacdeb659f489f6689bf67bb2cdee4c6409bf4f62420c91e2d66e4c7fc09289f5db4103a4cf896da0da6b87ec2b657c89f0", 0x5b}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="1d6fc366a85f3ac6cfd4d7b1b4437761a6b8e92b4a4963", 0x17}, {&(0x7f0000002000)="83ea265555dc90a8846439f0f28b5d82d0d9aebe048c59d9b6f940ad943e912ebaefc23aa111ae3fe9ed2660b8407165d810cd51a3572845045740b710265387be3924ac8c2fef71001e4760cf3e4dcfe34c2593", 0x54}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="cc8936827ae3c63642c2eae4cf6cbf79b51c422f200b5975b98cb6d1bf3670613e2bdb2f8bb88ae1b2d11e09b48b514210cbff673b2d0f0a3143d41f5e6e01c8710170cdeaba855609abe0ee5424", 0x4e}], 0x6, &(0x7f0000003180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x73}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x90}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x48}, 0x8c0) 5.726868353s ago: executing program 0 (id=5500): socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r1, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x9, 0xfff9}, {0x3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x9, 0xfff9}, {0x3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, &(0x7f0000000600)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r8, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r7, 0x0, {0x0, 0xff, 0x2}, 0x2}, 0x18, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4804) pipe(0x0) (async) pipe(0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x8) readv(r0, &(0x7f0000000680)=[{0x0}], 0x1) write(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 4.173556906s ago: executing program 34 (id=5319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) unshare(0x8040480) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x0, 0x5}]}]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x44}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x0, 0x5}]}]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x44}, 0x28) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8000000, 0x0, 0xff, 0x2, 0x0, 0x1}, 0x20) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}], 0x2c) 2.248809566s ago: executing program 2 (id=5530): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@private2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x6, 0x8000, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.19715969s ago: executing program 2 (id=5531): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4885}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03000000040000000400000098"], 0x48) 2.110724967s ago: executing program 5 (id=5532): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(r1) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) (async, rerun: 64) socketpair(0x28, 0x6, 0x28, &(0x7f0000001400)) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)='qC', 0x2}, {0x0}], 0x2}}], 0x2, 0x20001000) sendmmsg(r4, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000740)}], 0x2}}], 0x1, 0x20004840) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000280), &(0x7f0000000340)=r6}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f0000000040)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/58, 0x3a}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) (async, rerun: 64) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) (rerun: 64) 2.050778051s ago: executing program 2 (id=5533): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000000040)) (async) getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.848491546s ago: executing program 5 (id=5534): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005580)=ANY=[@ANYBLOB="02000000040000004800000001000000800500002c1443852bdb092c2cab6f71ffd3e2652d88e9e8b870b3f7078f2365efe68f73e4f89a633f30e806efa0a5a1a541640025b966384370b2fbc76d4543c1a8e81059b8d84e3cd0d3fbb6615f8f5386", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000d0000000000001300000000000000000009880000"], 0x50) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000240), 0x0}, 0x20) (async) sendmmsg(r0, &(0x7f0000000240), 0x4, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r11 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) socket$alg(0x26, 0x5, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0xffffffe1, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) 1.627480917s ago: executing program 1 (id=5535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x7c}}, 0x0) (rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000240a0500"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="bbad8b030a000200bb"], 0x28}}, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0xf, 0x81, 0x10, @remote, @remote, 0x1, 0xa7, 0x4, 0x3}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtfilter={0x114, 0x2c, 0xd2b, 0x70b52a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0x6}, {}, {0xe, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x5, 0x5, 0xd, 0x5, 0x6, 0x0, 0x1, 0x1ff, [{0x3, 0x10001, 0x5, 0x67}, {0xf9af, 0x1, 0x1000, 0x7}, {0xfba, 0x44, 0xc3cc, 0x200}, {0xffffffff, 0x4, 0x1ff, 0x9}, {0x5, 0xfffffe00, 0x5, 0x5}, {0x8, 0x4fa, 0xe, 0x3}, {0x10001, 0xffffffff, 0x1, 0x173}, {0x2, 0x4, 0x66, 0x5}, {0x5, 0x2a, 0x8, 0x2}, {0x3, 0x1, 0x9, 0x5}, {0x3, 0x5, 0xfffffffe, 0xba}, {0x5, 0x8000, 0x4, 0x30}, {0x43a2aef2, 0xff, 0x3, 0xfff}]}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x73, 0xfff, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x20, 0x5, 0x14fd}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r14, 0x4058587a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4040b000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1dc, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xef57}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004080) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.534110898s ago: executing program 5 (id=5536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="baeead4459ac"}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x19) 1.331445921s ago: executing program 0 (id=5537): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/108, 0x6c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x10) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000f, 0x8c4b815a5465c2b2, r2, 0x78fc1000) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 1.275576145s ago: executing program 5 (id=5538): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x25dfdbf9, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast1, 0x0, 0x4000, 0x4e23, 0x1d, 0xa, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x200, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x326, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x9, 0x92be, 0xffffffffffffffff, 0x10}, {0x0, 0x40000, 0x0, 0x1}, {0xffffffff, 0xfffffbff, 0xfffff60f}, 0x70bd29, 0x3502, 0x2, 0x2, 0x0, 0xa4}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000140)=0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x21c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x15a, 0x0, 0x0, @str='\x00\xfe\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) 1.19883352s ago: executing program 1 (id=5539): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) (async) connect$bt_l2cap(r0, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953ed76ade70bd7647d191e1e2c91", 0x69}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.127876574s ago: executing program 1 (id=5540): r0 = socket(0x10, 0x803, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x10) (async, rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r4, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100003052bbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1.031393575s ago: executing program 5 (id=5541): socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x24, &(0x7f00000006c0)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, @ldst={0x1, 0x3, 0x6, 0xb, 0x1, 0x18, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3473ea0c}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x44, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$qrtr(0x2a, 0x2, 0x0) unshare(0x8000400) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x80008, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300), 0x4) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000b46e3a3c754847ffff00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9fb, 0x0, 0x0, 0x40f00, 0x1}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000001000010026bd700000"], 0x1c}}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="241000002100be28f2e91a81499842d5febbc1c53e01002abd7000fcdbdf25028080010a0000040500010008000200e0000001"], 0x24}}, 0x0) 960.344033ms ago: executing program 2 (id=5542): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) nanosleep(0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x74, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xcb}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6d23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000005ec0), 0x0, 0x800) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x100) 959.591764ms ago: executing program 1 (id=5543): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) 837.531056ms ago: executing program 2 (id=5544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @local, 0x5, 0x2, 0xb9aa, 0x400, 0x6, 0x80018}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="2c002f8008000151b26bc478b94dadff1acb00060000000c0002000000000000"], 0x48}}, 0x4000040) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @local, 0x5, 0x2, 0xb9aa, 0x400, 0x6, 0x80018}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="2c002f8008000151b26bc478b94dadff1acb00060000000c0002000000000000"], 0x48}}, 0x4000040) (async) 650.800423ms ago: executing program 1 (id=5545): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$netlink(0x10, 0x3, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000000800074000000000a86417c37a0be4f967b8b87f30858a3d122b5fefa0003ef72a5b9996c59fd2c44d8964ce8361aaa320be6ad5ab6afb37d86db41806cc38d3fea94c47af8705d7844879cdfb169ab959bf4e0372430997306737a902d9f731dc14c7ccd66fca2070c6d66243d3abbb6f4382114985eb0417a34728cf4df36b51e89ca1db56c538b8f6aa488a36c12d2c92142b0ea8ea5926144470095fc147b2a23c3c1b6a71075456c71011fb53d971e815daf9a801829b63450b3d1f86466ba06bfdd093b00be585579b852aef88d97d766dd6f7e94e514b6a1c8306517a61c1b878"], 0x94}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) 603.479921ms ago: executing program 2 (id=5546): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d010900080002"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x20000001}) listen(r2, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = accept4$unix(r2, 0x0, 0x0, 0x80800) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10) r7 = socket(0xa, 0x3, 0xff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000c40)={0x0, 0x7, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000001480)={r8, 0x7, 0x1, [0x42af, 0xffffffffffff9913, 0x7fffffffffffffff, 0x3, 0x6000000000000000], [0x1, 0x10e, 0x8, 0x100000001, 0x512, 0x67, 0x1, 0x1, 0x0, 0xffffffffffffff81, 0xfffffffffffffff4, 0x2, 0x7, 0x2, 0xb50, 0x1, 0x9, 0xfffffffffffffffc, 0x100, 0x16e, 0x8ac4, 0xffffffffffffff80, 0xe, 0x9, 0x81, 0xffffffff7fffffff, 0x6, 0x77f, 0x40, 0x4, 0xd7d, 0x1, 0x3ff, 0xc2, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x1, 0x155, 0x9, 0x2, 0x2, 0x97, 0x5, 0x3, 0x800, 0x9, 0xffffffff, 0x8, 0x8, 0xfffffffffffffe01, 0x0, 0xffffffff, 0x0, 0xffffffffffffffc0, 0x4, 0x5, 0xe0000, 0x6, 0x3, 0x6, 0x0, 0x80000001, 0x6, 0x1, 0x100, 0xa, 0x0, 0x27, 0xc86, 0xc6c0, 0x10000, 0x101, 0x4, 0x81, 0xabbb, 0x7, 0x6, 0x8, 0x4, 0xffffffffffffffff, 0x9, 0x59, 0x7, 0xeb6, 0x7, 0x4, 0x7, 0x9, 0x400, 0xfffffffffffeffff, 0x6, 0x6, 0x86, 0x2, 0x8ae9, 0x3, 0x800, 0xfffffffffffff0af, 0x8, 0xfffffffffffffff7, 0x3, 0x45a, 0x8, 0x5, 0x1, 0xfffffffffffffffe, 0x5, 0xf, 0x2db, 0x40, 0x80000000, 0xc, 0x0, 0x9380, 0xfffffffffffffff9, 0x5, 0x1ff, 0x2, 0x39, 0x10000]}) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) close(0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000001040108000000000000000000000001080005400000000105000100010000000800036300002fdb08000440000000030a0002000df9bd2711"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r11 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000080)={0x2008}) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000004004018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e716000000060000005c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x1, 0x0) 466.308712ms ago: executing program 1 (id=5547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x80000, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @void}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000b00000000000000840e000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008502000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r0}, 0x94) 0s ago: executing program 5 (id=5548): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) unshare(0x2c020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) kernel console output (not intermixed with test programs): 8197 ! [ 506.760999][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.769658][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 47783 - 0 [ 506.830725][ T5488] veth1_macvtap: entered promiscuous mode [ 506.859745][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.870160][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 47783 - 0 [ 506.910756][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.922032][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 47783 - 0 [ 506.936752][ C1] net_ratelimit: 65 callbacks suppressed [ 506.936768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.945066][T14561] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.959884][T14561] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 47783 - 0 [ 507.374332][T21270] dummy0: mtu less than device minimum [ 507.384473][T21270] netlink: 'syz.2.3859': attribute type 11 has an invalid length. [ 507.429707][T21270] __nla_validate_parse: 10 callbacks suppressed [ 507.429726][T21270] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.3859'. [ 507.600098][T21286] netlink: 'syz.1.3862': attribute type 1 has an invalid length. [ 507.717267][T21286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.811547][T21284] bond3: Removing last arp target with arp_interval on [ 507.957347][T21305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3862'. [ 508.508231][T21295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.729268][T21336] tap0: tun_chr_ioctl cmd 2148553947 [ 508.774786][T21336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3871'. [ 509.017263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.104387][T21352] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 509.275036][T21352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.311808][T21360] bond7: (slave ip6erspan0): making interface the new active one [ 509.328400][T21360] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 509.357093][T21363] IPVS: Error connecting to the multicast addr [ 509.453503][T21367] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20004 [ 509.854447][T21345] delete_channel: no stack [ 510.257716][T21415] IPv6: addrconf: prefix option has invalid lifetime [ 510.461278][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3890'. [ 510.490841][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3891'. [ 510.502208][T21429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3891'. [ 510.512650][T21429] 8021q: VLANs not supported on ip6tnl0 [ 510.592639][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 510.712915][T21442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3894'. [ 510.984481][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'. [ 511.088882][T21471] netlink: 'syz.4.3902': attribute type 9 has an invalid length. [ 511.456338][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'. [ 512.912153][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.939211][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.948211][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.957161][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.975139][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.096972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.760304][T21518] sctp: [Deprecated]: syz.0.3911 (pid 21518) Use of int in maxseg socket option. [ 513.760304][T21518] Use struct sctp_assoc_value instead [ 513.951210][T21532] netlink: 'syz.2.3917': attribute type 1 has an invalid length. [ 513.977617][T21529] nbd0: detected capacity change from 0 to 63 [ 513.988495][ T5829] block nbd0: Receive control failed (result -104) [ 514.048000][T21537] ipt_ECN: cannot use operation on non-tcp rule [ 514.060150][T21535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 514.150112][T21506] chnl_net:caif_netlink_parms(): no params data found [ 514.224776][T21547] __nla_validate_parse: 1 callbacks suppressed [ 514.224792][T21547] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3921'. [ 514.444869][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'. [ 