last executing test programs: 3.297072325s ago: executing program 0 (id=888): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async, rerun: 64) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) getpeername(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 3.103219858s ago: executing program 0 (id=891): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x1, 0x6, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000005ccc010000000900010073797a300000000058000000160a0100000000000000000001"], 0xfc}}, 0x0) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYRES64=r9], 0x20) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000580)={0x0, 0x5, 0xffffffff}) (rerun: 32) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) (async) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000000980)={r10, "7bf778d46d703426da514d2ea7f1f6c3"}) (async, rerun: 32) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.980052438s ago: executing program 4 (id=893): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0) 2.676025079s ago: executing program 1 (id=897): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0x2) (async) close(0x3) 2.474410856s ago: executing program 2 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_mptcp(0x2, 0x1, 0x106) 2.127151132s ago: executing program 1 (id=900): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r9) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x8, 0x6}, {}, {0x3}}}, 0x24}, 0x1, 0x2000000, 0x0, 0x10}, 0x44004) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000003c0), 0x4) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYRESOCT=r0, @ANYRES32=r5, @ANYBLOB="20003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x40010c5}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x8800) 2.000017172s ago: executing program 4 (id=901): r0 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000080)=0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000030000000300000000000400070068cf", @ANYRES32=0x0, @ANYBLOB="0000000004000100"], 0x20}}, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x35, r1}) (async, rerun: 32) r3 = socket(0xa, 0x1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x38, r5, 0x731, 0x0, 0x20, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}]}, 0x38}, 0x1, 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r7, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) shutdown(r7, 0x1) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000080)='bridge0\x00') (async, rerun: 32) r9 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848190000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) ioctl(r3, 0x8936, &(0x7f0000000000)) 1.963340703s ago: executing program 2 (id=902): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={0xffffffffffffffff, r2, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000500)={0x1, 0x8, 0x1, 0x7fff, @vifc_lcl_ifindex=r2, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f00000002c0)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x28}}) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xf}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000240), 0x4) r10 = socket(0x2, 0x2, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r11, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r11}, 0x20) r14 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=@bloom_filter={0x1e, 0x400, 0x8, 0x288, 0x1a, r13, 0x5, '\x00', r12, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x8f, 0x85, &(0x7f0000000a40)="ceb467a8ff9c709410787f8811d580736166aefa47f7c83805174ac0619bde73fe9af10d7f31521554629eb9592cda31769a849e88686dbd16d1f46f3a71b2edf3bb626081fe1bbe875ef74712fa8b6fef1bc1fe1d3031b68940f6f4075ef46e84ad2dc45daf876ff23c59b12e876a92831c660a8bc0cc877bb80e72325c2860ea81256520ac93e991b5fae66c8399", &(0x7f0000000b00)=""/133, 0x5, 0x0, 0x7b, 0xde, &(0x7f0000000c00)="4c47a4e79342c56601a4a9089e5e46410d1f337d7e73c364249cedd2a8a5726dc013e24e5cd4ee3d26416dbb348c1ea4e32cc42ff092fed6cc32f9594a3454c906f38fb1e0841edca2f09af81edd00fe182664b16c9e4363f12218a4a389503cfd1f82d21e5442c8ec69d106fddb1f377f916bcf348a492c42b644", &(0x7f0000000c80)="10fa74c82d635cd2eeaf41fe04eb241a86450a3215446c7c07795981d3ef2fb6b81cbd648c2ce589af76d4f845f78e7bc2d3885e913fcf059c173e8650fd66c14aa0943859c25c09c1e02dbe186412d86864b82c7145141495e67661e7eb24f3c2a85d493174ced01ed63f6dcac8d993382d720dc1440dbb1f5a73395e464039ba6f9085ce38c5adc041b879d12df79c2332ffbb44db288f7fe1fe2e5db5787a3a7d57998feef55ed6f4c893263ee10577d568d520311ac6aef8feaca0c60aa4fbb535cf1122990021bf66e2b612fe4658ef84be9197f77ed7899678158d", 0x6, 0x0, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r14}, &(0x7f0000000140), &(0x7f0000000180)=r10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r14, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r10}, 0x20) ioctl$F2FS_IOC_FLUSH_DEVICE(r10, 0x4008f50a, &(0x7f0000000280)={0x4, 0x1}) 1.871990009s ago: executing program 4 (id=903): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a000}}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 1.706891184s ago: executing program 1 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100766c616e00000000340002800600010000000000280003800c00010000000000000000000c00010000000100070000000c000100000000000310000008000500", @ANYRES32=r2, @ANYBLOB="4d13912d8fcf528d376d18ec1af8be0586fb1ff75597629da5e301f57d59187bc0db991ea3aaf233b93aac8076f84f5969b0d95132873ed2ee96c7913d635f510fc78abb14100d31e7ffdc8c48b3b944bc07427daed998ee711379dc2e1ba55677820b62260335a9a79880375b56457f70f0811e3758932f1e254b3ca30533918c52733381de4fcce5093e48ffc4ec3a47397b269ab65cccc33933cf22fce839b8a43c563f92f8d8285d4108ab73dcf50ade1743e5c77069f7af9f3fce6f99732609ca9789b199d732f10df62fdebc445eba39dbc99062e6f16e16e8bd1c69fd1dca085493ea4c7b2c7261848522"], 0x6c}, 0x1, 0xba01}, 0x0) 1.58389075s ago: executing program 4 (id=907): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400040070696d3672656730000000000000000008000500555039e4bb5eb6257b1d1f030000000a0018000303030303030000"], 0x44}}, 0x90) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x714, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'pimreg1\x00'}) socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000100)='pimreg0\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r8, 0x4002f516, &(0x7f0000000280)={0x1, 0x40}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r5, @ANYBLOB="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"], 0x11c}}, 0x0) 1.50546961s ago: executing program 3 (id=908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc20008}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x400) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x30, r2, 0x3, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc20008}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x400) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x30, r2, 0x3, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) 1.497640467s ago: executing program 1 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYRES32=0x0], 0x18}}, 0x4000) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xcf8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000280)="b40f1165c0ef97c5d2fb9e28598fe48153ec03da64b782bf3f707889a4567be415010148d84ce85662d0856d61ed6cba799b28d7b67cafa70f517fcf9a12a3144959828cdf7bbe2aa2f3cf7cc6cb1629282e9249632eeee4a852a0c2f13ec0dcc9fd1ad014a712af08559f6f2010b012a85016f34c7c1713be71135dddcc0544", &(0x7f00000000c0)=@tcp6=r2, 0x4}, 0x20) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.420143485s ago: executing program 2 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$inet(0x2, 0x800, 0x4) 1.25034446s ago: executing program 3 (id=911): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltaction={0x294, 0x31, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'gact\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8f11}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf1f}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc499}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xff84, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1bb}}]}]}, 0x294}}, 0x0) 1.104603598s ago: executing program 0 (id=912): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, 0x0, 0x4e}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x0) 1.039806019s ago: executing program 2 (id=913): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r5, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x699, 0x2a}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfffd}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}]]}, 0x44}}, 0x0) 1.038558895s ago: executing program 1 (id=914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000026574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.031134004s ago: executing program 3 (id=915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0xd) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x6, 0x3, 0x6, 0x6, 0xc, @remote, @private1, 0x700, 0x7, 0x3, 0x56ee579a}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000300000061020000d5df4f2100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8], 0x48) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000600)="04bb8174", 0x4}, {&(0x7f00000006c0)="f5fbfd", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002e40)="d4", 0x1}, {&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000000940)="5c19a7cdcd861b59bbc34f205b507b1369be23fd4cb8d64a991dec2fee25e60bd499c73f8262253af762787d3a37eeeb711d5dfd3b3f6f41688a3ea0fa0bc91382", 0x41}, {&(0x7f0000000700)="f407", 0x2}, {&(0x7f0000000800)="8578b2", 0x3}], 0x6}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000cc0)="fda107970f80eb64ff6743519ba0a7962f77c2fcce8e633886a9a22e82b7df055cdba3fe42a73f967456c23359079d9d466be7ad923d81a9e3c413649da107a7811ba51f7d3447b9e3116c8451a39a093d9eae3f494b0179c7520bacfb03427567379d0e61189ae97774e63fda98fab63535036746103cacf707c6e65c530bf377", 0x81}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8", 0x1}, {&(0x7f0000001600)='\t', 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y@', 0x2}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{&(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000840)="69084ff40f734eb568993658bddb5b51d3f01041aed7d1901e5ff021976b0434676a9fd2571474003cb6772d533a3d87a924e8b598527f6421037c47a5bbe44a2a096894e5c5cabf43c39a398a4f1b3b449f5a48bfd304c23383a9b11db23fdb152ae67b5dd4a6a5b843c33cc59bb47fd9e35d7990c0b5086f8eb56a95313ae7c991bbca8dfee042c8905284b7e79416582325127e4962b232bef5ec20f496738e889d2d0b953ed6fd662b20387b27575d373d81bac1f5b5965bc1471d6f6f0e622ab8d30c126d584c334be1b4014d5c42", 0xd1}, {&(0x7f0000000b00)="7acdccadbc62df022238b96c3a12dcdef06d5e7d5ef114c36f901f236b0cf987bd0c594dcb16e7bd672d8f722aae667c1837d7f87b064165a20582ef8957c4be9248c3db61fd546ecc9bb8c3ec163510e4cdf08c321192c1f5e840154ee00305a1361de6c892ca98ff4fb6e5821cf7740c024a3ab75af624089fd71f7f397e627a46de0d5833b55b0c2e36e4f9355f6eca213e5eb1bdd740d70d260dedaf7707c8b1de020479590fb4ffcb60fd766336fb43194d0c6d4390adb854cb4ff99614aa5e17417789570309df8a10213b6f9812", 0xd1}, {&(0x7f00000009c0)="fc93571bcc1863f4c679e084ed23b1c75e1687c0dae7d3aee25a5079020a83d1d003ba7a6c5867502380361a3ca84d06bf7a0b8e6df00e59da755beabd2a6b885099829de855661849a8482a20196b63e855b48e60eacbae399fb438e7613256ade27c74c8eaaabd8cb8e300c092a6f1cd1d0d0f77bf1d2fce6abf163b0f733aeb0df6aa00b8d039b8229efdc2086204259bfb9700132ab540ad81a4945a3347acaa68bf6fb4ea14ea6e8ed7a35208b25a016162231b714127ce2d8dd5c8fc46", 0xc0}], 0x3, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @broadcast}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xadb7}}], 0x88}}, {{0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="6551e3a56fe514c464acf5c75650443845649af808baf9801630735e6b06d5a52ed8c238bba667c6f6ef0e853d4d6c593c6961050319ba389f259c762e569f10e8644f46", 0x44}, {&(0x7f0000000640)="887b1c91e10667d97581930709a7096df72ad414c08879612b324205b2222420d38fac88dfb2b41c2f27effbebfadc8964f38a57771f3bf57126cf876ac3ab606837da9cc6aa76c5", 0x48}, {&(0x7f0000000dc0)="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", 0xff}, {&(0x7f0000000ec0)="8efb5075da0bccf2f2e50fd5d83c5a5f20614a58fe17f4b2959063489cb9b86208f3c23913357f1d711fc9cd9299c40655c1c7bbe91beffd1b935a26c0ab4046d1fc53cdc708a3d46caad4ed93fe204ae668fbe9540d48bf8d08db4c7973cecb20094972a887189e5c71d979aa9d599a505a09784002a4d107538447c56d2108d6394a09bdad5cc0693f24ad4f2d99d4188b41", 0x93}, {&(0x7f0000000f80)="8b2859075157ad69d280f619718c89be15b7cde9929df2888e9aaca57825cf2effd40c4ed36edf06ff533058ff9bbf6165074d117e7ddcd1c1006c9a362176b6f443f8bde74450fc27d830162aaa0a0fddac2fc4985fb7203e3fa603827e463298571a9a78077bb9ab7602f8768bd4daf36ebeae2f310b29cbc9e3d683cb916bedd35acc5a9069df4501698d59742d12d87c2bf7bc958ba16bda8629c752e59b", 