last executing test programs: 8.007292533s ago: executing program 4 (id=7806): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000205000000000000000c000100"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r2, 0x200204) (async) listen(r2, 0x200204) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800004, 0x4) bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r4, 0x80000003) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53ea71a76d2688ca4c6d88a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x83d, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x401, 0x8, 0x101, 0x44184, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9b3e, 0x0, 0x0, 0x0, 0x1a7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffc0}], &(0x7f0000000100)='GPL\x00', 0x5, 0x8b, &(0x7f00000001c0)=""/139, 0x40f00, 0x20, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000002c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x9, 0x7fff, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r6, r7], &(0x7f0000000500)=[{0x1, 0x5, 0x1, 0xa}, {0x5, 0x3, 0xc, 0xc324fbc8bcb323ea}, {0x1, 0x1, 0x8, 0x9}, {0x2, 0x5, 0x10, 0x9}, {0x4, 0x5, 0x5, 0x2}]}, 0x94) 7.721954024s ago: executing program 4 (id=7807): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 7.570555048s ago: executing program 4 (id=7809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb71d) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0x3}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0x2, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.894668756s ago: executing program 4 (id=7823): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000011c0)=@ethtool_rxnfc={0x30, 0x10, 0x2ee7a3f8, {0x7, @tcp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4e21, 0x8}, {0x0, @local, 0x6, 0x288e, [0x7d3, 0x7]}, @esp_ip6_spec={@mcast1, @mcast2, 0xf, 0x2}, {0x0, @random="bfa6b04fd512", 0x6, 0x8001, [0xa, 0x80000000]}, 0xfffffffffffffffa, 0x3}}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) sendmsg$nl_route_sched(r3, 0x0, 0x4000c00) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000002400)={0xb14, r12, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xa64b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xff}, @NL80211_ATTR_PEER_MEASUREMENTS={0xad0, 0x111, 0x0, 0x1, {0xacc, 0x5, 0x0, 0x1, [{0x3ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x258, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x947b}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x32}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4db}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x3a5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x90}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x4bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe454}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0xb14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 3.817861539s ago: executing program 3 (id=7824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfffffef8, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2005c040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8000}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x7, 0x4, 0xb, 0x2, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x10}}, 0x80) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f0800000000000000104d0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086f30000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007b0d000085000000060000004500f4fffcffffffbf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x20e1341b}], 0x1, 0xc0000062, 0x0) 3.249007249s ago: executing program 1 (id=7827): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700), 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket(0xa, 0x3, 0xff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000680)={0x3, 0x8}, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@buf) pselect6(0x40, &(0x7f0000000280)={0x4, 0x3, 0x1, 0x7, 0xb74, 0x9, 0x101, 0x7}, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x402801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x8a) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'bridge_slave_0\x00', @random="01f252370100"}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="0062e13743000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)={0x16a0, 0x40, 0x107, 0xfffffefe, 0x10, {0x1, 0x7c}, [@nested={0x1004, 0x67, 0x0, 0x1, [@generic="318bbfb399114ecaeebf813b9dc2c7c85ca4b4cdbee0dd18ac017290e48868b4bae2421f5e706d33d7e6bb7c1b9eaccaf9933f8d904d522f830e37e48c49e7d9040cb9da26ec271b20b93da0e6f33637af09bdff59b414b8b8a949d624a7c1532c54359bb37b13c6b01866217ebfaada28448fca30342fc3cc5d9bf5efe8136f9bbcce8381fc2494c1cc1658c667f0d3cea6e4cbb477703f40c4fd75afa08554298d84566c9adfa7bf2b879abcb1d1ffe412bf8feb30106b1f9ee0033550136ec56a84d26870e7851ae8852eb41627a74999607b64634a5cdecf18e8ca951c3d7c00dbd55e0c5ed9ebdd0dcc6f0e69d597c704694bb8aa4fa371d49513e7ccc1821870977b6b32c5c0bfdffbd1b51c17fd4b304913f5d34f4217442500ef62768cbc62b0a61e6a17520740e48fec8b3045ce21389a6a2f0f5e0dc122abcf94d03ed77c4f881f591d033ef63a8805a17a6e61cfb39e9c1f4fb49ba3ca33a2eab9cf4899e3792f714a384248127c185a66a6ee77cc757e330dbe54d20fc669c580eb51933c6341bb7e103b20c640264649a9d1af4bd7a08bba2fceca992962afbc045b93993a43901fb4b289d7b172da64d0d89c437104a492832c58ebe922770dfa45364e7ae88e0ee75c13fe92d530caa63fc935a76ed0d1ee84b70c820d66302a2c14ea062cec9882bc029a5c441a042ed561135ac9855c90590e753416e3f81ce0d184646c718b504e7809c1ab4efa49b2c2e030a6561be9f59c637cbb12d19699dab24b8a395f65b774541ecc626596c8fd5382b47bdde419595d21dcf035c683fd271179eeeb8cd707f0041536f3b020821a81353b77669c454e4e7ee6d2052e1568c5ec670d0e36d7418dfa6b475e841558c357481d4caad22c9ae5cd1448e90dd63de2b20bf479d0edad7233be132bdf2389b5703e8c4720ac0f27004b5663acd637febcab746d6eb08d609a5ec5c15aec4e4efc48c8fe89ad7f72c606b9057450bf84cb55aae94ed7ab93fc9f518a106782aaab5b6b825203e6a644cc8775c34b31cc02929e04dc7d7373e134d60ff8c861766b2c5c7f32b23be1994391b22bcdae3970448718f4ca270615c80adc70bdb575d891293052ad59d5191364ce842a50172c71046e245179a3625b6af7143e1696e7172f7e9f3fea3a09df66719d5c5fe18e66baf1e6c96b8bb288fdcaed48e0bcc9925d616d1ad8d0d7b80b20b7fd85b4fbfc36469817036a95e31d3577295e983caa24535cd830ef71f703c035bc762e6e9a248c8f6219261513e26921a7406cf21018b69c7bbc414272958f7b6742e3d3747c8382a8b1b0a16fad25174a72564e70471737a253771a6aa65fa5d31cbf99348a101005c6d9d96df531d2e9cff2928aa97cf814417014e8f1e5c673a83d28bb968b49922a2df0ee9e36c09aecbd873260689e06e0232fe58f69a8320cf29520dfe657e3251546691c2ef69cd253cbf471e004dded9e130f0e412aeba64383c0ed3d2ee5838aa0c0532e032c9921e91af5bb7aa65fe0d48d887fe11b6a022e69d43219fb83053f37b5c784f725e43d1ec0c8671bdf4f83ce68cf4e51b5514719e1d56a2ec626ca206ace01e8a4dccfe4f1d3a914d2163b2c7df7e8c3b397f8a16299a77aa4935507bf0013b771f20c52b47ee9b13f095bdc97e09133212f577fe820a6a091f235f39218aafc9d7e5b3a11c2d2d0279883a79dc28edc37da645ca61f59c59dbebe78eebcb7692a64dde5df5d3daaeb93ed215602070fcc81fd87047a6aa687742e2814d0095028197cb502b63858ba2a7846514a0df899a869fba0cf182b677b81f4a7e956f681083a5d1e6893d656ec1c006f907eb5219da875ddbfb8af71e93e659a1ea8ac95519fee433f40158cc8572735167a35f89cb3871ed239ee194014aa9c80484391d62f8be906e454dd1d48d0e9e09533319629c536b5938e21f4178eabd88d03c68de270493383c403e03a2feeeff95200d14dd352152423b83572a6249236fe599aae272001d892b5ae73bb785d5d7398ff59c6449a47553cf19258a6842871efebc1b5e0553b7e7168ab40134a152fb1997a9180a9dad63bbc7ba1dc15ebec75748488af02f88ab40eb6c23924782e9799ff01726fbf57d001a7d08b78aa487bbf92163da0f627e7c9e7c4b88f374c34fc8ef939845fea095b99266c69957f4fe719b013d8716ca381e528534cbd73b61a3dc56e2f6e5ab02f591231427a4ea8b32851f2d6d4f91f86d22f4b619151eabe0c357a8cd26a427cb6f65ef6b066f280ce14efbcd91a114926a31445b3543526f60e7141ea096a248765fee07d6886fc8a9aa63a92802c350425cfd5c333474a4dd0ad7819064fa4a18d5ef21c9273e9eb428fcdbc83038cc2fa2506ada1018704835939fd5c97f4e52883fd558258d61e198eabb527a4c0c0fa27f5d6ddc33704a28b4b8301a53b88160f1533ba0b807d6c642abdaded77e9f999c4d99f846d16e621577d9c1d0a1576c34ddbe921a3ebb3805b20ff612cdd3eb01caccc77d33e7a36e34187191dbc79dc628cd5ca8f379fbc0b5586828c0237e9fa45cd59b344bfd06c9d0e2a62f9d4e50bb5e8d793001c22abd959ed9d51b014385147d0a63a2ccc5c7d5b6e4eaee6ff54b1ba6b67730fecb3e48c94bbc208406bee4a0e5b7b6fe308e84095933dce8d6a3c345d70841577041740f58724f6f67d959e052e71685a5eea046a6a9b9e4378825984e739900fed8da5cea6ccd6a4d827152f27710a15c8bbd5c417375e7b6d493e783012ed8a3d8edb79e0c4cf0919308618819b55cf2239d71bbb4f6bd3b4f99d6ba5a74dd60e1087e2df6b77050867348b5854d082884d75e25f1d0d8bcfc3333a339436e8faea324a91c68ed320c074e97a6a2f4dc7b05df1f38484c3d98e9cb739881fd07162b2efc55dd0c4f1913d6e4521b84896e29043fe2edf4dd4e7bb41de3bf3c2c8f6521ce12532f85e394d81d795738be202aa5b956edc28bf80cd0663bc78cdc28365255512677537a0e6b6f960ac944b9dede72ee12e71d6eb3d31270c8e4755748bc17bbb911a4bddf24f9a35f244e65ec7704f99563871cc3d522e80643e2e58098a3c99e600d4ca6c17911cb31ce158d021859c2acd553e1a95fd3b61c7eee3cd1eeabb4ba42ec27f656f3f832e7447f9000046c2af8681b782a21c428f62a2650d20e11e4197e841e7b97654c6ef155f2c836dc969229bda1e779be39d3e0c5102a45a43133971c4ba3eb6ee6fe556822630ba4a8c28a3194b0794f9db03ee551db1edac7a9ab751d3bcdc136a547208ed78db6de5f7ac9dbdecb185e20643cf072cf8c7a426746b2857c45d4b4065145c3257e880d4485af16d8a15ceabe163d738d31ff9d58cf8a145def25c0e499d82e2cfeec9010c6a76ee991db8e9d1207aea65ca29b7a345f075e7ddfae4649fedbb4fa19cd033b58650b7589e1e404c65c1ffae8e8ab89ce38d5a4dc0bc8ac6583922993ab18f35d48ba10967016eec8ce38ddd96bb9f4c76106d1f69af2f78605cb849b6e06220efea84b78846b53d8025f73c40452587e6f40a76a07a660cd0a8bf2497c3f06c28214985425395e406f85911a29137ca018f81b0ac5914d0683902d5b15d78e9f5cd2c412cfdc1d063ebffc363bcaebb9be65c631b14db0a106c1dc161733722f77a0ab2227adb54e759f0e1754d2c38f511bc340e307c252e253a83976759ae9fbd8dac573672afa523c02a09404931d55b9dd8dd7f08d2575cbd97f9877144322a64ae63bfc03962e0b393e05b3e7bb097a6e1b39b7a141ea8c9b29f1172e4242c69aaa6f036808013ed48ffd61db58c1bc3423aa1c99be1d49e286e0f58bf009f05280f4421af1b6aa198d0db98462f3437355404ee551b6d12ffb382f9d174829eb474de3bf0f31ceed39493d2b2bb25ddc99de70e268d1a7b30ad0c8378b5675849a5f884f1496a8fbff9613007fe45d566679a23b669a3222766e0acccc83df0489f8f2733bb2484a70473dcdd5835515bb673f7c1d1a9aeae4ae474315eb729ecc5bd7ae82bf28b5f5849b51fdc6dcfd0a237da07d854235a0310274aaf91f55a721b817ec989694ebd082c14ed55abfd92aeb899e0606d4c53ac5a9438695478dbccd4268444083731b0d845000e3ecf02d6c7aeb23e4d988b8cf8fc67611c89e7f76a8241166f6dd9147d9b3be889b5ea0b0493b3d8fb6e1c47310f23173191ed1b05a0d4b5f497fdfa08f905de92613659e1a392ea586a9add450e34c852f01f2625684080383cb756c8e9465b609899d87e29ab43bd8aa3c8495902727d7be7dd3474e78cc809bb66a9660510b419062fbfdc2b6c03c971889704929f4e3c67d587af9af780b9e2052d22dc355c5af8ce088890746d3a876794ccc8ddeddaa16bb177e7c8e5eef4706b5a26692dc9662cca4a90eb17232248b6dd4025f31223371ce0ff3266c5ec3adb29da3142a1b387ebeab7cc5e1aab35f222e11996d7fb547f1b85df23d0090268f57b95cc708cb6d7e593a2056aab69d3cfbf0ac1604ade2bae08a21fc2e5b7c5ee0e23952bb9631d99a87c9a07d532c31c58c895e1eb5dbbaab6740205ae6578066bc0ef0e11f6ee5cfc914ced1f6f3f3a236a8cf520f7924483457e38c6d858f5a5daaa058b993b44100933d84d293aec16b0060689cf59ff3c998bbd61c17ed674c5b4b71db179164986b537191325a9060b38c35d27dfda46cc04d3a409cec739cad4a341562ba21dadf6343bdbd6a1a57be9d03933bffba57e4802ce5a194ff1a5a68ac1b0923e9162f992fa77e821c17eb3d3c2ea1e14b41faa10855250b423168c5aad47ee85832259cca59807a366ca7ae131dbbaa70f3b74628e88134a5733754d4bf21650c4338e6eb57e33c7aca481922d069e02d71f015eb46088af3d8fda649824e603032bfd23d30d01757f037e08463be2e72211ca580f0147b07203c6288fa3f79b0b23c155b109f9b170c039cadbe51d72a105c97e9ef8b43f4861398fcce8a54582d0de09c5bed5bf57c26492fdf61c7d5b80770cedcbc576d49f65f1118e630dd73707a70493d1a1eda657a2d323514dcc3d1db231210d2b87996d6e1d3fcb71c59e379eb0ea18038f8bbbf3ca66bf6b2356e9ae8a04c51dfd051482a9b85c6b3f6209ecca18b31bc16e218e68f62579cb5a6cb4f9a3deed317698b90281c64980b7e91c991c56e3547252f43035f7887d03dc3bd2d3bbe4d8c22573b039634a1c7c76fbc92255db28440d17b8fc69fd19a92182de20d95931da6de8bef8512fedee4223a66a3ec9d530a2fd9cb404e6356af0e95dae37dba6c1a53290322699b4812b768d012329ca09dbc17c0ebf7c7a2ef4cb581afe74463c30c681b2cbb115a77074e771c774490ac2836df797ade7a293c3c18aace3e3eded1df61a90c4f9f5874c3fb0e81d3f6a81514ecd391a81da3db60d7c993c62ddb46899c1804edf192a3d22715c3095148e8d65af844eb644d7fd7709e0bede3a91478d05aacf75562f37d7c5f0dcce030b9d5202b79804ca206aae49ee28e176263f40e10c6e00809185c71e4de5f96a39f5e1e25c0d16858b8e2668e38fae2815934b5bd7143574381817a974605fc2935fa66f3508c8647f4455e3724680cfcfcfc74a3afb5f123c1cf9c6429bd8e4ad30d3dd0c054f98ffc775f71f62df628a4f458a3a87088e37968265519da621a3d60d4ad935d528e4bafea04c7b5c3f5626b3935f84af099da9498be1ab19c8cf5ecd20b5a3d0160524"]}, @nested={0x684, 0x11f, 0x0, 0x1, [@generic="8e3eaa830550ec631c029d3cc57c34f51d2cb50f8ed00c7224fd7febdcce3818f962912fd8ab1d33c3a7d549d47e66d85735ac5322ac4d243b793e6b731a6a1ce0fa0ac7fb6b1f22c21cddc7726573443c1703db746bd2504a5d09fe33b5a25d37c6ecc40656cbc735c0d8b47411709eb0b19a268dbd39b499e4ccdb73d43256bb843c13b78be5ca0a693d492a60cc94530f7095f5b24b23aedc547b75c06a560f221d90782ed18c7bca23e5128586b18e561e50a2921339ac8f1439f734a5220a0fac393005c9ce2316089f", @nested={0xb2, 0x7c, 0x0, 0x1, [@generic="3adb", @typed={0x14, 0xcc, 0x0, 0x0, @ipv6=@mcast1}, @generic="09be7c74462c6229421a6849c8c41c7e3afd4afaaf555211520db9dda9b3580f286830ac256e60c2a8ce6e7cfbd738a2cdeaba7b2ffd8543ea65cf91690dc37fa097bb4dba83a0b2bbe2e00ef2d55b55340305dee80cf43e07bafb0a66834b9b4559fd4aadabb1aae5a4d93c529a56fa880cb995767111973fce9cdf3e8b3cfe934c31dfaadbe19d", @typed={0x9, 0x6b, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @typed={0x4, 0x102}]}, @typed={0x8, 0x10c, 0x0, 0x0, @uid}, @nested={0xfb, 0x59, 0x0, 0x1, [@typed={0xa7, 0xdd, 0x0, 0x0, @binary="af761959bff567944a3442be3c5f508868a646c89062a1d13fb447de19bc387be5ed0b6cba237ba37f3872ed10db5814eb69953d168b2f4af7bd395fcee9f2ee5b014e1e1db0fa654ca891c26f1b2ad32895170f1ba2b99aaa814440496e86282e45dc81c20e7a8953a90dd499fd8387cea1b8e96213ef69ef0434b6899e902be5a898ad8c676a4afcc11b9fb42107e80e917e8c7a3aef5469aa2a28b5b75997c4d135"}, @generic="5d6decb1af3a7e7e28ff17c3d5432f48ab06e2baabf8649ee23b14b7a29c2ce630538b3684411a6d3c76f3b9c9bfacde57bd684e861abf7b50031c3130423e9eb9e330aa7bee828f82509ea2c7000b"]}, @nested={0x2ca, 0x7f, 0x0, 0x1, [@generic="01bf288846c88dd29206125ce471116635669301c7998df75aad76c3c9459833f86644798ca57bf9feef1ceea4e14d9a9a4f4c997a7806285336f44028bfa69e7cad5b9093313272ce82a3a3a208380c60b6467a2407f7d75aa9d948d22e2f4c361c3fe22106410343e7e54c8b5509d239cdf9d308d88d76df57edff9db97703d96acef7c4497019bbb6eded3ce3bdc3e6a60160578444514001334faf79a21ce0c67baf3150d139", @generic="b875902510579ddc3d0fdffb697dcb4808f6a95628f096d7d6d2c99a17b8ea22a564af64861aaa57bf480f267910c6742dc86f11db7ef76f6da90f3ab36f2c2c7f40e1d366e3ea570ce1f5bd1ba55f1a95167677c5cf0329a1cb2c89d808bf34115291d6f5f12d83256afaa62b7a7ffa3e97a8b68ac48f97247a58e727f39f3db1e1", @nested={0x65, 0x136, 0x0, 0x1, [@generic="b8f622d3720f45713ad5e128491e287d41acf6e9a8bc09dae13beabae01b99d8b8971305447348ed543ecf03b3a0ede4e3c663fcc376ae68bf", @nested={0x4, 0x107}, @typed={0x4, 0xfd}, @nested={0x4, 0x83}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x127, 0x66, 0x0, 0x1, [@typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@loopback}, @generic="43904bf8debbd72c9644645d94b8190fb0425f0f19dfd4", @nested={0x4, 0x83}, @typed={0x8, 0x15a, 0x0, 0x0, @uid}, @generic="3f2a75f72e97b02a81d6", @typed={0x6e, 0xfd, 0x0, 0x0, @binary="78924105b2ed420622dfd672e25dc63308e78c063c91a1365214c60be8c59d4bc78d5c71634c650b9a09c430836eee2cdfcbf3f77756d97d53e740969c4097489259892d425ca9a6cf039db9c1b62ff09bb46fa151c970e7165832155acd1f87c6b83f9d5da0a183cdf0"}, @generic="88d36d7599dfe4eef64ea11477de570d32070a9770fa8503686a97817e74bb635ad702d0ebb2b1b9f73ee22f535bb1a4faf02bf569ea437e8212870f414fd492", @generic="a140527bffb5b1a3b6935d3114f9e22ae17c0d329f36c31ad96f79615a4635406593e980811d4a04b3e3ffaf116b9ec30c65"]}, @typed={0xc, 0x24, 0x0, 0x0, @u64=0x9}]}, @nested={0x12d, 0x67, 0x0, 0x1, [@generic="c567dd62e4224cb05797a51281e6865426f17aebb7689f786c92227ca37cb45671397cb59138719ea50bfc9eaf02394256391e2f2e2b2a9968abd9098b9f2de19e0deb0bbbee84688be7cf0b6b51e60ecd2aa1369c8873efe7e6bd88e2b1973aaabdf7807c34824a6134bca1e75a677b83beb7aa0c89b52dc2d79cd8b2e8e1cc382dc55154b465c33ad49604cd0d1f6244279685d2b6712054e358477da63879bc529220a82688ea76a2708d25f7700ad8", @nested={0x70, 0x9e, 0x0, 0x1, [@typed={0xc, 0xb2, 0x0, 0x0, @u64=0xffff}, @generic="54963c4d928eeb53108bcbe8441313c58f45c5d2efa8a3b13dc24e364d0a9faedd8ae810c74fa9949714cf3696c74534cd371933a3ed5e5360efa62f8d5902fa3010fc090bb0af63de87a7d5f21005c2ec957df0fcfc3fcf26a9dfae", @nested={0x4, 0x88}]}, @typed={0x8, 0xe9, 0x0, 0x0, @fd=r5}]}]}, @nested={0x4, 0x2}]}, 0x16a0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getpid() r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r7, 0x400, 0x70bd21, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000003e0007012bbd700000000000007c000008000700", @ANYRES32, @ANYBLOB="20b4571c18b8eb571bb890b5d0cd7f18a4a19663ca5c08201c19a4895f5bc101782985a3c4529faec35fbdfbd95f8a39395b3e72ff0703c791133ef67a0cbea22b35da672fb4f52374dee80ffa8e0ccbd4bae703a3785892955dc2f9c4753227987bea8c92bcf683979990265ad5bc367f899fc8a6f4b2a452c12397d9cbb8faf7a4baa9a4ea05d511284fac9811864e4d6ec22b4a365d353a35f37c531e8f959b0cfd83d19c48cb30"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.599535566s ago: executing program 4 (id=7833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000400)=ANY=[@ANYBLOB="50ed2da80930e6770c75515da1511c0365", @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf250100000008000700e00000010e0001006e65742f6c32636170000000080002000500000008000800ac1414aa1400060020010000000000000000000000000002"], 0x50}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x600400c4}, 0x4000008) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000306010100000000000000000300000005000102070000000900020073797a3000000000"], 0x28}}, 0x44040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.390070185s ago: executing program 2 (id=7835): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000080601080000000000000000000000080c00078008000640200000000500010006"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}, 0x1, 0x8000000}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@empty, 0xfffff004, 0x2, 0x3, 0x4, 0x0, 0x5}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.277953s ago: executing program 1 (id=7836): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r8, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x4004000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss={0x2, 0xef9a}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000140)=""/222, 0x0, 0x8}, 0x94) 2.230772272s ago: executing program 2 (id=7837): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x35, {0x7, @usr_ip4_spec={@local, @remote, 0x6, 0x5, 0x1, 0xc0}, @udp_ip4_spec={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4e20, 0x2}, 0x8, 0x1, 0x3, 0x1, 0xffffffffffffffff}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x27, 0x7, 0x30, 0xdb, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0xa3, 0x3, 0x8}]}}}}}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 2.224905799s ago: executing program 4 (id=7838): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="fb", 0x1}], 0x1, 0x0) (async) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="fb", 0x1}], 0x1, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r1) close(r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x2000, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x8084) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x5, 0x2) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) (async) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080), 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a98000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002c5c000980580002800c00018008000140000000030c00018008000140000000080c000180080001400000000a0c00018008000140000000020c00018008000140000000080c00018008000140000000030c0001800800014000000001140000001000010000000000000000000000000a9062e9b4a3369b3de6360f14b9ece5f6b6d8a86bbd16fe3c37"], 0xc0}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a98000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002c5c000980580002800c00018008000140000000030c00018008000140000000080c000180080001400000000a0c00018008000140000000020c00018008000140000000080c00018008000140000000030c0001800800014000000001140000001000010000000000000000000000000a9062e9b4a3369b3de6360f14b9ece5f6b6d8a86bbd16fe3c37"], 0xc0}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x100, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x100, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.03776163s