514.485493][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'. [ 514.497234][T21564] netlink: 58 bytes leftover after parsing attributes in process `syz.0.3924'. [ 514.501166][T21506] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.537226][T21506] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.545708][T21506] bridge_slave_0: entered allmulticast mode [ 514.553532][T21506] bridge_slave_0: entered promiscuous mode [ 514.573248][T21506] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.583154][T21506] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.597022][T21506] bridge_slave_1: entered allmulticast mode [ 514.604722][T21506] bridge_slave_1: entered promiscuous mode [ 514.703948][T21506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.728684][T21506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.872883][T21506] team0: Port device team_slave_0 added [ 514.902464][T21506] team0: Port device team_slave_1 added [ 515.017991][ T5829] Bluetooth: hci4: command tx timeout [ 515.040361][T21506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.062716][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.070967][T21595] sctp: [Deprecated]: syz.1.3932 (pid 21595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.070967][T21595] Use struct sctp_sack_info instead [ 515.089347][T21506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.124801][T21595] netlink: 'syz.1.3932': attribute type 1 has an invalid length. [ 515.147799][T21506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.156676][T21595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3932'. [ 515.173471][T21506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.203218][T21506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.221294][T21608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3934'. [ 515.556765][T21506] hsr_slave_0: entered promiscuous mode [ 515.574737][T21506] hsr_slave_1: entered promiscuous mode [ 515.594184][T21506] debugfs: 'hsr0' already exists in 'hsr' [ 515.613876][T21506] Cannot create hsr debugfs directory [ 516.443731][T21506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.458660][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.466737][T21506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.478715][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.490648][T21506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 516.506395][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.527477][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3941'. [ 516.527524][T21506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.562440][T21506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.848162][T21506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.907498][T21506] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.948544][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.955719][T14558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.008452][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.015641][T14558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.097630][ T5829] Bluetooth: hci4: command tx timeout [ 517.725471][T21506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.170755][T21708] : option downdelay: invalid value (18446744073709547007) [ 518.178377][T21708] : option downdelay: allowed values 0 - 2147483647 [ 518.193979][T21708]  (unregistering): Released all slaves [ 518.415125][T21506] veth0_vlan: entered promiscuous mode [ 518.483531][T21506] veth1_vlan: entered promiscuous mode [ 518.548873][T21506] veth0_macvtap: entered promiscuous mode [ 518.568509][T21506] veth1_macvtap: entered promiscuous mode [ 518.590821][T21506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.618655][T21506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.638470][T21721] lo speed is unknown, defaulting to 1000 [ 518.654505][T14558] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.676385][T14558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.710375][T21721] lo speed is unknown, defaulting to 1000 [ 518.721120][T14558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.730718][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.751101][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.760292][T14558] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.791683][T21721] lo speed is unknown, defaulting to 1000 [ 518.896913][T21721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 518.935241][T21732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3959'. [ 518.968076][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.983529][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.174053][T21721] lo speed is unknown, defaulting to 1000 [ 519.182457][ T5829] Bluetooth: hci4: command tx timeout [ 519.215232][T12880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.217792][T21740] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 519.227908][T21721] lo speed is unknown, defaulting to 1000 [ 519.231529][T12880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.335454][T21721] lo speed is unknown, defaulting to 1000 [ 519.351464][T21721] lo speed is unknown, defaulting to 1000 [ 519.362823][T21721] lo speed is unknown, defaulting to 1000 [ 519.370773][T21721] lo speed is unknown, defaulting to 1000 [ 519.379004][T21721] lo speed is unknown, defaulting to 1000 [ 519.388119][T21721] lo speed is unknown, defaulting to 1000 [ 519.397411][T21721] lo speed is unknown, defaulting to 1000 [ 519.409220][T21721] lo speed is unknown, defaulting to 1000 [ 519.483145][T21751] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3963'. [ 519.635386][T19670] lo speed is unknown, defaulting to 1000 [ 520.303227][T21804] sctp: [Deprecated]: syz.2.3974 (pid 21804) Use of int in max_burst socket option. [ 520.303227][T21804] Use struct sctp_assoc_value instead [ 520.317349][T21805] netlink: 'syz.5.3973': attribute type 1 has an invalid length. [ 520.551844][T21818] netlink: 'syz.2.3977': attribute type 1 has an invalid length. [ 520.625005][ T10] IPVS: starting estimator thread 0... [ 520.630116][T21819] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3976'. [ 520.712494][T21823] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 520.723242][T21825] IPVS: using max 32 ests per chain, 76800 per kthread [ 520.731358][T21823] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 520.803988][T21817] lo speed is unknown, defaulting to 1000 [ 520.969424][T21839] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3979'. [ 520.987543][T21839] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 521.115257][T21841] tipc: Enabling of bearer rejected, failed to enable media [ 521.176605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.261530][ T5829] Bluetooth: hci4: command tx timeout [ 521.620790][T21872] tipc: Enabling of bearer rejected, failed to enable media [ 521.791911][T21885] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 521.792747][T21888] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 521.808859][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3993'. [ 521.820443][T21890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3990'. [ 521.860755][T21893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3993'. [ 521.918908][T21893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3993'. [ 521.933525][T21890] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3990'. [ 521.954340][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3996'. [ 521.972564][T21897] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 521.993796][T21883] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3990'. [ 522.067920][T21906] netlink: 'syz.1.3998': attribute type 32 has an invalid length. [ 522.111672][T21903] team0: Port device team_slave_0 removed [ 522.697406][T14561] wlan1: Trigger new scan to find an IBSS to join [ 523.142946][T21945] netlink: 'syz.2.4008': attribute type 1 has an invalid length. [ 523.159827][T21945] netlink: 'syz.2.4008': attribute type 2 has an invalid length. [ 523.326377][T21955] netlink: 'syz.4.4010': attribute type 11 has an invalid length. [ 523.381722][T21959] sctp: [Deprecated]: syz.1.4013 (pid 21959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.381722][T21959] Use struct sctp_sack_info instead [ 523.505182][T21967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.532725][T21967] netlink: 'syz.2.4016': attribute type 10 has an invalid length. [ 523.555861][T21967] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 523.648998][T21978] IPVS: Error connecting to the multicast addr [ 523.745428][T21985] vcan0: tx address claim with dest, not broadcast [ 523.772540][T21978] IPVS: rr: FWM 3 0x00000003 - no destination available [ 523.804521][T21986] lo speed is unknown, defaulting to 1000 [ 523.817967][T21989] syzkaller1: entered allmulticast mode [ 524.543638][T22019] lo speed is unknown, defaulting to 1000 [ 525.053332][T22035] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 525.161451][T22037] __nla_validate_parse: 2 callbacks suppressed [ 525.161470][T22037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4032'. [ 525.172495][T22043] netlink: 'syz.0.4035': attribute type 9 has an invalid length. [ 525.185920][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 525.217945][T14561] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.217964][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4035'. [ 525.276082][T14561] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.362811][T14561] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.372375][T14561] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.439958][T22060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4039'. [ 525.489515][T22061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4039'. [ 525.510537][T22064] --map-set only usable from mangle table [ 525.679037][T22060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.951823][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 526.073866][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 526.115738][T22107] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 526.220189][T22112] openvswitch: netlink: IPv4 tun info is not correct [ 526.225153][T22110] sit1: entered allmulticast mode [ 526.506094][T22126] validate_nla: 3 callbacks suppressed [ 526.506112][T22126] netlink: 'syz.2.4054': attribute type 1 has an invalid length. [ 526.943943][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4063'. [ 526.977600][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4063'. [ 526.987616][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4064'. [ 527.177465][T18102] Bluetooth: hci0: command 0x0c1a tx timeout [ 527.178910][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 527.282973][T22171] netlink: 'syz.5.4068': attribute type 13 has an invalid length. [ 527.292519][T22173] netlink: 'syz.2.4071': attribute type 5 has an invalid length. [ 527.318291][T22173] geneve3: entered promiscuous mode [ 527.325091][T22173] geneve3: entered allmulticast mode [ 527.357152][ T3493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 527.401648][T22171] gretap0: refused to change device tx_queue_len [ 527.424228][T22171] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 527.455736][ T3493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 527.470606][ T3493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 527.479793][ T3493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 527.910796][T22203] bond1: entered promiscuous mode [ 527.940735][T22203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.711446][T22230] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20000 [ 528.742149][T22232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.773720][T22230] syzkaller1: entered promiscuous mode [ 528.782279][T22230] syzkaller1: entered allmulticast mode [ 529.017454][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 531.938046][T22280] veth7: entered promiscuous mode [ 532.445235][T22320] __nla_validate_parse: 78 callbacks suppressed [ 532.445252][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 532.482704][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 532.509376][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4104'. [ 532.541290][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 532.652179][T22331] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4107'. [ 532.666090][T22331] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4107'. [ 532.750178][T22332] lo speed is unknown, defaulting to 1000 [ 532.820424][T22336] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4109'. [ 532.931913][T22338] macvtap1: entered promiscuous mode [ 532.945489][T22338] macvtap1: entered allmulticast mode [ 532.956712][T22338] veth1_vlan: entered allmulticast mode [ 532.996727][T22339] macvtap2: entered promiscuous mode [ 533.009995][T22339] macvtap2: entered allmulticast mode [ 533.260115][T22343] syzkaller0: entered promiscuous mode [ 533.280336][T22343] syzkaller0: entered allmulticast mode [ 535.762372][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4119'. [ 535.860632][T22387] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 535.910781][T22398] syzkaller1: entered allmulticast mode [ 535.910803][T22395] lo speed is unknown, defaulting to 1000 [ 536.605037][T22408] openvswitch: netlink: IP tunnel dst address not specified [ 537.101944][T22440] veth0: entered promiscuous mode [ 537.109020][T22439] veth0: left promiscuous mode [ 537.313555][T22465] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 537.336786][T22465] bond10 (unregistering): Released all slaves [ 537.679735][T22490] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 537.747940][T22497] veth15: entered allmulticast mode [ 537.786463][T22499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4147'. [ 537.817068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.167104][T22509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4151'. [ 538.208463][T22512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4152'. [ 538.289849][T22515] syzkaller1: entered promiscuous mode [ 538.295469][T22515] syzkaller1: entered allmulticast mode [ 538.396288][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 538.408759][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 538.419033][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 538.427872][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 538.435423][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.482896][T22516] lo speed is unknown, defaulting to 1000 [ 538.551647][T22521] bond0: left promiscuous mode [ 538.741393][T22534] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4160'. [ 538.751422][T22535] netlink: zone id is out of range [ 538.751959][T22534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4160'. [ 538.768540][T22535] netlink: zone id is out of range [ 538.796222][T22535] netlink: zone id is out of range [ 538.819059][T22535] netlink: zone id is out of range [ 538.842846][T22516] chnl_net:caif_netlink_parms(): no params data found [ 538.856576][T22535] netlink: zone id is out of range [ 538.876891][T22535] netlink: zone id is out of range [ 538.884480][T22535] netlink: zone id is out of range [ 538.972663][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4163'. [ 539.030760][T22516] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.041632][T22545] netlink: 'syz.5.4163': attribute type 13 has an invalid length. [ 539.050382][T22516] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.054216][T22545] netlink: 304 bytes leftover after parsing attributes in process `syz.5.4163'. [ 539.072246][T22516] bridge_slave_0: entered allmulticast mode [ 539.092029][T22516] bridge_slave_0: entered promiscuous mode [ 539.110937][T22516] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.125421][T22516] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.146422][T22550] sctp: [Deprecated]: syz.0.4165 (pid 22550) Use of int in max_burst socket option. [ 539.146422][T22550] Use struct sctp_assoc_value instead [ 539.161997][T22516] bridge_slave_1: entered allmulticast mode [ 539.170574][T22516] bridge_slave_1: entered promiscuous mode [ 539.197551][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4163'. [ 539.212260][T22516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.240137][T22516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.336511][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4168'. [ 539.359182][T22516] team0: Port device team_slave_0 added [ 539.371907][T22516] team0: Port device team_slave_1 added [ 539.386906][T22559] syzkaller1: entered promiscuous mode [ 539.405287][T22559] syzkaller1: entered allmulticast mode [ 539.495457][T22516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.516010][T22516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.595317][T22516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.635811][T22516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.645415][T22516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.705184][T22516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.967467][T22516] hsr_slave_0: entered promiscuous mode [ 539.988202][T22516] hsr_slave_1: entered promiscuous mode [ 540.004799][T22516] debugfs: 'hsr0' already exists in 'hsr' [ 540.014081][T22516] Cannot create hsr debugfs directory [ 540.059404][T22583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4173'. [ 540.538050][ T5829] Bluetooth: hci6: command tx timeout [ 540.657182][T22516] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 540.675721][T22516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.709389][T22516] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 540.749009][T22516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.771141][T22516] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 540.781353][T22604] xt_hashlimit: size too large, truncated to 1048576 [ 540.804600][T22516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.818487][T22516] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 540.837904][T22516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.914937][T22611] : renamed from vxcan1 (while UP) [ 541.280079][T22516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.288973][T22633] netlink: 'syz.0.4184': attribute type 4 has an invalid length. [ 541.351251][T22516] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.379056][T14557] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.386236][T14557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.438440][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.445604][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.862933][T22516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.289454][T22661] netlink: 'syz.0.4189': attribute type 1 has an invalid length. [ 542.300716][T22661] net_ratelimit: 25 callbacks suppressed [ 542.300733][T22661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.428966][T22516] veth0_vlan: entered promiscuous mode [ 542.460737][T22516] veth1_vlan: entered promiscuous mode [ 542.511739][T22516] veth0_macvtap: entered promiscuous mode [ 542.523166][T22516] veth1_macvtap: entered promiscuous mode [ 542.549309][T22516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.570216][T22516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.595957][T14558] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.616719][ T5829] Bluetooth: hci6: command tx timeout [ 542.635888][T14558] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.650207][T14558] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.692916][T14558] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.977206][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.004456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.111718][T12880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.140079][T12880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.184692][T22692] netlink: 'syz.0.4197': attribute type 1 has an invalid length. [ 543.206769][T22692] netlink: 'syz.0.4197': attribute type 4 has an invalid length. [ 543.223231][T22692] __nla_validate_parse: 9 callbacks suppressed [ 543.223247][T22692] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4197'. [ 543.242449][T22695] netlink: 'syz.0.4197': attribute type 1 has an invalid length. [ 543.329857][T22695] netlink: 'syz.0.4197': attribute type 4 has an invalid length. [ 543.378079][T22695] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4197'. [ 543.511045][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'. [ 543.523917][T22706] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 543.556762][T22706] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4202'. [ 543.633341][T22711] sock: sock_timestamping_bind_phc: sock not bind to device [ 543.875337][T22719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4207'. [ 543.963666][T22721] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 544.059970][T22727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4210'. [ 544.140082][T22739] netlink: 'syz.6.4209': attribute type 8 has an invalid length. [ 544.171058][T22732] dummy0: mtu less than device minimum [ 544.172276][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4209'. [ 544.199166][T22739] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.208795][T22739] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.221624][ T1652] block nbd0: Possible stuck request ffff888026b6b600: control (read@0,1024B). Runtime 30 seconds [ 544.225537][T22741] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4209'. [ 544.232488][ T1652] block nbd0: Possible stuck request ffff888026b6b7c0: control (read@1024,1024B). Runtime 30 seconds [ 544.252917][ T1652] block nbd0: Possible stuck request ffff888026b6b980: control (read@2048,1024B). Runtime 30 seconds [ 544.266900][ T1652] block nbd0: Possible stuck request ffff888026b6bb40: control (read@3072,1024B). Runtime 30 seconds [ 544.414970][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4215'. [ 544.424718][T22744] netlink: 'syz.6.4215': attribute type 2 has an invalid length. [ 544.433445][T22744] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4215'. [ 544.561311][T22762] netlink: 'syz.1.4216': attribute type 21 has an invalid length. [ 544.644864][T22765] netlink: 'syz.0.4219': attribute type 10 has an invalid length. [ 544.697368][ T5829] Bluetooth: hci6: command tx timeout [ 544.800929][T22773] sctp: [Deprecated]: syz.5.4220 (pid 22773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.800929][T22773] Use struct sctp_sack_info instead [ 545.391183][T22794] netlink: 'syz.5.4229': attribute type 1 has an invalid length. [ 545.744805][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.788525][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.819363][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.841252][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.940984][T22815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.778009][ T5829] Bluetooth: hci6: command tx timeout [ 546.819664][T22844] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.826904][T22844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.835984][T22844] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.843196][T22844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.602262][T22857] bridge1: entered promiscuous mode [ 547.613963][T22857] bridge1: entered allmulticast mode [ 547.638567][T22857] team0: Port device bridge1 added [ 547.696137][T22857] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 548.003835][T22870] netlink: 'syz.1.4255': attribute type 1 has an invalid length. [ 548.070970][T22870] bond3: entered promiscuous mode [ 548.086296][T22870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.171918][T22877] ipvlan4: entered allmulticast mode [ 548.191725][T22877] bond3: entered allmulticast mode [ 548.250881][T22870] bond3: (slave bridge1): making interface the new active one [ 548.259273][T22870] bridge1: entered promiscuous mode [ 548.265184][T22870] bridge1: entered allmulticast mode [ 548.274525][T22870] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 549.180229][T22904] __nla_validate_parse: 19 callbacks suppressed [ 549.180248][T22904] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4265'. [ 549.211138][T22904] team0: Port device veth1_to_bridge added [ 549.472020][T22911] team0: No ports can be present during mode change [ 549.498662][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 549.536762][T22794] Set syz1 is full, maxelem 65536 reached [ 549.702489][T22920] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4271'. [ 550.042041][T22942] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4274'. [ 550.099019][T22946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4276'. [ 550.111554][T22942] ip6gretap0: entered promiscuous mode [ 550.169795][T22946] vlan4: entered promiscuous mode [ 550.179281][T22946] geneve1: entered promiscuous mode [ 550.193238][T22946] vlan4: entered allmulticast mode [ 550.208753][T22946] geneve1: entered allmulticast mode [ 550.221875][T22954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.229155][T22954] IPv6: NLM_F_CREATE should be set when creating new route [ 550.234027][T22955] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4277'. [ 550.368363][T22958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4279'. [ 550.664605][T22965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4281'. [ 550.864472][T22974] netlink: 'syz.0.4285': attribute type 5 has an invalid length. [ 550.914185][T22974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.997903][T22978] netlink: 'syz.1.4286': attribute type 1 has an invalid length. [ 551.036169][T22978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.130331][T22992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4290'. [ 551.217894][T22978] bond4: (slave veth9): Enslaving as an active interface with a down link [ 551.360438][T22990] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 551.381790][T23008] xt_policy: output policy not valid in PREROUTING and INPUT [ 551.391742][T22990] bond4: (slave batadv1): making interface the new active one [ 551.403250][T22990] batadv1: entered promiscuous mode [ 551.412950][T22990] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 551.551112][T22993] lo speed is unknown, defaulting to 1000 [ 551.851651][T23037] netlink: set zone limit has 4 unknown bytes [ 552.180153][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4304'. [ 552.225797][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4303'. [ 552.355988][T23065] netlink: zone id is out of range [ 552.376836][T23065] netlink: zone id is out of range [ 552.396674][T23065] netlink: zone id is out of range [ 552.401876][T23065] netlink: zone id is out of range [ 552.418060][T23065] netlink: zone id is out of range [ 552.446916][T23065] netlink: zone id is out of range [ 552.701100][T23083] Bluetooth: MGMT ver 1.23 [ 552.711845][T23081] net_ratelimit: 48 callbacks suppressed [ 552.711860][T23081] netlink: ct family unspecified [ 552.724511][T23081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.101544][T23052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.296038][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4314'. [ 555.579659][T23115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4320'. [ 555.606880][T23115] openvswitch: netlink: Flow key attr not present in new flow. [ 555.745313][T23120] x_tables: duplicate underflow at hook 2 [ 555.804819][T23123] netlink: 276 bytes leftover after parsing attributes in process `syz.5.4324'. [ 555.836835][T23124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4323'. [ 555.864875][T23124] netlink: 'syz.1.4323': attribute type 7 has an invalid length. [ 555.910681][T23124] netlink: 'syz.1.4323': attribute type 8 has an invalid length. [ 555.938993][T23126] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4325'. [ 555.953750][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4323'. [ 556.044386][T23124] ip6gretap0: entered promiscuous mode [ 556.068227][T23124] ip6gretap0: left promiscuous mode [ 556.115370][T23146] lo speed is unknown, defaulting to 1000 [ 558.950978][T23129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.962146][T23139] netlink: 'syz.0.4327': attribute type 2 has an invalid length. [ 558.984750][T23139] netlink: 'syz.0.4327': attribute type 2 has an invalid length. [ 559.231211][T23183] netlink: 'syz.2.4336': attribute type 7 has an invalid length. [ 559.264211][T23183] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.4336'. [ 559.370749][T23194] netlink: 'syz.5.4339': attribute type 1 has an invalid length. [ 559.418620][T23194] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4339'. [ 559.727507][T23211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4344'. [ 559.781095][T23213] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 560.509500][T23244] netlink: 'syz.6.4351': attribute type 7 has an invalid length. [ 560.547461][T23244] netlink: 209840 bytes leftover after parsing attributes in process `syz.6.4351'. [ 560.607858][T23242] ip6erspan0: entered allmulticast mode [ 560.635430][T23244] bridge0: entered promiscuous mode [ 560.646269][T23252] erspan0: entered promiscuous mode [ 561.315758][T23276] netlink: 'syz.6.4360': attribute type 10 has an invalid length. [ 561.341653][T23276] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4360'. [ 561.528981][T23285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4364'. [ 561.545492][T23281] 8021q: VLANs not supported on nlmon0 [ 561.560063][T23285] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4364'. [ 561.769680][T23292] bridge0: entered promiscuous mode [ 561.782099][T23292] erspan0: entered promiscuous mode [ 561.856965][T23294] lo speed is unknown, defaulting to 1000 [ 562.577022][T14557] batadv1: left promiscuous mode [ 562.751281][T23343] block nbd4: server does not support multiple connections per device. [ 562.810161][T23343] block nbd4: shutting down sockets [ 563.260178][T23369] netlink: 'syz.2.4381': attribute type 10 has an invalid length. [ 563.595784][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'. [ 563.745236][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4386'. [ 563.853841][T23400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4386'. [ 563.860878][T23409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4387'. [ 563.931372][T23412] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4387'. [ 563.992596][T23417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'. [ 564.616127][T23393] veth1_vlan: left allmulticast mode [ 564.703943][ T48] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.746378][ T48] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.758269][T23426] netlink: 'syz.1.4390': attribute type 1 has an invalid length. [ 564.785444][ T48] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.825192][ T48] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.852680][ T48] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.903235][ T48] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.105799][T23428] syz_tun: left promiscuous mode [ 565.125365][T23428] syz_tun: left allmulticast mode [ 565.283095][T23428] vti0: left promiscuous mode [ 565.315636][T23428] veth7: left promiscuous mode [ 565.355188][T23428] bond3: left promiscuous mode [ 565.364391][T23428] bridge1: left promiscuous mode [ 565.374165][T23428] ipvlan4: left allmulticast mode [ 565.380649][T23428] bond3: left allmulticast mode [ 565.385638][T23428] bridge1: left allmulticast mode [ 565.407166][T23428] ip6erspan0: left allmulticast mode [ 565.435830][T23426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.459957][ T48] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.489349][ T48] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.519292][T19677] lo speed is unknown, defaulting to 1000 [ 565.538574][T19677] syz2: Port: 1 Link DOWN [ 565.578581][ T132] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.691460][ T132] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.701584][ T132] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.715231][ T132] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.729262][T23480] __nla_validate_parse: 6 callbacks suppressed [ 565.729279][T23480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4400'. [ 565.754092][T23484] dummy0: entered allmulticast mode [ 565.772399][T23478] dummy0: left allmulticast mode [ 565.804981][T23448] lo speed is unknown, defaulting to 1000 [ 565.835277][T23487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4402'. [ 566.124906][T23501] syzkaller0: entered promiscuous mode [ 566.142676][T23501] syzkaller0: entered allmulticast mode [ 566.323629][T23503] lo speed is unknown, defaulting to 1000 [ 566.591832][T23534] netlink: 'syz.6.4411': attribute type 2 has an invalid length. [ 566.615137][T23534] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4411'. [ 566.644928][T23529] bridge_slave_0: left allmulticast mode [ 566.652127][T23529] bridge_slave_0: left promiscuous mode [ 566.658748][T23529] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.673094][T23529] bridge_slave_1: left allmulticast mode [ 566.679808][T23529] bridge_slave_1: left promiscuous mode [ 566.690372][T23529] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.710151][T23529] bond0: (slave bond_slave_0): Releasing backup interface [ 566.759531][T23529] bond0: (slave bond_slave_1): Releasing backup interface [ 566.789601][T23529] team0: Port device team_slave_0 removed [ 566.834297][T23550] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 566.862009][T23529] team0: Port device team_slave_1 removed [ 566.870865][T23529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.879079][T23529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.890813][T23529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.899480][T23529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.911260][T23529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 