0xa0}, {&(0x7f0000001100)="8d4ef1bc8e85bfe3de25ba4541930f39100580f6471503f231658ba864cf4e4a31c460ec0cc74b47248391ee127ed43a586beec9b89c2bbafa348363f4fb6487d507707998587e828f175ed854ef18a1dc82ca26f1cb120d4ad2e1d3a0799506ab67b815eb1cff4b26e79eae4839dd8107917fa98f34ed0c5c38fb243ad3a1fb82e0c71854b64eada69b3731a521dbfe8b92894d630b2d624daf2f4d9a574b6e5de57ef73aea05faacff99eb77a81af79a4f7a39322c3b23bf7547b4bf73fada2cc859783ed84a1cc3fd9df4e7615d1365", 0xd1}], 0x6, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}], 0x38}}], 0x5, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 875.53069ms ago: executing program 2 (id=916): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x80000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000006c0)={0x0, 0x101}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000740)=@assoc_value={r1, 0xbd}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'pim6reg1\x00', 0x2000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0080000000000000fffffff040fcffff07000300110000004bddb36307fb68bf4070b41938d26304adbf842f6baeb72641"], 0x54}}, 0x0) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c003200000000000000006574683a73797a6b616c6c657230c79605714d3c645f6db23bd5f8a105d35632443657da76cbca95276d093aac60b33421ef2866e1484087958ed2d33ab6629bf44105e5bd47f4fa48830481e60fbe33a29f5ca6805b927268c02ae042024496b14430da99c639e857356737cdde991a908b3661510ce30fe02d1282985d9b103c8a0558d945f1c5f33cc4f8d51f7d3165fb25610d1a2f95957c1c1c0dd77f8a9c7c9dffc9d7121f97db2527b4d9474b92136d48fb4ed06e4b43ce58801be55cf9"], 0x38}}, 0x4000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r10 = socket$inet6(0xa, 0x800, 0x6) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000780)={@loopback, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x623a5b43, 0x84c3, 0x1b, 0x480, 0x8, 0x20000}) close(r9) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r14, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x4048006) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r13, {}, {0xb, 0xb}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 747.208032ms ago: executing program 3 (id=917): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a", @ANYBLOB], 0x3c}}, 0x40000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, 0x0, 0x4c) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=@ipv6_deladdrlabel={0x84, 0x49, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x40, 0x0, r9, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 746.702137ms ago: executing program 0 (id=918): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 619.614071ms ago: executing program 4 (id=919): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="03150000040000000a0001000000000000000000b037baf4a283c980070bb78a5239d5ebca48a4f90ff9d72ab6f602f15bf480ce5fbf822572105f10d26cd4d131cd4cf0754112c31e4ba3d7689930e2fe6938307a881d8370d8910275fe6ece788ec66795899305b38ae4794e090f6b747548abc4a10a83e0bcd75a07e285170f81dce40f3d"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x1}, 0x28) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000051401002cbd70fef2562b09faaa3d00040000000800030002000000aa6b"], 0x20}, 0x1, 0x0, 0x0, 0x20048003}, 0x20008880) r8 = accept$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r5, 0x4, 0x6, 0x8, 0x3, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8, 0x1, 0x39c04000, 0x9}}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000340)={@loopback, 0x1e, r9}) r10 = socket$alg(0x26, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) bind$alg(r10, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a2288e717", 0x2c) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0) 603.085855ms ago: executing program 0 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x4, 0x1006, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x44, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80f514e10c300148) (async) ioctl$sock_netdev_private(r10, 0x89f5, &(0x7f0000000000)) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0xc54, r13, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_PEER_MEASUREMENTS={0xc30, 0x111, 0x0, 0x1, {0xc2c, 0x5, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdfb4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x77b5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe0000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x307}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbc0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9b}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x19c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8bdf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc0}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2ac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7623}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xeaf8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffb9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x3ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x270, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6d}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x194, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7b}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x42}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x396}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffd3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xc85}]}, 0xc54}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r14, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 527.285573ms ago: executing program 1 (id=921): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x3, 0xf, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@noop]}}}}}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x5, r3, 0x1, 0x1, 0x6, @random="26b1270fbd30"}, 0x14) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='vlan0\x00', 0x10) read(r1, &(0x7f0000000180)=""/67, 0x43) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000240)={0x9, 0x3}) recvfrom$ax25(r4, &(0x7f0000000280)=""/87, 0x57, 0x12140, &(0x7f0000000300)={{0x3, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000380)) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newqdisc={0xa0, 0x24, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfffd}, {0x5, 0xfff1}, {0x8, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x894}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @qdisc_kind_options=@q_red={{0x8}, {0x34, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xc}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x10001}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x1189}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004040}, 0x1) tee(r2, r0, 0x8000, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000540)={{0x200, 0x3}, 0x100, './file0\x00'}) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x53, 0x6, @local, 0x31fc0ad8}, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0xffffffffffffffff, {[0x1a132184, 0xe, 0xff, 0x3, 0x7, 0x0, 0x2, 0x9]}}, 0x5c) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='io.stat\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0xe, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x914}, 0x8000) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000880)=[{0x8, 0x0, 0x7, 0x52}]}, 0x10) clock_gettime(0x0, &(0x7f00000059c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000005840)=[{{&(0x7f0000000900)=@qipcrtr, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/170, 0xaa}, {&(0x7f0000000a40)=""/244, 0xf4}], 0x2, &(0x7f0000000b80)=""/240, 0xf0}, 0x3}, {{&(0x7f0000000c80)=@un=@abs, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000d00)=""/61, 0x3d}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x3}, 0xffff}, {{&(0x7f0000002d80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002e00)=""/38, 0x26}, {&(0x7f0000002e40)=""/114, 0x72}, {&(0x7f0000002ec0)=""/54, 0x36}, {&(0x7f0000002f00)=""/77, 0x4d}, {&(0x7f0000002f80)=""/183, 0xb7}, {&(0x7f0000003040)=""/218, 0xda}, {&(0x7f0000003140)=""/230, 0xe6}], 0x7, &(0x7f00000032c0)=""/212, 0xd4}, 0x7}, {{&(0x7f00000033c0)=@rc, 0x80, &(0x7f0000004500)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/100, 0x64}, {&(0x7f00000044c0)=""/14, 0xe}], 0x3, &(0x7f0000004540)=""/18, 0x12}, 0x7}, {{&(0x7f0000004580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000005640)=[{&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/44, 0x2c}], 0x2, &(0x7f0000005680)=""/72, 0x48}, 0x3}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000005700)=""/230, 0xe6}], 0x1}}], 0x6, 0x0, &(0x7f0000005a00)={r6, r7+60000000}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000005a80), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000005d00)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005ac0)={0x1fc, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xf00}, {0x8, 0x15, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x279e4000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfff8}, {0x8, 0x15, 0x39f6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfffd}, {0x8, 0x15, 0x6}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000084}, 0x4008800) r9 = openat$cgroup_subtree(r5, &(0x7f0000005d40), 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(r9, 0x89e4, &(0x7f0000005d80)={0x61, "8324e717a8821b9ed5bf592730636b39f2f6afb9a8c013e6de64bd912c76ad0f8bb876368d1802738f2394fc551928b5e2e1c0a0f4a49f6ad7e52b7d0e7f4a4de888aa83b49a43390aedab3da61c569c4f017ecacaa173d1bb394d337d08a213bd52f295bab6c95996fc7b1cefb25e6a42ff1095cf9517100a312dff73608b41"}) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005e40), 0x200000, 0x0) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000005e80)=0xb) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000005ec0)=0x5, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005f00)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000006040)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006000)={&(0x7f0000005f80)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x666b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x6) 349.974612ms ago: executing program 3 (id=922): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x6}}) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async, rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ee, &(0x7f0000000200)) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) (async, rerun: 32) r3 = socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000180)) (async) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080), 0x4) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r6, &(0x7f0000005200)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}}, {{&(0x7f00000015c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000080)}}], 0x2, 0x4000) (async) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) close(0x4) 265.488823ms ago: executing program 4 (id=923): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}]}]}, 0x34}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x154, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_KEYS={0x3c, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b45d2bbf9808d9ff5ad0b8c984"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "10f80aadb46a78c7694371a896"}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x3f, 0xfc, "58b6aeaf3839a76c2e7d3cf1703aaf87763bb5b883e1ee9f026343a06cbb20d706108ccbeecd527905b0e4cf1e7bc023066aee9a0f94cdfda2da5d"}, @NL80211_ATTR_FILS_ERP_RRK={0x2d, 0xfc, "7fc2661dc3b95216ca76a7937dae360120a54c29cd78c85efa9c43bc8448d004e467e9cb26648f6568"}, @NL80211_ATTR_FILS_ERP_REALM={0x72, 0xfa, "9883e4eeca5e91d2e9fe9cdb30657cab02795e5e35c127c8b44399a8cb9dbb01a2d4e83015f0490f0a52cb2553864209c1145efd7c9e0210f55addfa52a98b0eb187952e2eb974c7207bdf5ea12205a60427b66f09dd20dabdb94fc5845fc40f158f0d5bb55e621cb57636e5932d"}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x400, 0xc0, 0x2, 0x4}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4009000}, 0x4814) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x154, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_KEYS={0x3c, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b45d2bbf9808d9ff5ad0b8c984"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "10f80aadb46a78c7694371a896"}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x3f, 0xfc, "58b6aeaf3839a76c2e7d3cf1703aaf87763bb5b883e1ee9f026343a06cbb20d706108ccbeecd527905b0e4cf1e7bc023066aee9a0f94cdfda2da5d"}, @NL80211_ATTR_FILS_ERP_RRK={0x2d, 0xfc, "7fc2661dc3b95216ca76a7937dae360120a54c29cd78c85efa9c43bc8448d004e467e9cb26648f6568"}, @NL80211_ATTR_FILS_ERP_REALM={0x72, 0xfa, "9883e4eeca5e91d2e9fe9cdb30657cab02795e5e35c127c8b44399a8cb9dbb01a2d4e83015f0490f0a52cb2553864209c1145efd7c9e0210f55addfa52a98b0eb187952e2eb974c7207bdf5ea12205a60427b66f09dd20dabdb94fc5845fc40f158f0d5bb55e621cb57636e5932d"}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x400, 0xc0, 0x2, 0x4}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4009000}, 