ago: executing program 0 (id=7839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r2, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r3, @ANYBLOB="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"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000005c0)={0x6, 0x5, 0x40, 0x4, 0xf, 0xe, 0xf, 0x52, 0x3, 0x1, 0x81, 0x3, 0x1, 0x2}, 0xe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, 0x0, 0x0, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x29, 0x0, 0x2) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250300000008000500070000005400018006000200d200000014000300ac14140c0000000000000000000000000600020040000000080009002b0000000600020000000000080009005d000000060004004e2000000a0006006c626c6372000000080005000500000008000400fbffffff080006000600000008000500080000000800050003000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x21, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x767, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "35cf52530599b474"}}, 0x48}}, 0x11) 2.028561016s ago: executing program 3 (id=7840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r4, 0xfe0cef4d0db3b49, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x58}}, 0x8800) recvfrom(r5, 0x0, 0x0, 0x40002062, 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25090000003c0003801400020064766d72703100000000000000000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 1.949505415s ago: executing program 2 (id=7841): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f00000011c0)=@ethtool_rxnfc={0x30, 0x10, 0x2ee7a3f8, {0x7, @tcp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4e21, 0x8}, {0x0, @local, 0x6, 0x288e, [0x7d3, 0x7]}, @esp_ip6_spec={@mcast1, @mcast2, 0xf, 0x2}, {0x0, @random="bfa6b04fd512", 0x6, 0x8001, [0xa, 0x80000000]}, 0xfffffffffffffffa, 0x3}}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() sendmsg$unix(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) sendmsg$nl_route_sched(r3, 0x0, 0x4000c00) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000002400)={0xb18, r12, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xa64b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xff}, @NL80211_ATTR_PEER_MEASUREMENTS={0xad4, 0x111, 0x0, 0x1, {0xad0, 0x5, 0x0, 0x1, [{0x3b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x258, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x947b}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x32}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4db}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x3a5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x90}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x4bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe454}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0xb18}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 1.881433932s ago: executing program 1 (id=7842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=0xffffffffffffffff, 0x36, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x0, @val=@tcx={@void, @value=r0, @void, @void, r3}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000380)=r0}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b019b0000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xddc8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0xfffffffb, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r5, r2], &(0x7f0000000540)=[{0x2, 0x2, 0xc, 0xb}, {0x2, 0x2, 0x2, 0xb}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.721681632s ago: executing program 3 (id=7843): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x9, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f00000000c0)="328ab2b3e5"}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004380)=ANY=[@ANYBLOB="280100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000004"], 0x128}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x700, 0x9, 0x8, {{0x2b, 0x4, 0x1, 0x11, 0xac, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x4, 0xe2, 0x3, 0x5}, @timestamp_addr={0x44, 0x24, 0x85, 0x1, 0x3, [{@empty, 0x4}, {@empty, 0xd0}, {@multicast1, 0x2d3f}, {@remote, 0xffffffff}]}, @lsrr={0x83, 0x1b, 0xdb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x80000000, @multicast1, @multicast1]}, @ssrr={0x89, 0x1b, 0x5e, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x18}, @remote, @local, @empty, @local]}, @lsrr={0x83, 0xb, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x2c, 0x16, 0x0, 0x9, [0x5, 0x400, 0x1, 0x6, 0x4, 0x0, 0x7fc0, 0x2, 0xc0000000, 0xfffffffc]}]}}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r3, &(0x7f0000000540)="06086c1a191ccaba933e05c7e17ac7090268c03ef0dbe9b4a39c38dedfb5f45336267522fa48e79e27a2ff3279e467dbcc06031c2954d53e2b0eb3293141dca194af2baf6eef806332d24c1515bc24d4fb425d749e19bb2845f108ab10cd2bb2d55e3195f680a73bc6ec2ffd1fff0f95f615e9e5e001ea44d0cd2f11b075df1c12d1a9ee8218bb4fda5def0245bc0ce65922e82dd847c25270bd479d16cb701a", 0xa0, 0x4048055, &(0x7f0000000380)={0xa, 0x4e23, 0x3ff, @local, 0x9}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7b, 0x4a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, 0x0, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf2525007770616e310000000500290000000020"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004"], 0x48) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r9, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001800600060008"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x44000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, 0x0, &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 1.465286074s ago: executing program 0 (id=7844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000040)=0x4, 0x4) 1.394466009s ago: executing program 1 (id=7845): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast2, 0xfffe, 0x0, 0x0, 0x0, 0xa}, {0x10000, 0x1, 0x1, 0x0, 0xfffffffffffffffc, 0x2000000000008, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffff8, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2}, {{@in6=@empty, 0x2, 0x6c}, 0xa2a1921e7234ca60, @in=@loopback, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @remote}, {0x6, @multicast}, 0x10, {0x2, 0x4e22, @multicast2}, 'veth1_to_batadv\x00'}) write(r1, &(0x7f0000000040)="240000001e005f0214f6ff", 0xb) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0xfffffffd}, 0x8) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@deltaction={0x50, 0x31, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x700000}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x4c8d0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000040000000e9ffffff06cbb822f04d1b6e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000b70900000000000055090100000000009500000000000000bf91010000000000b702000000000000850000008c000000b70000000000000095", @ANYRESOCT=r1], &(0x7f0000000140)='syzkaller\x00', 0x3}, 0x94) 1.198028273s ago: executing program 0 (id=7846): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 1.168290401s ago: executing program 3 (id=7847): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700), 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="27f670d064", 0x5}], 0x5}}], 0x1, 0x80c0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680), 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0xa7}], 0x1}}], 0x2, 0x4008) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x96) socket(0xa, 0x3, 0xff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000680)={0x3, 0x8}, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@buf) pselect6(0x40, &(0x7f0000000280)={0x4, 0x3, 0x1, 0x7, 0xb74, 0x9, 0x101, 0x7}, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x1, 0x4, 0x8}, 0x50) getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x0, 0x7c}, [@typed={0x8, 0x807, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.031157548s ago: executing program 0 (id=7848): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000b9b99fce2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) unshare(0x22020600) unshare(0x2a020400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r1, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000840)=""/215, 0xd7}, {&(0x7f0000003380)=""/4094, 0xffe}], 0x2}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x3, 0x42, 0x0) 785.751227ms ago: executing program 0 (id=7849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x0) syz_emit_ethernet(0x1285, &(0x7f0000001100)={@local, @local, @void, {@mpls_uc={0x8847, {[{0xfff80}, {0x5, 0x0, 0x1}], @ipv6=@gre_packet={0xf, 0x6, "77ad65", 0x1247, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, {[@hopopts={0x5e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @srh={0x2f, 0x10, 0x4, 0x8, 0x7, 0x10, 0x2, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x3, [0x9c], "45019352c5317ee3548684517ee129f5703d5d24d9c9d1a3b5fdc647dbf8dee8821eccba2b6f19c7ac9d531aa2a795eeef8ac46eaf44036aedfd5c524e2582c2a3c8a566cc1f0860f38e41872b8293b44a323082e827bea49a33b19409b15f9e56cf357719f4d5c8041fb22f07fc087821edb7184b8e89f7d2f6b186c6d6f1b6ad652ad6f938d25e5ffb193ca5d9aca2c2c75c06348007398163a257caf46997c3a6dd425e60d96b629ac01ceb932ff9fa2fc1ca1f299acb644872ce526d9ee53d609ad979cf3a787cad3b902e7d1416c4a61fc9ca7f7dc0afd7f2187f8bba1738d449330a5e9023671a3ac9625d22a038ba395be9f65035b779f09adf52835ac178789859c6fa956f5144a4b036414a9f37b9ba7ba81e1703648120f5bdc6e0f61e915dc2262f95fa6f1be81e1d921cf47790a8065777b844469b31501b04d02b8e705bb2fd3119ab2a2b33f6e0a2569ab3dddaf53ea67a52452fca3c9a64a68ec3f143a0533dd1d9cbf9d84ae2a01b78d6f5cb9b03df67ef86d1795cdaeef3b5df1a39835e3508cebb351f6e754a46ce9b15a80a5a4eb59401299110a02db8a0479b8773714d07b0d164032f840a6c1eb9e89c101d23d7dd13ca5b2c8a29fde4aed0c93098a0483108dd038f8344671785319c14028293eebc73813e228341b54f79b1632bc73587df69e61209d9dc0204b91b298f04c1e9718dc33fda840e11bd6b27dc18b9c0f8ea6f793fd470e6a7c5c33ba171dc2d157cc5f9ef3b5aa56b184f753456592a0541f9ae4df20d1276d370b5ed78ab28b00df7a4ea58d66ed96ee7a043be96a5bf9ea83e512cf48fbd930e74db016cf7fe602e74587584e7582e06a30c7422fb00d797adac668fd5e3ebe7ca0d71f6f3cfa013d4d029ca22394490213ab4ca8b0443a07420f1c9dd7e794dca7e87c823062a0d8444f037ed0e7301e2c812bb4243d6895513a45478ead1ca84af3115e83b61656db58f22613c54310290e5e528f79043d15834024bea9cc61c57ba8f733ee28fa3d98039f1cd425c2bd5e661e18e08f9195bebc445081255ae316a6448992a3634da7ba09d83e046177c02fb665caa8e78576ed47e3dd3888a5177e41d086ab9c1e6debaae47419e3d0adbea59db510df37604511e4b8be11af5b2170901f85a7839070a45e7bf077b147e9b1243ead659010cf90f2913c9d09793f44e1eb0388790d487b607352c673ad597db494204deab99c0231f11e9824b2b8c255f81f88c6b724685f37549aaf03c06f162ea8832f26345be9acaec9778b26c0ed1a074f08f24c2f46cefd400c7b0a0744d315d0465e647d2a1ec4ef7206e8d0e8872a1c6ef784ae33bdb146ad7ed03efb4343aaf4f55ab9a37311fcc056f4dd5aec9099fac4627b72b05d54a7a8dc25d2e7401fe1924c7078ce3ea6685249bf5e3b89a09ba88a3658da499c8207f72141afd2e66b8e5e8be566c7c57349fd9d87a2605ba03816cb92d0e9cb922f1bf1526e66e48442a45d23378deb33f8d6fd9164fd34b16fa45076dc53d4445bce79ee96adf6c8112e40c4aa0db300b18408483d0ae1534861b0acc943ba6e95153ec388d29785c01bb2e7bcb70cdd91703ad580e3cf31a053e2c3c6e871dd8a55592675830457e7884bd59642a37229b65b6fe598f738ac8d21f2c816b2f550f572cac7adec61d84b47f877a63b00133a89ed47ba6b679e9ce9f01a78f5a6b42698de51f204d2d7e4d2ecf23a521dbcee0d28fc8090bd91977e4dfc8535980d0fa51184e3d29917523a63179cf54d243b0c9883cf946ee5111d67b8ec5b3794067decc6d0daeae0f018e36572849fa3668ad767f6ae3f6da462412886e0d3d1ac7d168bef85def05cd5755f42af473b265fef8b68948c97e1b131590a3b399a06efde10f682e37da404e19c2746fafaa0581c91f9eb9e821b067ec91b85732067f9c2f12490684080558de541f8c1ecd6e5c57f24e0f5617af036f1a087ba9c471dffe6502b3f86c248ab71d897cd0efaf568ac1d0694d88be6c7c60df3eb5beada8a0d5b3918083d7fb32f65202c34a5d75dce5026e9ba43bbbb5b4e29e86990ff1e1d85a514f3a0dedb1ea29db86f868c80fddab8bc0730441a319cd965ee1bf43bd18fafb6e1ed811afcb5fcb0beddfccf18c3fcd4e546a8f950579970572b7fefae6405e2d3623b2c3c986e621064eef516d33fc27f9f23c6a4bc20036fd251ce2b12fba38a1757e563254747c8aef759a715da5a317bdf85c2b3ea482360f9372f9b5a36c9186a8f600f629d8359652b57c1923b7db40cdf3b38b94ee22bf207ef786579fd0e006d369e8ecf70cdef9c334cc4c88f0c132677b0d427edde39542c53b933a9ceae27b4ecd4808189d872fd2b118ad3e749250f462ce39b78e98c1692d527b3195080c5890eb57f64331794feae8179b8da4906d9d3c5317369603055e5f6f56d2b6872582bbb68a4668001dcc75578e66495c38080281db8acf213f232a0444305da5ce50ef31c498be9d4c8c84c4403e05931afbb5db63198c46cf525d5102d3f20af8b57bcbad118c7aa19cba48fcd525595323f1288b94340e71bb607b7527c25f106d9ece17d0b5e4ecbc08d4b0865446a98bd54577dc08c4d89bef1ac7bdee712c7f10e733ff98d06b40a4f47d670137bbb3706a3f1463bfc32ac732b86976251bfd85ca57d0369fe9db7c32e5f5f38f42762607bede47b8bb92bb5255481626916f81f5e3dcdb4ccc0d051156afff731f0266e977167e979700e8f3ed8c8d54c46312793f3958b8602316742b988299c4b0c3f1d6927244c2566ff01cf46cf9b0f9bb0ac2738d885215b5761e5a42d090a12b80276945ce02d0c5e17c191d67e5b4d8f230321590f2a870b2c2b0adbd850d06addf6d389351de0c079c3c70fce61cbfff38d9f672493eee018dbe89a6ec973b14db9ff365d5f3ecf455e9860f832eaaea9154a312bafc7bd47fb6cadb2ca6cc7f8e5a8ecedfe82a27acc13520a57597c22543cd9404a6ea43845752f3eac384839f31fa7e10c96eda172f2bcabda1d577b92e65d1f2bf51c025f5d4c2e71c3483f073b3e7cea3131da7634c25e3b6f3b1f73478b9156136d20f4da5416536f1b705774fd5016f799697ffa5ff6948da9c80c9ccfbb1bbb7c433bb7f41e0585234385fb74f3eb7c3e754326ceb82b1a7cfd0d056a6100fde60b24e5be707f37899ed58b652c4e54f516001d5909ed9a9441daf98177f1b7e03550e6912c9b4ee9080c8f37fbe4424a148cabd064e7164fdf111e6887d39f5a79541cdde992370d635cfdcfbd0a8ae45d34346ae28a84dc55b439f10324a4a7a5a9f45bf1885b085746076e235e500c004dd5c992c1cd790174cf8db5a63ad6b65b2554f1c5b51fbdcb18a9de761f7ec1777614ba9658e32952bab9b1bca116ab03d897eeeafca600bed3dd68c533ac6e8e755e43085ea4b54a6589fa3d678c3a3fcaaf6b1b8fc6a8dfff85154057bfd90febfd1c1761e24b79d47ba16a563f6fe993661b2dab219b0e3888f2579ed6f2eaae09b3f6623a9056efea02bbae9a8dc47c2ae62a8b866ae18881239cc6133a8c875ed5688e85b75c9a48360c9f7a5016074f59205c2205b9c473018680e6b8fe3632d76db2d2dc9d98053a3d4b9503aca6481b611633a8f6355a9deed2a119c013a7dd8542d324ac3582f11861fcc9f1614d64f5428752fa012a2e1f72bc79478072b73f078e0b789f1688ba598c371b29be2a633cab6fd50df49b9666a49a8d5ae3c6cdb5a89d4d324d4dcd56285aba01d4ee2e57a6ad18890808e07bf6754364c0cad989a5bb5affff7d30827ba7db3c2828afc0579a6e2743888cdfd2585d81c506c497b21ae5b94fcf73e480055e2f1a99446f9bd56b11b578485807b262963f40387526c4715b57b4f773a1265026cc8b773e9131db855cd443ed8910c296da565555ab09a27d19e736f9f71814d0ada234840edd2c49fa6f2d9608fa4a65fde3d6da143ea2797f8ebcf2d41270f254386c910658d8129bf0b66bb0d83a7b5e6325ee1330be50a66b8bd4ddc60f7e8427050ee1b8a00161c1460d780ce74a6b3aff9994525c8b891bd60fa81d5fd8bd0df6281f9a9ab09b0adaf47e08e2eb8e9530b30bbc8e3d95d83ae0e008b75b4475fddb18f59b0cef57c8a1a36c8f14e46f630abd5ad7199c2cbd9821a079af564925d1e0ebc2b9134dcd3c82c97da4cef9e628c1dc59ebecf9b353962d7db2838abbd4458d239f97b5def2b5f77b72e9b0f23788fe8024d362296f030b8afa852a4cee85d5984eb41cf893e22f9bae79c4ea2be3eba7658f8a4bc027b8db6201f5e61c0e8af937826a3ee6d306f411ecb50416df88a197fb54c56d05f28db0811b9f086512772b6bc72d93f5beb07ab64a9a97316d38b215479f40e98554555188febc58f4c93f743331af0f6a5d5e43fcb58ab64e52f8476e60c06d8e0436939b8721af4e16cf9d0facbcb8a65382a02ac0c8f4ad229feac84660081aaf2b06ffbb646bf1f1d8db84aadc0aa01c6f38c9c8d0ffc53b1e0df7b9b57b94cddc89e9a1ea6da76bf137bb9f7a016930ec569550a3dd598ad941dda749739de33bcf32269198a6ea4e87735067fe138851795130547182bf70dd551c074d7ff95051080898d49177982dc3ee2fe446705bc55ea3e2a9e0c597cbf4af644bbd5bc3c7199541b65202eaee0c6a2e18754a9068c68da826f43438f7065ebefc21261ebb3124afec3a9a671043accd2f6888ccf0b990b5cce66dcee0534aceba45d58d062d793bd91ce2959669251861bc2c3ebbb6dea9c60b61d326ab2d38b7243afb008880c467e2884d57750469baa7f3f21a7a659b6041b7865e4a0270df2998a7bb0cbbd711cccfbe809124074832860d9e3ceddea51a529834675988a21a2ea0863dc8ba89afc69cdf540531c252ef39077983464cba32e51d1dbb47876131fdfa5cbd603e681a15e41cc21552568971c10fe5225e16d47026c2644060a57eccd7672c595a0c9faec8a5f6bf63dc84edbfb412c5e3bbab03c4db6c0fc06df5c6a4eb2094ce6ca9e8e59931222dc9522abdbd42672e104dffd4a150004b9627de1b249ac3355a93cbfed5f904b677940fcfad78ad9e7c5f7dd939b2bfc8ba631de73da8168b652521ebd8f72cee55e44f51f0596d177082722fd2394cd13d1e2e24a1c2ed24bf32f44d5591f03fab3627b0049f604d097a83921cd20a6c4858751da982daadd77d235d7bedf82f9fa44ee255a3fd345a8ed4f62fe20d9c9c87e7869cf936d36e49d6cb760668e2ff6872ad4bc88ef8dc981dfb401462bfc68982d48eab22846389cff4c9da73edeae3e218cb15b21d6107f4ee3a8cda3ff18180618c7441244fffbff4c19e6ef08d14a786a0482c1e851a9da6826b625431b90ec761ae707d5fbce2cf64557d79015a4c6bf59f0dfe5945ebb68ce2a4c010f5216ce44eeb0e085ec56335095e23d3e7a12f5b791c55e4cb61110add4684afc7f517d8465d4f06148d31b769a6f63906286c9b10420750fcf1168b4d42ea4a29bb68e7321fbf2a5b707e89f041c21bdd86f4a259f9d158f829fa9c149e2155b9e168d4a48b9ad7709ad74eda0172f505593eae5f5fb11ba66d86a83a984e051cba7c6b817d0a26f0154e2b4843b9b8cb439e6536bf4245416081f8aebd8d2dfa68fb3e0020617129ff82ffa9df1ab3c8a3fd4a2a0b644bf9d819f74aa9ad8682aefed4a2378edd1f98960231c50cc60f1fcd4f6b296b86d834174e5a30791f3d9ae"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x4, 0x0, 0xfffb], "92955dd66087f2a0888a234fb5982c63142069cf1e2888587c78579f392a0cf184ba4d318f583941717ba4123098d87a93a9e3a08ea19d9689dc72a04ec0fab138d2feeaea149d28a47b"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x2], "8ab9f758f446524e70ff3a0cb05b565799ed18232f7fa5549d489fe92bbd602fc96e6c4eab4e64d82368dd528fe22547eaad5c898ed9c991ff777781980d7e6efe561426b6e75399ec623e8de58c345ba7d8a9e4d39ec04cc1c550a16177338d64d8014c7e2e17f4743f7ff7a3941c574f492d1e6921db215c8781fde5194bd85bcb6863e87a56da3aa1da73d3fe181dae6bdde43ae63f31d3a061e73e44eb"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0xf7, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x1, {0xd}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x2, 0x0, 0x0, 0x1, 0x2, 0x40}, 0x2, {0x5, 0x1, 0x0, 0x9, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "7013e30f4dbc1fe6f97b728cc4bb1d7541d73c0bf7327ddcd65dce577c3490d17a9e7c94a355e5edb923f5b13b456af342adab20a3402b4be9f12063924aa76dc0ae6667d0b2ccc7774acdfc5e3894ef5ff8e903d7f55fc41d0761fdc1d8232f03100cbd9972cd85beaf365c873d915ef9c48cb345b2a5a7"}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)={0x3c, r4, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x3f, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100)={0x30000010}) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="e178e6b47c794cea407caf627fe7ed8b30d9c27946018b5fefaced1ccbfaf2b72729e3ec981f0ffb9ba33ee4b601ad54009e4c66c456b91e22d6429a3d0bf572db4c2c089f7c99fedd35785c3b3d9fe597434eec15403c2dd6a4917cd4d81015358f728671f251a088b46ee212da78be131d6b15133530c626b6d8", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r10, @ANYBLOB="0c000280050009"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ffffffd, '\x00', r10, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdc00, {0x0, 0x7c}, [@nested={0x4, 0x83}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xd}]}]}, @typed={0x8, 0x8, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x82200, 0x40, '\x00', r10, @lirc_mode2=0x70cbd55def6ac690, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x5, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r11, r7, r7, r7, r7, r12, r7], 0x0, 0x10, 0x4}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r14) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 551.4956ms ago: executing program 2 (id=7850): r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4002, 0x0) close(0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)={0x120, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x110, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf", @typed={0x8, 0x96, 0x0, 0x0, @fd=r1}, @nested={0x65, 0xf1, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@empty}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x120}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4002, 0x0) (async) close(0x3) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)={0x120, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x110, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf", @typed={0x8, 0x96, 0x0, 0x0, @fd=r1}, @nested={0x65, 0xf1, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@empty}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x120}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) 385.867944ms ago: executing program 0 (id=7851): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="850000007f000000950000000056c7f6336d2958bac6d1b6c2074b4f000000ab363d353fb46f53511e1a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000540)=""/192, 0xc0}], 0x3}, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8", 