567.094318][T23559] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20002 [ 567.111352][T23560] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20002 [ 567.120128][T23550] netlink: 814 bytes leftover after parsing attributes in process `syz.6.4411'. [ 568.007985][T23611] netlink: 'syz.5.4428': attribute type 1 has an invalid length. [ 568.079331][T23611] bond2: entered promiscuous mode [ 568.084837][T23611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.145790][T23611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.157231][T23611] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 568.184565][T23611] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 568.198652][T23611] bond2: (slave ip6gre1): making interface the new active one [ 568.206265][T23611] ip6gre1: entered promiscuous mode [ 568.213488][T23611] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 568.323193][T23616] lo speed is unknown, defaulting to 1000 [ 568.645687][T23647] sctp: [Deprecated]: syz.2.4437 (pid 23647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.645687][T23647] Use struct sctp_sack_info instead [ 569.085463][T23670] 8021q: VLANs not supported on nlmon0 [ 569.097302][T23673] netlink: 1244 bytes leftover after parsing attributes in process `syz.5.4444'. [ 569.113213][T23675] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4443'. [ 569.125234][T23669] 8021q: VLANs not supported on nlmon0 [ 569.287782][T23680] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 569.347513][T23684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4447'. [ 569.356184][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4445'. [ 569.698867][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4450'. [ 569.872762][T23712] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4450'. [ 569.898745][T23708] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 569.910840][T23712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.918589][ T48] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.944940][ T48] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.977097][ T48] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.996118][ T48] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.308565][T23728] lo speed is unknown, defaulting to 1000 [ 570.457881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.348531][T23757] IPv6: Can't replace route, no match found [ 571.354759][T23756] IPv6: Can't replace route, no match found [ 571.373688][T23758] geneve2: entered promiscuous mode [ 571.387374][T23758] geneve2: entered allmulticast mode [ 571.415849][T23759] netlink: 'syz.0.4466': attribute type 1 has an invalid length. [ 571.566379][T23764] lo speed is unknown, defaulting to 1000 [ 571.578005][T23766] lo speed is unknown, defaulting to 1000 [ 572.165098][T23791] __nla_validate_parse: 3 callbacks suppressed [ 572.165100][T23792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4476'. [ 572.165115][T23791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4476'. [ 572.165140][T23791] netlink: 'syz.0.4476': attribute type 7 has an invalid length. [ 572.174083][T23792] netlink: 'syz.0.4476': attribute type 7 has an invalid length. [ 572.190469][T23791] netlink: 'syz.0.4476': attribute type 8 has an invalid length. [ 572.190487][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 572.205464][T23791] bridge0: entered promiscuous mode [ 572.207144][T23792] netlink: 'syz.0.4476': attribute type 8 has an invalid length. [ 572.237558][T23791] bridge0: left promiscuous mode [ 572.237686][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 572.278801][T23792] bridge0: entered promiscuous mode [ 572.284848][T23792] bridge0: left promiscuous mode [ 572.392232][T23798] openvswitch: netlink: IP tunnel dst address not specified [ 572.410983][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4478'. [ 572.421758][T23798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4478'. [ 572.555996][T23808] IPv6: Can't replace route, no match found [ 572.567149][ T29] audit: type=1804 audit(1776521254.222:16): pid=23811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4481" name="/newroot/318/memory.events" dev="tmpfs" ino=1652 res=1 errno=0 [ 572.616739][ T29] audit: type=1800 audit(1776521254.242:17): pid=23811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4481" name="memory.events" dev="tmpfs" ino=1652 res=0 errno=0 [ 572.864245][T23818] syzkaller1: entered promiscuous mode [ 572.870477][T23818] syzkaller1: entered allmulticast mode [ 573.040012][T23821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4484'. [ 573.143706][T23724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.169986][T23823] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4485'. [ 573.182737][T23814] netlink: 'syz.2.4482': attribute type 11 has an invalid length. [ 573.197137][T23814] netlink: 'syz.2.4482': attribute type 23 has an invalid length. [ 573.225883][T23814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4482'. [ 573.435156][T23830] netlink: 'syz.1.4487': attribute type 1 has an invalid length. [ 573.568043][T23830] bond6: entered promiscuous mode [ 573.586039][T23830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.608333][T23838] vxcan1: entered promiscuous mode [ 573.649998][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4492'. [ 573.714707][T23844] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.723138][T23844] bond6: (slave vti1): The slave device specified does not support setting the MAC address [ 573.749677][T23844] bond6: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 573.777273][T23844] bond6: (slave vti1): making interface the new active one [ 573.798204][T23844] vti1: entered promiscuous mode [ 573.813378][T23844] bond6: (slave vti1): Enslaving as an active interface with an up link [ 573.840232][T23845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.129577][T23863] veth3: entered promiscuous mode [ 574.248481][T23874] tipc: Enabling of bearer rejected, failed to enable media [ 574.259441][T23865] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 574.311483][ T1652] block nbd0: Possible stuck request ffff888026b6b600: control (read@0,1024B). Runtime 60 seconds [ 574.331421][ T1652] block nbd0: Possible stuck request ffff888026b6b7c0: control (read@1024,1024B). Runtime 60 seconds [ 574.345303][ T1652] block nbd0: Possible stuck request ffff888026b6b980: control (read@2048,1024B). Runtime 60 seconds [ 574.357028][ T1652] block nbd0: Possible stuck request ffff888026b6bb40: control (read@3072,1024B). Runtime 60 seconds [ 574.504373][T23885] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 574.728340][T23895] --map-set only usable from mangle table [ 574.751555][T23893] syzkaller0: entered promiscuous mode [ 574.757760][T23893] syzkaller0: entered allmulticast mode [ 574.800138][T23899] lo speed is unknown, defaulting to 1000 [ 576.456011][T23909] netlink: 'syz.2.4510': attribute type 1 has an invalid length. [ 576.883553][T23934] openvswitch: netlink: IP tunnel dst address not specified [ 576.913575][T23934] netlink: 'syz.0.4518': attribute type 13 has an invalid length. [ 576.946370][T23934] netlink: 'syz.0.4518': attribute type 17 has an invalid length. [ 577.106144][T23934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.121143][T23934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.308277][T23955] netlink: 'syz.6.4522': attribute type 4 has an invalid length. [ 577.496073][T23960] netlink: 'syz.6.4524': attribute type 1 has an invalid length. [ 577.607780][T23962] bond2: (slave veth5): Enslaving as an active interface with a down link [ 577.656972][T23960] bond2: (slave veth7): Enslaving as an active interface with a down link [ 577.674568][T23960] __nla_validate_parse: 8 callbacks suppressed [ 577.674585][T23960] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4524'. [ 577.822467][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'. [ 577.829268][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4528'. [ 577.841406][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'. [ 577.873233][ T132] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.882685][ T132] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.895571][ T132] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.919117][ T132] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.065979][T23994] netlink: 'syz.0.4533': attribute type 13 has an invalid length. [ 578.074580][T23994] netlink: 'syz.0.4533': attribute type 12 has an invalid length. [ 578.269053][T24001] netlink: 'syz.5.4536': attribute type 21 has an invalid length. [ 578.289524][T24001] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4536'. [ 578.289551][T24003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4537'. [ 578.430452][T24005] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4538'. [ 578.842586][T24014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4541'. [ 579.142242][T24029] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 579.204302][T24033] netlink: 'syz.5.4544': attribute type 13 has an invalid length. [ 579.244050][T24033] netlink: 'syz.5.4544': attribute type 17 has an invalid length. [ 579.348365][T24023] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.355998][T24023] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.398826][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'. [ 579.443173][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4544'. [ 579.558060][T24023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.588762][T24023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.809943][T24033] ip6gretap0: left promiscuous mode [ 579.845099][T24033] bridge0: left promiscuous mode [ 579.862991][T24033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.871192][T24033] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.882301][T24033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.928601][ T48] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.941568][ T48] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 579.950784][T24069] tap0: tun_chr_ioctl cmd 1074812118 [ 579.966028][ T48] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.986625][ T48] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 579.996131][ T48] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.016678][ T48] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.111528][ T48] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.132284][ T48] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 580.601026][T24121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.749454][T24137] netlink: 'syz.5.4573': attribute type 3 has an invalid length. [ 581.761360][T24168] netlink: 'syz.6.4581': attribute type 1 has an invalid length. [ 581.799936][T24168] bond3: entered promiscuous mode [ 581.805103][T24168] bond3: entered allmulticast mode [ 581.812651][T24168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.894831][T24172] vlan0: entered allmulticast mode [ 581.919022][T24172] bridge5: entered allmulticast mode [ 582.016219][T24169] bridge5: port 1(bond10) entered blocking state [ 582.022932][T24169] bridge5: port 1(bond10) entered disabled state [ 582.032332][T24169] bond10: entered allmulticast mode [ 582.040222][T24169] bond10: entered promiscuous mode [ 582.351322][T24190] netlink: 'syz.5.4585': attribute type 1 has an invalid length. [ 582.369144][T24190] netlink: 'syz.5.4585': attribute type 4 has an invalid length. [ 582.398330][T24190] netlink: 'syz.5.4585': attribute type 1 has an invalid length. [ 582.423049][T24190] netlink: 'syz.5.4585': attribute type 4 has an invalid length. [ 582.731553][T24201] lo speed is unknown, defaulting to 1000 [ 582.914365][T24221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.999408][T24226] bond6: left promiscuous mode [ 583.015523][T24226] vti1: left promiscuous mode [ 583.113635][T24226] netlink: 'syz.1.4596': attribute type 13 has an invalid length. [ 583.142616][T24226] netlink: 'syz.1.4596': attribute type 17 has an invalid length. [ 583.222314][T24226] gretap0: refused to change device tx_queue_len [ 583.230665][T24226] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 583.246490][ T5880] lo speed is unknown, defaulting to 1000 [ 583.252720][ T5880] syz2: Port: 1 Link ACTIVE [ 583.287863][T24226] __nla_validate_parse: 7 callbacks suppressed [ 583.287878][T24226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4596'. [ 584.139240][T24271] netlink: 'syz.6.4606': attribute type 25 has an invalid length. [ 584.157192][T24271] netlink: 'syz.6.4606': attribute type 3 has an invalid length. [ 584.174799][T24271] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4606'. [ 584.287631][T24277] netlink: 'syz.5.4609': attribute type 1 has an invalid length. [ 584.315513][T24277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4609'. [ 584.333809][T24277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4609'. [ 584.360658][T24277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4609'. [ 584.377234][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4611'. [ 584.411007][ T132] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.422535][T24277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4609'. [ 584.437730][ T132] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.452088][T24277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4609'. [ 584.462512][ T132] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.473082][T24277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4609'. [ 584.483767][ T132] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.608540][T24292] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4614'. [ 584.620022][T24293] netlink: zone id is out of range [ 584.635355][T24293] netlink: zone id is out of range [ 584.648303][T24293] netlink: zone id is out of range [ 584.664811][T24293] netlink: zone id is out of range [ 584.685752][T24293] netlink: zone id is out of range [ 584.712664][T24293] netlink: zone id is out of range [ 584.750866][T24293] netlink: zone id is out of range [ 584.772373][T24293] netlink: zone id is out of range [ 584.788105][T24293] netlink: zone id is out of range [ 584.810344][T24293] netlink: zone id is out of range [ 585.346006][T24328] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 585.367491][T24328] bond7: (slave lo): Enslaving as an active interface with an up link [ 585.380195][ T5880] lo speed is unknown, defaulting to 1000 [ 585.380719][T18250] lo speed is unknown, defaulting to 1000 [ 585.392404][ T9] lo speed is unknown, defaulting to 1000 [ 586.274931][T24371] netlink: 'syz.2.4634': attribute type 309 has an invalid length. [ 586.515492][T24383] bridge0: entered promiscuous mode [ 587.570282][T24423] validate_nla: 1 callbacks suppressed [ 587.570299][T24423] netlink: 'syz.0.4648': attribute type 7 has an invalid length. [ 587.597707][T24423] netlink: 'syz.0.4648': attribute type 8 has an invalid length. [ 587.628232][T24423] ip6gretap0: entered promiscuous mode [ 587.647911][T24423] syz_tun: entered promiscuous mode [ 587.672745][T24423] ip6gretap0: left promiscuous mode [ 587.683290][T24423] syz_tun: left promiscuous mode [ 588.289317][T24433] x_tables: duplicate underflow at hook 2 [ 588.298219][T24451] netlink: 'syz.0.4656': attribute type 7 has an invalid length. [ 588.343012][T24454] __nla_validate_parse: 11 callbacks suppressed [ 588.343024][T24454] netlink: 276 bytes leftover after parsing attributes in process `syz.5.4655'. [ 589.072574][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'. [ 589.164541][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'. [ 589.289369][T24470] lo speed is unknown, defaulting to 1000 [ 589.777335][T24485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4664'. [ 589.833407][T24487] netlink: 'syz.0.4665': attribute type 1 has an invalid length. [ 590.144111][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4669'. [ 590.185497][T24502] net_ratelimit: 391 callbacks suppressed [ 590.185514][T24502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.215212][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4670'. [ 590.236845][T24509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4670'. [ 590.627978][T24531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4678'. [ 590.733133][T24537] pim6reg: entered allmulticast mode [ 590.752199][T24537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 590.780960][T24537] pim6reg: left allmulticast mode [ 591.069680][T24557] dvmrp1: entered allmulticast mode [ 591.079647][T24557] dvmrp1: left allmulticast mode [ 591.166368][T24561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4688'. [ 591.217852][T24561] netlink: 'syz.0.4688': attribute type 1 has an invalid length. [ 591.591234][T24581] netlink: 'syz.1.4692': attribute type 4 has an invalid length. [ 592.216690][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 