0x4814) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @local}, 0x2, 0x0, 0x1}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) (async) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r10, 0x107, 0x18, &(0x7f0000000800)={r9, 0x1, 0x6, @local}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 112.045045ms ago: executing program 0 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1dc7f39000080d00600000003a9f4f600000000400080", "129c9707", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @private}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xb}, {0xf, 0x5}, {0x10, 0xd}}, ["", "", "", ""]}, 0x24}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) 65.700758ms ago: executing program 3 (id=925): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0)={'syzkaller0', 0x32, 0x33}, 0xd) (async) r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r9, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r9, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1d27319097586c11}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x40}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) r10 = openat$cgroup_int(r1, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) (async) close(r10) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) 0s ago: executing program 2 (id=926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, &(0x7f0000000340), 0x8) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x10, 0x0, 0x0, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0xa0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@local, 0x0, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xc8a6}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 85.594181][ T5817] cgroup: Unknown subsys name 'net' [ 85.756484][ T5817] cgroup: Unknown subsys name 'cpuset' [ 85.765579][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.575041][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.246342][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.248982][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.254303][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.262032][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.276222][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.284115][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.291899][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.299617][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.314320][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.321477][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.332498][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.340137][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.341754][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.348934][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.356376][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.362977][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.370902][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.377135][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.391302][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.402945][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.412339][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.426165][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.452043][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.461420][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.469951][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.007791][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.095251][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.234735][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.399865][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.459574][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.467281][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.475205][ T5828] bridge_slave_0: entered allmulticast mode [ 91.482808][ T5828] bridge_slave_0: entered promiscuous mode [ 91.509942][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.541805][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.549079][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.556368][ T5828] bridge_slave_1: entered allmulticast mode [ 91.563992][ T5828] bridge_slave_1: entered promiscuous mode [ 91.577468][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.585146][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.592426][ T5832] bridge_slave_0: entered allmulticast mode [ 91.600106][ T5832] bridge_slave_0: entered promiscuous mode [ 91.636973][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.644463][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.651646][ T5832] bridge_slave_1: entered allmulticast mode [ 91.659317][ T5832] bridge_slave_1: entered promiscuous mode [ 91.752512][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.762692][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.769903][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.777510][ T5829] bridge_slave_0: entered allmulticast mode [ 91.784917][ T5829] bridge_slave_0: entered promiscuous mode [ 91.825799][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.848530][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.856115][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.863601][ T5829] bridge_slave_1: entered allmulticast mode [ 91.870834][ T5829] bridge_slave_1: entered promiscuous mode [ 91.880799][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.936940][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.952483][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.959651][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.968904][ T5841] bridge_slave_0: entered allmulticast mode [ 91.975780][ T1213] cfg80211: failed to load regulatory.db [ 91.978322][ T5841] bridge_slave_0: entered promiscuous mode [ 91.991055][ T5828] team0: Port device team_slave_0 added [ 92.038631][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.045939][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.054202][ T5841] bridge_slave_1: entered allmulticast mode [ 92.061584][ T5841] bridge_slave_1: entered promiscuous mode [ 92.069854][ T5828] team0: Port device team_slave_1 added [ 92.079149][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.116744][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.124318][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.131582][ T5836] bridge_slave_0: entered allmulticast mode [ 92.139268][ T5836] bridge_slave_0: entered promiscuous mode [ 92.175228][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.201402][ T5832] team0: Port device team_slave_0 added [ 92.208300][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.217087][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.224439][ T5836] bridge_slave_1: entered allmulticast mode [ 92.231778][ T5836] bridge_slave_1: entered promiscuous mode [ 92.280171][ T5832] team0: Port device team_slave_1 added [ 92.305270][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.315495][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.322887][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.349070][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.362931][ T5829] team0: Port device team_slave_0 added [ 92.396322][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.406341][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.413830][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.439811][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.451049][ T5835] Bluetooth: hci1: command tx timeout [ 92.461111][ T5829] team0: Port device team_slave_1 added [ 92.483392][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.522453][ T5835] Bluetooth: hci4: command tx timeout [ 92.522501][ T5843] Bluetooth: hci0: command tx timeout [ 92.528323][ T5849] Bluetooth: hci3: command tx timeout [ 92.536795][ T5841] team0: Port device team_slave_0 added [ 92.539733][ T52] Bluetooth: hci2: command tx timeout [ 92.560596][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.567864][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.594298][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.608502][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.615919][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.642164][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.656891][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.695743][ T5841] team0: Port device team_slave_1 added [ 92.703614][ T5836] team0: Port device team_slave_0 added [ 92.742319][ T5836] team0: Port device team_slave_1 added [ 92.772988][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.779971][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.806308][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.836682][ T5828] hsr_slave_0: entered promiscuous mode [ 92.843334][ T5828] hsr_slave_1: entered promiscuous mode [ 92.863999][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.870988][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.897288][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.923147][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.930140][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.956253][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.968000][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.975398][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.001927][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.045918][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.053028][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.079613][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.098094][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.106109][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.132210][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.184653][ T5832] hsr_slave_0: entered promiscuous mode [ 93.191007][ T5832] hsr_slave_1: entered promiscuous mode [ 93.197649][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 93.204417][ T5832] Cannot create hsr debugfs directory [ 93.297699][ T5841] hsr_slave_0: entered promiscuous mode [ 93.304413][ T5841] hsr_slave_1: entered promiscuous mode [ 93.310603][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 93.316650][ T5841] Cannot create hsr debugfs directory [ 93.364001][ T5829] hsr_slave_0: entered promiscuous mode [ 93.370478][ T5829] hsr_slave_1: entered promiscuous mode [ 93.376989][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 93.382808][ T5829] Cannot create hsr debugfs directory [ 93.468225][ T5836] hsr_slave_0: entered promiscuous mode [ 93.476675][ T5836] hsr_slave_1: entered promiscuous mode [ 93.482881][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 93.488629][ T5836] Cannot create hsr debugfs directory [ 93.964630][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.979148][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.990702][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.009932][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.074357][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.093734][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.114502][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.126132][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.215177][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.234007][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.245184][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.270703][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.372893][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.386147][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.399927][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.416129][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.445483][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.519746][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.525361][ T5849] Bluetooth: hci1: command tx timeout [ 94.549359][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.562712][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.577583][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.596514][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.603368][ T5849] Bluetooth: hci3: command tx timeout [ 94.603413][ T5849] Bluetooth: hci4: command tx timeout [ 94.603457][ T5849] Bluetooth: hci2: command tx timeout [ 94.613309][ T5835] Bluetooth: hci0: command tx timeout [ 