0x130}, {&(0x7f0000000180)="1a39e33c9bb56fd43a362ffea90553761d7ed507c9de39febbf44d3f865312c8f87355b539002cdd0c62a1b4af1b231aedcaa350cbed61f038c59eb5ab370f7078bb09bba3f39fd8421406392f4ce058", 0x50}, {&(0x7f0000000480)="607dd884f33ff413bd131c8b890067b9df813bdca47007b3029f63a8ce8d396f0741075350111184a065fdecf602a80cba8b0ceaac55d2a5ac82ea58fd20f788ba0f910bce416fd530579aec17ed688e6f569c95d7049bea84d87e6477c0d22a895de1f4d49936c287c188a7a1a833", 0x6f}], 0x3) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x101}, 0x8) 258.074408ms ago: executing program 2 (id=7852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0xba01, 0x0, 0xc040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071105b00000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 219.34818ms ago: executing program 1 (id=7853): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt(r1, 0x84, 0x7d, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async, rerun: 64) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f0000000140)='Q\r\x00\x00\x00\x00\x00', 0x7}], 0x2) (rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr=0x64010101, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 182.849485ms ago: executing program 3 (id=7854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r2, &(0x7f0000000200)=""/131, 0x83, 0x6161, 0x0, 0x0) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x68, r1, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x25}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x68}}, 0x20008000) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x200, 0xffffffff}, 0x20) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000001060500080026000100000008001c00", @ANYRES32, @ANYBLOB], 0x30}}, 0x48000) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r7, 0x0, 0x0, 0x2100, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x8, 0x1, 0x1, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x8000101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x6, 0x6, 0xd, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x7, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7c, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xfffffffa, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x9, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x1, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0xbde, 0xb, 0x5, 0x2020006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xa, 0x1, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x7, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x3a) 30.009376ms ago: executing program 1 (id=7855): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 29.670411ms ago: executing program 3 (id=7856): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffd}, 0x6e}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) (async) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x4000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d00e9"], 0xb8}}, 0x0) 0s ago: executing program 2 (id=7857): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000005) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250300000008000100", @ANYRES32=r1, @ANYBLOB="69c301007c726ce656326b3e00"/26], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0xc004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r4, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) close(0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.2.6649'. [ 802.154495][T29319] lo speed is unknown, defaulting to 1000 [ 802.394329][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.402978][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.425861][T29337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6654'. [ 802.444458][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.576852][T29307] wg1 speed is unknown, defaulting to 1000 [ 802.585132][T29346] FAULT_INJECTION: forcing a failure. [ 802.585132][T29346] name failslab, interval 1, probability 0, space 0, times 0 [ 802.628563][T29346] CPU: 1 UID: 0 PID: 29346 Comm: syz.2.6657 Not tainted syzkaller #0 PREEMPT(full) [ 802.628593][T29346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 802.628605][T29346] Call Trace: [ 802.628614][T29346] [ 802.628624][T29346] dump_stack_lvl+0xe8/0x150 [ 802.628657][T29346] should_fail_ex+0x412/0x560 [ 802.628689][T29346] should_failslab+0xa8/0x100 [ 802.628714][T29346] __kmalloc_cache_noprof+0x83/0x6e0 [ 802.628736][T29346] ? netlbl_cipsov4_add+0x516/0x22b0 [ 802.628756][T29346] ? __nla_validate+0x40/0x60 [ 802.628787][T29346] netlbl_cipsov4_add+0x516/0x22b0 [ 802.628821][T29346] ? rcu_is_watching+0x15/0xb0 [ 802.628846][T29346] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 802.628872][T29346] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 802.628908][T29346] genl_family_rcv_msg_doit+0x22a/0x330 [ 802.628943][T29346] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 802.628986][T29346] ? bpf_lsm_capable+0x9/0x20 [ 802.629010][T29346] ? security_capable+0x7e/0x2c0 [ 802.629041][T29346] genl_rcv_msg+0x61c/0x7a0 [ 802.629077][T29346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.629103][T29346] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 802.629142][T29346] netlink_rcv_skb+0x232/0x4b0 [ 802.629165][T29346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 802.629195][T29346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 802.629214][T29346] ? genl_rcv+0x19/0x40 [ 802.629261][T29346] ? down_read+0x272/0x2e0 [ 802.629278][T29346] ? genl_rcv+0xd/0x40 [ 802.629306][T29346] genl_rcv+0x28/0x40 [ 802.629331][T29346] netlink_unicast+0x80f/0x9b0 [ 802.629363][T29346] ? __pfx_netlink_unicast+0x10/0x10 [ 802.629386][T29346] ? netlink_sendmsg+0x650/0xb40 [ 802.629406][T29346] ? skb_put+0x11b/0x210 [ 802.629437][T29346] netlink_sendmsg+0x813/0xb40 [ 802.629471][T29346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.629499][T29346] ? aa_sock_msg_perm+0xf1/0x1b0 [ 802.629525][T29346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 802.629549][T29346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.629569][T29346] ____sys_sendmsg+0xa68/0xad0 [ 802.629597][T29346] ? __might_fault+0xaf/0x130 [ 802.629634][T29346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 802.629672][T29346] ? import_iovec+0x73/0xa0 [ 802.629707][T29346] ___sys_sendmsg+0x2a5/0x360 [ 802.629732][T29346] ? __lock_acquire+0x6b5/0x2cf0 [ 802.629765][T29346] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.629844][T29346] ? __fget_files+0x2a/0x420 [ 802.629866][T29346] ? __fget_files+0x3a0/0x420 [ 802.629901][T29346] __x64_sys_sendmsg+0x1bd/0x2a0 [ 802.629932][T29346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 802.629969][T29346] ? __pfx_ksys_write+0x10/0x10 [ 802.630010][T29346] do_syscall_64+0xe2/0xf80 [ 802.630036][T29346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.630055][T29346] ? trace_irq_disable+0x37/0x100 [ 802.630074][T29346] ? clear_bhb_loop+0x60/0xb0 [ 802.630098][T29346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.630118][T29346] RIP: 0033:0x7f4eeb19aeb9 [ 802.630137][T29346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.630155][T29346] RSP: 002b:00007f4eec094028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.630179][T29346] RAX: ffffffffffffffda RBX: 00007f4eeb415fa0 RCX: 00007f4eeb19aeb9 [ 802.630194][T29346] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 802.630208][T29346] RBP: 00007f4eec094090 R08: 0000000000000000 R09: 0000000000000000 [ 802.630221][T29346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.630233][T29346] R13: 00007f4eeb416038 R14: 00007f4eeb415fa0 R15: 00007fff0cc17e88 [ 802.630269][T29346] [ 802.879816][T29319] wg1 speed is unknown, defaulting to 1000 [ 803.007990][T12120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.189092][T29359] __nla_validate_parse: 1 callbacks suppressed [ 803.189114][T29359] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6659'. [ 803.213751][T29356] net_ratelimit: 178 callbacks suppressed [ 803.213773][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.228745][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.237680][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.247389][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.256306][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.265007][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.273614][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.282261][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.290902][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.299363][T29356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.366624][T29365] netlink: 'syz.3.6661': attribute type 1 has an invalid length. [ 803.425340][T29366] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6660'. [ 803.434847][T29366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6660'. [ 803.474423][T29366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6660'. [ 803.890229][T29374] lo speed is unknown, defaulting to 1000 [ 804.178351][T29384] netlink: 'syz.3.6665': attribute type 1 has an invalid length. [ 804.308410][T29384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6665'. [ 804.425294][T29390] netlink: 308 bytes leftover after parsing attributes in process `syz.0.6667'. [ 804.470645][T29384] bond3: (slave bridge2): making interface the new active one [ 804.499056][T29384] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 804.563063][T29386] macvlan2: entered promiscuous mode [ 804.568935][T29386] macvlan2: entered allmulticast mode [ 804.575743][T29386] bond3: entered promiscuous mode [ 804.580835][T29386] bridge2: entered promiscuous mode [ 804.588574][T29386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 804.602085][T29386] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 804.664297][T29386] bond3: left promiscuous mode [ 804.669487][T29386] bridge2: left promiscuous mode [ 804.728640][T29374] wg1 speed is unknown, defaulting to 1000 [ 804.805859][T29392] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6668'. [ 804.950813][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6672'. [ 805.061328][T29414] ip6gretap0: entered promiscuous mode [ 805.086190][T29414] ip6gretap0: left promiscuous mode [ 805.165629][T29425] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6674'. [ 805.181586][T29425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6674'. [ 805.474742][T29434] pim6reg1: entered promiscuous mode [ 805.480098][T29434] pim6reg1: entered allmulticast mode [ 805.726590][T25808] Bluetooth: hci2: command 0x0406 tx timeout [ 805.755324][T29444] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.835478][T29444] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.892596][T29444] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.048358][T29444] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.232629][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029e8b000: rx timeout, send abort [ 806.241825][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029e8b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 806.278976][T29472] siw: device registration error -23 [ 806.316903][T29472] x_tables: unsorted entry at hook 1 [ 806.435542][T29475] 8021q: adding VLAN 0 to HW filter on device bond4 [ 806.574930][T29484] bond4: (slave veth5): Enslaving as an active interface with an up link [ 806.731781][T13770] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.742261][T29493] netlink: 'syz.3.6696': attribute type 2 has an invalid length. [ 806.786540][T13770] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.797453][T13770] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.808244][T29490] syzkaller0: entered promiscuous mode [ 806.813975][T29490] syzkaller0: entered allmulticast mode [ 806.935872][ T2997] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.944293][ T2997] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.953131][ T2997] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.098017][ T2997] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.108153][ T2997] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.275509][T29522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 807.756274][T29524] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.764393][T29524] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.279065][T29524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.322136][T29524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.399200][T29524] hsr0: left promiscuous mode [ 808.542864][T12124] net_ratelimit: 806 callbacks suppressed [ 808.542882][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.765532][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.771320][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 808.780414][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 808.797242][ T2997] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.854535][ T2997] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.893926][ T2997] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.902979][ T2997] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.962375][T29552] netlink: 'syz.3.6710': attribute type 1 has an invalid length. [ 809.080404][T29558] __nla_validate_parse: 16 callbacks suppressed [ 809.080426][T29558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6710'. [ 809.163153][T29563] FAULT_INJECTION: forcing a failure. [ 809.163153][T29563] name failslab, interval 1, probability 0, space 0, times 0 [ 809.177673][T29563] CPU: 0 UID: 0 PID: 29563 Comm: syz.0.6714 Not tainted syzkaller #0 PREEMPT(full) [ 809.177704][T29563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 809.177717][T29563] Call Trace: [ 809.177726][T29563] [ 809.177735][T29563] dump_stack_lvl+0xe8/0x150 [ 809.177767][T29563] should_fail_ex+0x412/0x560 [ 809.177797][T29563] should_failslab+0xa8/0x100 [ 809.177823][T29563] kmem_cache_alloc_noprof+0x87/0x6e0 [ 809.177850][T29563] ? apparmor_capable+0x137/0x1a0 [ 809.177878][T29563] ? skb_clone+0x212/0x3a0 [ 809.177909][T29563] skb_clone+0x212/0x3a0 [ 809.177933][T29563] ? nfnetlink_rcv+0x4b0/0x27b0 [ 809.177956][T29563] nfnetlink_rcv+0x4e2/0x27b0 [ 809.177988][T29563] ? lockdep_hardirqs_on+0x7a/0x110 [ 809.178015][T29563] ? __dev_queue_xmit+0x274/0x3850 [ 809.178041][T29563] ? __local_bh_enable_ip+0xd0/0x130 [ 809.178061][T29563] ? __dev_queue_xmit+0x1e6c/0x3850 [ 809.178088][T29563] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.178127][T29563] ? __dev_queue_xmit+0x274/0x3850 [ 809.178158][T29563] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 809.178196][T29563] ? ref_tracker_free+0x693/0x840 [ 809.178219][T29563] ? __copy_skb_header+0xa3/0x4a0 [ 809.178249][T29563] ? __pfx_ref_tracker_free+0x10/0x10 [ 809.178291][T29563] ? skb_clone+0x246/0x3a0 [ 809.178322][T29563] ? __netlink_deliver_tap+0x807/0x850 [ 809.178345][T29563] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.178386][T29563] netlink_unicast+0x80f/0x9b0 [ 809.178417][T29563] ? __pfx_netlink_unicast+0x10/0x10 [ 809.178440][T29563] ? netlink_sendmsg+0x650/0xb40 [ 809.178461][T29563] ? skb_put+0x11b/0x210 [ 809.178490][T29563] netlink_sendmsg+0x813/0xb40 [ 809.178532][T29563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.178559][T29563] ? aa_sock_msg_perm+0xf1/0x1b0 [ 809.178586][T29563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.178610][T29563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.178631][T29563] ____sys_sendmsg+0xa68/0xad0 [ 809.178664][T29563] ? __might_fault+0xaf/0x130 [ 809.178700][T29563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.178738][T29563] ? import_iovec+0x73/0xa0 [ 809.178770][T29563] ___sys_sendmsg+0x2a5/0x360 [ 809.178797][T29563] ? __lock_acquire+0x6b5/0x2cf0 [ 809.178829][T29563] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.178894][T29563] ? __fget_files+0x2a/0x420 [ 809.178917][T29563] ? __fget_files+0x3a0/0x420 [ 809.178950][T29563] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.178980][T29563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.179015][T29563] ? __pfx_ksys_write+0x10/0x10 [ 809.179055][T29563] do_syscall_64+0xe2/0xf80 [ 809.179082][T29563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.179100][T29563] ? trace_irq_disable+0x37/0x100 [ 809.179120][T29563] ? clear_bhb_loop+0x60/0xb0 [ 809.179145][T29563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.179164][T29563] RIP: 0033:0x7f5734d9aeb9 [ 809.179184][T29563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.179202][T29563] RSP: 002b:00007f5735bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.179225][T29563] RAX: ffffffffffffffda RBX: 00007f5735015fa0 RCX: 00007f5734d9aeb9 [ 809.179239][T29563] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 809.179253][T29563] RBP: 00007f5735bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 809.179266][T29563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.179278][T29563] R13: 00007f5735016038 R14: 00007f5735015fa0 R15: 00007fffbe992208 [ 809.179311][T29563] [ 809.585587][T29561] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6712'. [ 809.612922][T29552] bond5: (slave bridge3): making interface the new active one [ 809.622640][T29552] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 809.650692][T29572] macvlan2: entered promiscuous mode [ 809.684068][T29572] macvlan2: entered allmulticast mode [ 809.709763][T29572] bond5: entered promiscuous mode [ 809.716313][T29572] bridge3: entered promiscuous mode [ 809.734459][T29572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 809.742956][T29572] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 809.762780][T29572] bond5: left promiscuous mode [ 809.767747][T29572] bridge3: left promiscuous mode [ 809.804405][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.828607][T29580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6717'. [ 809.856232][T29580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6717'. [ 809.857263][T29576] mÿ5nè‹Ò: entered promiscuous mode [ 810.235891][T29598] FAULT_INJECTION: forcing a failure. [ 810.235891][T29598] name failslab, interval 1, probability 0, space 0, times 0 [ 810.286401][T29598] CPU: 0 UID: 0 PID: 29598 Comm: syz.1.6725 Not tainted syzkaller #0 PREEMPT(full) [ 810.286432][T29598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 810.286444][T29598] Call Trace: [ 810.286454][T29598] [ 810.286462][T29598] dump_stack_lvl+0xe8/0x150 [ 810.286494][T29598] should_fail_ex+0x412/0x560 [ 810.286524][T29598] should_failslab+0xa8/0x100 [ 810.286549][T29598] __kvmalloc_node_noprof+0x166/0x8d0 [ 810.286572][T29598] ? nf_tables_newset+0x1354/0x2580 [ 810.286600][T29598] ? nft_set_lookup+0x128/0x150 [ 810.286617][T29598] ? nft_rhash_estimate+0x8f/0xa0 [ 810.286652][T29598] nf_tables_newset+0x1354/0x2580 [ 810.286694][T29598] ? __pfx_nf_tables_newset+0x10/0x10 [ 810.286744][T29598] ? __nla_parse+0x40/0x60 [ 810.286776][T29598] nfnetlink_rcv+0x1240/0x27b0 [ 810.286834][T29598] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 810.286873][T29598] ? ref_tracker_free+0x693/0x840 [ 810.286930][T29598] ? __netlink_deliver_tap+0x807/0x850 [ 810.286952][T29598] ? netlink_deliver_tap+0x2e/0x1b0 [ 810.286994][T29598] netlink_unicast+0x80f/0x9b0 [ 810.287025][T29598] ? __pfx_netlink_unicast+0x10/0x10 [ 810.287049][T29598] ? netlink_sendmsg+0x650/0xb40 [ 810.287069][T29598] ? skb_put+0x11b/0x210 [ 810.287100][T29598] netlink_sendmsg+0x813/0xb40 [ 810.287131][T29598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.287155][T29598] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.287181][T29598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.287204][T29598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.287223][T29598] ____sys_sendmsg+0xa68/0xad0 [ 810.287247][T29598] ? __might_fault+0xaf/0x130 [ 810.287279][T29598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.287315][T29598] ? import_iovec+0x73/0xa0 [ 810.287348][T29598] ___sys_sendmsg+0x2a5/0x360 [ 810.287372][T29598] ? __lock_acquire+0x6b5/0x2cf0 [ 810.287403][T29598] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.287468][T29598] ? __fget_files+0x2a/0x420 [ 810.287490][T29598] ? __fget_files+0x3a0/0x420 [ 810.287520][T29598] __x64_sys_sendmsg+0x1bd/0x2a0 [ 810.287549][T29598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.287586][T29598] ? __pfx_ksys_write+0x10/0x10 [ 810.287626][T29598] do_syscall_64+0xe2/0xf80 [ 810.287661][T29598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.287680][T29598] ? trace_irq_disable+0x37/0x100 [ 810.287700][T29598] ? clear_bhb_loop+0x60/0xb0 [ 