592.281292][T24621] netlink: 'syz.5.4700': attribute type 1 has an invalid length. [ 592.444146][T24626] netlink: 'syz.0.4703': attribute type 11 has an invalid length. [ 592.909014][T24651] lo speed is unknown, defaulting to 1000 [ 593.422170][T24672] __nla_validate_parse: 2 callbacks suppressed [ 593.422189][T24672] netlink: 34 bytes leftover after parsing attributes in process `syz.5.4713'. [ 593.491511][T24672] netlink: 34 bytes leftover after parsing attributes in process `syz.5.4713'. [ 593.554193][T24672] netlink: 'syz.5.4713': attribute type 10 has an invalid length. [ 593.609183][T24688] delete_channel: no stack [ 593.768131][T24692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.808693][T24672] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 593.821655][T24704] netlink: 'syz.1.4718': attribute type 1 has an invalid length. [ 593.835847][T24704] netlink: 'syz.1.4718': attribute type 2 has an invalid length. [ 593.856809][T24704] netlink: 'syz.1.4718': attribute type 2 has an invalid length. [ 593.889327][T24704] netlink: 'syz.1.4718': attribute type 2 has an invalid length. [ 593.905567][T24704] netlink: 'syz.1.4718': attribute type 1 has an invalid length. [ 593.929646][T24704] netlink: 'syz.1.4718': attribute type 2 has an invalid length. [ 594.129048][T24714] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 594.178299][T24714] bond12: entered promiscuous mode [ 594.184340][T24714] 8021q: adding VLAN 0 to HW filter on device bond12 [ 594.213039][T24716] 8021q: adding VLAN 0 to HW filter on device bond12 [ 594.223134][T24716] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 594.234317][T24716] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 594.253728][T24716] bond12: (slave wireguard0): making interface the new active one [ 594.262278][T24716] wireguard0: entered promiscuous mode [ 594.275621][T24716] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 594.568457][T24733] netlink: 'syz.6.4724': attribute type 7 has an invalid length. [ 594.640896][T24735] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4725'. [ 594.696216][T24737] batman_adv: batadv0: Adding interface: ip6gretap1 [ 594.704394][T24739] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4726'. [ 594.705118][T24737] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 594.735428][T24737] batman_adv: batadv0: Interface activated: ip6gretap1 [ 594.745470][T24739] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4726'. [ 594.781637][T24737] tipc: Enabling of bearer rejected, failed to enable media [ 594.865045][T24747] netlink: 'syz.2.4730': attribute type 2 has an invalid length. [ 594.908016][T24745] bridge2: entered promiscuous mode [ 594.913359][T24745] bridge2: entered allmulticast mode [ 594.926874][T24745] team0: Port device bridge2 added [ 594.940163][T24750] bridge0: port 3(team0) entered blocking state [ 594.956780][T24750] bridge0: port 3(team0) entered disabled state [ 594.964384][T24753] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4732'. [ 594.975724][T24750] team0: entered allmulticast mode [ 594.983138][T24750] team_slave_0: entered allmulticast mode [ 594.989179][T24753] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4732'. [ 595.010099][T24750] team_slave_1: entered allmulticast mode [ 595.029562][T24758] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4732'. [ 595.040194][T24750] team0: entered promiscuous mode [ 595.045380][T24750] team_slave_0: entered promiscuous mode [ 595.051989][T24750] team_slave_1: entered promiscuous mode [ 595.059001][T24758] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4732'. [ 595.117721][T24747] hmac(sha224: entered promiscuous mode [ 595.587772][T24795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4741'. [ 595.600536][T24794] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 595.640008][T24795] vlan2: entered promiscuous mode [ 595.653059][T24795] dummy0: entered promiscuous mode [ 595.898731][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.908011][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.924117][T24806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.079304][T24814] erspan1: entered allmulticast mode [ 596.093049][T24813] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 596.305175][T24826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 596.874171][T24859] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 597.373156][T24875] syzkaller1: entered promiscuous mode [ 597.388708][T24875] syzkaller1: entered allmulticast mode [ 598.569416][T24932] __nla_validate_parse: 5 callbacks suppressed [ 598.569432][T24932] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4777'. [ 598.605154][T24936] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4777'. [ 598.620054][T24938] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4777'. [ 598.734948][T24940] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 599.002501][T24963] validate_nla: 7 callbacks suppressed [ 599.002519][T24963] netlink: 'syz.5.4782': attribute type 1 has an invalid length. [ 599.027344][T24963] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4782'. [ 599.101856][T24967] x_tables: duplicate underflow at hook 3 [ 599.112741][T24966] x_tables: duplicate underflow at hook 3 [ 599.664952][T24997] netlink: 312 bytes leftover after parsing attributes in process `syz.6.4792'. [ 600.017015][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4789'. [ 600.094357][T25009] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4789'. [ 600.257607][T25020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.497702][T25024] syzkaller0: entered promiscuous mode [ 600.503199][T25024] syzkaller0: entered allmulticast mode [ 600.574757][T25024] netlink: 'syz.2.4799': attribute type 33 has an invalid length. [ 600.609489][T25024] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4799'. [ 600.763469][T25038] netlink: 'syz.6.4802': attribute type 15 has an invalid length. [ 600.783539][T25038] netlink: 666 bytes leftover after parsing attributes in process `syz.6.4802'. [ 600.786212][T25034] geneve2: entered promiscuous mode [ 600.825506][T25034] geneve2: entered allmulticast mode [ 601.035008][T25063] erspan0: entered promiscuous mode [ 601.377204][T25091] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 601.378395][T25088] lo speed is unknown, defaulting to 1000 [ 601.704824][T25045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.718497][T25092] netlink: 'syz.0.4815': attribute type 1 has an invalid length. [ 601.757275][T25092] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4815'. [ 602.225202][T25106] netlink: 'syz.2.4818': attribute type 8 has an invalid length. [ 602.422996][T25100] lo speed is unknown, defaulting to 1000 [ 602.485918][T25118] sit0: entered promiscuous mode [ 602.494212][T25118] netlink: 'syz.2.4821': attribute type 1 has an invalid length. [ 603.210543][T25159] IPVS: Unknown mcast interface: team0 [ 603.320444][T25171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.365425][T25174] netlink: 'syz.0.4834': attribute type 3 has an invalid length. [ 603.609404][T25188] bridge_slave_0: left allmulticast mode [ 603.629189][T25188] bridge_slave_0: left promiscuous mode [ 603.642693][T25188] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.688006][T25188] team0: Port device veth1_to_bridge removed [ 603.711903][T25188] bridge_slave_1: left allmulticast mode [ 603.741706][T25188] bridge_slave_1: left promiscuous mode [ 603.756878][T25188] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.808712][T25188] veth0_to_bond: left allmulticast mode [ 603.825884][T25195] xt_CT: No such helper "snmp" [ 603.829699][T25188] veth0_to_bond: left promiscuous mode [ 603.844268][T25188] bridge1: port 1(veth0_to_bond) entered disabled state [ 603.888548][T25188] team0: Port device team_slave_0 removed [ 603.915478][T25188] team0: Port device team_slave_1 removed [ 603.954497][T25188] bond2: left allmulticast mode [ 603.972437][T25188] bridge0: port 3(bond2) entered disabled state [ 604.006016][T25188] bond3: left allmulticast mode [ 604.023754][T25188] bridge0: port 4(bond3) entered disabled state [ 604.089056][T25188] bond7: (slave ip6erspan0): Releasing active interface [ 604.131935][T25188] bond10: left allmulticast mode [ 604.149020][T25188] bond10: left promiscuous mode [ 604.160903][T25188] bridge5: port 1(bond10) entered disabled state [ 604.187233][T25188] bond12: (slave wireguard0): Releasing backup interface [ 604.202196][T25188] wireguard0: left promiscuous mode [ 604.264848][T25201] __nla_validate_parse: 13 callbacks suppressed [ 604.264868][T25201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4841'. [ 604.276748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.330786][T25204] netlink: 'syz.5.4841': attribute type 4 has an invalid length. [ 604.379795][ T1652] block nbd0: Possible stuck request ffff888026b6b600: control (read@0,1024B). Runtime 90 seconds [ 604.390775][ T1652] block nbd0: Possible stuck request ffff888026b6b7c0: control (read@1024,1024B). Runtime 90 seconds [ 604.402640][ T1652] block nbd0: Possible stuck request ffff888026b6b980: control (read@2048,1024B). Runtime 90 seconds [ 604.413775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.422828][ T1652] block nbd0: Possible stuck request ffff888026b6bb40: control (read@3072,1024B). Runtime 90 seconds [ 604.476772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.540501][T25209] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4843'. [ 604.581350][T25215] xt_bpf: check failed: parse error [ 604.658522][T25209] syzkaller0: entered promiscuous mode [ 604.683829][T25209] syzkaller0: entered allmulticast mode [ 604.717952][T25221] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4847'. [ 604.842251][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 604.892568][T25234] netlink: 'syz.2.4852': attribute type 1 has an invalid length. [ 604.903375][T25234] netlink: 'syz.2.4852': attribute type 1 has an invalid length. [ 604.993551][T25244] netlink: 'syz.5.4853': attribute type 1 has an invalid length. [ 605.038242][T25244] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4853'. [ 605.212176][T25284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4857'. [ 605.828063][T25251] netlink: 'syz.2.4855': attribute type 29 has an invalid length. [ 605.900635][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4860'. [ 606.238460][T25347] netlink: 'syz.0.4867': attribute type 1 has an invalid length. [ 606.352209][T25354] netlink: 'syz.0.4867': attribute type 4 has an invalid length. [ 606.390797][T25354] netlink: 'syz.0.4867': attribute type 8 has an invalid length. [ 606.391035][T25348] IPVS: rr: FWM 3 0x00000003 - no destination available [ 606.398916][T25354] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4867'. [ 606.408951][T25347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 606.462957][T25340] bond6: (slave gretap1): making interface the new active one [ 606.473391][T25340] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 606.546013][T25344] lo speed is unknown, defaulting to 1000 [ 606.564775][T25360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 606.572036][T25360] IPv6: NLM_F_CREATE should be set when creating new route [ 606.579316][T25360] IPv6: NLM_F_CREATE should be set when creating new route [ 606.675982][T25360] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 606.689049][T25360] syzkaller1: linktype set to 769 [ 606.779459][T25375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4876'. [ 606.954439][T25382] netlink: 'syz.5.4878': attribute type 14 has an invalid length. [ 606.974763][T25382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4878'. [ 607.216422][T25397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.227220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.255826][T25397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.360195][T25397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.370545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.445549][T25397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.461306][T25397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.476237][T25402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.703767][T25406] lo speed is unknown, defaulting to 1000 [ 607.930023][T25416] vlan1: entered promiscuous mode [ 607.938251][T25416] bridge0: entered promiscuous mode [ 608.172376][T25425] 8021q: adding VLAN 0 to HW filter on device bond14 [ 608.857253][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.077435][T25389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.394660][T25466] netlink: 'syz.1.4900': attribute type 10 has an invalid length. [ 610.449737][T25466] dummy0: entered allmulticast mode [ 610.466146][T25466] team0: Port device dummy0 added [ 610.616041][T25476] syzkaller0: entered promiscuous mode [ 610.642053][T25476] syzkaller0: entered allmulticast mode [ 610.660582][T25479] __nla_validate_parse: 1 callbacks suppressed [ 610.660600][T25479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4905'. [ 610.843207][T25460] batadv_slave_1: entered promiscuous mode [ 610.885463][T25458] batadv_slave_1: left promiscuous mode [ 611.018825][T25496] lo speed is unknown, defaulting to 1000 [ 611.618754][ T5829] Bluetooth: hci6: link tx timeout [ 611.625330][ T5829] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 611.752242][T25527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.889987][T25527] syzkaller0: entered promiscuous mode [ 611.909571][T25527] syzkaller0: entered allmulticast mode [ 612.038760][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4920'. [ 612.045053][T25536] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4919'. [ 612.084164][T25536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4919'. [ 612.168158][T25536] xt_hashlimit: size too large, truncated to 1048576 [ 612.252545][T25539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4919'. [ 612.726789][T25563] sctp: [Deprecated]: syz.2.4928 (pid 25563) Use of int in max_burst socket option. [ 612.726789][T25563] Use struct sctp_assoc_value instead [ 612.736300][T25568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.752934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.864228][T25566] syzkaller0: entered promiscuous mode [ 612.871439][T25566] syzkaller0: entered allmulticast mode [ 612.893286][T25563] dvmrp1: entered allmulticast mode [ 612.896167][T25573] sctp: [Deprecated]: syz.2.4928 (pid 25573) Use of int in maxseg socket option. [ 612.896167][T25573] Use struct sctp_assoc_value instead [ 612.908249][T25570] dvmrp1: left allmulticast mode [ 613.134069][T25581] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4930'. [ 613.616771][T25594] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 613.673930][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 615.413249][T25595] ip6erspan1: entered allmulticast mode [ 615.563380][T25615] batadv1: entered promiscuous mode [ 615.569340][T25615] batadv1: entered allmulticast mode [ 615.710062][T25631] netlink: 'syz.6.4945': attribute type 1 has an invalid length. [ 615.829779][T25631] bond4: (slave veth9): Enslaving as an active interface with a down link [ 615.913353][T25637] bond4: (slave veth11): Enslaving as an active interface with a down link [ 615.976432][T25637] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4945'. [ 616.009924][T25644] macsec0: entered promiscuous mode [ 616.093418][T25637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 616.265814][T25666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.455057][T25683] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 616.457836][T25684] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 616.485508][T25691] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4962'. [ 616.588592][T25698] netlink: 'syz.6.4966': attribute type 1 has an invalid length. [ 616.637433][T25705] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4965'. [ 616.754466][T25708] bond5: (slave gretap1): making interface the new active one [ 616.801837][T25708] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 616.988830][T25725] netlink: 'syz.0.4970': attribute type 20 has an invalid length. [ 617.003683][T25727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4972'. [ 617.007443][T25725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4970'. [ 617.091215][T25729] netlink: 'syz.2.4973': attribute type 9 has an invalid length. [ 617.133733][T25729] netlink: 'syz.2.4973': attribute type 7 has an invalid length. [ 617.141951][T25729] netlink: 'syz.2.4973': attribute type 8 has an invalid length. [ 617.150654][T25303] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.172827][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'. [ 617.187516][T19670] IPVS: starting estimator thread 0... [ 617.200957][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'. [ 617.239531][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'. [ 