94.635300][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.649143][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.656474][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.699269][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.706527][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.764069][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.778611][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.814113][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.821253][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.831022][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.838206][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.873357][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.924881][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.932112][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.005499][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.012746][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.167206][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.199713][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.261768][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.297082][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.335015][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.342233][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.401765][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.408982][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.429393][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.436636][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.480515][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.501431][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.508701][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.577064][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.670629][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.740547][ T5828] veth0_vlan: entered promiscuous mode [ 95.770513][ T5828] veth1_vlan: entered promiscuous mode [ 95.849853][ T5832] veth0_vlan: entered promiscuous mode [ 95.919604][ T5832] veth1_vlan: entered promiscuous mode [ 95.977578][ T5828] veth0_macvtap: entered promiscuous mode [ 96.019126][ T5828] veth1_macvtap: entered promiscuous mode [ 96.069802][ T5832] veth0_macvtap: entered promiscuous mode [ 96.085299][ T5832] veth1_macvtap: entered promiscuous mode [ 96.107966][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.149481][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.201728][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.240379][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.254735][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.276341][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.288538][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.312672][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.342554][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.351650][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.380298][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.395417][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.416201][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.468326][ T5841] veth0_vlan: entered promiscuous mode [ 96.483633][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.523401][ T5836] veth0_vlan: entered promiscuous mode [ 96.552568][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.560499][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.593454][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.596432][ T5841] veth1_vlan: entered promiscuous mode [ 96.601352][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.614675][ T5835] Bluetooth: hci1: command tx timeout [ 96.627883][ T5836] veth1_vlan: entered promiscuous mode [ 96.682379][ T5835] Bluetooth: hci0: command tx timeout [ 96.682600][ T5849] Bluetooth: hci2: command tx timeout [ 96.687834][ T5835] Bluetooth: hci4: command tx timeout [ 96.695680][ T5849] Bluetooth: hci3: command tx timeout [ 96.739425][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.744948][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.757342][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.771343][ T5836] veth0_macvtap: entered promiscuous mode [ 96.778126][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.791613][ T5829] veth0_vlan: entered promiscuous mode [ 96.834239][ T5836] veth1_macvtap: entered promiscuous mode [ 96.849322][ T5841] veth0_macvtap: entered promiscuous mode [ 96.865065][ T5829] veth1_vlan: entered promiscuous mode [ 96.881003][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.885194][ T5841] veth1_macvtap: entered promiscuous mode [ 96.975914][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.025093][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.045062][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.079928][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.117529][ T5829] veth0_macvtap: entered promiscuous mode [ 97.130984][ T5951] syzkaller0: entered promiscuous mode [ 97.137823][ T5951] syzkaller0: entered allmulticast mode [ 97.146976][ T1117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.177261][ T1117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.193507][ T5829] veth1_macvtap: entered promiscuous mode [ 97.200527][ T5954] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.221691][ T1117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.224147][ T5954] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 97.230962][ T1117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.247929][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.285782][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.294775][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.332458][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.426032][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.468978][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.515599][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.525472][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.536774][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 97.566227][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.573218][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.583990][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.597756][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.730238][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.739796][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.823373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.847611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.996864][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.040777][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.078666][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.101299][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.136769][ T5978] sctp: [Deprecated]: syz.0.12 (pid 5978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.136769][ T5978] Use struct sctp_sack_info instead [ 98.170883][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.185683][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.205545][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.685253][ T5849] Bluetooth: hci1: command tx timeout [ 98.762751][ T5849] Bluetooth: hci3: command tx timeout [ 98.768276][ T5843] Bluetooth: hci4: command tx timeout [ 98.768296][ T5835] Bluetooth: hci2: command tx timeout [ 98.773729][ T5843] Bluetooth: hci0: command tx timeout [ 98.864235][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 98.865958][ T6004] netlink: 'syz.2.19': attribute type 3 has an invalid length. [ 98.917438][ T5989] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 98.954704][ T5989] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 98.977393][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.063781][ T6009] Cannot find add_set index 0 as target [ 99.092570][ T6011] netlink: 200 bytes leftover after parsing attributes in process `syz.0.22'. [ 99.159566][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 99.308112][ T6026] Cannot find add_set index 0 as target [ 99.377549][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26'. [ 99.510508][ T6032] ip6t_srh: unknown srh invflags 4000 [ 99.617769][ T6036] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 99.740032][ T6039] bond1 (unregistering): Released all slaves [ 99.849545][ T6047] pim6reg1: entered promiscuous mode [ 99.855818][ T6047] pim6reg1: entered allmulticast mode [ 99.889562][ T6050] Bluetooth: MGMT ver 1.23 [ 99.922110][ T6050] Bluetooth: hci1: too big key_count value 32778 [ 100.030080][ T6056] Zero length message leads to an empty skb [ 100.453329][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 100.499934][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 100.554060][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 100.568454][ T6088] netlink: 'syz.3.44': attribute type 5 has an invalid length. [ 100.940097][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 101.026587][ T6108] tipc: Can't bind to reserved service type 2 [ 101.060156][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.068255][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.166091][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.181185][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.471102][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.500015][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.509774][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.542260][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.166260][ T6179] __nla_validate_parse: 3 callbacks suppressed [ 103.166279][ T6179] netlink: 72 bytes leftover after parsing attributes in process `syz.4.68'. [ 103.930840][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'. [ 103.940581][ T6223] netlink: 'syz.4.82': attribute type 1 has an invalid length. [ 104.258643][ T6242] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.88'. [ 104.261744][ T6243] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.88'. [ 104.385400][ T6251] block nbd0: Unsupported socket: should be TCP or UNIX. [ 104.565815][ T6255] bond2: option resend_igmp: invalid value (32767) [ 104.572922][ T6255] bond2: option resend_igmp: allowed values 0 - 255 [ 104.586867][ T6255] bond2 (unregistering): Released all slaves [ 104.615760][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 104.627051][ T6262] Unsupported xt match [ 104.627063][ T6262] unable to load match [ 104.893017][ T6272] vlan2: entered promiscuous mode [ 104.898343][ T6272] geneve1: entered promiscuous mode [ 104.908782][ T6272] vlan2: entered allmulticast mode [ 104.914759][ T6272] geneve1: entered allmulticast mode [ 104.987658][ T6276] bond0: entered promiscuous mode [ 104.999859][ T6276] bond_slave_0: entered promiscuous mode [ 105.022795][ T6276] bond_slave_1: entered promiscuous mode [ 105.046663][ T6276] batadv0: entered promiscuous mode [ 105.065591][ T6276] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 105.296696][ T6292] netlink: 44 bytes leftover after parsing attributes in process `syz.3.104'. [ 105.391618][ T6294] veth3: entered allmulticast mode [ 105.424734][ T6294] netlink: 'syz.2.105': attribute type 7 has an invalid length. [ 105.432794][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 105.447768][ T6294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.567576][ T6301] pim6reg: entered allmulticast mode [ 105.599551][ T6269] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 105.609161][ T6301] Illegal XDP return value 4294967274 on prog (id 19) dev syz_tun, expect packet loss! [ 105.639342][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 105.763581][ T6305] netlink: 'syz.0.109': attribute type 1 has an invalid length. [ 105.887678][ T6305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.098953][ T6312] bond2: (slave veth3): Enslaving as an active interface with a down link [ 106.184259][ T6315] bond2: (slave veth0_to_bond): making interface the new active one [ 106.194351][ T6315] veth0_to_bond: entered promiscuous mode [ 106.200960][ T6315] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.404024][ T6333] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 106.472073][ T6333] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 106.487961][ T6335] trusted_key: syz.2.115 sent an empty control message without MSG_MORE. [ 106.587802][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 106.597004][ T6340] syzkaller0: entered promiscuous mode [ 106.597028][ T6340] syzkaller0: entered allmulticast mode [ 106.631026][ T6340] tipc: Started in network mode [ 106.637362][ T6340] tipc: Node identity 52e277e69a0f, cluster identity 4711 [ 106.645652][ T6340] tipc: Enabled bearer , priority 0 [ 106.730081][ T6343] : entered promiscuous mode [ 106.748400][ T6337] tipc: Resetting bearer [ 106.797678][ T6337] tipc: Disabling bearer [ 106.812943][ T6349] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.849802][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 106.865785][ T6349] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 106.876608][ T6353] netlink: 280 bytes leftover after parsing attributes in process `syz.1.122'. [ 107.309935][ T6371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.278556][ T6418] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 108.337071][ T6423] __nla_validate_parse: 12 callbacks suppressed [ 108.337093][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 108.339242][ T6418] vlan2: entered promiscuous mode [ 108.378246][ T6418] bridge0: entered promiscuous mode [ 109.161830][ T6462] netlink: 80 bytes leftover after parsing attributes in process `syz.1.152'. [ 109.756148][ T6494] netlink: 'syz.2.162': attribute type 2 has an invalid length. [ 109.812892][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.865854][ T6503] netlink: 'syz.3.165': attribute type 4 has an invalid length. [ 109.905428][ T6502] netlink: 'syz.4.164': attribute type 1 has an invalid length. [ 109.923586][ T6502] netlink: 'syz.4.164': attribute type 2 has an invalid length. [ 109.969956][ T6502] 9: entered promiscuous mode [ 110.130647][ T6508] netlink: 'syz.2.168': attribute type 25 has an invalid length. [ 110.198764][ T6512] netlink: 256 bytes leftover after parsing attributes in process `syz.0.169'. [ 110.243645][ T6512] sctp: [Deprecated]: syz.0.169 (pid 6512) Use of int in maxseg socket option. [ 110.243645][ T6512] Use struct sctp_assoc_value instead [ 110.348704][ T6519] netlink: 'syz.1.172': attribute type 33 has an invalid length. [ 110.568891][ T6523] bond1: entered allmulticast mode [ 110.607134][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.635998][ T6523] bridge0: port 3(bond1) entered blocking state [ 110.653636][ T6523] bridge0: port 3(bond1) entered disabled state [ 110.671717][ T6523] bond1: entered promiscuous mode [ 110.680616][ T6523] bridge0: port 3(bond1) entered blocking state [ 110.687320][ T6523] bridge0: port 3(bond1) entered forwarding state [ 110.887742][ T6549] x_tables: duplicate underflow at hook 2 [ 110.957178][ T6551] Bluetooth: MGMT ver 1.23 [ 111.105588][ T6557] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 111.160410][ T6562] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 111.214844][ T6557] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 111.344312][ T3513] bridge0: port 3(bond1) entered disabled state [ 111.626166][ T6586] netlink: 124 bytes leftover after parsing attributes in process `syz.2.189'. [ 111.974596][ T30] audit: type=1800 audit(1763468668.579:2): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.186" name="memory.events" dev="tmpfs" ino=222 res=0 errno=0 [ 112.195246][ T6604] netlink: 'syz.1.195': attribute type 75 has an invalid length. [ 112.248919][ T6606] batadv_slave_1: entered promiscuous mode [ 112.544021][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.625724][ T6622] raw_sendmsg: syz.4.202 forgot to set AF_INET. Fix it! [ 112.636270][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.677449][ T6624] syz_tun: entered allmulticast mode [ 112.704896][ T6617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.767352][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'. [ 112.828192][ T6635] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:0 [ 113.050733][ T1106] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 114.438977][ T6603] batadv_slave_1: left promiscuous mode [ 114.446223][ T6624] syz_tun: left allmulticast mode [ 114.585559][ T6663] syzkaller0: entered promiscuous mode [ 114.591113][ T6663] syzkaller0: entered allmulticast mode [ 114.648089][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 114.800550][ T6691] x_tables: unsorted entry at hook 3 [ 114.840330][ T6696] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 115.848819][ T6696] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 115.870968][ T6698] veth5: entered promiscuous mode [ 116.160223][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'. [ 116.290371][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.298752][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.390249][ T6726] netlink: 76 bytes leftover after parsing attributes in process `syz.3.227'. [ 116.719686][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 116.858746][ T6754] netlink: 'syz.4.235': attribute type 58 has an invalid length. [ 116.867625][ T6754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.235'. [ 117.977432][ T6767] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.013434][ T6764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'. [ 118.117023][ T50] veth0_to_bond: left promiscuous mode [ 118.208731][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 118.366705][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 118.375818][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 118.713877][ T6800] 8021q: VLANs not supported on wg2 [ 118.756694][ T6797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.250'. [ 118.858905][ T6806] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 119.340987][ T6828] dvmrp0: entered allmulticast mode [ 119.509853][ T6830] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 119.551086][ T6834] v: renamed from vlan0 [ 119.901776][ T6848] __nla_validate_parse: 3 callbacks suppressed [ 119.901795][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 120.289504][ T6874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'. [ 120.342986][ T6874] netlink: 'syz.2.270': attribute type 3 has an invalid length. [ 120.507144][ T6879] netlink: 'syz.4.267': attribute type 2 has an invalid length. [ 121.063027][ T6916] Cannot find add_set index 0 as target [ 121.202674][ T6919] netlink: 104 bytes leftover after parsing attributes in process `syz.3.281'. [ 121.473464][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 121.488445][ T6932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.286'. [ 121.516159][ T6935] netlink: 'syz.1.288': attribute type 19 has an invalid length. [ 121.534365][ T6932] netlink: 'syz.0.286': attribute type 21 has an invalid length. [ 121.570619][ T6932] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.672656][ T6938] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 121.726714][ T6941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.291'. [ 121.756295][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.292'. [ 121.784309][ T6945] gretap1: entered promiscuous mode [ 121.866738][ T6950] veth1_to_team: entered promiscuous mode [ 121.881330][ T6950] macvlan2: entered promiscuous mode [ 121.889389][ T6950] macvlan2: entered allmulticast mode [ 121.895261][ T6950] veth1_to_team: entered allmulticast mode [ 121.916729][ T6950] veth1_to_team: left promiscuous mode [ 121.992688][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 122.466769][ T6972] x_tables: duplicate underflow at hook 1 [ 122.514357][ T6972] netlink: 44 bytes leftover after parsing attributes in process `syz.2.299'. [ 122.655193][ T6976] netlink: 10 bytes leftover after parsing attributes in process `syz.3.300'. [ 123.461184][ T7012] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 123.479027][ T7012] netlink: 'syz.0.310': attribute type 2 has an invalid length. [ 123.771123][ T7027] syzkaller0: entered promiscuous mode [ 123.799033][ T7027] syzkaller0: entered allmulticast mode [ 123.833607][ T7031] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 123.909960][ T7027] tipc: Started in network mode [ 123.915170][ T7027] tipc: Node identity def3ddcf0515, cluster identity 4711 [ 123.939317][ T7027] tipc: Enabled bearer , priority 10 [ 124.007941][ T7033] gretap1: entered promiscuous mode [ 124.024337][ T7033] bond3: (slave gretap1): making interface the new active one [ 124.075307][ T7033] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 124.093737][ T7040] sctp: [Deprecated]: syz.2.317 (pid 7040) Use of int in max_burst socket option. [ 124.093737][ T7040] Use struct sctp_assoc_value instead [ 124.132285][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.136141][ T5834] IPVS: starting estimator thread 0... [ 124.149682][ T7026] tipc: Resetting bearer [ 124.156744][ T7039] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 124.191706][ T7026] tipc: Disabling bearer [ 124.235383][ T7044] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.235820][ T7048] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 124.244546][ T7031] bond3: entered promiscuous mode [ 124.249353][ T24] IPVS: starting estimator thread 0... [ 124.266981][ T7031] macvlan2: entered promiscuous mode [ 124.291752][ T7031] macvlan2: entered allmulticast mode [ 124.310604][ T7031] bond3: entered allmulticast mode [ 124.318118][ T7031] gretap1: entered allmulticast mode [ 124.326782][ T7031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.351979][ T7053] IPVS: using max 30 ests per chain, 72000 per kthread [ 124.371472][ T7048] netlink: 'syz.4.319': attribute type 11 has an invalid length. [ 124.381494][ T7031] bond3: left promiscuous mode [ 125.009132][ T7072] __nla_validate_parse: 5 callbacks suppressed [ 125.009153][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 125.062409][ T7072] erspan0: entered promiscuous mode [ 125.089680][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 125.190380][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.215097][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.301362][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.345070][ T7084] syzkaller0: entered promiscuous mode [ 125.353599][ T7084] syzkaller0: entered allmulticast mode [ 125.362426][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.402452][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 125.455195][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 125.466967][ T7084] tipc: Started in network mode [ 125.485029][ T7084] tipc: Node identity a2fb1d7271cd, cluster identity 4711 [ 125.517317][ T7084] tipc: Enabled bearer , priority 10 [ 125.590721][ T7083] tipc: Resetting bearer [ 125.608373][ T7083] tipc: Disabling bearer [ 125.851491][ T7107] netlink: 32 bytes leftover after parsing attributes in process `syz.3.337'. [ 126.015489][ T7114] netlink: 88 bytes leftover after parsing attributes in process `syz.2.339'. [ 126.078802][ T7114] netlink: 76 bytes leftover after parsing attributes in process `syz.2.339'. [ 126.089685][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 126.192657][ T7120] netlink: 264 bytes leftover after parsing attributes in process `syz.1.341'. [ 126.378829][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.433140][ T7135] netlink: 'syz.0.344': attribute type 7 has an invalid length. [ 126.440895][ T7135] netlink: 'syz.0.344': attribute type 8 has an invalid length. [ 126.474530][ T7137] SET target dimension over the limit! [ 126.674006][ T7148] netlink: 'syz.4.348': attribute type 10 has an invalid length. [ 126.711120][ T7148] dummy0: entered promiscuous mode [ 126.728013][ T7148] bridge0: port 4(dummy0) entered blocking state [ 126.795082][ T7148] bridge0: port 4(dummy0) entered disabled state [ 126.806559][ T7148] dummy0: entered allmulticast mode [ 126.828436][ T7148] bridge0: port 4(dummy0) entered blocking state [ 126.835321][ T7148] bridge0: port 4(dummy0) entered forwarding state [ 127.129304][ T7172] netlink: 'syz.0.355': attribute type 1 has an invalid length. [ 127.235277][ T7172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.710376][ T7198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.378421][ T7227] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 128.851024][ T7257] netlink: 'syz.2.376': attribute type 2 has an invalid length. [ 129.091807][ T7270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.099392][ T7270] IPv6: NLM_F_CREATE should be set when creating new route [ 129.223914][ T7275] lo: entered allmulticast mode [ 129.311576][ T7277] lo: left allmulticast mode [ 129.458089][ T7283] tipc: Started in network mode [ 129.472959][ T7283] tipc: Node identity 5af3184939ab, cluster identity 4711 [ 129.481225][ T7283] tipc: Enabled bearer , priority 0 [ 129.498146][ T7283] syzkaller0: entered promiscuous mode [ 129.504344][ T7283] syzkaller0: entered allmulticast mode [ 129.607245][ T7283] tipc: Resetting bearer [ 129.667260][ T7283] tipc: Disabling bearer [ 129.779694][ T7294] xt_hashlimit: size too large, truncated to 1048576 [ 130.206165][ T7306] syzkaller0: entered promiscuous mode [ 130.246858][ T7306] syzkaller0: entered allmulticast mode [ 130.253334][ T7321] __nla_validate_parse: 20 callbacks suppressed [ 130.253354][ T7321] netlink: 64 bytes leftover after parsing attributes in process `syz.4.390'. [ 130.578397][ T7336] netlink: 'syz.4.390': attribute type 33 has an invalid length. [ 131.824030][ T7336] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 131.944150][ T7336] bond2 (unregistering): Released all slaves [ 132.045501][ T7352] IPVS: Error connecting to the multicast