810.287721][T29598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.287741][T29598] RIP: 0033:0x7f5f3e39aeb9 [ 810.287761][T29598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.287779][T29598] RSP: 002b:00007f5f3c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.287801][T29598] RAX: ffffffffffffffda RBX: 00007f5f3e615fa0 RCX: 00007f5f3e39aeb9 [ 810.287816][T29598] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 810.287829][T29598] RBP: 00007f5f3c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 810.287842][T29598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.287855][T29598] R13: 00007f5f3e616038 R14: 00007f5f3e615fa0 R15: 00007fffe0efadd8 [ 810.287888][T29598] [ 810.313673][T29602] syzkaller1: entered promiscuous mode [ 810.613194][T29602] syzkaller1: entered allmulticast mode [ 810.784266][T29619] IPv6: Can't replace route, no match found [ 810.812110][T29622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.815186][T29613] lo speed is unknown, defaulting to 1000 [ 810.824177][T29622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.843886][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.873883][T29622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.883147][T29622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.903774][T29622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.912291][T29622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.080410][T29629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6735'. [ 811.093111][T29613] wg1 speed is unknown, defaulting to 1000 [ 811.117460][T29616] lo speed is unknown, defaulting to 1000 [ 811.148223][T29632] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6736'. [ 811.183542][T29632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6736'. [ 811.199943][T29632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6736'. [ 811.738909][T29657] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6741'. [ 811.754394][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6741'. [ 812.003320][T29616] wg1 speed is unknown, defaulting to 1000 [ 812.472380][T29686] netlink: 'syz.4.6747': attribute type 10 has an invalid length. [ 812.530765][T29686] team0: Port device dummy0 added [ 813.963533][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.965203][ T5939] net_ratelimit: 31 callbacks suppressed [ 813.965221][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.971653][ C0] lec:lec_tx_timeout: lec0 [ 814.614195][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.004035][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.349435][T29677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.694754][T29748] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 815.736330][T29743] netlink: 'syz.2.6765': attribute type 16 has an invalid length. [ 815.821130][T29743] __nla_validate_parse: 2 callbacks suppressed [ 815.821154][T29743] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.6765'. [ 815.894325][T29762] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6770'. [ 815.944899][T29762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6770'. [ 815.962075][T29762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6770'. [ 816.044268][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.205398][T29784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6772'. [ 816.236494][T29787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6774'. [ 816.247025][T29787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6774'. [ 816.322214][T29790] FAULT_INJECTION: forcing a failure. [ 816.322214][T29790] name failslab, interval 1, probability 0, space 0, times 0 [ 816.336986][T29790] CPU: 1 UID: 0 PID: 29790 Comm: syz.4.6775 Not tainted syzkaller #0 PREEMPT(full) [ 816.337006][T29790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 816.337014][T29790] Call Trace: [ 816.337019][T29790] [ 816.337025][T29790] dump_stack_lvl+0xe8/0x150 [ 816.337046][T29790] should_fail_ex+0x412/0x560 [ 816.337063][T29790] should_failslab+0xa8/0x100 [ 816.337078][T29790] kmem_cache_alloc_noprof+0x87/0x6e0 [ 816.337096][T29790] ? skb_clone+0x212/0x3a0 [ 816.337116][T29790] skb_clone+0x212/0x3a0 [ 816.337135][T29790] __netlink_deliver_tap+0x404/0x850 [ 816.337156][T29790] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.337171][T29790] netlink_deliver_tap+0x19c/0x1b0 [ 816.337185][T29790] netlink_sendskb+0x68/0x140 [ 816.337197][T29790] netlink_unicast+0x3a3/0x9b0 [ 816.337215][T29790] ? __pfx_netlink_unicast+0x10/0x10 [ 816.337232][T29790] nfnetlink_rcv+0x2517/0x27b0 [ 816.337269][T29790] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 816.337308][T29790] ? ref_tracker_free+0x693/0x840 [ 816.337363][T29790] ? __netlink_deliver_tap+0x807/0x850 [ 816.337385][T29790] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.337427][T29790] netlink_unicast+0x80f/0x9b0 [ 816.337451][T29790] ? __pfx_netlink_unicast+0x10/0x10 [ 816.337472][T29790] ? netlink_sendmsg+0x650/0xb40 [ 816.337484][T29790] ? skb_put+0x11b/0x210 [ 816.337501][T29790] netlink_sendmsg+0x813/0xb40 [ 816.337520][T29790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.337536][T29790] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.337553][T29790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.337567][T29790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.337579][T29790] ____sys_sendmsg+0xa68/0xad0 [ 816.337596][T29790] ? __might_fault+0xaf/0x130 [ 816.337617][T29790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.337639][T29790] ? import_iovec+0x73/0xa0 [ 816.337659][T29790] ___sys_sendmsg+0x2a5/0x360 [ 816.337674][T29790] ? __lock_acquire+0x6b5/0x2cf0 [ 816.337694][T29790] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.337735][T29790] ? __fget_files+0x2a/0x420 [ 816.337748][T29790] ? __fget_files+0x3a0/0x420 [ 816.337767][T29790] __x64_sys_sendmsg+0x1bd/0x2a0 [ 816.337786][T29790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.337808][T29790] ? __pfx_ksys_write+0x10/0x10 [ 816.337832][T29790] do_syscall_64+0xe2/0xf80 [ 816.337848][T29790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.337859][T29790] ? trace_irq_disable+0x37/0x100 [ 816.337871][T29790] ? clear_bhb_loop+0x60/0xb0 [ 816.337885][T29790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.337896][T29790] RIP: 0033:0x7f414739aeb9 [ 816.337909][T29790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.337919][T29790] RSP: 002b:00007f4148280028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.337933][T29790] RAX: ffffffffffffffda RBX: 00007f4147615fa0 RCX: 00007f414739aeb9 [ 816.337942][T29790] RDX: 0000000000000080 RSI: 0000200000000400 RDI: 0000000000000003 [ 816.337950][T29790] RBP: 00007f4148280090 R08: 0000000000000000 R09: 0000000000000000 [ 816.337958][T29790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 816.337965][T29790] R13: 00007f4147616038 R14: 00007f4147615fa0 R15: 00007fff903d5378 [ 816.337984][T29790] [ 817.094978][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.646011][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.133922][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.623198][T29784] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 818.637093][T29784] batman_adv: batadv0: Adding interface: ip6gretap1 [ 818.644633][T29784] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.672892][T29784] batman_adv: batadv0: Interface activated: ip6gretap1 [ 818.755271][T29796] netlink: 'syz.3.6778': attribute type 10 has an invalid length. [ 818.768385][T29796] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6778'. [ 818.826979][T29796] syzkaller0: entered promiscuous mode [ 818.832607][T29796] syzkaller0: entered allmulticast mode [ 818.911350][T29804] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6781'. [ 818.921352][T29804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6781'. [ 818.966168][T29777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.164058][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.215332][T29817] lo speed is unknown, defaulting to 1000 [ 819.434958][T29827] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 819.461621][T29817] wg1 speed is unknown, defaulting to 1000 [ 819.505258][T29830] SET target dimension over the limit! [ 819.586323][T29830] lo speed is unknown, defaulting to 1000 [ 819.983173][T29843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.992010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.080180][T29830] wg1 speed is unknown, defaulting to 1000 [ 820.204003][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.346633][T29851] FAULT_INJECTION: forcing a failure. [ 820.346633][T29851] name failslab, interval 1, probability 0, space 0, times 0 [ 820.393830][T29851] CPU: 0 UID: 0 PID: 29851 Comm: syz.1.6794 Not tainted syzkaller #0 PREEMPT(full) [ 820.393860][T29851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 820.393872][T29851] Call Trace: [ 820.393881][T29851] [ 820.393890][T29851] dump_stack_lvl+0xe8/0x150 [ 820.393922][T29851] should_fail_ex+0x412/0x560 [ 820.393953][T29851] should_failslab+0xa8/0x100 [ 820.393978][T29851] __kvmalloc_node_noprof+0x166/0x8d0 [ 820.393999][T29851] ? rcu_is_watching+0x15/0xb0 [ 820.394021][T29851] ? nf_hook_entries_grow+0x288/0x720 [ 820.394044][T29851] ? __pfx___mutex_lock+0x10/0x10 [ 820.394076][T29851] nf_hook_entries_grow+0x288/0x720 [ 820.394103][T29851] ? ____sys_sendmsg+0xa68/0xad0 [ 820.394142][T29851] __nf_register_net_hook+0x2c9/0x930 [ 820.394173][T29851] nf_register_net_hook+0xb2/0x190 [ 820.394200][T29851] nf_register_net_hooks+0x44/0x1b0 [ 820.394229][T29851] nf_defrag_ipv6_enable+0x87/0x120 [ 820.394259][T29851] nf_ct_netns_do_get+0x1e7/0x5c0 [ 820.394282][T29851] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 820.394305][T29851] ? __kasan_kmalloc+0x93/0xb0 [ 820.394333][T29851] ? nf_ct_netns_get+0xe9/0x320 [ 820.394360][T29851] nft_connlimit_do_init+0x1de/0x2e0 [ 820.394388][T29851] nft_set_elem_expr_alloc+0x213/0x5f0 [ 820.394413][T29851] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 820.394452][T29851] ? nft_rhash_init+0x2c0/0x3b0 [ 820.394478][T29851] ? __pfx_nft_rhash_init+0x10/0x10 [ 820.394502][T29851] ? __pfx_nft_rhash_key+0x10/0x10 [ 820.394524][T29851] ? __pfx_nft_rhash_obj+0x10/0x10 [ 820.394546][T29851] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 820.394575][T29851] nft_set_expr_alloc+0x68/0x760 [ 820.394605][T29851] nf_tables_newset+0x1c6b/0x2580 [ 820.394659][T29851] ? __pfx_nf_tables_newset+0x10/0x10 [ 820.394713][T29851] ? __nla_parse+0x40/0x60 [ 820.394746][T29851] nfnetlink_rcv+0x1240/0x27b0 [ 820.394809][T29851] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 820.394849][T29851] ? ref_tracker_free+0x693/0x840 [ 820.394909][T29851] ? __netlink_deliver_tap+0x807/0x850 [ 820.394933][T29851] ? netlink_deliver_tap+0x2e/0x1b0 [ 820.394977][T29851] netlink_unicast+0x80f/0x9b0 [ 820.395008][T29851] ? __pfx_netlink_unicast+0x10/0x10 [ 820.395032][T29851] ? netlink_sendmsg+0x650/0xb40 [ 820.395052][T29851] ? skb_put+0x11b/0x210 [ 820.395081][T29851] netlink_sendmsg+0x813/0xb40 [ 820.395116][T29851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.395143][T29851] ? aa_sock_msg_perm+0xf1/0x1b0 [ 820.395170][T29851] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 820.395195][T29851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.395217][T29851] ____sys_sendmsg+0xa68/0xad0 [ 820.395244][T29851] ? __might_fault+0xaf/0x130 [ 820.395279][T29851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.395314][T29851] ? import_iovec+0x73/0xa0 [ 820.395342][T29851] ___sys_sendmsg+0x2a5/0x360 [ 820.395364][T29851] ? __lock_acquire+0x6b5/0x2cf0 [ 820.395389][T29851] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.395439][T29851] ? __fget_files+0x2a/0x420 [ 820.395457][T29851] ? __fget_files+0x3a0/0x420 [ 820.395490][T29851] __x64_sys_sendmsg+0x1bd/0x2a0 [ 820.395519][T29851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 820.395557][T29851] ? __pfx_ksys_write+0x10/0x10 [ 820.395596][T29851] do_syscall_64+0xe2/0xf80 [ 820.395627][T29851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.395646][T29851] ? trace_irq_disable+0x37/0x100 [ 820.395663][T29851] ? clear_bhb_loop+0x60/0xb0 [ 820.395686][T29851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.395704][T29851] RIP: 0033:0x7f5f3e39aeb9 [ 820.395723][T29851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.395739][T29851] RSP: 002b:00007f5f3c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.395761][T29851] RAX: ffffffffffffffda RBX: 00007f5f3e615fa0 RCX: 00007f5f3e39aeb9 [ 820.395774][T29851] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 820.395786][T29851] RBP: 00007f5f3c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 820.395797][T29851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 820.395809][T29851] R13: 00007f5f3e616038 R14: 00007f5f3e615fa0 R15: 00007fffe0efadd8 [ 820.395842][T29851] [ 820.966304][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.008057][T29858] __nla_validate_parse: 4 callbacks suppressed [ 821.008080][T29858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6795'. [ 821.010449][T29853] ip6gretap1: entered promiscuous mode [ 821.073709][T29853] ip6gretap1: entered allmulticast mode [ 821.250085][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.264025][T29863] netlink: 'syz.0.6798': attribute type 11 has an invalid length. [ 821.347384][T29875] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6799'. [ 821.428410][T29880] netlink: 'syz.2.6801': attribute type 1 has an invalid length. [ 821.489728][T29887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6801'. [ 821.516295][T29869] syzkaller0: entered promiscuous mode [ 821.521834][T29869] syzkaller0: entered allmulticast mode [ 821.551246][ T7235] lec:lec_start_xmit: lec0:No lecd attached [ 821.676882][T29887] bond4: (slave bridge6): making interface the new active one [ 821.705069][T29887] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 821.778740][T29888] bond4: (slave bridge7): Enslaving as an active interface with a down link [ 821.859250][T29891] macvlan0: entered promiscuous mode [ 821.874670][T29891] macvlan0: entered allmulticast mode [ 821.893283][T29891] bond4: entered promiscuous mode [ 821.915371][T29891] bridge6: entered promiscuous mode [ 821.923274][T29891] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 821.935503][T29891] bond4: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 821.954372][T29891] bond4: left promiscuous mode [ 821.959281][T29891] bridge6: left promiscuous mode [ 822.186002][T29908] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6806'. [ 822.208095][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.244094][T29914] netlink: 'syz.1.6808': attribute type 1 has an invalid length. [ 822.287334][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.333603][T29918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6808'. [ 822.404145][T29923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6808'. [ 822.509777][T29914] bond6: entered promiscuous mode [ 822.519549][T29914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 822.545143][T29927] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6811'. [ 822.569675][T29927] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6811'. [ 822.672616][T12123] hid-generic 0005:0006:5508.0001: item fetching failed at offset 0/1 [ 822.682185][T29914] bond6: (slave bridge5): making interface the new active one [ 822.701946][T12123] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22 [ 822.806138][T29914] bridge5: entered promiscuous mode [ 822.812942][T29914] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 823.288453][T29919] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6806'. [ 823.312567][T29919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6806'. [ 823.333883][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.399461][T29944] openvswitch: netlink: Flow actions attr not present in new flow. [ 823.758835][T29966] geneve2: entered promiscuous mode [ 823.772290][T29966] geneve2: entered allmulticast mode [ 824.396219][ T6891] net_ratelimit: 1 callbacks suppressed [ 824.396243][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.695864][T30011] netlink: 'syz.4.6834': attribute type 41 has an invalid length. [ 825.404798][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.523723][T30057] tunl0: entered promiscuous mode [ 825.910634][T30078] lo speed is unknown, defaulting to 1000 [ 826.019950][T30081] __nla_validate_parse: 5 callbacks suppressed [ 826.019971][T30081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6856'. [ 826.260955][T30086] lo speed is unknown, defaulting to 1000 [ 826.344376][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'. [ 826.436442][T30093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6861'. [ 826.454451][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.465844][T30078] wg1 speed is unknown, defaulting to 1000 [ 826.496695][T30093] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6861'. [ 826.964988][T30110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 826.972384][T30110] IPv6: NLM_F_CREATE should be set when creating new route [ 827.003972][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5450 ms [ 827.012039][ C0] lec:lec_tx_timeout: lec0 [ 827.084953][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.483827][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.808199][T30117] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6870'. [ 827.866933][T30086] wg1 speed is unknown, defaulting to 1000 [ 828.388137][T30156] netlink: 'syz.0.6877': attribute type 4 has an invalid length. [ 828.525628][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.897882][T30180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.287033][T30201] netlink: 'syz.3.6886': attribute type 1 has an invalid length. [ 829.367761][T30201] bond6: entered promiscuous mode [ 829.465794][T30201] bond6: entered allmulticast mode [ 829.471620][T30201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 829.574456][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.766231][T30227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6890'. [ 829.805144][T30227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6890'. [ 829.856263][T30239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6890'. [ 829.934283][T30236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6893'. [ 830.069602][T30245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6894'. [ 830.107801][T30245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.124198][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.132465][T30245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.154264][T30245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.202227][T30258] syzkaller1: entered promiscuous mode [ 830.209116][T30258] syzkaller1: entered allmulticast mode [ 830.451763][T30267] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.604153][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.613756][T30274] tipc: Enabling of bearer rejected, failed to enable media [ 831.421109][T30313] can: request_module (can-proto-5) failed. [ 831.654055][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.704987][T30328] __nla_validate_parse: 4 callbacks suppressed [ 831.705009][T30328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6923'. [ 831.787046][T30328] bond0: entered promiscuous mode [ 831.805414][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.818697][T30328] bond_slave_0: entered promiscuous mode [ 831.835880][T30328] bond_slave_1: entered promiscuous mode [ 831.844795][T30333] Cannot find set identified by id 3 to match [ 831.866088][T30328] bond0: left promiscuous mode [ 831.870923][T30328] bond_slave_0: left promiscuous mode [ 831.878883][T30328] bond_slave_1: left promiscuous mode [ 831.939058][T30336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6926'. [ 832.345708][T30352] lo speed is unknown, defaulting to 1000 [ 832.375912][T30365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6937'. [ 832.377744][T30366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6935'. [ 832.684651][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.858102][T30352] wg1 speed is unknown, defaulting to 1000 [ 832.956082][T30384] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 833.233996][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6946'. [ 833.248515][T30403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6946'. [ 833.269523][T30403] netlink: 'syz.4.6946': attribute type 13 has an invalid length. [ 