617.286865][T25741] IPVS: using max 31 ests per chain, 74400 per kthread [ 617.294792][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'. [ 617.329517][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'. [ 617.364612][T25735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.401259][T25303] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.445453][T25743] bond4: entered allmulticast mode [ 617.469883][T25746] vxcan3: entered promiscuous mode [ 617.475284][T25746] vxcan3: entered allmulticast mode [ 617.485498][T25303] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.510582][T25303] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.673894][T25758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.684558][T25758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.700254][T25758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.531272][T25269] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.552981][T25269] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.642463][T25269] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.660608][T25269] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.683208][T25790] netlink: 'syz.5.4988': attribute type 4 has an invalid length. [ 618.723324][T25792] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 618.953678][T25805] syzkaller0: entered promiscuous mode [ 618.973988][T25805] syzkaller0: entered allmulticast mode [ 619.030465][T25804] tipc: Enabled bearer , priority 0 [ 619.096748][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 619.105134][T25804] tipc: Resetting bearer [ 619.165152][T25804] tipc: Disabling bearer [ 619.261221][T25821] netlink: 'syz.1.4998': attribute type 19 has an invalid length. [ 619.689982][T25825] netlink: 'syz.6.4999': attribute type 1 has an invalid length. [ 619.732136][T25825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.169218][T25849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.373572][T25859] lo speed is unknown, defaulting to 1000 [ 621.179335][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 621.347499][T25894] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 621.497880][T25898] __nla_validate_parse: 21 callbacks suppressed [ 621.497899][T25898] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5021'. [ 621.861193][T25911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5025'. [ 621.893818][T25911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5025'. [ 621.918305][T25911] netlink: 'syz.2.5025': attribute type 31 has an invalid length. [ 622.139329][T25922] sctp: [Deprecated]: syz.5.5029 (pid 25922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.139329][T25922] Use struct sctp_sack_info instead [ 622.374949][T25932] netlink: 'syz.0.5030': attribute type 4 has an invalid length. [ 622.646484][T25941] vlan2: entered allmulticast mode [ 622.662845][T25941] bond0: entered allmulticast mode [ 622.707036][T25948] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5037'. [ 622.730105][T25948] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5037'. [ 622.746911][T25950] 8021q: VLANs not supported on vcan0 [ 622.888731][T25959] lo speed is unknown, defaulting to 1000 [ 623.032274][T25964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5041'. [ 623.176119][T25972] tipc: Started in network mode [ 623.185095][T25972] tipc: Node identity c25bf893ec45, cluster identity 4711 [ 623.210289][T25972] tipc: Enabled bearer , priority 0 [ 623.249575][T25963] syzkaller0: entered promiscuous mode [ 623.255651][T25963] syzkaller0: entered allmulticast mode [ 623.343892][T25963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5042'. [ 623.363145][T25963] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5042'. [ 623.379052][T25963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5042'. [ 623.406488][T25962] tipc: Resetting bearer [ 623.465855][T25962] tipc: Disabling bearer [ 623.653762][T26001] netlink: 216 bytes leftover after parsing attributes in process `syz.5.5052'. [ 623.886251][T26001] veth4: entered allmulticast mode [ 624.611750][T26047] netlink: 'syz.5.5063': attribute type 1 has an invalid length. [ 624.845645][T26047] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.914018][T26050] vlan2: entered allmulticast mode [ 624.919333][T26050] bond5: entered allmulticast mode [ 624.941490][T26051] bond5: (slave geneve3): making interface the new active one [ 624.949416][T26051] geneve3: entered allmulticast mode [ 624.958280][T26051] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 624.970177][T25305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.983695][T25305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.009099][T25305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.027250][T25305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.306046][T26069] lo speed is unknown, defaulting to 1000 [ 625.313800][T26071] netlink: 'syz.1.5068': attribute type 16 has an invalid length. [ 625.332281][T26071] netlink: 'syz.1.5068': attribute type 17 has an invalid length. [ 626.522904][T26116] __nla_validate_parse: 10 callbacks suppressed [ 626.522922][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5078'. [ 626.659043][T26119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5079'. [ 626.705569][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5080'. [ 627.250592][T26031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.475028][T26142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5085'. [ 627.585247][T26142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.675264][ T5880] IPVS: starting estimator thread 0... [ 627.831754][T26152] lo speed is unknown, defaulting to 1000 [ 627.879299][T26159] IPVS: using max 30 ests per chain, 72000 per kthread [ 628.010214][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5090'. [ 628.059547][T26169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5092'. [ 628.452376][T26177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5095'. [ 628.691504][T26183] syzkaller0: entered promiscuous mode [ 628.727461][T26183] syzkaller0: entered allmulticast mode [ 628.872634][T26198] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5099'. [ 629.175092][T26210] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5102'. [ 629.549525][T26231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5106'. [ 629.687971][T26246] netlink: 'syz.2.5110': attribute type 1 has an invalid length. [ 630.370995][T26287] netlink: 'syz.5.5117': attribute type 2 has an invalid length. [ 630.391507][T26287] tipc: Cannot configure node identity twice [ 631.313467][T26335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.357612][T26335] netlink: 'syz.5.5126': attribute type 10 has an invalid length. [ 631.393101][T26335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.847016][T26359] netlink: 'syz.6.5133': attribute type 1 has an invalid length. [ 631.899429][T26359] 8021q: adding VLAN 0 to HW filter on device bond8 [ 631.928148][T26363] bond8: (slave veth13): Enslaving as an active interface with a down link [ 632.088434][T26359] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 632.102608][T26368] __nla_validate_parse: 3 callbacks suppressed [ 632.102625][T26368] netlink: 25 bytes leftover after parsing attributes in process `syz.0.5136'. [ 632.114036][T26359] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 632.291804][T26372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5138'. [ 632.485813][T26378] netlink: 'syz.6.5140': attribute type 2 has an invalid length. [ 632.497449][T26381] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5142'. [ 632.555990][T26385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5144'. [ 632.573370][T26385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5144'. [ 632.591901][T26385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5144'. [ 632.663531][T26394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5145'. [ 632.785042][T26394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5145'. [ 632.817869][T26403] netlink: 'syz.5.5147': attribute type 1 has an invalid length. [ 632.964015][T26414] Bluetooth: MGMT ver 1.23 [ 633.388146][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5157'. [ 634.465681][ T1652] block nbd0: Possible stuck request ffff888026b6b600: control (read@0,1024B). Runtime 120 seconds [ 634.478917][ T1652] block nbd0: Possible stuck request ffff888026b6b7c0: control (read@1024,1024B). Runtime 120 seconds [ 634.494210][ T1652] block nbd0: Possible stuck request ffff888026b6b980: control (read@2048,1024B). Runtime 120 seconds [ 634.505572][ T1652] block nbd0: Possible stuck request ffff888026b6bb40: control (read@3072,1024B). Runtime 120 seconds [ 634.641601][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5163'. [ 634.780037][T26481] netlink: 'syz.5.5165': attribute type 1 has an invalid length. [ 634.803500][T26481] netlink: 'syz.5.5165': attribute type 9 has an invalid length. [ 635.038034][T26498] netlink: 'syz.5.5168': attribute type 1 has an invalid length. [ 635.070278][T26494] bond6: entered promiscuous mode [ 635.076269][T26494] 8021q: adding VLAN 0 to HW filter on device bond6 [ 635.084911][T26494] bridge0: port 3(bond6) entered blocking state [ 635.096301][T26494] bridge0: port 3(bond6) entered disabled state [ 635.104459][T26494] bond6: entered allmulticast mode [ 635.268057][T26494] bond7: (slave bridge2): making interface the new active one [ 635.304852][T26494] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 635.528527][T26517] syzkaller0: entered promiscuous mode [ 635.538202][T26517] syzkaller0: entered allmulticast mode [ 635.812047][T26523] netlink: 'syz.5.5173': attribute type 1 has an invalid length. [ 635.845179][T26523] netlink: 'syz.5.5173': attribute type 2 has an invalid length. [ 635.866789][T26523] netlink: 'syz.5.5173': attribute type 2 has an invalid length. [ 635.877086][T26523] netlink: 'syz.5.5173': attribute type 2 has an invalid length. [ 635.898131][T26523] netlink: 'syz.5.5173': attribute type 1 has an invalid length. [ 635.917992][T26523] netlink: 'syz.5.5173': attribute type 2 has an invalid length. [ 636.071161][T26527] sctp: [Deprecated]: syz.6.5175 (pid 26527) Use of int in max_burst socket option. [ 636.071161][T26527] Use struct sctp_assoc_value instead [ 636.078627][T26532] netlink: 'syz.5.5177': attribute type 2 has an invalid length. [ 636.108876][T26527] pim6reg1: entered promiscuous mode [ 636.117776][T26527] pim6reg1: entered allmulticast mode [ 636.137872][T26532] !9: entered promiscuous mode [ 636.218282][T26535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.244583][T26532] vlan3: entered promiscuous mode [ 636.252184][T26532] bond8: entered promiscuous mode [ 636.258623][T26532] vlan3: entered allmulticast mode [ 636.264717][T26532] bond8: entered allmulticast mode [ 636.296069][T26532] !9: left promiscuous mode [ 636.574178][T26556] bridge3: entered promiscuous mode [ 636.584407][T26556] bridge3: entered allmulticast mode [ 636.605168][T26556] team0: Port device bridge3 added [ 636.955738][T26579] lo speed is unknown, defaulting to 1000 [ 637.035362][T26570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.225702][T26570] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 637.386433][T26595] TCP: TCP_TX_DELAY enabled [ 637.794141][T26609] lo speed is unknown, defaulting to 1000 [ 638.015151][T26616] lo speed is unknown, defaulting to 1000 [ 638.456435][T26633] vlan0: entered promiscuous mode [ 638.474744][T26633] geneve1: entered promiscuous mode [ 638.493019][T26633] vlan0: entered allmulticast mode [ 638.501116][T26643] __nla_validate_parse: 10 callbacks suppressed [ 638.501132][T26643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5206'. [ 638.513176][T26633] geneve1: entered allmulticast mode [ 638.781118][T26643] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 638.919963][T26635] lo speed is unknown, defaulting to 1000 [ 638.963547][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5210'. [ 639.153054][T26668] : renamed from dummy0 (while UP) [ 639.640631][T26689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.997222][T25305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.235587][T26704] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5220'. [ 640.266691][T26704] bond0: ARP target 170.170.170.170 is already present [ 640.280655][T26704] bond0: option arp_ip_target: invalid value (2863311530) [ 640.289008][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5223'. [ 640.397268][T26720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5225'. [ 640.434437][T26720] validate_nla: 11 callbacks suppressed [ 640.434456][T26720] netlink: 'syz.1.5225': attribute type 5 has an invalid length. [ 640.466059][T26720] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5225'. [ 640.565661][T26720] geneve3: entered promiscuous mode [ 640.574133][T26720] geneve3: entered allmulticast mode [ 640.604997][T25300] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 60017 - 0 [ 640.621083][T26732] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 640.628559][T25300] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 60017 - 0 [ 640.661164][T26716] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60017 - 0 [ 640.736298][T26716] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60017 - 0 [ 640.946815][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5231'. [ 640.989849][T25300] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 60017 - 0 [ 641.064834][T25307] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 60017 - 0 [ 641.096761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.121539][T25310] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 60017 - 0 [ 641.208590][T25310] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 60017 - 0 [ 641.314257][T26756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5233'. [ 641.512020][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.666867][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 641.689204][T26771] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 641.775774][T26773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5239'. [ 641.870762][T26785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5244'. [ 642.128475][T26796] syzkaller1: entered promiscuous mode [ 642.136766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.140414][T26796] syzkaller1: entered allmulticast mode [ 643.007939][T26836] bond0: entered promiscuous mode [ 643.030630][T26836] batadv0: entered promiscuous mode [ 643.176751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.198366][T26842] ip6tnl1: entered promiscuous mode [ 643.208969][T26842] ip6tnl1: entered allmulticast mode [ 643.376298][T26852] lo speed is unknown, defaulting to 1000 [ 643.550990][T26863] __nla_validate_parse: 1 callbacks suppressed [ 643.551007][T26863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5269'. [ 643.622203][T26863] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5269'. [ 643.948872][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5272'. [ 643.959762][T26877] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 644.000737][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5272'. [ 644.134757][T26845] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 644.216715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.284318][T26884] openvswitch: netlink: EtherType 0 is less than min 600 [ 645.256709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.386857][T26919] syzkaller0: entered promiscuous mode [ 645.400710][T26919] syzkaller0: entered allmulticast mode [ 645.484216][T26916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5286'. [ 645.501474][T26920] syzkaller1: entered promiscuous mode [ 645.509470][T26920] syzkaller1: entered allmulticast mode [ 645.524209][T26923] ipvlan2: entered promiscuous mode [ 645.651945][T26929] lo speed is unknown, defaulting to 1000 [ 645.676186][T26930] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 645.710018][T26930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5290'. [ 646.173543][T26949] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 646.186916][T26951] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 646.446279][T26976] macvtap0: entered promiscuous mode [ 646.609880][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5303'. [ 646.640368][T26988] veth1: entered promiscuous mode [ 646.660475][T26988] veth1: entered allmulticast mode [ 646.743289][T26992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 646.901880][T26997] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5306'. [ 646.919962][T26997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.942951][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 647.187948][T27011] xt_connbytes: Forcing CT accounting to be enabled [ 647.227340][T27011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 647.336766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.452693][T27021] veth19: entered promiscuous mode [ 