addr [ 132.146644][ T7363] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 133.080891][ T7405] netlink: 'syz.1.411': attribute type 30 has an invalid length. [ 133.093133][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.412'. [ 133.244643][ T7415] tipc: Enabling of bearer rejected, failed to enable media [ 133.434404][ T7426] vlan0: entered promiscuous mode [ 133.927314][ T7446] netlink: 'syz.2.423': attribute type 7 has an invalid length. [ 134.002110][ T7446] netlink: 140 bytes leftover after parsing attributes in process `syz.2.423'. [ 134.168628][ T7468] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 134.205022][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.213115][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.245995][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 134.311085][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 134.636717][ T7498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.661779][ T7490] bond1: entered allmulticast mode [ 134.668694][ T7490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.677554][ T7490] bridge0: port 3(bond1) entered blocking state [ 134.693863][ T7490] bridge0: port 3(bond1) entered disabled state [ 134.706758][ T7490] bond1: entered promiscuous mode [ 135.125923][ T7520] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 135.159311][ T7527] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 135.193008][ T7528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.443'. [ 135.213336][ T7522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.442'. [ 135.313408][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 135.457097][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 135.519882][ T5200] udevd[5200]: worker [5842] terminated by signal 33 (Unknown signal 33) [ 135.532391][ T7534] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 135.543324][ T5200] udevd[5200]: worker [5842] failed while handling '/devices/virtual/block/loop3' [ 135.684273][ T7550] macvtap1: entered allmulticast mode [ 135.706641][ T7550] veth0_macvtap: entered allmulticast mode [ 135.795219][ T7559] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 135.859524][ T1039] syzkaller0: tun_net_xmit 76 [ 135.869655][ T1039] syzkaller0: tun_net_xmit 48 [ 135.883862][ T5955] syzkaller0: tun_net_xmit 76 [ 135.907034][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 135.916399][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.943656][ T5955] syzkaller0: tun_net_xmit 76 [ 135.965795][ T7559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.983454][ T7561] wg1: entered promiscuous mode [ 135.988385][ T7561] wg1: entered allmulticast mode [ 135.997744][ T7562] netlink: 11 bytes leftover after parsing attributes in process `syz.1.450'. [ 136.002441][ T5881] syzkaller0: tun_net_xmit 76 [ 136.007496][ T7562] netlink: 11 bytes leftover after parsing attributes in process `syz.1.450'. [ 136.035293][ T65] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 136.049227][ T7564] veth3: entered promiscuous mode [ 136.058810][ T7558] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 136.089348][ T7558] syzkaller0: Linktype set failed because interface is up [ 136.124580][ T5881] syzkaller0: tun_net_xmit 76 [ 136.248665][ T7585] netlink: 84 bytes leftover after parsing attributes in process `syz.0.455'. [ 136.268277][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 136.288792][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 136.307532][ T7587] : renamed from bridge_slave_0 (while UP) [ 136.485607][ T7592] netlink: 92 bytes leftover after parsing attributes in process `syz.1.459'. [ 136.519252][ T7595] netlink: 128 bytes leftover after parsing attributes in process `syz.4.461'. [ 136.528327][ T7596] sctp: [Deprecated]: syz.0.460 (pid 7596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.528327][ T7596] Use struct sctp_sack_info instead [ 136.547352][ T7596] sctp: [Deprecated]: syz.0.460 (pid 7596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.547352][ T7596] Use struct sctp_sack_info instead [ 136.686083][ T5955] syzkaller0: tun_net_xmit 76 [ 137.793955][ T7601] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 137.908788][ T7603] veth5: entered allmulticast mode [ 138.047403][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.054262][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.083631][ T7622] veth0: entered promiscuous mode [ 138.136730][ T7621] veth0: left promiscuous mode [ 138.161324][ T7628] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 138.260202][ T7628] 8021q: adding VLAN 0 to HW filter on device bond5 [ 138.355979][ T7633] veth5: entered promiscuous mode [ 138.405803][ T7641] xt_hashlimit: size too large, truncated to 1048576 [ 138.552006][ T7633] bond5: (slave veth5): Enslaving as an active interface with an up link [ 138.821498][ T7641] delete_channel: no stack [ 139.301307][ T7676] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 139.323028][ T7676] netlink: 'syz.3.481': attribute type 2 has an invalid length. [ 139.329556][ T7683] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 139.354303][ T7676] netlink: 'syz.3.481': attribute type 2 has an invalid length. [ 139.363676][ T7676] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 139.409042][ T7683] veth1_macvtap: left promiscuous mode [ 139.906346][ T7710] syzkaller0: entered promiscuous mode [ 139.925464][ T7710] syzkaller0: entered allmulticast mode [ 139.966277][ T7715] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.307013][ T7717] tipc: Enabled bearer , priority 0 [ 140.493521][ T7709] tipc: Resetting bearer [ 140.603481][ T7709] tipc: Disabling bearer [ 140.897200][ T7743] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 141.075653][ T7743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.150588][ T7757] __nla_validate_parse: 6 callbacks suppressed [ 141.150611][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 141.182496][ T7757] netlink: 104 bytes leftover after parsing attributes in process `syz.3.504'. [ 142.163012][ T7785] syzkaller0: entered promiscuous mode [ 142.222524][ T7785] syzkaller0: entered allmulticast mode [ 142.312096][ T7800] tipc: Started in network mode [ 142.317160][ T7800] tipc: Node identity e6229d86b9a4, cluster identity 4711 [ 142.350266][ T7800] tipc: Enabled bearer , priority 0 [ 142.394503][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.514'. [ 142.418565][ T7776] tipc: Resetting bearer [ 142.485906][ T7776] tipc: Disabling bearer [ 142.512573][ T7818] netlink: 288 bytes leftover after parsing attributes in process `syz.2.516'. [ 142.693217][ T7822] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.002833][ T5835] Bluetooth: hci4: command tx timeout [ 143.198276][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.527'. [ 143.207940][ T7845] openvswitch: netlink: Flow key attr not present in new flow. [ 143.338158][ T7838] syzkaller0: entered promiscuous mode [ 143.349939][ T7838] syzkaller0: entered allmulticast mode [ 143.639609][ T7853] netlink: 64 bytes leftover after parsing attributes in process `syz.4.528'. [ 143.910681][ T7867] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.938577][ T7866] syzkaller0: entered promiscuous mode [ 143.949684][ T7865] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.963637][ T7866] syzkaller0: entered allmulticast mode [ 144.060032][ T7872] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 144.061527][ T7862] tipc: Enabled bearer , priority 0 [ 144.177792][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 144.197636][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 144.213833][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 144.227431][ T7861] tipc: Resetting bearer [ 144.253154][ T7861] tipc: Disabling bearer [ 144.953527][ T7919] tipc: Enabled bearer , priority 0 [ 144.966461][ T7922] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 145.007677][ T7919] syzkaller0: entered promiscuous mode [ 145.055641][ T7919] syzkaller0: entered allmulticast mode [ 145.090172][ T7919] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 145.147623][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 145.165470][ T7919] tipc: Resetting bearer [ 145.303426][ T7917] tipc: Resetting bearer [ 145.405830][ T7917] tipc: Disabling bearer [ 145.428520][ T7949] syzkaller0: entered promiscuous mode [ 145.436519][ T7948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.437502][ T7949] syzkaller0: entered allmulticast mode [ 145.630913][ T7961] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 145.677972][ T7949] tipc: Enabled bearer , priority 0 [ 145.743004][ T7941] tipc: Resetting bearer [ 145.814545][ T7941] tipc: Disabling bearer [ 145.951564][ T7965] bond4: (slave gretap1): making interface the new active one [ 145.961419][ T7965] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 146.085831][ T7976] bridge0: port 3(batadv1) entered blocking state [ 146.102265][ T7976] bridge0: port 3(batadv1) entered disabled state [ 146.120443][ T7976] batadv1: entered allmulticast mode [ 146.140194][ T7976] batadv1: entered promiscuous mode [ 146.574290][ T3513] batman_adv: batadv1: IGMP Querier appeared [ 146.580589][ T3513] batman_adv: batadv1: MLD Querier appeared [ 146.779820][ T8019] vlan3: entered allmulticast mode [ 146.888630][ T8025] syzkaller0: entered promiscuous mode [ 146.895327][ T8027] __nla_validate_parse: 3 callbacks suppressed [ 146.895344][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 146.925062][ T8025] syzkaller0: entered allmulticast mode [ 146.981174][ T8018] tipc: Enabled bearer , priority 10 [ 146.995733][ T8026] netlink: 'syz.1.576': attribute type 4 has an invalid length. [ 147.006537][ T8014] tipc: Resetting bearer [ 147.031997][ T8027] netlink: 'syz.2.575': attribute type 5 has an invalid length. [ 147.072261][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 147.106893][ T8014] tipc: Disabling bearer [ 147.151991][ T8027] geneve2: entered promiscuous mode [ 147.157414][ T8027] geneve2: entered allmulticast mode [ 147.177769][ T3513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 147.208062][ T3513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 147.319857][ T3513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 147.354570][ T3513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 147.652630][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 147.661507][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030f0f000: rx timeout, send abort [ 147.690610][ T8059] netlink: 'syz.4.584': attribute type 21 has an invalid length. [ 147.713218][ T8062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.585'. [ 147.740080][ T8059] netlink: 152 bytes leftover after parsing attributes in process `syz.4.584'. [ 148.155274][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030f0cc00: rx timeout, send abort [ 148.164463][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030f0f000: abort rx timeout. Force session deactivation [ 148.216069][ T8083] syzkaller0: entered promiscuous mode [ 148.243199][ T8083] syzkaller0: entered allmulticast mode [ 148.362525][ T8089] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 148.429613][ T8083] tipc: Enabled bearer , priority 10 [ 148.448831][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.462088][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.506621][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.521100][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.595015][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f29b000: rx timeout, send abort [ 148.605028][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f29b000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.642989][ T8096] batadv0 (unregistering): left promiscuous mode [ 148.663825][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030f0cc00: abort rx timeout. Force session deactivation [ 148.735017][ T8077] tipc: Resetting bearer [ 148.837454][ T8077] tipc: Disabling bearer [ 148.942719][ T8112] netem: change failed [ 148.982622][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.024423][ T8115] team0: Port device batadv1 added [ 149.151772][ T8128] netlink: 56 bytes leftover after parsing attributes in process `syz.3.601'. [ 149.335716][ T8128] bond2 (unregistering): Released all slaves [ 149.382499][ T8134] veth0: entered promiscuous mode [ 149.390555][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.604'. [ 149.391154][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 149.761000][ T8158] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 149.788752][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 149.971494][ T8165] netlink: 'syz.3.606': attribute type 3 has an invalid length. [ 150.282985][ T3513] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 150.697719][ T8170] : renamed from hsr0 (while UP) [ 150.710769][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.612'. [ 150.817038][ T8174] syzkaller0: entered promiscuous mode [ 150.836889][ T8174] syzkaller0: entered allmulticast mode [ 150.936368][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 150.968528][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 150.996378][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 151.011502][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 151.020982][ T8177] tipc: Enabled bearer , priority 0 [ 151.023565][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 151.046442][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 151.056246][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 151.064709][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 151.072886][ T8180] netlink: 'syz.3.614': attribute type 3 has an invalid length. [ 151.103399][ T8173] tipc: Resetting bearer [ 151.156270][ T8173] tipc: Disabling bearer [ 151.175318][ T8185] veth0_to_team: entered promiscuous mode [ 151.481558][ T8195] netlink: del zone limit has 4 unknown bytes [ 151.671554][ T8203] pim6reg: entered allmulticast mode [ 151.801712][ T8213] bridge_slave_0: left promiscuous mode [ 151.852239][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.891266][ T8213] bridge_slave_1: left allmulticast mode [ 151.897306][ T8213] bridge_slave_1: left promiscuous mode [ 151.903650][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.904092][ T8223] __nla_validate_parse: 2 callbacks suppressed [ 151.904110][ T8223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.627'. [ 151.932704][ T8213] bond2: (slave veth0_to_bond): Releasing active interface [ 151.971466][ T8213] bond0: (slave bond_slave_0): Releasing backup interface [ 152.009313][ T8213] bond0: (slave bond_slave_1): Releasing backup interface [ 152.039856][ T8213] team0: Port device team_slave_0 removed [ 152.061652][ T8213] team0: Port device team_slave_1 removed [ 152.070692][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.080267][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.093806][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.101483][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.104066][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 152.120260][ T8213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.751786][ T8254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.636'. [ 152.787030][ T8255] netlink: 48 bytes leftover after parsing attributes in process `syz.1.636'. [ 152.797941][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 152.804138][ T30] audit: type=1800 audit(1763468709.389:3): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.637" name="memory.events" dev="tmpfs" ino=687 res=0 errno=0 [ 152.846920][ T5899] IPVS: starting estimator thread 0... [ 152.881427][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'. [ 152.943130][ T8258] IPVS: using max 25 ests per chain, 60000 per kthread [ 153.061227][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 153.084534][ T8263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.639'. [ 153.103980][ T8268] xt_ipcomp: unknown flags 1D [ 153.246476][ T8274] netlink: 44 bytes leftover after parsing attributes in process `syz.1.642'. [ 153.295468][ T8276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.643'. [ 153.771113][ T8301] bridge0: port 4(team0) entered blocking state [ 153.788643][ T8301] bridge0: port 4(team0) entered disabled state [ 153.798805][ T8301] team0: entered allmulticast mode [ 153.821674][ T8301] team_slave_0: entered allmulticast mode [ 153.838154][ T8301] team_slave_1: entered allmulticast mode [ 153.878712][ T8301] team0: entered promiscuous mode [ 153.886240][ T8301] team_slave_0: entered promiscuous mode [ 153.893249][ T8301] team_slave_1: entered promiscuous mode [ 156.033853][ T5835] block nbd0: Receive control failed (result -32) [ 156.255707][ T8369] bond0: entered allmulticast mode [ 156.262060][ T8369] bond_slave_0: entered allmulticast mode [ 156.267846][ T8369] bond_slave_1: entered allmulticast mode [ 156.638886][ T8395] bond2: Removing last arp target with arp_interval on [ 156.855960][ T8399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.921793][ T8414] __nla_validate_parse: 14 callbacks suppressed [ 156.921814][ T8414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.683'. [ 157.137782][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 157.201068][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 157.305944][ T8427] validate_nla: 41 callbacks suppressed [ 157.305966][ T8427] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 157.394606][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.688'. [ 157.413371][ T8427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.686'. [ 157.516925][ T8427] dummy0: entered promiscuous mode [ 157.529416][ T8427] bridge0: port 4(dummy0) entered blocking state [ 157.584030][ T8427] bridge0: port 4(dummy0) entered disabled state [ 157.613307][ T8427] dummy0: entered allmulticast mode [ 157.685716][ T8436] netlink: 'syz.2.690': attribute type 1 has an invalid length. [ 157.815197][ T8436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.873287][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 157.915456][ T8436] vlan0: entered allmulticast mode [ 157.920828][ T8436] bond3: entered allmulticast mode [ 157.975364][ T8444] bond3: (slave vxcan3): refused to change device type [ 158.015651][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 158.071504][ T8448] veth7: entered promiscuous mode [ 158.089881][ T8448] bond3: (slave veth7): Enslaving as an active interface with a down link [ 158.410101][ T8455] syzkaller0: entered promiscuous mode [ 158.432824][ T8455] syzkaller0: entered allmulticast mode [ 158.461454][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 158.486733][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 158.512033][ T8479] netlink: 'syz.2.698': attribute type 12 has an invalid length. [ 158.542951][ T8479] netlink: 'syz.2.698': attribute type 11 has an invalid length. [ 158.599109][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 159.782529][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.841959][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.893021][ T1165] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.901813][ T1165] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.935255][ T8500] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 160.054851][ T8509] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 160.318046][ T8520] syzkaller1: entered promiscuous mode [ 160.324847][ T8520] syzkaller1: entered allmulticast mode [ 160.353550][ T8524] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 160.361710][ T8520] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 160.433259][ T8527] netlink: 'syz.0.713': attribute type 11 has an invalid length. [ 160.569783][ T8531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.625936][ T8531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.722209][ T8530] veth3: entered allmulticast mode [ 160.804623][ T8533] veth5: entered allmulticast mode [ 160.845026][ T8542] syzkaller1: entered promiscuous mode [ 160.854667][ T8542] syzkaller1: entered allmulticast mode [ 161.057300][ T8542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.880519][ T8579] pim6reg: entered allmulticast mode [ 162.055905][ T8604] sctp: [Deprecated]: syz.4.735 (pid 8604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.055905][ T8604] Use struct sctp_sack_info instead [ 162.135788][ T8610] Cannot find add_set index 2 as target [ 162.170833][ T8616] __nla_validate_parse: 10 callbacks suppressed [ 162.170854][ T8616] netlink: 344 bytes leftover after parsing attributes in process `syz.2.736'. [ 162.779304][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 162.891810][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 162.939446][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 163.106491][ T8654] erspan0: entered allmulticast mode [ 163.378283][ T8672] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 163.523308][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 163.632615][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.753'. [ 163.963226][ T8699] netlink: 'syz.0.756': attribute type 29 has an invalid length. [ 163.972805][ T8709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.759'. [ 163.982844][ T8699] netlink: 'syz.0.756': attribute type 29 has an invalid length. [ 164.012905][ T8709] unsupported nlmsg_type 40 [ 164.036095][ T8699] netlink: 500 bytes leftover after parsing attributes in process `syz.0.756'. [ 164.239841][ T8720] tipc: Enabling of bearer rejected, failed to enable media [ 164.265823][ T8725] veth5: left promiscuous mode [ 164.304670][ T8725] geneve2: left promiscuous mode [ 164.328987][ T8725] veth7: left promiscuous mode [ 164.353491][ T8732] tipc: Enabling of bearer rejected, failed to enable media [ 164.395418][ T8726] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 164.425846][ T8726] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 164.472285][ T8726] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 164.485324][ T8726] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 164.644835][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 164.817931][ T8768] netlink: 'syz.2.769': attribute type 33 has an invalid length. [ 165.651488][ T8780] syzkaller0: entered promiscuous mode [ 165.671732][ T8780] syzkaller0: entered allmulticast mode [ 165.850449][ T8819] netlink: 6 bytes leftover after parsing attributes in process `syz.0.779'. [ 167.123413][ T8833] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 167.234938][ T8833] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 167.269197][ T8833] bond5 (unregistering): Released all slaves [ 167.383186][ T8837] syzkaller0: entered promiscuous mode [ 167.428339][ T8837] syzkaller0: entered allmulticast mode [ 167.599419][ T8868] __nla_validate_parse: 1 callbacks suppressed [ 167.599439][ T8868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.793'. [ 168.254038][ T8885] netlink: 64 bytes leftover after parsing attributes in process `syz.4.798'. [ 168.276192][ T8888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.799'. [ 168.286332][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 168.319085][ T8890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.800'. [ 168.405444][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 168.566635][ T8904] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 168.627301][ T8909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.806'. [ 168.647403][ T8911] xt_connbytes: Forcing CT accounting to be enabled [ 169.026370][ T8934] netlink: 44 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.057691][ T8934] netlink: 43 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.097201][ T8934] netlink: 'syz.4.814': attribute type 5 has an invalid length. [ 169.123734][ T8934] netlink: 43 bytes leftover after parsing attributes in process `syz.4.814'. [ 169.163795][ T8940] syzkaller0: entered promiscuous mode [ 169.169340][ T8940] syzkaller0: entered allmulticast mode [ 169.237535][ T8940] tipc: Enabled bearer , priority 0 [ 169.269497][ T8939] tipc: Resetting bearer [ 169.288063][ T8939] tipc: Disabling bearer [ 169.663459][ T8965] netlink: 'syz.2.823': attribute type 32 has an invalid length. [ 169.704790][ T8965] bond4: Setting coupled_control to off (0) [ 169.859687][ T8973] netlink: 'syz.1.826': attribute type 29 has an invalid length. [ 169.870773][ T8973] netlink: 'syz.1.826': attribute type 29 has an invalid length. [ 170.141776][ T8984] syzkaller0: entered promiscuous mode [ 170.148284][ T8984] syzkaller0: entered allmulticast mode [ 170.179003][ T8984] tipc: Enabled bearer , priority 0 [ 170.190000][ T8983] tipc: Resetting bearer [ 170.221623][ T8983] tipc: Disabling bearer [ 170.418387][ T8992] wg1: left promiscuous mode [ 170.428417][ T8992] wg1: left allmulticast mode [ 170.484342][ T8998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.543981][ T8998] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 170.581551][ T9001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.623685][ T9005] xt_l2tp: v2 doesn't support IP mode [ 170.747245][ T9000] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 170.799801][ T9015] netlink: 'syz.2.840': attribute type 4 has an invalid length. [ 171.034516][ T9028] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 171.085582][ T9028] veth0_virt_wifi: entered allmulticast mode [ 171.139357][ T9028] team0: Port device veth0_virt_wifi added [ 171.193609][ T9032] syzkaller0: entered promiscuous mode [ 171.234118][ T9032] syzkaller0: entered allmulticast mode [ 171.348569][ T9040] tipc: Enabled bearer , priority 0 [ 171.440701][ T9029] tipc: Resetting bearer [ 171.624114][ T9029] tipc: Disabling bearer [ 171.838568][ T9058] chnl_net:caif_netlink_parms(): no params data found [ 171.946185][ T9068] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 171.976643][ T9060] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 171.980272][ T9068] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 172.627908][ T9105] __nla_validate_parse: 12 callbacks suppressed [ 172.627927][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.866'. [ 173.120203][ T9133] vlan0: entered promiscuous mode [ 173.144277][ T9133] vlan0: entered allmulticast mode [ 173.155104][ T9133] veth0_vlan: entered allmulticast mode [ 173.459060][ T9153] syzkaller0: entered promiscuous mode [ 173.478406][ T9153] syzkaller0: entered allmulticast mode [ 173.500174][ T9150] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.524459][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.531742][ T9150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.597958][ T9157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.622583][ T9162] bond3: (slave veth0_to_bond): making interface the new active one [ 173.633916][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 173.663765][ T9162] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 173.714456][ T9153] tipc: Enabled bearer , priority 0 [ 173.754528][ T9152] tipc: Resetting bearer [ 173.801037][ T9152] tipc: Disabling bearer [ 173.899620][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 174.115734][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 174.350023][ T9194] validate_nla: 3 callbacks suppressed [ 174.350043][ T9194] netlink: 'syz.4.893': attribute type 4 has an invalid length. [ 174.411211][ T9184] syz.0.891: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.458794][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT(full) [ 174.458821][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.458842][ T9184] Call Trace: [ 174.458852][ T9184] [ 174.458861][ T9184] dump_stack_lvl+0x189/0x250 [ 174.458898][ T9184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.458928][ T9184] ? __pfx__printk+0x10/0x10 [ 174.458949][ T9184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.458978][ T9184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.459007][ T9184] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.459039][ T9184] warn_alloc+0x214/0x310 [ 174.459076][ T9184] ? __pfx_warn_alloc+0x10/0x10 [ 174.459116][ T9184] ? __get_vm_area_node+0x28f/0x300 [ 174.459145][ T9184] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 174.459170][ T9184] __vmalloc_node_range_noprof+0x690/0x12d0 [ 174.459240][ T9184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.459270][ T9184] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 174.459294][ T9184] ? rcu_is_watching+0x15/0xb0 [ 174.459319][ T9184] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 174.459340][ T9184] __kvmalloc_node_noprof+0x674/0x910 [ 174.459371][ T9184] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 174.459391][ T9184] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 174.459418][ T9184] ? kfree+0x19a/0x6d0 [ 174.459441][ T9184] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 174.459469][ T9184] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 174.459507][ T9184] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 174.459527][ T9184] ? __fget_files+0x2a/0x420 [ 174.459549][ T9184] ? __fget_files+0x2a/0x420 [ 174.459568][ T9184] ? __fget_files+0x2a/0x420 [ 174.459591][ T9184] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 174.459621][ T9184] link_create+0x673/0x850 [ 174.459648][ T9184] __sys_bpf+0x6be/0x860 [ 174.459671][ T9184] ? __pfx___sys_bpf+0x10/0x10 [ 174.459713][ T9184] ? rcu_is_watching+0x15/0xb0 [ 174.459745][ T9184] __x64_sys_bpf+0x7c/0x90 [ 174.459780][ T9184] do_syscall_64+0xfa/0xfa0 [ 174.459808][ T9184] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.459837][ T9184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.459856][ T9184] ? clear_bhb_loop+0x60/0xb0 [ 174.459881][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.459900][ T9184] RIP: 0033:0x7fb4c4f8f6c9 [ 174.459929][ T9184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.459946][ T9184] RSP: 002b:00007fb4c5e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.459968][ T9184] RAX: ffffffffffffffda RBX: 00007fb4c51e5fa0 RCX: 00007fb4c4f8f6c9 [ 174.459982][ T9184] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 174.459995][ T9184] RBP: 00007fb4c5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.460007][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.460018][ T9184] R13: 00007fb4c51e6038 R14: 00007fb4c51e5fa0 R15: 00007ffc643856f8 [ 174.460053][ T9184] [ 174.461227][ T9184] Mem-Info: [ 174.779172][ T9184] active_anon:5795 inactive_anon:0 isolated_anon:0 [ 174.779172][ T9184] active_file:2565 inactive_file:39903 isolated_file:0 [ 174.779172][ T9184] unevictable:768 dirty:66 writeback:0 [ 174.779172][ T9184] slab_reclaimable:10884 slab_unreclaimable:99127 [ 174.779172][ T9184] mapped:29169 shmem:1365 pagetables:1226 [ 174.779172][ T9184] sec_pagetables:0 bounce:0 [ 174.779172][ T9184] kernel_misc_reclaimable:0 [ 174.779172][ T9184] free:1325361 free_pcp:14888 free_cma:0 [ 174.829036][ T9184] Node 0 active_anon:23180kB inactive_anon:0kB active_file:10260kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116676kB dirty:264kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12904kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.865265][ T9184] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.897099][ T9184] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.909175][ T9206] syzkaller0: entered promiscuous mode [ 174.932676][ T9184] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 174.938858][ T9206] syzkaller0: entered allmulticast mode [ 174.953377][ T9184] Node 0 DMA32 free:1399024kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23240kB inactive_anon:0kB active_file:10260kB inactive_file:159412kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:41288kB local_pcp:22168kB free_cma:0kB [ 175.023807][ T9184] lowmem_reserve[]: 0 0 0 0 0 [ 175.030074][ T9184] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.067218][ T9184] lowmem_reserve[]: 0 0 0 0 0 [ 175.087530][ T9184] Node 1 Normal free:3886728kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18944kB local_pcp:9824kB free_cma:0kB [ 175.132195][ T9184] lowmem_reserve[]: 0 0 0 0 0 [ 175.136997][ T9184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 175.155882][ T9211] tipc: Enabled bearer , priority 0 [ 175.173712][ T9201] tipc: Resetting bearer [ 175.186297][ T9184] Node 0 DMA32: 1*4kB (U) 0*8kB 115*16kB (UM) 147*32kB (U) 100*64kB (UM) 24*128kB (UE) 42*256kB (UME) 20*512kB (UME) 18*1024kB (UM) 4*2048kB (M) 326*4096kB (UM) = 1398932kB [ 175.205068][ T9184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.247726][ T9184] Node 1 Normal: 210*4kB (UME) 62*8kB (UME) 51*16kB (UME) 75*32kB (UME) 23*64kB (UME) 4*128kB (UM) 5*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3886728kB [ 175.291909][ T9184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.336694][ T9201] tipc: Disabling bearer [ 175.348624][ T9184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.379175][ T9184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.410950][ T9184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.446295][ T9226] bond_slave_1: entered allmulticast mode [ 175.453197][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 175.472008][ T9184] 43831 total pagecache pages [ 175.492069][ T9184] 0 pages in swap cache [ 175.493459][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 175.502370][ T9184] Free swap = 124996kB [ 175.507863][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 175.526839][ T9184] Total swap = 124996kB [ 175.536677][ T9184] 2097051 pages RAM [ 175.540623][ T9184] 0 pages HighMem/MovableOnly [ 175.559137][ T9184] 424119 pages reserved [ 175.578260][ T9184] 0 pages cma reserved [ 175.827596][ T9243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.907'. [ 175.870271][ T9248] batadv0: entered allmulticast mode [ 176.281627][ T9259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.311362][ T9264] syzkaller0: entered promiscuous mode [ 176.317836][ T9264] syzkaller0: entered allmulticast mode [ 176.359494][ T9263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.378022][ T9264] tipc: Enabled bearer , priority 0 [ 176.416504][ T9262] tipc: Resetting bearer [ 176.457973][ T9262] tipc: Disabling bearer [ 176.497891][ T9271] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 176.556456][ T9271] bond3: (slave gretap1): making interface the new active one [ 176.565676][ T9271] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 176.587116][ T9271] gretap2: entered promiscuous mode [ 176.854809][ T9283] pim6reg: entered allmulticast mode [ 177.271763][ T8723] [ 177.274164][ T8723] ============================================ [ 177.280429][ T8723] WARNING: possible recursive locking detected [ 177.286675][ T8723] syzkaller #0 Not tainted [ 177.291099][ T8723] -------------------------------------------- [ 177.297333][ T8723] kworker/u8:12/8723 is trying to acquire lock: [ 177.303566][ T8723] ffffe8ffffd77a88 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 177.312807][ T8723] [ 177.312807][ T8723] but task is already holding lock: [ 177.320253][ T8723] ffffe8ffffd77d30 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 177.329487][ T8723] [ 177.329487][ T8723] other info that might help us debug this: [ 177.337542][ T8723] Possible unsafe locking scenario: [ 177.337542][ T8723] [ 177.344990][ T8723] CPU0 [ 177.348274][ T8723] ---- [ 177.351552][ T8723] lock(&pd_list->lock); [ 177.355889][ T8723] lock(&pd_list->lock); [ 177.360229][ T8723] [ 177.360229][ T8723] *** DEADLOCK *** [ 177.360229][ T8723] [ 177.368374][ T8723] May be due to missing lock nesting notation [ 177.368374][ T8723] [ 177.376701][ T8723] 3 locks held by kworker/u8:12/8723: [ 177.382084][ T8723] #0: ffff8881476fa148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 177.394047][ T8723] #1: ffffc9000dc87ba0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 177.405895][ T8723] #2: ffffe8ffffd77d30 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 177.415570][ T8723] [ 177.415570][ T8723] stack backtrace: [ 177.421464][ T8723] CPU: 1 UID: 0 PID: 8723 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 177.421482][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.421494][ T8723] Workqueue: pencrypt_parallel padata_parallel_worker [ 177.421529][ T8723] Call Trace: [ 177.421537][ T8723] [ 177.421544][ T8723] dump_stack_lvl+0x189/0x250 [ 177.421568][ T8723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.421589][ T8723] ? __pfx__printk+0x10/0x10 [ 177.421606][ T8723] ? print_lock_name+0xde/0x100 [ 177.421621][ T8723] print_deadlock_bug+0x28b/0x2a0 [ 177.421659][ T8723] validate_chain+0x1a3f/0x2140 [ 177.421680][ T8723] ? irqentry_exit+0x74/0x90 [ 177.421703][ T8723] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.421725][ T8723] ? look_up_lock_class+0x74/0x170 [ 177.421749][ T8723] ? register_lock_class+0x51/0x320 [ 177.421766][ T8723] __lock_acquire+0xab9/0xd20 [ 177.421784][ T8723] ? padata_do_serial+0x707/0xb80 [ 177.421803][ T8723] lock_acquire+0x120/0x360 [ 177.421817][ T8723] ? padata_do_serial+0x707/0xb80 [ 177.421843][ T8723] _raw_spin_lock+0x2e/0x40 [ 177.421862][ T8723] ? padata_do_serial+0x707/0xb80 [ 177.421885][ T8723] padata_do_serial+0x707/0xb80 [ 177.421914][ T8723] ? padata_parallel_worker+0x44/0x1d0 [ 177.421935][ T8723] padata_parallel_worker+0x75/0x1d0 [ 177.421956][ T8723] ? process_scheduled_works+0x9ef/0x17b0 [ 177.421974][ T8723] process_scheduled_works+0xae1/0x17b0 [ 177.422002][ T8723] ? __pfx_process_scheduled_works+0x10/0x10 [ 177.422026][ T8723] worker_thread+0x8a0/0xda0 [ 177.422054][ T8723] kthread+0x711/0x8a0 [ 177.422077][ T8723] ? __pfx_worker_thread+0x10/0x10 [ 177.422093][ T8723] ? __pfx_kthread+0x10/0x10 [ 177.422115][ T8723] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.422135][ T8723] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.422157][ T8723] ? __pfx_kthread+0x10/0x10 [ 177.422178][ T8723] ret_from_fork+0x4bc/0x870 [ 177.422203][ T8723] ? __pfx_ret_from_fork+0x10/0x10 [ 177.422222][ T8723] ? __switch_to_asm+0x39/0x70 [ 177.422235][ T8723] ? __switch_to_asm+0x33/0x70 [ 177.422247][ T8723] ? __pfx_kthread+0x10/0x10 [ 177.422269][ T8723] ret_from_fork_asm+0x1a/0x30 [ 177.422289][ T8723] [ 177.704775][ T9312] bond6: entered promiscuous mode [ 177.709909][ T9312] bond6: entered allmulticast mode [ 177.717104][ T9312] 8021q: adding VLAN 0 to HW filter on device bond6