834.033321][T30431] tipc: Started in network mode [ 834.058065][T30431] tipc: Node identity , cluster identity 4711 [ 834.085148][T30431] tipc: Failed to obtain node identity [ 834.100992][T30431] tipc: Enabling of bearer rejected, failed to enable media [ 834.144919][T30438] lo speed is unknown, defaulting to 1000 [ 834.341052][T30447] lo speed is unknown, defaulting to 1000 [ 834.764874][ T6891] net_ratelimit: 10 callbacks suppressed [ 834.764899][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.860617][T30438] wg1 speed is unknown, defaulting to 1000 [ 835.153044][T30471] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 835.318127][T30477] netlink: 'syz.4.6965': attribute type 1 has an invalid length. [ 835.519211][T30447] wg1 speed is unknown, defaulting to 1000 [ 835.804961][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.025037][T30498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6972'. [ 836.211989][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.282818][T30506] syzkaller0: entered promiscuous mode [ 836.290128][T30506] syzkaller0: entered allmulticast mode [ 836.526079][T30520] netlink: 'syz.1.6978': attribute type 30 has an invalid length. [ 836.608863][T30525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6980'. [ 836.659335][T30529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.668670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.722807][T30529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.731567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.732607][T30536] netlink: 'syz.2.6982': attribute type 1 has an invalid length. [ 836.777634][T30529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.786778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.803254][T30529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.620664][T30536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 839.629939][T30536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6982'. [ 839.872169][T30574] bond7: entered promiscuous mode [ 839.970938][T30582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6990'. [ 840.031166][T30582] netlink: 488 bytes leftover after parsing attributes in process `syz.3.6990'. [ 840.044107][ T6891] net_ratelimit: 63 callbacks suppressed [ 840.044131][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.076585][T30582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6990'. [ 840.246492][T30597] netlink: 'syz.0.6992': attribute type 4 has an invalid length. [ 840.620157][T30614] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6993'. [ 840.725374][T30620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.865864][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7002'. [ 840.982100][T30627] lo speed is unknown, defaulting to 1000 [ 841.020467][T30632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7004'. [ 841.040476][T30633] geneve3: entered promiscuous mode [ 841.046000][T30633] geneve3: entered allmulticast mode [ 841.084010][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.171057][T30636] sctp: [Deprecated]: syz.3.7005 (pid 30636) Use of int in max_burst socket option deprecated. [ 841.171057][T30636] Use struct sctp_assoc_value instead [ 841.197548][T30627] wg1 speed is unknown, defaulting to 1000 [ 841.406077][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.935067][T30664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7015'. [ 842.012580][T30668] lo speed is unknown, defaulting to 1000 [ 842.056403][T30672] xfrm0: entered promiscuous mode [ 842.085293][T30672] xfrm0: entered allmulticast mode [ 842.126843][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.143783][T30660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7017'. [ 842.255914][T30673] lo speed is unknown, defaulting to 1000 [ 842.283872][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.491878][T30685] gre1: entered allmulticast mode [ 842.522336][T30668] wg1 speed is unknown, defaulting to 1000 [ 843.164169][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.374221][T30673] wg1 speed is unknown, defaulting to 1000 [ 844.205145][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.258366][T30725] siw: device registration error -23 [ 844.677464][T30742] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 845.254246][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.324342][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.284184][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.683946][T25808] Bluetooth: hci5: command 0x0406 tx timeout [ 847.325220][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.364042][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.372516][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.404196][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.444319][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.005595][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.404661][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.484718][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.524211][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.564568][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.446860][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.604373][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.644278][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.694155][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.923902][T25808] Bluetooth: hci1: command 0x0406 tx timeout [ 857.487542][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.725069][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.765128][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.804307][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.966572][T12124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.975312][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.986306][T29345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.995710][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.844109][T12126] net_ratelimit: 1 callbacks suppressed [ 860.844133][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.884345][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.924294][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.004389][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.964597][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.004078][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.085318][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.046015][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.054210][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.083991][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.125381][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.085502][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.164067][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.204962][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.213125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.225434][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 870.231513][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 870.239090][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.247940][T24605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.244191][ T5939] net_ratelimit: 2 callbacks suppressed [ 871.244207][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.294294][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.324011][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.332335][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.364156][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.685804][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.327360][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.404080][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.963552][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 875.971609][ C0] lec:lec_tx_timeout: lec0 [ 876.363788][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.444266][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.485374][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.524322][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.404187][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.564060][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.605162][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.643800][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.448566][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.684173][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.725049][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.764027][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.924080][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.484118][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.803757][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.146769][ T7235] lec:lec_start_xmit: lec0:No lecd attached [ 886.844669][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.883875][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.523750][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.924014][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.964276][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.014056][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.153764][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 891.161874][ C0] lec:lec_tx_timeout: lec0 [ 891.564148][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.043780][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.085202][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.123857][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.524344][T19670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.604246][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.165531][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.175262][T29345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.184481][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.194841][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.204179][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.577203][T30755] __nla_validate_parse: 14 callbacks suppressed [ 896.577229][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7041'. [ 896.625990][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7041'. [ 896.644931][T30755] netlink: 'syz.3.7041': attribute type 15 has an invalid length. [ 896.847965][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'. [ 896.877346][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'. [ 897.244033][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.325449][T30805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7055'. [ 897.352155][T30805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7055'. [ 897.530937][T30815] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7059'. [ 897.542183][T30811] netlink: 'syz.2.7057': attribute type 10 has an invalid length. [ 897.550968][T30811] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7057'. [ 897.637911][T30818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7060'. [ 897.644309][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.974596][T30829] x_tables: ip_tables: osf match: only valid for protocol 6 [ 898.010392][T30829] openvswitch: netlink: Missing valid actions attribute. [ 898.024801][T30829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.102102][T30827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.115243][T30827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.294065][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.297285][T30827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.334707][T30827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.391592][T30836] netlink: 'syz.1.7065': attribute type 13 has an invalid length. [ 898.573997][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.664564][T30841] openvswitch: netlink: Tunnel attr 5 has unexpected len 8 expected 0 [ 898.688110][T30827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.704352][T30827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.737095][T30836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7065'. [ 898.838134][T30827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.861941][T30827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.109967][ T803] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.153555][ T803] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.187442][ T803] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.196426][ T803] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.206412][T30855] openvswitch: netlink: Actions may not be safe on all matching packets [ 899.241774][T29345] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.251939][T29345] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.271338][T29345] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.290091][T29345] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.328321][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.403917][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.969102][T30880] gre0: entered promiscuous mode [ 899.980426][T30880] gre0: entered allmulticast mode [ 900.542365][T12123] IPVS: starting estimator thread 0... [ 900.656378][T30905] IPVS: using max 25 ests per chain, 60000 per kthread [ 901.694862][T30941] siw: device registration error -23 [ 901.718031][T30944] geneve2: entered promiscuous mode [ 901.768292][T30941] __nla_validate_parse: 9 callbacks suppressed [ 901.768317][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7094'. [ 901.911167][T30949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7097'. [ 902.317462][T30966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7102'. [ 902.454128][T12126] net_ratelimit: 3 callbacks suppressed [ 902.454148][T12126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.666507][T30974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7104'. [ 902.689727][T30974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 902.930023][T30983] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 902.999039][T30983] bridge3: entered allmulticast mode [ 903.081195][T30989] vlan1: entered allmulticast mode [ 903.094184][T30989] team0: entered allmulticast mode [ 903.104950][T30989] team_slave_0: entered allmulticast mode [ 903.121068][T30989] team_slave_1: entered allmulticast mode [ 903.236992][T30993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7112'. [ 903.426742][T30999] netlink: 'syz.1.7114': attribute type 10 has an invalid length. [ 903.436939][T30999] bond0: (slave wlan1): Opening slave failed [ 903.484207][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.500403][T31006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7115'. [ 903.571838][T31006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7115'. [ 903.726012][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.124117][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.218416][T31026] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7121'. [ 904.374346][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.484568][T12123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.525590][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.613135][T31042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7123'. [ 904.642874][T31031] bond0: option miimon: invalid value (18446744073709551607) [ 904.660365][T31031] bond0: option miimon: allowed values 0 - 2147483647 [ 904.677015][T31031] bond0 (unregistering): Released all slaves [ 904.705669][T31049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7127'. [ 905.218639][T31062] batadv1: entered promiscuous mode [ 905.229560][T31062] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 905.376944][T31066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.396818][T31066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.417453][T31066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.486434][T31066] netlink: 'syz.1.7131': attribute type 4 has an invalid length. [ 905.521863][ T30] audit: type=1107 audit(1770430856.923:71): pid=31072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 905.558678][T31073] tipc: Started in network mode [ 905.577391][T31073] tipc: Node identity 02da682ef216, cluster identity 4711 [ 905.585829][T31073] tipc: Enabled bearer , priority 0 [ 905.634732][T31073] syzkaller0: entered promiscuous mode [ 905.640425][T31073] syzkaller0: entered allmulticast mode [ 905.696077][T31070] tipc: Resetting bearer [ 905.739824][T31070] tipc: Disabling bearer [ 905.762444][T31085] syzkaller0: entered promiscuous mode [ 905.768491][T31085] syzkaller0: entered allmulticast mode [ 906.017841][T31095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 906.140262][T31101] bond1: (slave veth7): Enslaving as an active interface with an up link [ 906.161147][T31110] gretap2: entered promiscuous mode [ 906.792099][T31146] lo speed is unknown, defaulting to 1000 [ 906.835413][T31150] __nla_validate_parse: 6 callbacks suppressed [ 906.835438][T31150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7155'. [ 906.878592][T31150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7155'. [ 906.971681][T31147] netlink: 'syz.4.7154': attribute type 1 has an invalid length. [ 907.377907][T31147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 907.621207][T31160] lo speed is unknown, defaulting to 1000 [ 907.766088][T31146] wg1 speed is unknown, defaulting to 1000 [ 908.262701][T31160] wg1 speed is unknown, defaulting to 1000 [ 908.665818][T31203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7167'. [ 908.802224][T31206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7169'. [ 908.834411][T31206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7169'. [ 909.464086][ T30] audit: type=1800 audit(1770430860.873:72): pid=31233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7173" name="memory.events" dev="tmpfs" ino=1548 res=0 errno=0 [ 909.549953][T31233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.655426][T31223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 909.829213][T31246] lo speed is unknown, defaulting to 1000 [ 909.981311][T31246] wg1 speed is unknown, defaulting to 1000 [ 910.313181][T31254] erspan0: entered promiscuous mode [ 910.342961][T31254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7182'. [ 910.514615][T31258] bond3: entered promiscuous mode [ 910.532350][T31261] vcan1: entered promiscuous mode [ 910.537882][T31261] vcan1: entered allmulticast mode [ 910.545615][T31261] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 910.559722][T31261] bond3: (slave vcan1): Error -95 calling set_mac_address [ 910.631643][T31277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7189'. [ 910.781476][T31270] bridge_slave_0: left allmulticast mode [ 910.813474][T31270] bridge_slave_0: left promiscuous mode [ 910.836720][T31270] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.882897][T31270] team0: Port device team_slave_0 removed [ 910.898482][T31270] team0: Port device team_slave_1 removed [ 910.906584][T31270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.915475][T31270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.926794][T31270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.935017][T31270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.946133][T31270] net_ratelimit: 8 callbacks suppressed [ 910.946153][T31270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 910.970769][T31281] syzkaller1: entered promiscuous mode [ 910.983906][T31281] syzkaller1: entered allmulticast mode [ 911.018350][T12123] syz0: Port: 1 Link DOWN [ 911.082593][T31287] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7191'. [ 911.115712][T31287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7191'. [ 911.133808][T31287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7191'. [ 911.845545][T31315] __nla_validate_parse: 2 callbacks suppressed [ 911.845567][T31315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7199'. [ 911.866341][T31315] netlink: 'syz.0.7199': attribute type 1 has an invalid length. [ 911.874377][T31315] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7199'. [ 912.250647][T31318] netlink: 'syz.2.7200': attribute type 1 has an invalid length. [ 912.824596][T31330] hashlimit_mt_check_common: 23 callbacks suppressed [ 912.826239][T31330] xt_hashlimit: max too large, truncated to 1048576 [ 912.877975][T31330] netlink: 'syz.2.7204': attribute type 4 has an invalid length. [ 912.910741][T31332] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7205'. [ 912.917813][T31330] netlink: 'syz.2.7204': attribute