647.491255][T27026] dummy0: entered promiscuous mode [ 647.505849][T27025] dummy0: left promiscuous mode [ 647.844266][T27064] x_tables: duplicate underflow at hook 3 [ 648.046837][T27075] netlink: 'syz.0.5324': attribute type 10 has an invalid length. [ 648.345462][T27089] netlink: 'syz.5.5327': attribute type 1 has an invalid length. [ 648.378372][T27089] 8021q: adding VLAN 0 to HW filter on device bond9 [ 648.402204][T27089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.766965][T27107] bridge0: port 1(erspan0) entered blocking state [ 648.778488][T27107] bridge0: port 1(erspan0) entered disabled state [ 648.785154][T27107] erspan0: entered allmulticast mode [ 648.794126][T27107] erspan0: entered promiscuous mode [ 649.374232][T27143] lo speed is unknown, defaulting to 1000 [ 649.546419][T27150] __nla_validate_parse: 4 callbacks suppressed [ 649.546437][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5344'. [ 649.860067][T27173] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 650.076020][T27196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5355'. [ 650.093646][T27198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5355'. [ 650.117574][T27196] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5355'. [ 650.298285][T27215] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5359'. [ 650.369282][T27216] geneve2: entered promiscuous mode [ 650.382681][T25301] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 58873 - 0 [ 650.391883][T25301] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 58873 - 0 [ 650.408191][T25301] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 58873 - 0 [ 650.424564][T25301] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 58873 - 0 [ 650.479580][T27222] bridge4: entered promiscuous mode [ 650.624055][T27231] xt_bpf: check failed: parse error [ 651.235109][T27263] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 651.328114][T27262] lo speed is unknown, defaulting to 1000 [ 651.416648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.816652][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 651.864504][T27285] lo speed is unknown, defaulting to 1000 [ 651.955452][T27298] netlink: 'syz.2.5382': attribute type 13 has an invalid length. [ 651.980265][T27301] lo: left allmulticast mode [ 651.988346][T27298] gretap0: refused to change device tx_queue_len [ 652.002401][T27298] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 652.329993][T27323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5384'. [ 652.395760][T27316] lo speed is unknown, defaulting to 1000 [ 652.478800][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5386'. [ 652.567413][T27332] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5386'. [ 653.065689][T27363] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 653.074280][T27363] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.109684][T25309] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 653.122277][T27352] lo speed is unknown, defaulting to 1000 [ 653.123272][T25309] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 653.141497][T25309] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 653.173673][T25309] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 653.275990][T27373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5396'. [ 653.291206][T27373] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5396'. [ 653.642550][T27404] : renamed from team_slave_1 [ 653.716457][T27408] netlink: 'syz.5.5403': attribute type 2 has an invalid length. [ 653.767279][T27408] : entered promiscuous mode [ 653.772803][T27408] netlink: 'syz.5.5403': attribute type 2 has an invalid length. [ 653.784132][T27408] : left promiscuous mode [ 653.988230][T27423] netlink: 'syz.2.5407': attribute type 13 has an invalid length. [ 654.008181][T27423] netlink: 'syz.2.5407': attribute type 17 has an invalid length. [ 654.039584][T27426] netlink: 'syz.5.5408': attribute type 11 has an invalid length. [ 654.182252][T25307] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.191877][T25307] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 654.202856][T25307] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 654.212760][T25307] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.222413][T25307] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 654.231559][T25307] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 654.241709][T25307] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.266608][T25307] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 654.275557][T25307] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 654.303865][T27432] netlink: 'syz.0.5409': attribute type 2 has an invalid length. [ 654.319018][T27431] netlink: 'syz.0.5409': attribute type 2 has an invalid length. [ 654.332800][T27423] sit0: left promiscuous mode [ 654.351983][T27423] bridge0: port 1(erspan0) entered blocking state [ 654.358521][T27423] bridge0: port 1(erspan0) entered forwarding state [ 654.368953][T27423] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.383439][T27423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.400539][T25307] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.409852][T25307] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 654.420869][T25307] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 654.434204][T27432] : entered promiscuous mode [ 654.643633][T27441] lo speed is unknown, defaulting to 1000 [ 654.756204][T27452] __nla_validate_parse: 5 callbacks suppressed [ 654.756223][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5415'. [ 654.885762][T27463] netlink: 'syz.1.5418': attribute type 1 has an invalid length. [ 654.921351][T27463] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.965642][T27466] bond8: (slave gretap2): making interface the new active one [ 655.004045][T27466] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 655.075472][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5419'. [ 655.259726][T27481] lo speed is unknown, defaulting to 1000 [ 655.653444][T27498] pimreg: entered allmulticast mode [ 655.680512][T27497] netlink: 'syz.5.5426': attribute type 32 has an invalid length. [ 656.063430][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5433'. [ 656.129501][T27524] rdma_rxe: rxe_newlink: failed to add wg1 [ 656.150783][T27524] netlink: 'syz.1.5434': attribute type 4 has an invalid length. [ 656.190626][T27524] netlink: 'syz.1.5434': attribute type 4 has an invalid length. [ 656.315076][T27527] lo speed is unknown, defaulting to 1000 [ 656.316482][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5435'. [ 656.351979][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5435'. [ 656.382961][T27530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5436'. [ 656.481879][T27530] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 656.528899][T27530] bond9 (unregistering): Released all slaves [ 656.934624][T27537] bond15: entered allmulticast mode [ 656.940846][T27537] 8021q: adding VLAN 0 to HW filter on device bond15 [ 657.173466][T27553] FAULT_INJECTION: forcing a failure. [ 657.173466][T27553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.189332][T27553] CPU: 1 UID: 0 PID: 27553 Comm: syz.1.5442 Not tainted syzkaller #0 PREEMPT(full) [ 657.189357][T27553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 657.189372][T27553] Call Trace: [ 657.189379][T27553] [ 657.189388][T27553] dump_stack_lvl+0xe8/0x150 [ 657.189421][T27553] should_fail_ex+0x412/0x560 [ 657.189455][T27553] _copy_from_user+0x2d/0xb0 [ 657.189476][T27553] ___sys_sendmsg+0x1c6/0x360 [ 657.189502][T27553] ? __lock_acquire+0x6b5/0x2cf0 [ 657.189530][T27553] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.189591][T27553] ? __fget_files+0x2a/0x420 [ 657.189614][T27553] ? __fget_files+0x3a0/0x420 [ 657.189659][T27553] __x64_sys_sendmsg+0x1bd/0x2a0 [ 657.189689][T27553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.189724][T27553] ? __pfx_ksys_write+0x10/0x10 [ 657.189758][T27553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.189779][T27553] do_syscall_64+0x15f/0xf80 [ 657.189800][T27553] ? trace_irq_disable+0x3b/0x140 [ 657.189819][T27553] ? clear_bhb_loop+0x40/0x90 [ 657.189842][T27553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.189865][T27553] RIP: 0033:0x7f7254d9c819 [ 657.189889][T27553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.189905][T27553] RSP: 002b:00007f7255c9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.189925][T27553] RAX: ffffffffffffffda RBX: 00007f7255015fa0 RCX: 00007f7254d9c819 [ 657.189938][T27553] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 657.189950][T27553] RBP: 00007f7255c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 657.189961][T27553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.189971][T27553] R13: 00007f7255016038 R14: 00007f7255015fa0 R15: 00007ffdb42e6098 [ 657.190001][T27553] [ 657.433145][T27557] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 657.464714][T27559] batadv_slave_1: entered promiscuous mode [ 657.473416][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5445'. [ 657.495239][T27559] batadv_slave_1 (unregistering): left promiscuous mode [ 657.502976][T27559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.554205][T27563] SET target dimension over the limit! [ 657.671792][T27570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5449'. [ 657.905064][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5454'. [ 657.914904][T27586] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5454'. [ 658.081619][T27589] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.190819][T27589] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.224794][T27606] IPv6: addrconf: prefix option has invalid lifetime [ 658.272764][T27589] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.388009][T27589] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.801889][T25307] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.919824][T25310] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.933663][T25310] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.981686][T25310] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.092489][T27646] bridge_slave_0: left allmulticast mode [ 659.107348][T27646] bridge_slave_0: left promiscuous mode [ 659.118744][T27646] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.121684][T27648] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.138508][T27646] bridge_slave_1: left allmulticast mode [ 659.145330][T27646] bridge_slave_1: left promiscuous mode [ 659.151492][T27646] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.162104][T27646] bond0: (slave bond_slave_0): Releasing backup interface [ 659.171666][T27646] bond0: (slave bond_slave_1): Releasing backup interface [ 659.181776][T27646] team0: Port device team_slave_1 removed [ 659.187921][T27646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.196097][T27646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 659.212724][T27652] validate_nla: 8 callbacks suppressed [ 659.212735][T27652] netlink: 'syz.1.5476': attribute type 1 has an invalid length. [ 659.559643][T27663] 8021q: VLANs not supported on vxcan1 [ 659.841615][T27677] __nla_validate_parse: 11 callbacks suppressed [ 659.841635][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5484'. [ 659.878399][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5484'. [ 659.921217][T27684] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5485'. [ 660.024855][T27692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5487'. [ 660.035214][T27692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5487'. [ 660.048344][T27689] lo speed is unknown, defaulting to 1000 [ 660.057872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.284911][T27701] netlink: 'syz.0.5489': attribute type 13 has an invalid length. [ 660.314573][T27701] netlink: 'syz.0.5489': attribute type 12 has an invalid length. [ 660.624872][T27714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5493'. [ 660.825324][T27724] FAULT_INJECTION: forcing a failure. [ 660.825324][T27724] name failslab, interval 1, probability 0, space 0, times 0 [ 660.834170][T27716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5494'. [ 660.838419][T27724] CPU: 0 UID: 0 PID: 27724 Comm: syz.2.5496 Not tainted syzkaller #0 PREEMPT(full) [ 660.838442][T27724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 660.838454][T27724] Call Trace: [ 660.838461][T27724] [ 660.838469][T27724] dump_stack_lvl+0xe8/0x150 [ 660.838500][T27724] should_fail_ex+0x412/0x560 [ 660.838530][T27724] should_failslab+0xa8/0x100 [ 660.838548][T27724] ? skb_clone+0x212/0x3a0 [ 660.838566][T27724] kmem_cache_alloc_noprof+0x87/0x650 [ 660.838592][T27724] ? __netlink_lookup+0xc6/0x8b0 [ 660.838621][T27724] skb_clone+0x212/0x3a0 [ 660.838642][T27724] __netlink_deliver_tap+0x404/0x850 [ 660.838677][T27724] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.838703][T27724] netlink_deliver_tap+0x19c/0x1b0 [ 660.838727][T27724] netlink_unicast+0x730/0x8e0 [ 660.838759][T27724] netlink_sendmsg+0x813/0xb40 [ 660.838792][T27724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.838819][T27724] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.838844][T27724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.838872][T27724] ____sys_sendmsg+0x972/0x9f0 [ 660.838897][T27724] ? __might_fault+0xaf/0x130 [ 660.838925][T27724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.838960][T27724] ? import_iovec+0x73/0xa0 [ 660.838981][T27724] ___sys_sendmsg+0x2a5/0x360 [ 660.839005][T27724] ? __lock_acquire+0x6b5/0x2cf0 [ 660.839038][T27724] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.839098][T27724] ? __fget_files+0x2a/0x420 [ 660.839118][T27724] ? __fget_files+0x3a0/0x420 [ 660.839149][T27724] __x64_sys_sendmsg+0x1bd/0x2a0 [ 660.839176][T27724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.839211][T27724] ? __pfx_ksys_write+0x10/0x10 [ 660.839243][T27724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.839263][T27724] do_syscall_64+0x15f/0xf80 [ 660.839283][T27724] ? trace_irq_disable+0x3b/0x140 [ 660.839303][T27724] ? clear_bhb_loop+0x40/0x90 [ 660.839325][T27724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.839342][T27724] RIP: 0033:0x7fa9f879c819 [ 660.839358][T27724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.839374][T27724] RSP: 002b:00007fa9f95be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.839397][T27724] RAX: ffffffffffffffda RBX: 00007fa9f8a15fa0 RCX: 00007fa9f879c819 [ 660.839411][T27724] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 660.839423][T27724] RBP: 00007fa9f95be090 R08: 0000000000000000 R09: 0000000000000000 [ 660.839434][T27724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.839445][T27724] R13: 00007fa9f8a16038 R14: 00007fa9f8a15fa0 R15: 00007ffd58b981f8 [ 660.839474][T27724] [ 661.108270][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5494'. [ 661.117311][T27716] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5494'. [ 661.126373][T27716] netlink: 'syz.0.5494': attribute type 3 has an invalid length. [ 661.134564][T27716] netlink: 'syz.0.5494': attribute type 2 has an invalid length. [ 661.155032][T27716] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5494'. [ 661.164550][T27716] netlink: 'syz.0.5494': attribute type 2 has an invalid length. [ 661.730623][T27753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 662.252158][T27785] tipc: Enabling of bearer rejected, already enabled [ 662.356853][T27790] netlink: 'syz.2.5514': attribute type 1 has an invalid length. [ 662.401125][T27790] 8021q: adding VLAN 0 to HW filter on device bond16 [ 662.597424][T27799] lo speed is unknown, defaulting to 1000 [ 663.118205][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 663.133518][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 663.144907][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 663.153665][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 663.167990][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 663.215486][T27820] FAULT_INJECTION: forcing a failure. [ 663.215486][T27820] name failslab, interval 1, probability 0, space 0, times 0 [ 663.268837][T27820] CPU: 1 UID: 0 PID: 27820 Comm: syz.1.5520 Not tainted syzkaller #0 PREEMPT(full) [ 663.268863][T27820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 663.268875][T27820] Call Trace: [ 663.268883][T27820] [ 663.268892][T27820] dump_stack_lvl+0xe8/0x150 [ 663.268923][T27820] should_fail_ex+0x412/0x560 [ 663.268955][T27820] should_failslab+0xa8/0x100 [ 663.268976][T27820] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 663.269005][T27820] ? __alloc_skb+0x1d0/0x7d0 [ 663.269027][T27820] ? __local_bh_enable_ip+0xd0/0x130 [ 663.269056][T27820] __alloc_skb+0x1d0/0x7d0 [ 663.269078][T27820] ? dev_uc_add_excl+0xd3/0x120 [ 663.269108][T27820] rtnl_fdb_notify+0x9b/0x1b0 [ 663.269138][T27820] rtnl_fdb_add+0x965/0xba0 [ 663.269173][T27820] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 