type 4 has an invalid length. [ 912.930828][T31332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7205'. [ 912.954358][T31332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7205'. [ 912.999003][T31330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7204'. [ 913.042244][T31334] macsec0: entered promiscuous mode [ 913.063559][T31334] macsec0: entered allmulticast mode [ 913.332952][T31341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7209'. [ 913.646392][T31358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7212'. [ 913.656150][T31359] batadv_slave_0: entered promiscuous mode [ 913.676460][T31361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7215'. [ 913.691419][T31359] netlink: 'syz.0.7214': attribute type 2 has an invalid length. [ 913.796094][T31361] veth1_to_hsr: entered promiscuous mode [ 913.817856][T31361] macvtap1: entered promiscuous mode [ 913.825646][T31361] macvtap1: entered allmulticast mode [ 913.833869][T31361] veth1_to_hsr: entered allmulticast mode [ 913.835291][T31371] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7217'. [ 913.981142][T31376] netlink: 'syz.3.7219': attribute type 2 has an invalid length. [ 914.025401][T31376] : entered promiscuous mode [ 914.042201][T31380] netlink: 'syz.3.7219': attribute type 2 has an invalid length. [ 914.061225][T31380] : left promiscuous mode [ 914.337626][T31395] erspan0: entered promiscuous mode [ 914.822140][T31421] lo speed is unknown, defaulting to 1000 [ 914.967499][T31417] lo: Caught tx_queue_len zero misconfig [ 915.031847][T31434] lo speed is unknown, defaulting to 1000 [ 915.248096][T31437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 915.312992][T31439] bond5: (slave veth7): Enslaving as an active interface with an up link [ 915.322351][T31421] wg1 speed is unknown, defaulting to 1000 [ 915.502765][T31441] lo speed is unknown, defaulting to 1000 [ 915.560504][T31445] syzkaller0: entered promiscuous mode [ 915.567667][T31445] syzkaller0: entered allmulticast mode [ 915.670582][T31454] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 915.824528][T31434] wg1 speed is unknown, defaulting to 1000 [ 916.165088][T31473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 916.414650][T31441] wg1 speed is unknown, defaulting to 1000 [ 916.672421][T31491] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 917.101833][T31501] lo speed is unknown, defaulting to 1000 [ 917.230692][T31505] __nla_validate_parse: 8 callbacks suppressed [ 917.230714][T31505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7255'. [ 917.450081][T31509] lo speed is unknown, defaulting to 1000 [ 917.477188][T31507] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 917.530030][T31512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.652772][T31514] ip6gre1: entered promiscuous mode [ 917.711248][T31501] wg1 speed is unknown, defaulting to 1000 [ 917.775439][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7259'. [ 917.926221][T31525] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7262'. [ 918.330359][T31509] wg1 speed is unknown, defaulting to 1000 [ 918.653137][T31549] syzkaller0: entered promiscuous mode [ 918.659133][T31549] syzkaller0: entered allmulticast mode [ 918.675892][T31548] syzkaller0: entered promiscuous mode [ 918.681739][T31548] syzkaller0: entered allmulticast mode [ 918.910170][T31553] x_tables: duplicate underflow at hook 3 [ 919.086807][T31560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7270'. [ 919.316194][T31570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7271'. [ 919.317604][T31573] Bluetooth: MGMT ver 1.23 [ 919.436353][T31580] netlink: 'syz.4.7271': attribute type 23 has an invalid length. [ 919.444960][T31580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7271'. [ 919.506146][T31583] dvmrp6: entered allmulticast mode [ 919.745540][T31600] netlink: 'syz.0.7277': attribute type 1 has an invalid length. [ 919.944185][T31593] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 920.612641][T31618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7281'. [ 920.670296][T31621] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7281'. [ 921.395341][T31609] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 921.454308][T31614] syzkaller0: entered promiscuous mode [ 921.474026][T31614] syzkaller0: entered allmulticast mode [ 921.492924][T31630] tipc: Started in network mode [ 921.507493][T31630] tipc: Node identity 0a06c675ed92, cluster identity 4711 [ 921.515859][T31630] tipc: Enabled bearer , priority 0 [ 921.522910][T31631] syzkaller0: entered promiscuous mode [ 921.545743][T31631] syzkaller0: entered allmulticast mode [ 921.590741][T31649] xt_l2tp: v2 doesn't support IP mode [ 921.619861][T31649] netlink: 'syz.4.7289': attribute type 8 has an invalid length. [ 921.636703][T31649] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.7289'. [ 921.648908][T31649] delete_channel: no stack [ 921.657889][T31631] tipc: Resetting bearer [ 921.695967][T31631] tipc: Disabling bearer [ 921.782071][T31651] syzkaller0: entered allmulticast mode [ 921.936161][T31666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7295'. [ 922.312732][T31682] __nla_validate_parse: 1 callbacks suppressed [ 922.312753][T31682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7301'. [ 922.329401][T31681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7301'. [ 922.429245][T31681] lo speed is unknown, defaulting to 1000 [ 922.457606][T31689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7303'. [ 922.515792][T31689] 8021q: adding VLAN 0 to HW filter on device bond6 [ 922.554353][T31689] bond6: (slave veth9): Enslaving as an active interface with an up link [ 922.831983][T31703] tipc: Enabling of bearer rejected, media not registered [ 922.871656][T31681] wg1 speed is unknown, defaulting to 1000 [ 922.876259][T31707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7309'. [ 922.897023][T31707] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7309'. [ 922.926105][T31703] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.939600][T31711] netlink: 'syz.1.7307': attribute type 16 has an invalid length. [ 922.950858][T31703] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.964046][T31711] netlink: 'syz.1.7307': attribute type 17 has an invalid length. [ 922.971917][T31711] netlink: 'syz.1.7307': attribute type 27 has an invalid length. [ 923.333986][T31729] netlink: 'syz.3.7314': attribute type 3 has an invalid length. [ 923.341992][T31729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7314'. [ 923.504418][T31731] syzkaller0: entered promiscuous mode [ 923.510176][T31731] syzkaller0: entered allmulticast mode [ 923.883320][T31751] tipc: Enabled bearer , priority 0 [ 923.913808][T31751] syzkaller0: entered promiscuous mode [ 923.919330][T31751] syzkaller0: entered allmulticast mode [ 923.937215][T31751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7320'. [ 923.968327][T31751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7320'. [ 923.986080][T31751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7320'. [ 924.038215][T31756] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7320'. [ 924.102784][T31750] tipc: Resetting bearer [ 924.189627][T31750] tipc: Disabling bearer [ 924.412228][T31768] syzkaller0: entered promiscuous mode [ 924.444099][T31768] syzkaller0: entered allmulticast mode [ 924.742688][T31785] geneve2: entered promiscuous mode [ 924.864012][ T803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.877168][ T803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.908562][ T803] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.928374][ T803] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.976322][T31797] syzkaller1: entered promiscuous mode [ 925.013886][T31797] syzkaller1: entered allmulticast mode [ 925.552076][T31822] openvswitch: netlink: Flow actions attr not present in new flow. [ 925.690280][T31827] netlink: 'syz.2.7343': attribute type 1 has an invalid length. [ 925.700118][T31828] netlink: 'syz.2.7343': attribute type 1 has an invalid length. [ 926.132709][T31851] netlink: 'syz.1.7353': attribute type 83 has an invalid length. [ 926.282510][T31857] lo speed is unknown, defaulting to 1000 [ 926.288692][T31864] lo: Caught tx_queue_len zero misconfig [ 926.345909][T31861] xt_hashlimit: size too large, truncated to 1048576 [ 926.401700][T31869] ¾x9ÿ: renamed from bridge_slave_0 [ 926.454782][T31861] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 926.730623][T31882] syzkaller0: entered promiscuous mode [ 926.756159][T31882] syzkaller0: entered allmulticast mode [ 926.837326][T31857] wg1 speed is unknown, defaulting to 1000 [ 927.331228][T31908] tipc: Enabled bearer , priority 0 [ 927.496470][T31908] syzkaller0: entered promiscuous mode [ 927.502084][T31908] syzkaller0: entered allmulticast mode [ 927.508543][T31908] tipc: Resetting bearer [ 927.592857][T31907] tipc: Resetting bearer [ 927.650163][T31916] __nla_validate_parse: 13 callbacks suppressed [ 927.650189][T31916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7373'. [ 928.202282][T31932] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.7376'. [ 928.331517][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7377'. [ 928.342261][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7377'. [ 930.180405][T31907] tipc: Disabling bearer [ 930.189630][T31915] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 930.322385][T31943] pim6reg: entered allmulticast mode [ 930.458633][T31946] tipc: MTU too low for tipc bearer [ 930.717069][T31969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7388'. [ 930.726439][T31969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7388'. [ 930.747272][T31966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7386'. [ 930.916558][T31976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 930.978247][T31986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7391'. [ 931.007147][T31990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7393'. [ 931.020233][T31984] tap0: tun_chr_ioctl cmd 1074025673 [ 931.026537][T31985] tap0: tun_chr_ioctl cmd 2148553947 [ 931.067727][T31990] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 931.124694][T31983] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 931.180774][T31992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7394'. [ 931.188585][T31983] macvlan2: entered promiscuous mode [ 931.205591][T31983] macvlan2: entered allmulticast mode [ 931.212306][T31983] bond9: entered promiscuous mode [ 931.227789][T31983] bridge4: entered promiscuous mode [ 931.233263][T31983] bridge5: entered promiscuous mode [ 931.255498][T31983] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 931.264506][T31983] bond9: left promiscuous mode [ 931.278869][T31983] bridge4: left promiscuous mode [ 931.284798][T31983] bridge5: left promiscuous mode [ 931.329197][T32001] netlink: 'syz.1.7396': attribute type 4 has an invalid length. [ 931.345741][T31997] lo speed is unknown, defaulting to 1000 [ 931.364004][T32001] netlink: 'syz.1.7396': attribute type 4 has an invalid length. [ 931.657982][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.674066][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 931.680861][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 931.701296][T32013] lo speed is unknown, defaulting to 1000 [ 931.772741][T31997] wg1 speed is unknown, defaulting to 1000 [ 931.774726][T32016] netlink: 'syz.4.7402': attribute type 10 has an invalid length. [ 932.070766][T32023] netlink: 'syz.2.7403': attribute type 1 has an invalid length. [ 932.135106][T32013] wg1 speed is unknown, defaulting to 1000 [ 932.215084][T32023] bond7: entered promiscuous mode [ 932.220536][T32023] 8021q: adding VLAN 0 to HW filter on device bond7 [ 932.259486][T32030] bond7: entered allmulticast mode [ 932.723284][T32032] __nla_validate_parse: 12 callbacks suppressed [ 932.723310][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.762124][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.789408][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.804745][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.831417][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.840844][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.871429][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.883645][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.921130][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 932.950715][T32032] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 933.018817][T32032] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.405015][T32032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.434983][T32032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.785506][T32034] bond7: (slave bridge9): making interface the new active one [ 933.793107][T32034] bridge9: entered promiscuous mode [ 933.804150][T32034] bridge9: entered allmulticast mode [ 933.811732][T32034] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 933.822079][T32041] bridge0: entered allmulticast mode [ 933.908221][ T9344] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.917267][ T9344] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.926529][ T9344] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.938219][ T9344] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.950803][ T9344] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 933.978550][ T9344] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.004149][ T9344] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.016516][ T9344] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.470043][T32076] x_tables: duplicate underflow at hook 4 [ 934.501375][T32075] tipc: Enabled bearer , priority 0 [ 934.683223][T32075] tipc: Resetting bearer [ 934.690327][T32077] syzkaller0: entered promiscuous mode [ 934.736393][T32074] tipc: Resetting bearer [ 934.784897][T32074] tipc: Disabling bearer [ 934.821573][T32079] 8021q: adding VLAN 0 to HW filter on device bond10 [ 934.908104][T32079] bond10: (slave veth9): Enslaving as an active interface with an up link [ 935.397007][T32114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 935.749971][T32084] delete_channel: no stack [ 936.242655][T32124] bond4: (slave bond_slave_1): Device is not our slave [ 936.276800][T32124] bond4: option active_slave: invalid value (bond_slave_1) [ 936.333766][T32124] bond4 (unregistering): Released all slaves [ 936.462936][T24604] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.488710][T24604] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.501798][T24604] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.511447][T24604] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.667921][T32141] 8021q: adding VLAN 0 to HW filter on device bond8 [ 936.789096][T32146] bond8: (slave veth3): Enslaving as an active interface with an up link [ 936.944926][T32157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 937.003382][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 937.019585][ C0] lec:lec_tx_timeout: lec0 [ 937.066179][T32161] netlink: 'syz.3.7439': attribute type 2 has an invalid length. [ 937.722062][T32186] 8021q: adding VLAN 0 to HW filter on device bond8 [ 937.762933][T32187] delete_channel: no stack [ 937.779092][T32195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 937.869619][T32190] bond8: (slave veth11): Enslaving as an active interface with an up link [ 937.940083][T32197] __nla_validate_parse: 338 callbacks suppressed [ 937.940104][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7452'. [ 938.540830][T32214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7457'. [ 938.608789][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7458'. [ 938.630199][T32215] lo speed is unknown, defaulting to 1000 [ 938.998974][T32232] tipc: Started in network mode [ 939.023609][T32232] tipc: Node identity 1e5fdc2d7448, cluster identity 4711 [ 939.031709][T32232] tipc: Enabled bearer , priority 0 [ 939.043895][T32232] tipc: Enabling of bearer rejected, already enabled [ 939.104837][T32232] tipc: Enabling of bearer rejected, already enabled [ 939.159405][T32237] netlink: 'syz.0.7462': attribute type 23 has an invalid length. [ 939.167716][T32215] wg1 speed is unknown, defaulting to 1000 [ 939.178524][T32237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7462'. [ 939.191336][T32239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7463'. [ 939.216585][T32233] tipc: Disabling bearer [ 939.339139][T32242] xt_hashlimit: size too large, truncated to 1048576 [ 939.354984][T32242] xt_hashlimit: overflow, try lower: 0/0 [ 939.371090][T32245] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7464'. [ 939.376510][T32247] netlink: 'syz.0.7466': attribute type 21 has an invalid length. [ 939.382735][T32245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7464'. [ 939.398520][T32245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7464'. [ 939.470440][T32247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7466'. [ 939.538690][T32247] lo speed is unknown, defaulting to 1000 [ 939.684728][T32255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7468'. [ 939.822275][T32247] wg1 speed is unknown, defaulting to 1000 [ 940.012420][T32267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.191520][T32270] 8021q: adding VLAN 0 to HW filter on device bond9 [ 940.283869][T32272] bond9: (slave veth5): Enslaving as an active interface with an up link [ 940.402690][T32271] lo speed is unknown, defaulting to 1000 [ 940.787047][T32271] wg1 speed is unknown, defaulting to 1000 [ 941.111861][T32310] xt_NFQUEUE: number of total queues is 0 [ 941.412445][T32320] FAULT_INJECTION: forcing a failure. [ 941.412445][T32320] name failslab, interval 1, probability 0, space 0, times 0 [ 941.473480][T32320] CPU: 1 UID: 0 PID: 32320 Comm: syz.3.7487 Not tainted syzkaller #0 PREEMPT(full) [ 941.473511][T32320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 941.473523][T32320] Call Trace: [ 941.473532][T32320] [ 941.473541][T32320] dump_stack_lvl+0xe8/0x150 [ 941.473573][T32320] should_fail_ex+0x412/0x560 [ 941.473602][T32320] should_failslab+0xa8/0x100 [ 941.473634][T32320] __kmalloc_cache_noprof+0x83/0x6e0 [ 941.473653][T32320] ? __mutex_trylock_common+0x158/0x260 [ 941.473674][T32320] ? nf_ct_tmpl_alloc+0x7e/0x230 [ 941.473706][T32320] nf_ct_tmpl_alloc+0x7e/0x230 [ 941.473735][T32320] xt_ct_tg_check+0x231/0xa90 [ 941.473768][T32320] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 941.473794][T32320] ? xt_find_target+0x1f3/0x240 [ 941.473826][T32320] xt_check_target+0x3b5/0xa90 [ 941.473857][T32320] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 941.473885][T32320] ? __pfx_xt_check_target+0x10/0x10 [ 941.473926][T32320] ? xt_find_target+0x1f3/0x240 [ 941.473959][T32320] translate_table+0x184f/0x20b0 [ 941.474008][T32320] ? __pfx_translate_table+0x10/0x10 [ 941.474031][T32320] ? __might_fault+0xaf/0x130 [ 941.474060][T32320] ? __might_fault+0xaf/0x130 [ 941.474114][T32320] ? _copy_from_user+0x94/0xb0 [ 941.474149][T32320] do_ip6t_set_ctl+0x9fe/0xe10 [ 941.474180][T32320] ? rcu_is_watching+0x15/0xb0 [ 941.474202][T32320] ? trace_contention_end+0x39/0x100 [ 941.474224][T32320] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 941.474271][T32320] ? __pfx___mutex_lock+0x10/0x10 [ 941.474299][T32320] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 941.474335][T32320] ? __pfx_aa_sk_perm+0x10/0x10 [ 941.474366][T32320] nf_setsockopt+0x26f/0x290 [ 941.474396][T32320] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 941.474423][T32320] do_sock_setsockopt+0x17c/0x1b0 [ 941.474454][T32320] __x64_sys_setsockopt+0x13d/0x1b0 [ 941.474488][T32320] do_syscall_64+0xe2/0xf80 [ 941.474515][T32320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.474535][T32320] ? trace_irq_disable+0x37/0x100 [ 941.474554][T32320] ? clear_bhb_loop+0x60/0xb0 [ 941.474578][T32320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.474598][T32320] RIP: 0033:0x7f9a4499aeb9 [ 941.474625][T32320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.474643][T32320] RSP: 002b:00007f9a4587f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 941.474667][T32320] RAX: ffffffffffffffda RBX: 00007f9a44c15fa0 RCX: 00007f9a4499aeb9 [ 941.474682][T32320] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 941.474695][T32320] RBP: 00007f9a4587f090 R08: 0000000000000338 R09: 0000000000000000 [ 941.474709][T32320] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000002 [ 941.474722][T32320] R13: 00007f9a44c16038 R14: 00007f9a44c15fa0 