663.269229][T27820] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 663.269252][T27820] rtnetlink_rcv_msg+0x77e/0xbe0 [ 663.269274][T27820] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 663.269298][T27820] ? netlink_sendmsg+0x5d4/0xb40 [ 663.269325][T27820] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 663.269348][T27820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 663.269373][T27820] ? __lock_acquire+0x6b5/0x2cf0 [ 663.269410][T27820] netlink_rcv_skb+0x232/0x4b0 [ 663.269436][T27820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 663.269461][T27820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.269500][T27820] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.269524][T27820] ? netlink_deliver_tap+0x2e/0x1b0 [ 663.269554][T27820] netlink_unicast+0x75c/0x8e0 [ 663.269589][T27820] netlink_sendmsg+0x813/0xb40 [ 663.269624][T27820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.269653][T27820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.269678][T27820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.269708][T27820] ____sys_sendmsg+0x972/0x9f0 [ 663.269734][T27820] ? __might_fault+0xaf/0x130 [ 663.269765][T27820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.269814][T27820] ? import_iovec+0x73/0xa0 [ 663.269838][T27820] ___sys_sendmsg+0x2a5/0x360 [ 663.269862][T27820] ? __lock_acquire+0x6b5/0x2cf0 [ 663.269890][T27820] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.269954][T27820] ? __fget_files+0x2a/0x420 [ 663.269975][T27820] ? __fget_files+0x3a0/0x420 [ 663.270007][T27820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 663.270037][T27820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.270074][T27820] ? __pfx_ksys_write+0x10/0x10 [ 663.270109][T27820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.270130][T27820] do_syscall_64+0x15f/0xf80 [ 663.270152][T27820] ? trace_irq_disable+0x3b/0x140 [ 663.270173][T27820] ? clear_bhb_loop+0x40/0x90 [ 663.270196][T27820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.270218][T27820] RIP: 0033:0x7f7254d9c819 [ 663.270236][T27820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.270252][T27820] RSP: 002b:00007f7255c9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.270273][T27820] RAX: ffffffffffffffda RBX: 00007f7255015fa0 RCX: 00007f7254d9c819 [ 663.270287][T27820] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 663.270299][T27820] RBP: 00007f7255c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 663.270311][T27820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.270322][T27820] R13: 00007f7255016038 R14: 00007f7255015fa0 R15: 00007ffdb42e6098 [ 663.270355][T27820] [ 663.708879][T27817] lo speed is unknown, defaulting to 1000 [ 663.911456][T27828] netlink: 'syz.2.5523': attribute type 4 has an invalid length. [ 664.133827][T27817] chnl_net:caif_netlink_parms(): no params data found [ 664.403749][T27847] bond10: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 664.415815][T27847] bond10 (unregistering): Released all slaves [ 664.493413][T27817] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.516075][T27817] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.549192][ T1652] block nbd0: Possible stuck request ffff888026b6b600: control (read@0,1024B). Runtime 150 seconds [ 664.560769][ T1652] block nbd0: Possible stuck request ffff888026b6b7c0: control (read@1024,1024B). Runtime 150 seconds [ 664.572633][ T1652] block nbd0: Possible stuck request ffff888026b6b980: control (read@2048,1024B). Runtime 150 seconds [ 664.583733][ T1652] block nbd0: Possible stuck request ffff888026b6bb40: control (read@3072,1024B). Runtime 150 seconds [ 664.600950][T27817] bridge_slave_0: entered allmulticast mode [ 664.609354][T27817] bridge_slave_0: entered promiscuous mode [ 664.618282][T27817] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.625398][T27817] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.632611][T27817] bridge_slave_1: entered allmulticast mode [ 664.640325][T27817] bridge_slave_1: entered promiscuous mode [ 664.704289][T27817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.717892][T27817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.836442][T27817] team0: Port device team_slave_0 added [ 664.861191][T27817] team0: Port device team_slave_1 added [ 664.986756][T27817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.002365][T27817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.062933][T27817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.114648][T27817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.134296][T27817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.208874][T27817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.259316][ T5819] Bluetooth: hci7: command tx timeout [ 665.413980][T27817] hsr_slave_0: entered promiscuous mode [ 665.433240][T27817] hsr_slave_1: entered promiscuous mode [ 665.453365][T27817] debugfs: 'hsr0' already exists in 'hsr' [ 665.466997][T27817] Cannot create hsr debugfs directory [ 666.190174][T27817] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 666.202722][T27817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.219238][T27817] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 666.247915][T27817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 666.263521][T27817] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 666.288457][T27817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 666.309165][T27817] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 666.342134][T27817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 666.518178][T27817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.560912][T27817] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.574087][T25307] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.581316][T25307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.612322][T25307] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.619499][T25307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.683621][T27937] lo speed is unknown, defaulting to 1000 [ 667.030079][T27817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.097615][ T30] INFO: task syz.4.4010:21955 blocked for more than 143 seconds. [ 667.116118][ T30] Not tainted syzkaller #0 [ 667.130958][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 667.162154][ T30] task:syz.4.4010 state:D stack:24824 pid:21955 tgid:21952 ppid:17527 task_flags:0x400140 flags:0x00080002 [ 667.206234][ T30] Call Trace: [ 667.216042][ T30] [ 667.225051][ T30] __schedule+0x17b4/0x5680 [ 667.238302][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 667.282135][ T30] ? __pfx___schedule+0x10/0x10 [ 667.315805][ T30] ? schedule+0x90/0x360 [ 667.336941][ T5819] Bluetooth: hci7: command tx timeout [ 667.361787][ T30] schedule+0x164/0x360 [ 667.381665][ T30] schedule_preempt_disabled+0x13/0x30 [ 667.399356][ T30] __mutex_lock+0x7f5/0x1550 [ 667.417329][ T30] ? __mutex_lock+0x606/0x1550 [ 667.432280][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 667.446293][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 667.463585][ T30] ? __nlmsg_put+0xef/0x1b0 [ 667.482074][ T30] ? genlmsg_put+0x137/0x2e0 [ 667.497675][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 667.506790][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 667.516596][ T30] ? __nla_parse+0x40/0x60 [ 667.527312][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 667.533685][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 667.540135][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 667.545690][ T30] ? __asan_memcpy+0x40/0x70 [ 667.550575][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 667.557116][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 667.562535][ T30] genl_rcv_msg+0x61c/0x7a0 [ 667.567282][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.572334][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 667.578675][ T30] netlink_rcv_skb+0x232/0x4b0 [ 667.583485][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.588791][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.594101][ T30] ? down_read+0x270/0x2e0 [ 667.598733][ T30] ? genl_rcv+0xd/0x40 [ 667.602816][ T30] genl_rcv+0x28/0x40 [ 667.607015][ T30] netlink_unicast+0x75c/0x8e0 [ 667.611812][ T30] netlink_sendmsg+0x813/0xb40 [ 667.617386][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.622707][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 667.627715][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.633017][ T30] ____sys_sendmsg+0x972/0x9f0 [ 667.638023][ T30] ? __might_fault+0xaf/0x130 [ 667.642712][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.648595][ T30] ? import_iovec+0x73/0xa0 [ 667.653115][ T30] ___sys_sendmsg+0x2a5/0x360 [ 667.658300][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 667.663271][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.668602][ T30] ? futex_wake+0x4ac/0x580 [ 667.673140][ T30] ? __fget_files+0x2a/0x420 [ 667.677961][ T30] ? __fget_files+0x3a0/0x420 [ 667.682663][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 667.687727][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.693214][ T30] ? rcu_is_watching+0x15/0xb0 [ 667.698108][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.704194][ T30] do_syscall_64+0x15f/0xf80 [ 667.708956][ T30] ? trace_irq_disable+0x3b/0x140 [ 667.713989][ T30] ? clear_bhb_loop+0x40/0x90 [ 667.718858][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.724767][ T30] RIP: 0033:0x7f1ee1f9c819 [ 667.729424][ T30] RSP: 002b:00007f1ee2e18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.739286][ T30] RAX: ffffffffffffffda RBX: 00007f1ee2215fa0 RCX: 00007f1ee1f9c819 [ 667.747333][ T30] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 667.755308][ T30] RBP: 00007f1ee2032c91 R08: 0000000000000000 R09: 0000000000000000 [ 667.763414][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.772829][ T30] R13: 00007f1ee2216038 R14: 00007f1ee2215fa0 R15: 00007fffa415d968 [ 667.781064][ T30] [ 667.784238][ T30] [ 667.784238][ T30] Showing all locks held in the system: [ 667.807115][ T30] 1 lock held by ksoftirqd/1/23: [ 667.813214][ T30] 1 lock held by khungtaskd/30: [ 667.838101][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 667.849871][ T30] 2 locks held by getty/5577: [ 667.877640][ T30] #0: ffff8880377470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 667.906760][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 667.950162][ T30] 3 locks held by kworker/1:4/5873: [ 667.972466][ T30] #0: ffff88813fe53140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 668.014267][ T30] #1: ffffc90004457c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 668.071810][ T30] #2: ffff888032d38230 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 668.115020][ T30] 1 lock held by udevd/5962: [ 668.133049][ T30] #0: ffff888026ac7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 668.178901][ T30] 1 lock held by syz-executor/18100: [ 668.196808][ T30] 3 locks held by kworker/0:6/18251: [ 668.208314][ T30] #0: ffff88813fe53140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 668.254045][ T30] #1: ffffc90003cbfc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 668.296795][ T30] #2: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 668.356582][ T30] 3 locks held by kworker/0:7/19280: [ 668.361929][ T30] 2 locks held by syz.3.3766/20874: [ 668.374410][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.416087][ T30] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 668.426868][ T30] 2 locks held by syz.4.4010/21955: [ 668.432090][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.441336][ T30] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 668.452254][ T30] 5 locks held by kworker/u8:62/25305: [ 668.457929][ T30] 3 locks held by kworker/u8:67/25310: [ 668.465415][ T30] #0: ffff88801be9e940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 668.477119][ T30] #1: ffffc90006687c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 668.487809][ T30] #2: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 668.497627][ T30] 2 locks held by syz.6.5319/27059: [ 668.502848][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 668.511300][ T30] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 668.521987][ T30] 3 locks held by syz-executor/27817: [ 668.527487][ T30] #0: ffff88807b058ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 668.537807][ T30] #1: ffff88807b0580b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 668.547994][ T30] #2: ffffffff8ff5c2a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 668.558167][ T30] 3 locks held by syz.1.5547/27937: [ 668.563390][ T30] #0: ffff88805c2c4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 668.573367][ T30] #1: ffff88805c2c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 668.583435][ T30] #2: ffffffff8ff5c2a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 668.594144][ T30] 3 locks held by syz.5.5548/27947: [ 668.599827][ T30] #0: ffff888035758ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 668.610342][ T30] #1: ffff8880357580b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 668.620543][ T30] #2: ffffffff8ff5c2a0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 668.631823][ T30] [ 668.634183][ T30] ============================================= [ 668.634183][ T30] [ 668.653941][ T30] NMI backtrace for cpu 0 [ 668.653957][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 668.653978][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 668.653990][ T30] Call Trace: [ 668.653997][ T30] [ 668.654006][ T30] dump_stack_lvl+0xe8/0x150 [ 668.654037][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 668.654064][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 668.654091][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 668.654119][ T30] sys_info+0x135/0x170 [ 668.654142][ T30] watchdog+0xfaa/0x1000 [ 668.654166][ T30] ? watchdog+0x209/0x1000 [ 668.654192][ T30] kthread+0x388/0x470 [ 668.654210][ T30] ? __pfx_watchdog+0x10/0x10 [ 668.654227][ T30] ? __pfx_kthread+0x10/0x10 [ 668.654247][ T30] ret_from_fork+0x514/0xb70 [ 668.654273][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 668.654297][ T30] ? __switch_to+0xc79/0x1410 [ 668.654321][ T30] ? __pfx_kthread+0x10/0x10 [ 668.654341][ T30] ret_from_fork_asm+0x1a/0x30 [ 668.654383][ T30] [ 668.654390][ T30] Sending NMI from CPU 0 to CPUs 1: [ 668.772054][ C1] NMI backtrace for cpu 1 [ 668.772071][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 668.772089][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 668.772098][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 668.772122][ C1] Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 668.772137][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 668.772152][ C1] RAX: 00000000001672e7 RBX: ffffffff819a67ea RCX: 0000000080000001 [ 668.772164][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 [ 668.772176][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 668.772187][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 668.772199][ C1] R13: 1ffff11003bd9000 R14: 0000000000000001 R15: 1ffff11003bd9000 [ 668.772210][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 668.772223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 668.772234][ C1] CR2: 00007fb33dcfee9c CR3: 000000000e74a000 CR4: 00000000003526f0 [ 668.772249][ C1] Call Trace: [ 668.772255][ C1] [ 668.772261][ C1] default_idle+0x9/0x20 [ 668.772281][ C1] default_idle_call+0x72/0xb0 [ 668.772302][ C1] do_idle+0x36a/0x5f0 [ 668.772325][ C1] ? __pfx_do_idle+0x10/0x10 [ 668.772351][ C1] cpu_startup_entry+0x43/0x60 [ 668.772371][ C1] start_secondary+0x101/0x110 [ 668.772391][ C1] common_startup_64+0x13e/0x147 [ 668.772417][ C1] [ 668.951817][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 668.958692][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 668.967799][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 668.977855][ T30] Call Trace: [ 668.981136][ T30] [ 668.984074][ T30] vpanic+0x56c/0xa60 [ 668.988070][ T30] ? __pfx___schedule+0x10/0x10 [ 668.992932][ T30] ? __pfx_vpanic+0x10/0x10 [ 668.997451][ T30] ? __pfx_console_unlock+0x10/0x10 [ 669.002657][ T30] panic+0xc5/0xd0 [ 669.006375][ T30] ? __pfx_panic+0x10/0x10 [ 669.010784][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 669.016149][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 669.022303][ T30] watchdog+0xff4/0x1000 [ 669.026544][ T30] ? watchdog+0x209/0x1000 [ 669.030960][ T30] kthread+0x388/0x470 [ 669.035017][ T30] ? __pfx_watchdog+0x10/0x10 [ 669.039680][ T30] ? __pfx_kthread+0x10/0x10 [ 669.044258][ T30] ret_from_fork+0x514/0xb70 [ 669.048852][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 669.053969][ T30] ? __switch_to+0xc79/0x1410 [ 669.058642][ T30] ? __pfx_kthread+0x10/0x10 [ 669.063232][ T30] ret_from_fork_asm+0x1a/0x30 [ 669.068005][ T30] [ 669.071342][ T30] Kernel Offset: disabled [ 669.075653][ T30] Rebooting in 86400 seconds..