R15: 00007fff54a12f98 [ 941.474757][T32320] [ 941.848498][T32324] netlink: 'syz.1.7489': attribute type 1 has an invalid length. [ 941.991060][T32331] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 942.002241][T32336] bridge0: port 3(syz_tun) entered blocking state [ 942.011737][T32336] bridge0: port 3(syz_tun) entered disabled state [ 942.022066][T32336] syz_tun: entered allmulticast mode [ 942.036012][T32336] syz_tun: entered promiscuous mode [ 942.120719][T32324] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 942.159444][T32331] macvlan1: entered promiscuous mode [ 942.165132][T32331] macvlan1: entered allmulticast mode [ 942.171378][T32331] bond10: entered promiscuous mode [ 942.176986][T32331] bridge6: entered promiscuous mode [ 942.182510][T32331] bridge7: entered promiscuous mode [ 942.188808][T32331] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 942.196988][T32331] bond10: left promiscuous mode [ 942.202113][T32331] bridge6: left promiscuous mode [ 942.207939][T32331] bridge7: left promiscuous mode [ 942.486789][T32359] lo speed is unknown, defaulting to 1000 [ 942.607693][T32373] FAULT_INJECTION: forcing a failure. [ 942.607693][T32373] name failslab, interval 1, probability 0, space 0, times 0 [ 942.625789][T32373] CPU: 1 UID: 0 PID: 32373 Comm: syz.2.7502 Not tainted syzkaller #0 PREEMPT(full) [ 942.625820][T32373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 942.625832][T32373] Call Trace: [ 942.625840][T32373] [ 942.625848][T32373] dump_stack_lvl+0xe8/0x150 [ 942.625880][T32373] should_fail_ex+0x412/0x560 [ 942.625912][T32373] should_failslab+0xa8/0x100 [ 942.625937][T32373] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 942.625960][T32373] ? nf_ct_ext_add+0x1b6/0x460 [ 942.625997][T32373] ? nf_ct_ext_add+0x1b6/0x460 [ 942.626027][T32373] krealloc_node_align_noprof+0x1ae/0x390 [ 942.626049][T32373] ? __kasan_kmalloc+0x93/0xb0 [ 942.626072][T32373] nf_ct_ext_add+0x1b6/0x460 [ 942.626107][T32373] nf_ct_ecache_ext_add+0x152/0x2e0 [ 942.626134][T32373] xt_ct_tg_check+0x2e0/0xa90 [ 942.626168][T32373] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 942.626198][T32373] ? xt_find_target+0x1f3/0x240 [ 942.626233][T32373] xt_check_target+0x3b5/0xa90 [ 942.626265][T32373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 942.626296][T32373] ? __pfx_xt_check_target+0x10/0x10 [ 942.626350][T32373] ? xt_find_target+0x1f3/0x240 [ 942.626386][T32373] translate_table+0x184f/0x20b0 [ 942.626434][T32373] ? __pfx_translate_table+0x10/0x10 [ 942.626457][T32373] ? __might_fault+0xaf/0x130 [ 942.626485][T32373] ? __might_fault+0xaf/0x130 [ 942.626531][T32373] ? _copy_from_user+0x94/0xb0 [ 942.626565][T32373] do_ip6t_set_ctl+0x9fe/0xe10 [ 942.626594][T32373] ? rcu_is_watching+0x15/0xb0 [ 942.626614][T32373] ? trace_contention_end+0x39/0x100 [ 942.626635][T32373] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 942.626678][T32373] ? __pfx___mutex_lock+0x10/0x10 [ 942.626712][T32373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 942.626746][T32373] ? __pfx_aa_sk_perm+0x10/0x10 [ 942.626774][T32373] nf_setsockopt+0x26f/0x290 [ 942.626803][T32373] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 942.626827][T32373] do_sock_setsockopt+0x17c/0x1b0 [ 942.626855][T32373] __x64_sys_setsockopt+0x13d/0x1b0 [ 942.626885][T32373] do_syscall_64+0xe2/0xf80 [ 942.626910][T32373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.626927][T32373] ? trace_irq_disable+0x37/0x100 [ 942.626946][T32373] ? clear_bhb_loop+0x60/0xb0 [ 942.626971][T32373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.626990][T32373] RIP: 0033:0x7f4eeb19aeb9 [ 942.627010][T32373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.627028][T32373] RSP: 002b:00007f4eec094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 942.627051][T32373] RAX: ffffffffffffffda RBX: 00007f4eeb415fa0 RCX: 00007f4eeb19aeb9 [ 942.627066][T32373] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 942.627079][T32373] RBP: 00007f4eec094090 R08: 0000000000000338 R09: 0000000000000000 [ 942.627092][T32373] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000002 [ 942.627104][T32373] R13: 00007f4eeb416038 R14: 00007f4eeb415fa0 R15: 00007fff0cc17e88 [ 942.627138][T32373] [ 942.993884][T32376] netlink: 'syz.1.7503': attribute type 1 has an invalid length. [ 943.055322][T32379] __nla_validate_parse: 10 callbacks suppressed [ 943.055344][T32379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7503'. [ 943.061964][T32376] 8021q: adding VLAN 0 to HW filter on device bond11 [ 943.112137][T32379] macvlan1: entered promiscuous mode [ 943.117781][T32379] macvlan1: entered allmulticast mode [ 943.138069][T32376] netlink: 'syz.1.7503': attribute type 12 has an invalid length. [ 943.148672][T32376] netlink: 'syz.1.7503': attribute type 5 has an invalid length. [ 943.156864][T32376] netlink: 'syz.1.7503': attribute type 2 has an invalid length. [ 943.165063][T32376] netlink: 'syz.1.7503': attribute type 7 has an invalid length. [ 943.173438][T32376] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7503'. [ 943.184271][T32381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7505'. [ 943.235698][T32381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7505'. [ 943.237881][ T9344] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.258715][ T9344] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.310940][T32359] wg1 speed is unknown, defaulting to 1000 [ 943.367295][ T9344] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.403133][ T9344] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.458248][T32390] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 943.520740][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7508'. [ 943.621998][T32403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7510'. [ 943.888198][T32408] netlink: 'syz.3.7511': attribute type 1 has an invalid length. [ 943.911749][T32412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7513'. [ 944.026039][T32408] tipc: Enabling of bearer rejected, failed to enable media [ 944.081423][T32412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.150063][T32413] syzkaller0: entered promiscuous mode [ 944.155951][T32413] syzkaller0: entered allmulticast mode [ 944.196062][T32414] bond0: (slave veth5): Enslaving as an active interface with an up link [ 944.494933][T32425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 944.495009][T32425] FAULT_INJECTION: forcing a failure. [ 944.495009][T32425] name failslab, interval 1, probability 0, space 0, times 0 [ 944.534997][T32425] CPU: 0 UID: 0 PID: 32425 Comm: syz.0.7515 Not tainted syzkaller #0 PREEMPT(full) [ 944.535028][T32425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 944.535041][T32425] Call Trace: [ 944.535050][T32425] [ 944.535059][T32425] dump_stack_lvl+0xe8/0x150 [ 944.535092][T32425] should_fail_ex+0x412/0x560 [ 944.535122][T32425] should_failslab+0xa8/0x100 [ 944.535147][T32425] __kvmalloc_node_noprof+0x166/0x8d0 [ 944.535170][T32425] ? static_key_slow_dec+0x3d/0x90 [ 944.535196][T32425] ? __nf_hook_entries_try_shrink+0x328/0x700 [ 944.535230][T32425] __nf_hook_entries_try_shrink+0x328/0x700 [ 944.535268][T32425] __nf_unregister_net_hook+0x4cc/0x6f0 [ 944.535304][T32425] nf_unregister_net_hooks+0xcb/0x140 [ 944.535331][T32425] nf_ct_netns_put+0x36d/0x520 [ 944.535358][T32425] xt_ct_tg_check+0x78d/0xa90 [ 944.535389][T32425] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 944.535415][T32425] ? xt_find_target+0x1f3/0x240 [ 944.535450][T32425] xt_check_target+0x3b5/0xa90 [ 944.535481][T32425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 944.535510][T32425] ? __pfx_xt_check_target+0x10/0x10 [ 944.535556][T32425] ? xt_find_target+0x1f3/0x240 [ 944.535590][T32425] translate_table+0x184f/0x20b0 [ 944.535641][T32425] ? __pfx_translate_table+0x10/0x10 [ 944.535665][T32425] ? __might_fault+0xaf/0x130 [ 944.535694][T32425] ? __might_fault+0xaf/0x130 [ 944.535742][T32425] ? _copy_from_user+0x94/0xb0 [ 944.535777][T32425] do_ip6t_set_ctl+0x9fe/0xe10 [ 944.535806][T32425] ? rcu_is_watching+0x15/0xb0 [ 944.535826][T32425] ? trace_contention_end+0x39/0x100 [ 944.535845][T32425] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 944.535888][T32425] ? __pfx___mutex_lock+0x10/0x10 [ 944.535914][T32425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 944.535957][T32425] ? __pfx_aa_sk_perm+0x10/0x10 [ 944.535988][T32425] nf_setsockopt+0x26f/0x290 [ 944.536021][T32425] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 944.536046][T32425] do_sock_setsockopt+0x17c/0x1b0 [ 944.536077][T32425] __x64_sys_setsockopt+0x13d/0x1b0 [ 944.536107][T32425] do_syscall_64+0xe2/0xf80 [ 944.536131][T32425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.536150][T32425] ? trace_irq_disable+0x37/0x100 [ 944.536169][T32425] ? clear_bhb_loop+0x60/0xb0 [ 944.536194][T32425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.536212][T32425] RIP: 0033:0x7f5734d9aeb9 [ 944.536231][T32425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.536249][T32425] RSP: 002b:00007f5735bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 944.536272][T32425] RAX: ffffffffffffffda RBX: 00007f5735015fa0 RCX: 00007f5734d9aeb9 [ 944.536287][T32425] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 944.536300][T32425] RBP: 00007f5735bb4090 R08: 0000000000000338 R09: 0000000000000000 [ 944.536313][T32425] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000002 [ 944.536326][T32425] R13: 00007f5735016038 R14: 00007f5735015fa0 R15: 00007fffbe992208 [ 944.536360][T32425] [ 945.325018][T32448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7522'. [ 945.800030][ T5144] block nbd2: Receive control failed (result -32) [ 945.937478][T32480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7531'. [ 945.951589][T32480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7531'. [ 945.961578][T32480] SET target dimension over the limit! [ 946.064857][T32485] netlink: 'syz.4.7533': attribute type 1 has an invalid length. [ 946.094928][T32486] netlink: zone id is out of range [ 946.100105][T32486] netlink: zone id is out of range [ 946.109575][T32486] netlink: zone id is out of range [ 946.118699][T32486] netlink: zone id is out of range [ 946.136476][T32486] netlink: zone id is out of range [ 946.174316][T32486] netlink: zone id is out of range [ 946.194530][T32486] netlink: zone id is out of range [ 946.227077][T32486] netlink: zone id is out of range [ 946.243851][T32486] netlink: zone id is out of range [ 946.249118][T32486] netlink: zone id is out of range [ 946.262642][T32490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 946.317335][T32490] bond4: (slave bond5): making interface the new active one [ 946.340952][T32490] bond4: (slave bond5): Enslaving as an active interface with an up link [ 946.451044][T32485] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 946.479093][T32496] 8021q: adding VLAN 0 to HW filter on device bond4 [ 946.526514][T32501] vlan2: entered promiscuous mode [ 946.563751][T32501] bond4: entered promiscuous mode [ 946.570788][T32501] bond5: entered promiscuous mode [ 947.277695][T32545] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 947.318705][T32543] lo speed is unknown, defaulting to 1000 [ 947.508588][T32549] netlink: 'syz.1.7543': attribute type 2 has an invalid length. [ 947.534653][T32554] lo speed is unknown, defaulting to 1000 [ 947.822518][T32562] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 948.294731][T32543] wg1 speed is unknown, defaulting to 1000 [ 948.449688][T32592] __nla_validate_parse: 15 callbacks suppressed [ 948.449711][T32592] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7550'. [ 948.468581][T32593] netlink: 'syz.4.7548': attribute type 2 has an invalid length. [ 948.477707][T32592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7550'. [ 948.497217][T32593] : entered promiscuous mode [ 948.504755][T32593] netlink: 'syz.4.7548': attribute type 2 has an invalid length. [ 948.607678][T32593] sctp: [Deprecated]: syz.4.7548 (pid 32593) Use of int in max_burst socket option deprecated. [ 948.607678][T32593] Use struct sctp_assoc_value instead [ 948.655204][T32591] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7549'. [ 948.664766][T32591] 0ªî{X¹¦: renamed from gretap0 [ 948.677899][T32591] 0ªî{X¹¦: entered allmulticast mode [ 948.686667][T32600] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7548'. [ 948.696537][T32600] netlink: 'syz.4.7548': attribute type 9 has an invalid length. [ 948.709282][T32597] netlink: 'syz.3.7549': attribute type 61 has an invalid length. [ 948.720034][T32600] netlink: 'syz.4.7548': attribute type 10 has an invalid length. [ 948.755845][T32554] wg1 speed is unknown, defaulting to 1000 [ 948.882898][T32605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7553'. [ 948.894282][T32605] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7553'. [ 948.908192][T32605] netlink: 41 bytes leftover after parsing attributes in process `syz.3.7553'. [ 948.917642][T32605] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7553'. [ 948.931330][T32605] netlink: 41 bytes leftover after parsing attributes in process `syz.3.7553'. [ 949.005915][T32608] netlink: 'syz.3.7554': attribute type 9 has an invalid length. [ 949.014843][T32608] netlink: 'syz.3.7554': attribute type 6 has an invalid length. [ 949.274734][T32611] syzkaller0: create flow: hash 338073483 index 1 [ 949.371052][T32609] syzkaller0: delete flow: hash 338073483 index 1 [ 950.774448][ T7235] lec:lec_start_xmit: lec0:No lecd attached [ 950.929601][ T5144] Bluetooth: hci3: command tx timeout [ 950.955059][T32642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7564'. [ 952.345618][T32668] netlink: 'syz.2.7571': attribute type 1 has an invalid length. [ 952.994202][T32704] netlink: 'syz.0.7579': attribute type 1 has an invalid length. [ 953.026210][T32704] vlan2: entered allmulticast mode [ 953.034402][T32704] bridge_slave_0: entered allmulticast mode [ 953.123199][T32712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 953.199841][T32710] netlink: 'syz.1.7580': attribute type 3 has an invalid length. [ 953.215305][T32717] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 953.231646][T32717] pim6reg1: linktype set to 805 [ 953.704190][T32748] __nla_validate_parse: 12 callbacks suppressed [ 953.704214][T32748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7592'. [ 953.749783][T32741] syzkaller0: entered promiscuous mode [ 953.756423][T32741] syzkaller0: entered allmulticast mode [ 953.772491][T32748] bond0: Caught tx_queue_len zero misconfig [ 955.973573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 955.981674][ C0] lec:lec_tx_timeout: lec0 [ 956.418609][ T317] net_ratelimit: 391 callbacks suppressed [ 956.418642][ T317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.801815][ T342] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7606'. [ 956.827507][ T349] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7611'. [ 956.835532][ T342] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7606'. [ 956.859644][ T352] netlink: 'syz.0.7609': attribute type 1 has an invalid length. [ 957.159288][ T364] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7614'. [ 957.217749][ T371] x_tables: duplicate underflow at hook 3 [ 957.325892][ T377] netlink: 'syz.0.7617': attribute type 10 has an invalid length. [ 957.360855][ T377] veth0_vlan: left promiscuous mode [ 957.381135][ T377] veth0_vlan: entered promiscuous mode [ 957.401494][ T377] team0: Device veth0_vlan failed to register rx_handler [ 957.559070][ T396] --map-set only usable from mangle table [ 957.695470][ T401] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7623'. [ 957.748554][ T407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7624'. [ 957.828407][ T407] 8021q: adding VLAN 0 to HW filter on device bond11 [ 957.836288][ T414] netlink: 'syz.2.7627': attribute type 10 has an invalid length. [ 957.941080][ T409] bond11: (slave veth11): Enslaving as an active interface with an up link [ 958.028246][ T417] lo speed is unknown, defaulting to 1000 [ 958.080186][ T423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7629'. [ 958.175623][ T427] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7631'. [ 958.208727][ T427] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.7631'. [ 958.223498][ T427] tc_dump_action: action bad kind [ 958.429764][ T417] wg1 speed is unknown, defaulting to 1000 [ 958.707077][ T449] tipc: Enabled bearer , priority 0 [ 958.723892][ T450] syzkaller0: entered promiscuous mode [ 958.729406][ T450] syzkaller0: entered allmulticast mode [ 958.997066][ T448] tipc: Resetting bearer [ 959.305098][ T448] tipc: Disabling bearer [ 959.538989][ T468] netlink: 'syz.2.7643': attribute type 1 has an invalid length. [ 959.563446][ T468] __nla_validate_parse: 1 callbacks suppressed [ 959.563466][ T468] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7643'. [ 959.584144][ T468] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7643'. [ 959.655096][ T468] netlink: 'syz.2.7643': attribute type 1 has an invalid length. [ 959.703891][ T468] netlink: 'syz.2.7643': attribute type 8 has an invalid length. [ 959.731756][ T468] netlink: 606 bytes leftover after parsing attributes in process `syz.2.7643'. [ 959.867100][ T481] gtp0: entered promiscuous mode [ 960.051716][ T491] tipc: Enabling of bearer rejected, failed to enable media [ 960.080503][ T495] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7652'. [ 960.195714][ T502] tipc: Enabled bearer , priority 0 [ 960.215979][ T502] syzkaller0: entered promiscuous mode [ 960.221507][ T502] syzkaller0: entered allmulticast mode [ 960.304727][ T509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7655'. [ 960.332127][ T507] tipc: Enabled bearer , priority 0 [ 960.389261][ T509] 8021q: adding VLAN 0 to HW filter on device bond10 [ 960.446957][ T512] syzkaller0: entered promiscuous mode [ 960.494690][ T512] syzkaller0: entered allmulticast mode [ 960.591075][ T516] bond10: (slave veth13): Enslaving as an active interface with an up link [ 960.617244][ T502] tipc: Resetting bearer [ 960.636795][ T501] tipc: Resetting bearer [ 960.677361][ T501] tipc: Disabling bearer [ 960.816660][ T526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7660'. [ 960.826051][ T526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7660'. [ 960.835652][ T526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7660'. [ 960.849714][ T490] tipc: Resetting bearer [ 960.976144][ T490] tipc: Disabling bearer [ 961.128445][ T541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7664'. [ 961.252684][ T546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7667'. [ 961.277415][ T546] netlink: 'syz.2.7667': attribute type 11 has an invalid length. [ 961.416148][ T555] netlink: 'syz.4.7668': attribute type 10 has an invalid length. [ 961.441007][ T556] netlink: 'syz.4.7668': attribute type 10 has an invalid length. [ 961.457676][ T563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.459746][ T555] netlink: 'syz.4.7668': attribute type 10 has an invalid length. [ 961.683102][ T567] lo speed is unknown, defaulting to 1000 [ 961.692859][ T570] netlink: 'syz.3.7674': attribute type 11 has an invalid length. [ 961.854131][ T582] ..0ªî{X¹¦: renamed from gretap0 [ 961.991549][ T582] ..0ªî{X¹¦: entered allmulticast mode [ 962.002073][ T582] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 962.105821][ T584] netlink: 'syz.3.7676': attribute type 21 has an invalid length. [ 962.194425][ T567] wg1 speed is unknown, defaulting to 1000 [ 962.699638][ T606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 962.778196][ T608] netlink: 'syz.3.7682': attribute type 21 has an invalid length. [ 962.823607][ T608] netlink: 'syz.3.7682': attribute type 4 has an invalid length. [ 963.696448][ T638] netlink: 'syz.2.7692': attribute type 10 has an invalid length. [ 963.829651][ T640] netlink: 'syz.3.7693': attribute type 7 has an invalid length. [ 963.864082][ T640] netlink: 'syz.3.7693': attribute type 8 has an invalid length. [ 963.898321][ T640] netlink: 'syz.3.7693': attribute type 8 has an invalid length. [ 963.925083][ T640] netlink: 'syz.3.7693': attribute type 4 has an invalid length. [ 963.948131][ T640] netlink: 'syz.3.7693': attribute type 7 has an invalid length. [ 963.979094][ T635] syzkaller1: entered promiscuous mode [ 963.995455][ T635] syzkaller1: entered allmulticast mode [ 964.148924][ T649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 964.352451][ T654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.484238][ T654] sctp: [Deprecated]: syz.3.7698 (pid 654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 964.484238][ T654] Use struct sctp_sack_info instead [ 964.528978][ T657] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 964.665009][ T664] tipc: Enabled bearer , priority 0 [ 964.709205][ T664] syzkaller0: entered promiscuous mode [ 964.722525][ T664] syzkaller0: entered allmulticast mode [ 964.747147][ T664] tipc: Resetting bearer [ 964.776002][ T670] __nla_validate_parse: 17 callbacks suppressed [ 964.776024][ T670] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7702'. [ 964.776631][ T663] tipc: Resetting bearer [ 964.879660][ T663] tipc: Disabling bearer [ 965.098893][ T677] lo speed is unknown, defaulting to 1000 [ 965.909899][ T677] wg1 speed is unknown, defaulting to 1000 [ 966.239699][ T715] netlink: 'syz.0.7716': attribute type 13 has an invalid length. [ 966.268886][ T715] ..0ªî{X¹¦: refused to change device tx_queue_len [ 966.295411][ T715] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 966.373026][ T715] syzkaller0: entered promiscuous mode [ 966.392703][ T715] syzkaller0: entered allmulticast mode [ 966.545085][ T719] tipc: Enabled bearer , priority 0 [ 966.580861][ T714] tipc: Resetting bearer [ 966.641016][ T714] tipc: Disabling bearer [ 966.874233][ T728] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7719'. [ 967.047279][ T728] block nbd3: server does not support multiple connections per device. [ 967.075453][ T728] block nbd3: shutting down sockets [ 967.098139][ T731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7719'. [ 967.568814][ T745] syzkaller0: entered promiscuous mode [ 967.608942][ T745] syzkaller0: entered allmulticast mode [ 967.662602][ T753] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7727'. [ 967.693239][ T753] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 969.586994][ T785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7735'. [ 971.111574][ T788] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 971.121600][ T788] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 971.132680][ T788] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 971.334645][ T804] geneve3: entered promiscuous mode [ 971.351113][ T804] geneve3: entered allmulticast mode [ 971.377420][T13240] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 971.401556][T13240] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 971.417550][T13240] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 971.429174][T13240] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 971.429178][ T801] lo speed is unknown, defaulting to 1000 [ 971.444057][ T809] syzkaller0: entered promiscuous mode [ 971.449943][ T809] syzkaller0: entered allmulticast mode [ 971.493508][ T810] lo speed is unknown, defaulting to 1000 [ 971.814819][ T827] tunl0: Caught tx_queue_len zero misconfig [ 971.837775][ T827] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 971.950379][ T836] netlink: 210768 bytes leftover after parsing attributes in process `syz.2.7748'. [ 971.956407][ T801] wg1 speed is unknown, defaulting to 1000 [ 972.413293][ T846] batadv_slave_1: entered promiscuous mode [ 972.421154][ T810] wg1 speed is unknown, defaulting to 1000 [ 972.594256][ T845] batadv_slave_1: left promiscuous mode [ 972.612509][ T859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7756'. [ 973.082374][ T872] tipc: Enabled bearer , priority 0 [ 973.097573][ T872] syzkaller0: entered promiscuous mode [ 973.103301][ T872] syzkaller0: entered allmulticast mode [ 973.117775][ T872] tipc: Resetting bearer [ 973.231902][T13768] bridge_slave_1: left allmulticast mode [ 973.251363][T13768] bridge_slave_1: left promiscuous mode [ 973.257290][T13768] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.267644][T13768] bridge_slave_0: left promiscuous mode [ 973.273619][T13768] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.738522][T13768] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 973.818565][ T888] sctp: [Deprecated]: syz.2.7766 (pid 888) Use of int in max_burst socket option. [ 973.818565][ T888] Use struct sctp_assoc_value instead [ 973.882399][T13768] gretap0 (unregistering): left promiscuous mode [ 973.905344][T13768] bond12 (unregistering): (slave gretap1): Releasing active interface [ 973.969705][T13768] geneve0 (unregistering): left promiscuous mode [ 973.984678][T13768] team0: Port device geneve0 removed [ 974.390548][T13768] bond9 (unregistering): (slave bridge4): Releasing active interface [ 974.438602][ T899] validate_nla: 1 callbacks suppressed [ 974.438617][ T899] netlink: 'syz.0.7767': attribute type 1 has an invalid length. [ 974.543929][ T901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7767'. [ 974.579423][T13768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.591289][T13768] bond_slave_0: left promiscuous mode [ 974.601769][T13768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.616278][T13768] bond_slave_1: left promiscuous mode [ 974.622349][T13768] bond0 (unregistering): Released all slaves [ 974.634009][T13768] bond1 (unregistering): (slave veth5): Releasing backup interface [ 974.644902][T13768] bond1 (unregistering): Released all slaves [ 974.660002][T13768] bond2 (unregistering): (slave veth7): Releasing backup interface [ 974.668956][T13768] bond2 (unregistering): Released all slaves [ 974.686468][T13768] bond3 (unregistering): Released all slaves [ 974.701510][T13768] bond4 (unregistering): Released all slaves [ 974.719784][T13768] bond5 (unregistering): Released all slaves [ 974.737060][T13768] bond6 (unregistering): Released all slaves [ 974.760148][T13768] bond7 (unregistering): (slave veth9): Releasing backup interface [ 974.771049][T13768] bond7 (unregistering): Released all slaves [ 974.785202][T13768] bond8 (unregistering): Released all slaves [ 974.798703][T13768] bond9 (unregistering): Released all slaves [ 974.812638][T13768] bond10 (unregistering): Released all slaves [ 974.833934][T13768] bond11 (unregistering): Released all slaves [ 974.849617][T13768] bond12 (unregistering): Released all slaves [ 974.877100][ T871] tipc: Resetting bearer [ 974.939920][ T871] tipc: Disabling bearer [ 974.985503][ T5888] tipc: Node number set to 3885287029 [ 975.099583][ T899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.115816][ T908] netlink: 'syz.4.7769': attribute type 21 has an invalid length. [ 975.151119][ T902] bond1: (slave dummy0): making interface the new active one [ 975.185968][ T902] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 975.222883][ T908] netlink: 'syz.4.7769': attribute type 1 has an invalid length. [ 975.237396][ T908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7769'. [ 975.360752][ T930] netlink: 'syz.0.7773': attribute type 1 has an invalid length. [ 975.369634][ T930] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7773'. [ 975.438395][ T936] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7774'. [ 975.450814][ T5888] IPVS: starting estimator thread 0... [ 975.544185][ T942] IPVS: using max 26 ests per chain, 62400 per kthread [ 975.548198][ T947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7776'. [ 975.622746][ T939] syzkaller0: entered promiscuous mode [ 975.628651][ T939] syzkaller0: entered allmulticast mode [ 975.900552][ T955] team0: Device gtp0 is of different type [ 976.060244][ T960] syzkaller0: entered promiscuous mode [ 976.065968][ T960] syzkaller0: entered allmulticast mode [ 976.452249][T13768] !: left promiscuous mode [ 976.491944][ T982] team0: Port device gtp0 added [ 976.563185][ T987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7784'. [ 976.798986][T13768] tipc: Disabling bearer [ 976.809200][T13768] tipc: Left network mode [ 976.899407][ T995] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7789'. [ 976.964404][ T998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7788'. [ 976.980373][ T999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 977.120112][ T995] nbd4: detected capacity change from 0 to 63 [ 977.164927][ T1007] block nbd4: NBD_DISCONNECT [ 977.170990][ T1007] block nbd4: Disconnected due to user request. [ 977.240894][ T1007] block nbd4: shutting down sockets [ 977.338589][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.346528][ T1021] lo speed is unknown, defaulting to 1000 [ 977.348389][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 977.355108][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.371215][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 977.379125][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.388695][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 977.396572][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.406112][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 977.426944][ T419] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.456944][ T1024] lo speed is unknown, defaulting to 1000 [ 977.464564][ T419] Buffer I/O error on dev nbd4, logical block 0, async page read [ 977.492303][ T419] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.550381][ T419] Buffer I/O error on dev nbd4, logical block 1, async page read [ 977.602726][ T419] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.806230][ T419] Buffer I/O error on dev nbd4, logical block 2, async page read [ 977.814281][ T419] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.825708][ T419] Buffer I/O error on dev nbd4, logical block 3, async page read [ 977.837021][ T419] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.862479][ T419] Buffer I/O error on dev nbd4, logical block 0, async page read [ 977.872451][ T1025] lo speed is unknown, defaulting to 1000 [ 977.884318][ T1021] wg1 speed is unknown, defaulting to 1000 [ 977.899165][ T419] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 977.937055][ T419] Buffer I/O error on dev nbd4, logical block 1, async page read [ 977.965488][ T419] ldm_validate_partition_table(): Disk read failed. [ 977.973124][ T419] Dev nbd4: unable to read RDB block 0 [ 978.005319][ T419] nbd4: unable to read partition table [ 978.030647][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7800'. [ 978.040580][ T1041] lo speed is unknown, defaulting to 1000 [ 978.052732][ T419] ldm_validate_partition_table(): Disk read failed. [ 978.070623][ T419] Dev nbd4: unable to read RDB block 0 [ 978.083886][ T419] nbd4: unable to read partition table [ 978.521219][ T1080] 8021q: adding VLAN 0 to HW filter on device bond12 [ 978.881347][ T1025] wg1 speed is unknown, defaulting to 1000 [ 978.899372][ T1024] wg1 speed is unknown, defaulting to 1000 [ 978.992659][ T1093] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7806'. [ 979.013541][ T1093] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7806'. [ 979.364321][ T1100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7808'. [ 979.394101][ T1100] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7808'. [ 979.414020][ T1100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7808'. [ 979.456911][ T1041] wg1 speed is unknown, defaulting to 1000 [ 979.752169][ T1112] syzkaller0: entered promiscuous mode [ 979.773723][ T1112] syzkaller0: entered allmulticast mode [ 979.851646][ T1117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 980.004234][T13768] team0: left promiscuous mode [ 980.013965][T13768] team_slave_0: left promiscuous mode [ 980.019606][T13768] team_slave_1: left promiscuous mode [ 980.103217][ T1130] openvswitch: netlink: IP tunnel dst address not specified [ 980.124066][T13768] hsr_slave_0: left promiscuous mode [ 980.142882][T13768] hsr_slave_1: left promiscuous mode [ 980.160044][T13768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.289488][T13768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.588781][T13768] team0 (unregistering): Port device team_slave_1 removed [ 980.609579][T13768] team0 (unregistering): Port device team_slave_0 removed [ 982.754205][ T1130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7815'. [ 982.763284][ T1133] dummy0: entered allmulticast mode [ 982.818261][ T1145] netlink: 'syz.1.7820': attribute type 29 has an invalid length. [ 982.960535][ T1152] syzkaller0: entered promiscuous mode [ 982.985017][ T1152] syzkaller0: entered allmulticast mode [ 983.059512][ T1152] netlink: 'syz.1.7822': attribute type 9 has an invalid length. [ 983.628347][ T1171] openvswitch: netlink: IP tunnel dst address not specified [ 983.847178][ T1182] netlink: 5768 bytes leftover after parsing attributes in process `syz.1.7827'. [ 983.857148][ T1182] openvswitch: netlink: Flow key attr not present in new flow. [ 984.203908][ T1197] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7831'. [ 984.594519][ T1217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7835'. [ 984.798078][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7836'. [ 984.970671][ T1236] lo speed is unknown, defaulting to 1000 [ 984.989043][ T1243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7840'. [ 985.320932][ T1258] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7843'. [ 985.341415][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7843'. [ 985.351789][ T1254] openvswitch: netlink: Missing key (keys=40, expected=80) [ 985.402488][T13768] IPVS: stop unused estimator thread 0... [ 985.716154][ T1236] wg1 speed is unknown, defaulting to 1000 [ 985.767444][ T1266] lo speed is unknown, defaulting to 1000 [ 986.199151][ T1277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7849'. [ 986.208817][ T1266] wg1 speed is unknown, defaulting to 1000 [ 986.455698][ T1282] netlink: 'syz.2.7850': attribute type 1 has an invalid length. [ 986.480957][ T1282] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7850'. [ 986.941219][ T1310] [ 986.943627][ T1310] ====================================================== [ 986.950661][ T1310] WARNING: possible circular locking dependency detected [ 986.957694][ T1310] syzkaller #0 Not tainted [ 986.962157][ T1310] ------------------------------------------------------ [ 986.969194][ T1310] syz.1.7855/1310 is trying to acquire lock: [ 986.975216][ T1310] ffffffff8fb28378 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 986.984749][ T1310] [ 986.984749][ T1310] but task is already holding lock: [ 986.992134][ T1310] ffffffff8fb28318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 987.001732][ T1310] [ 987.001732][ T1310] which lock already depends on the new lock. [ 987.001732][ T1310] [ 987.012138][ T1310] [ 987.012138][ T1310] the existing dependency chain (in reverse order) is: [ 987.021150][ T1310] [ 987.021150][ T1310] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 987.029058][ T1310] _raw_spin_lock_bh+0x36/0x50 [ 987.034350][ T1310] nr_rt_ioctl+0x40c/0xf90 [ 987.039298][ T1310] sock_do_ioctl+0x101/0x320 [ 987.044580][ T1310] sock_ioctl+0x5c6/0x7f0 [ 987.049448][ T1310] __se_sys_ioctl+0xfc/0x170 [ 987.054564][ T1310] do_syscall_64+0xe2/0xf80 [ 987.059594][ T1310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.066092][ T1310] [ 987.066092][ T1310] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 987.074083][ T1310] _raw_spin_lock_bh+0x36/0x50 [ 987.079374][ T1310] nr_rt_ioctl+0x215/0xf90 [ 987.084312][ T1310] sock_do_ioctl+0x101/0x320 [ 987.089420][ T1310] sock_ioctl+0x5c6/0x7f0 [ 987.094270][ T1310] __se_sys_ioctl+0xfc/0x170 [ 987.099387][ T1310] do_syscall_64+0xe2/0xf80 [ 987.104412][ T1310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.110822][ T1310] [ 987.110822][ T1310] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 987.118727][ T1310] __lock_acquire+0x15a5/0x2cf0 [ 987.124102][ T1310] lock_acquire+0x106/0x330 [ 987.129152][ T1310] _raw_spin_lock_bh+0x36/0x50 [ 987.134529][ T1310] nr_rt_device_down+0xbe/0x860 [ 987.139905][ T1310] nr_device_event+0x137/0x150 [ 987.145277][ T1310] notifier_call_chain+0x19d/0x3a0 [ 987.150920][ T1310] __dev_notify_flags+0x16d/0x310 [ 987.156467][ T1310] netif_change_flags+0xe8/0x1a0 [ 987.161925][ T1310] dev_change_flags+0x130/0x260 [ 987.167397][ T1310] dev_ioctl+0x7b4/0x1150 [ 987.172251][ T1310] sock_do_ioctl+0x23e/0x320 [ 987.177438][ T1310] sock_ioctl+0x5c6/0x7f0 [ 987.182284][ T1310] __se_sys_ioctl+0xfc/0x170 [ 987.187395][ T1310] do_syscall_64+0xe2/0xf80 [ 987.192432][ T1310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.199016][ T1310] [ 987.199016][ T1310] other info that might help us debug this: [ 987.199016][ T1310] [ 987.209240][ T1310] Chain exists of: [ 987.209240][ T1310] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 987.209240][ T1310] [ 987.223056][ T1310] Possible unsafe locking scenario: [ 987.223056][ T1310] [ 987.230523][ T1310] CPU0 CPU1 [ 987.235888][ T1310] ---- ---- [ 987.241255][ T1310] lock(nr_neigh_list_lock); [ 987.245931][ T1310] lock(&nr_node->node_lock); [ 987.253219][ T1310] lock(nr_neigh_list_lock); [ 987.260414][ T1310] lock(nr_node_list_lock); [ 987.265005][ T1310] [ 987.265005][ T1310] *** DEADLOCK *** [ 987.265005][ T1310] [ 987.273317][ T1310] 2 locks held by syz.1.7855/1310: [ 987.278429][ T1310] #0: ffffffff8f9ac008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 987.287224][ T1310] #1: ffffffff8fb28318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 987.297245][ T1310] [ 987.297245][ T1310] stack backtrace: [ 987.303159][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: syz.1.7855 Not tainted syzkaller #0 PREEMPT(full) [ 987.303181][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 987.303191][ T1310] Call Trace: [ 987.303201][ T1310] [ 987.303210][ T1310] dump_stack_lvl+0xe8/0x150 [ 987.303234][ T1310] print_circular_bug+0x2e1/0x300 [ 987.303261][ T1310] check_noncircular+0x12e/0x150 [ 987.303277][ T1310] __lock_acquire+0x15a5/0x2cf0 [ 987.303301][ T1310] ? __lock_acquire+0x6b5/0x2cf0 [ 987.303322][ T1310] ? dsa_user_netdevice_event+0x495/0x2850 [ 987.303343][ T1310] ? nr_rt_device_down+0xbe/0x860 [ 987.303365][ T1310] lock_acquire+0x106/0x330 [ 987.303385][ T1310] ? nr_rt_device_down+0xbe/0x860 [ 987.303407][ T1310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 987.303427][ T1310] ? nr_rt_device_down+0xbe/0x860 [ 987.303449][ T1310] _raw_spin_lock_bh+0x36/0x50 [ 987.303469][ T1310] ? nr_rt_device_down+0xbe/0x860 [ 987.303489][ T1310] nr_rt_device_down+0xbe/0x860 [ 987.303513][ T1310] nr_device_event+0x137/0x150 [ 987.303532][ T1310] notifier_call_chain+0x19d/0x3a0 [ 987.303551][ T1310] __dev_notify_flags+0x16d/0x310 [ 987.303572][ T1310] ? __pfx___dev_notify_flags+0x10/0x10 [ 987.303590][ T1310] ? __dev_change_flags+0x4c6/0x690 [ 987.303618][ T1310] ? __pfx___dev_change_flags+0x10/0x10 [ 987.303637][ T1310] ? full_name_hash+0x92/0xe0 [ 987.303656][ T1310] netif_change_flags+0xe8/0x1a0 [ 987.303677][ T1310] dev_change_flags+0x130/0x260 [ 987.303697][ T1310] dev_ioctl+0x7b4/0x1150 [ 987.303715][ T1310] sock_do_ioctl+0x23e/0x320 [ 987.303731][ T1310] ? __pfx_sock_do_ioctl+0x10/0x10 [ 987.303745][ T1310] ? do_futex+0x333/0x420 [ 987.303769][ T1310] sock_ioctl+0x5c6/0x7f0 [ 987.303784][ T1310] ? __pfx_sock_ioctl+0x10/0x10 [ 987.303797][ T1310] ? __fget_files+0x2a/0x420 [ 987.303813][ T1310] ? __fget_files+0x3a0/0x420 [ 987.303828][ T1310] ? __fget_files+0x2a/0x420 [ 987.303845][ T1310] ? bpf_lsm_file_ioctl+0x9/0x20 [ 987.303864][ T1310] ? __pfx_sock_ioctl+0x10/0x10 [ 987.303877][ T1310] __se_sys_ioctl+0xfc/0x170 [ 987.303898][ T1310] do_syscall_64+0xe2/0xf80 [ 987.303919][ T1310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.303933][ T1310] ? trace_irq_disable+0x37/0x100 [ 987.303948][ T1310] ? clear_bhb_loop+0x60/0xb0 [ 987.303963][ T1310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.303978][ T1310] RIP: 0033:0x7f5f3e39aeb9 [ 987.303994][ T1310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.304007][ T1310] RSP: 002b:00007f5f3c5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.304025][ T1310] RAX: ffffffffffffffda RBX: 00007f5f3e616090 RCX: 00007f5f3e39aeb9 [ 987.304037][ T1310] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 987.304047][ T1310] RBP: 00007f5f3e408c1f R08: 0000000000000000 R09: 0000000000000000 [ 987.304057][ T1310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.304066][ T1310] R13: 00007f5f3e616128 R14: 00007f5f3e616090 R15: 00007fffe0efadd8 [ 987.304083][ T1310] [ 987.702164][ T1321] lo speed is unknown, defaulting to 1000 [ 987.791695][ T1321] wg1 speed is unknown, defaulting to 1000 [ 993.085765][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.095009][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 993.101031][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL