last executing test programs: 3.370908034s ago: executing program 0 (id=4465): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r1, &(0x7f00000019c0)=@abs, 0x6e) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0xb, 0x28}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x1000f) 3.251060519s ago: executing program 0 (id=4468): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4094, 0xffe}, {&(0x7f0000002280)=""/4095, 0xfff}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3}, 0x40000020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r4, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10, 0x1, 0xc}], 0x10}}], 0x1, 0x20000040) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r5, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 2.699253093s ago: executing program 1 (id=4476): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x30, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}, 0x8}], 0x1, 0x2, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRES32=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 2.314515121s ago: executing program 0 (id=4483): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d000000180100e48d1473eb60a8cb0020646c2500000000002020f7a61af81401000000bfa100000000000007010010f8ffffffb702000008000000b703000000000000850000006d00000095f81a52cbbc6f889557dba2d2d7c456c1cc30ab06", @ANYBLOB="8defeeb9b2f237ee94a6e266e0019d0791206a5ecac5fb893a95a6d3a69545ab190e28abf292e1587253577b31b3f0fee89968648a228eb331da606e3b85de4f2f261afcdcdb2404fa64422a7d4332b1c57d4f6f1588225071d835abf4a33f02824cbcce7c8b24e835d79de36a3c5b082e477f1b5166420cf6ca0c4009f3f9c3877b565d6036be1852c478f43b3b6b44d4924927636b13669c8b099e282f839d617cc3d0ff30a37d8ee71514e55a4775e56374acbe5bc5c54d775cc09417"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b, 0x1}, 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x204, 0xffffffff, 0x101, 0x0}, &(0x7f0000000300)=0x10) syz_emit_ethernet(0x42, &(0x7f0000000680)={@local, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@arp={0x806, @generic={0x301, 0x88be, 0x6, 0xc, 0x9, @multicast, "6c56183b5ecc42c427e6310b", @broadcast, "6aa036020d5d1438e494b433cf00caee"}}}}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000340)={r8, 0x6, 0x9, 0x5, 0x3, 0xffc}, &(0x7f0000000380)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='svc_authenticate\x00', r3, 0x0, 0x1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18010c0021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000540)={0x1, [0x0]}, &(0x7f0000000580)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='rpcgss_seqno\x00', r3, 0x0, 0x7fff}, 0x18) 2.020421257s ago: executing program 0 (id=4487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) (async) sendmmsg$alg(r1, &(0x7f0000000000), 0x0, 0x24002894) (async) sendmsg$kcm(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000200)="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", 0x13c}, {&(0x7f0000000500)="909dcb6b2ff63f57b07f672dd7a3ca8b94227a5c618d5a442da9c1e9a442c27321f5690de8053f3945c9ae744d1f385c3a6c65eaf1ca23a0da70e987b202e2de5dac48a8d6839fa5855b5aeb3473e85dd24db36da7695c187d21f4fa3f08324826ad75aa3f35876eab89b25ebc0c987d9fc7de06b8a712fc6643ffc6e1193a9c0653273f83a0832322f32ea812d1a5a97dc19fed1b38018a3bbca96d642f7b25fcaa872f01bb2d6756223aefe8dc84d30cb58461e67906e255cae3d12a6daba59ca4a7e78146c0737a2a35d202d51ee336d51bd4b2a8c00633c35ef6363ca3b4254e9ce8864727afb7", 0xe9}, {&(0x7f0000000780)="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", 0x1d0}, {&(0x7f0000000680)="ad5768f024e33b50048a9c", 0xb}], 0x4}, 0x4c000) 1.96753193s ago: executing program 2 (id=4488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r2, 0x1, 0x4b, 0x0, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c060500006187040000000000050000000041000700000000000085"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) (async) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c060500006187040000000000050000000041000700000000000085"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.770680535s ago: executing program 2 (id=4490): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3e8, 0x801, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x78f61fa005f7a46}, 0x800) accept$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@rose, @null, @remote, @rose, @default, @bcast, @remote, @bcast]}, &(0x7f0000000200)=0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110ba0000000000060000000000e6ff9400000000502579"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) 1.639766904s ago: executing program 2 (id=4491): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e9, 0x0) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) 1.501484943s ago: executing program 1 (id=4492): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010426bd700c000000017759b920144a7591628cc50476e0f8889c0ce3000000", @ANYRES32=0x0, @ANYBLOB="7b150000000000001c0012800b00010067656e65766500000c000280060005004e220000"], 0x3c}}, 0x40800) 1.421323918s ago: executing program 2 (id=4494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xd7, 0x0, [@private1, @empty, @mcast2, @private0, @dev={0xfe, 0x80, '\x00', 0x14}, @dev={0xfe, 0x80, '\x00', 0x2d}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x88) socket$qrtr(0x2a, 0x2, 0x0) 1.331128625s ago: executing program 1 (id=4496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='mm_lru_insertion\x00', r2}, 0x18) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080), 0x4) (rerun: 32) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 1.297816809s ago: executing program 2 (id=4498): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250c000000400003803500040022c6549bfd4c165cf33cc3433d23b60fc8afe440f2c256cc3ec7e9a063358f8a2982b3a980ae19ebdb93c64053eb72cc32000000040001002800018014000200708c6d367265673000000000000000000800030000000000080003000300000074010380080002009600000098000500d51fd985dfdabcca22c8c2f689785ceab01d3d297f8bfdbb34569602ce7456c16b3eeb98d8c1d0114f86405d13018c4a8a5e5df3502c660952513bf6323ae0d9a0d34ccda1acc8612f95575f40c6a6819ccbfa2a3af77fcceb517d924530ff725bac5808537fa57c190c023177e5f73d3516cc916e88a6739d68fc5fe84b604d695d5ba68d5eb4a3030bfd543e0f9cca6a696344ca00050058ea637033b56cccd9f70a0212a8ce36c9a40121d3a109bc12293435414a47dbaad5a1fc4498f2fc386581fdd0335170b17b3504aa8c022fe9395952a00cca42c4ee8b4adeea6403f6c79657f7e452ed19376d0ea30ffff83bfe349f374736e3834c6d4e330b19917e64bd34accaf489f1a258c05fc98ec566cf6ccb0a48a59617adcc74bf407d89e9cafdd7ab2a49559d091f5e80801d57665ddb65f0c2f5bd472b3f7351857a63e81782f4b8cadb142693a1ce985b41da3bcadfcdf9e61e67188d8116cfe3000004000100180001801400020076657468305f766972745f77696669"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) 1.207005366s ago: executing program 1 (id=4499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 1.146268267s ago: executing program 1 (id=4501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x110}}, 0x20000800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) recvmmsg(r0, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.00713208s ago: executing program 0 (id=4503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x14) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e5eceeef", 0x4}], 0x1}}], 0x2, 0x4040040) 1.006534163s ago: executing program 3 (id=4504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "ecad80", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @private1}}}}}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r1, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) 926.601084ms ago: executing program 1 (id=4505): unshare(0x4000380) (async) unshare(0x20000200) (async) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @netrom, 0x1, @netrom}, &(0x7f0000000040)=0x1c, 0x80000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) (async) r1 = socket$packet(0x11, 0x2, 0x300) connect$packet(r1, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) (async) socket$netlink(0x10, 0x3, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000100)={0x3, 0x52, "7fcfddf42fd7cefb744b7a553553d8c8cbbac854706a7926e195cc53f448489f5b51cf24ad5dae7f49ab292ef78132dde70b545383d794f659547b0bdb257f5662737e09c0598c263baf87fa25f37ed6b5f6"}) shutdown(r0, 0x0) unshare(0x40000000) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000001c0)={@mcast2, r3}, 0x14) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r1, 0x8000) unshare(0x18010000) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'pimreg0\x00'}}) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000280)={{r0}, "b4ed95a11192924daddbf3968d19f314b2124782d6b731fa0c9c5566bdef071066bf7390336b823645467086c39b441c6c4da8b4e3d5e79e1ee99d9697f5858d81e7c6fa7a492dd4d224bb573d35c8a5bc626c8fdfc9595c4caaaaf6cb1f7b4941f3e5fcef29341be1b6a964debefa537e93e6a87fe95bbc067461733f5de75388ee6bdfcd8879436b5e37e480b706b39d0e3dc71efb3ba5ebedbafd9b0f7f789505d6e09a8bc9174b86348e54b77fffcfb9f8ed2044bca0433d54d9684185d898d2b7b90c87c1948b5521f9f9ca4caaa7419ebd53b96b73dc84644082ae3329db648aaa9d71ecbb5464aa581dab0fe82e110938ce98846a60d9ba220bf772db8124e4bd384a9d7f1a9cc8bbb425e5e2b1355e9f60a1ffc0a73f7b7c28cfb251b3fefd55945c80c5d3924542a8103e9f5f352187bb422c4cd0e3789360112f25654ff3942f83c7480afcccba9737b3adf8ff0fff03dd908d4c530a7849f47ea9898373bbe25e9936517c8179f1406af69f7746bdc5bbe4fc705220228bbf53c7a673db2f47da3a2be0b4d210f2890911827f709ebcb594ce97ef36ccdbd90b81bf7833bd1d816fb9afab464623d6be0772bbf855b750815607f143714cef72123ae6766495bc4926cf342dcf7c8221180263dbd330e476064b01abf9249800b192da043ae0dda3403b9b3c9f18a5d2b185b9016ffc6ed78201809f88aefa0d063f061d2411266a0972c4d90e32590cdebba3fb7919cbeb3ca7d3839ceb23aa818e1017293e8a80d60cbe7e8d37b54d4d98b783ea417b7daed7f2c6247b9d9d25e178378da87911549cfeb8e05ade37b597608d49339cd9436afa79ef812b62679a8ea02092952a3e683fea98923d0830bcd0064a731359a6d3a6e33e68f950d0b612087a2947f12943e0d8e4bdcfdcc0154e27be042f7858157e4a690677168bf94879eae7ea8966f252467301a47fc7e32c08128677debc6459a212659f2000fa57b7e87eeb6b630db05621304742f0a5218ef54df0794f9b30a86d2d64d5aa076d43a95caa27e16583e62bb12a4c9dbfd0a223361b838f2df599d8ae981d68b65c999cfac5862309360ff3402efaddc037f43e68cec6ad47c69d4150b831a5b1735c0800da5f7691c9cd7c6737ce52c32cce6ae2aafe5d5a71fe003c6bdf29b22361205c2e36d113824be3cf8b86cc36ebb006252de3712e5720c4d8cdbab9d97b1ec693d11bf4df33b52d14660e149df92d01c19255d17de3bc1267448fbb2fba269aa6f3d82d3818e98b4fa699b006d799c4bc5694c20cbc7338f6edf4421008e35641cb778355e138e2a0b9240f8a08477cc77777d5bafdcb90687f4d084b56e7ea711fae3039e5d29452d095bf7840157da362e8dcb52dd3e1e1840fe9638150d6d0881c59036d419af637755829780b005ef078bed19b4fc205bcab0b16f28dbfa5a5d5323b733bbdaf6d9f9023afb150ec7c1b8d154ca75ce2b24035c3369b89fbb2f495e2749619c472d034088d478dec76e1ab783cc3f11567e9602dc767ae4886ea39f8971017a60e1c65e2b3925d8f34b03852b20af9dedd91c6d3530fc22c903655350765531de4ab755cd5f537917e0ec3c862d0a051bfe89c25b4236c8c4268618ffc71f3c8b4922873b2a5671623a2b01ffe3c6529edcb7a283e65423dceaa31c1c49dcd172da28ba39e5217f21b0ee27dcfd1ba0e0321bf9d2b29da12f2b5df15a4955dcd70b00ad951a05bfdcac581d61c243b8ea3a14bd280bb3fc5958b2bbc8e1291b1be4524378b40540549e032d84ed648120cc26ea0a362f3eae7576b11170f516684848f371e0514378362398cdd85a15ccf6d9ae8db972f3c58df293e6c6ed7a425a2e656512ce97a740290c68ae1c47d9a1cd8a14c36a3381458472e5f68741b6105a930cfeb9dc9cc15172e926fbeafc377d3c17b508c221558ba6e61a64a27d9ba51fdc7927891f23e7d1cd348b60b4e895de9b9def511f1f59f8c95df37d81f11abc9f31f06168b9fc3d38efdad5ea7de454bd4d201954cf5b5326ae20cf0b0b90265d9448a6f203fd888e188759bd1e67c07c164e6e90e0fee1532fde6201c17beb9ca2deb6c67c433c3d1b7fda25d2cdfc4ffec474fd6f7fe9ac0a873e12753a7236c4478955a5798e82fc7087ea501552d1be281207ccc361410307701361c4d77e8202a6a61bd1169dca877d1b48ccfe61f087633e5b39b1e5f71d871f28fe6dbfd583b9225349457114d4f5cb30e0667a727fc7197ce06fd0825d7fbf3f24550ad4c9494b0d329e37e226d31c66d1b9bbe8f90439fff508a6a4f1e2c4f539a8272cc3c083ea36d0616be89fc680e7d8799508d2a858820f2b2ec0d28db8292ea3047ca6cf39c6edc5086f49fc1803e7331a1688c00c4985be3a5a3bc7a0dc0f9dd316135468547683d64c1e981768c56759c701ba67575dfee34a65946474351fcf8f565f7d1d750e5d34ea508b93c73dd36b92ed5c9542f35c47fb235859f916966026af18617fdd725d261ada27ce588ae81463f8b185d85fdde352131a4f37f32d59d2f5e4a05e5ca3f7a23f6b978a1c2321d2041d2b5fe3976e881be6520877b0641f9678ab8439a007b123d6267963d1ed01e51f02269a2fe0da1d84691a8fc2c4652c9a654d45037e4be6192e9b3a0367ceb1ce441f2cf88f1b556a53aa1d2c614a6d88b2e100babee99ea3b751aa20994e867e1da74ed62af9f4e65ceb382ca012d164fabd4776aa744b424de21d37fdfc53acbce45c4a156a46bb00e5fcf6b34a218f32acaa25567344ece3b496a54778e00f3a90e878c9aa4d37354e8ed2d635924914928a53ff4e3a431fd30f20ae65b975e6c301dab6db7b4832f93e34d45cd989ce22ce32227907ad073646bfc4f60a6b982dfe415821ab007552a131ea2861714fae6fa99b01c9d386558651be3ad1d747d02cceb5c91e1b084a58d2f9ae15405a36cfcdcd3146083640ccecadc39f8014a60b67b27ceba61ceab0ed27827b63920e97121a40ef70561732a1ca91388deb7854b526e000bd97a09de0b9839fc85c0e96aa13d7d843cc5431706acc741f7eaa0e87c9d7e80c539ce55342ec97dbef327c44a16bda6b60cf6b0f462d0331357d0ac735d9a8a05d12bb66730b2ef1e4af0b2f568c4c0076f9def120a33f3a25d7ae9cea4baced140088573931afc0709689884f4a8215b0da47518b2ec7916443535cd1b77768f6145fb5ffe83c973aef225bc6deef627b4d1fb6f4d0966f47f87d0a09d345074aea5c6a143d4a70ef6e7a0ce97f8a7067cf19a2ec418fcf7032f8c54e0f85fef355d4dcb13b5856e5a505172f415ce558dbb5fbb046335833a67ecae1158b4f2edcb0e38bb6250f5d970321729c94ba0e97d2d5512044013be1ec8a642d5b2eb849448c74b085d8ec482c5c57564ba837b3d3cfb2bd90cb284fa605222fce3a4c3414958ff1352f93b85a0648fdbe0e75c76ed25527fb9a0289526d1ebee03385f0823f6462b7688e7a7079031bf2c73b8726232534d9630101a79a4abbe6afaa8416304b8e3bf21b36825d8688ef644ebe2111a5bfbfcd67cf7ca4724430ef00f906f7745c93b25eabca0dd12d09c55b035c5da24394f98b873947c60d89e0486833c301265fc91bf22dd37d4eb028cbd18fa3d2f44c8511d7e733b726b6cfbee6a1efe87e8aa451fa86f803784295d1f27673426aa13f19e77fcbe29a899fee87008a4899dff17b01d8a133f8c29285759c85e99621bd3d4bd86b432d9d1a1cafc9bd0db2a193bfab8b779c3df0d1743eab02c75687ddb90906d215757153e29086cd6dc7fdeaf1e80d63366837f48b1910b2591f8159c5af101c733493caf936b49664d09b8da8a99b6cbe0e2f365ac8925cc09cf0a2e0e33fa75913c98a77d977dfa6c4fd2571a7abbb6212ffa2f3dbf4710ccfadbaac19ce5c356e854301341173fe3d9baeffe4142e005cbfa1ae6bf84d14779dc92f6972ffd779cd56d80669cf58c135799896b69fd4020df0ea27696466405085a0ba8f082f2a2bc4395438b8d582b4bd2b9b60368e493c679a06482d1ea01feee7b55768af8ae138aa21a8766b7f01dc2e4c33369ad20cf4ecfe4e056aeef917f9f80bd28489000d7cd1dfa0b32407112ba758b1daddae04e92652a5fe8d7211c6a860c977122cf437591b6c3e1fad6d72be102623725aca3fa89c37039120318170b2fe88c1b766d13c0cac788e2edee0c8d092a917ee9252cc1c05b6a8e1d77f95240f9a093cd78f9f55171d5675dceb0d3f86fda4bc013e5ba93a9d3790157517bcddeb305d4bd70861847231ef4162f6100749e37cfb0a700676abf9d79e28525132dcf0903592309b6cbfdbe02c43afd2760bda4108ee0e299f043234467b3020f14bbaa1a874f057a4f292426bcc231815911e8e7a826a65ee7885502c8ca83fd28abf284d50910dbc79b2527e9ab1b32895a9403c3bf67f5ab9f0788d635793f94414b2556d10b14f3bcab8150a17cb792134a1cbef0c75b294ffb918f902db0fd8919d6cfb8b163b247921d41c5d907441c9a7fef6addc5dc6df5ec754f27a02c0ad0249513022e4c0e3929b436a11e6f74b643cdc6dc1e6329a4b5c2ac93423c04621fb422c7919b8584c9172fb1cb03d8aeab1163aa21c6d95242ee5e1ef44fc6f08ae91c51907029b22820d828ae3461334d854e7caca93f39bb4f07302933bedbe6621bf066b5737878037b3bf0f310c26eb0e248d6bf9b07ec10f73473b89d564c8e255edc063f157a5fe26fb93143b6da58469616474904cee858a8f4d8416519faea3de642c0424400090c6403f3a60c6a958ee2234177b81d80da19aa263002842a5c5d82bff6a011429e767fb5215ac7cc685279f8c5058df991fea935d08eb2027c55b4559bcd4b45939594914f9277333a834eb4468198963b64fff32f25220af1437dcc8bb7d03883914d4cda1ef479f459dc3ca0b8c934f4c967ff758e11ebc0e751a39ab66f3737b1ef16e4b1b2194d267973a6a0339d3c483d26a8f120a2196d03c0b02a6ed061802c7573938473dfc2ca822dcb3f2b07113b4fd8a061461843358b2c28c8dc115bbbb1a8011223dc4bd14390ef7256bb359086de3b68a534b9ac27f8d69ce4f0a44e045d6a3148b807b07f416dccdaaf4d6c3617744bde5fde3a653e1bfe4a591d930f1116c0fb52a7a5e03924c9251c3a330cf70030744b5ae0e1433cf21aa83bd74f36bee267c44ca0a5045d541351b3322ad0a8a9cd47b77c9d1f81c8be7bea0f921c79b4586163dd09576398cf43bb418715259c880f021e73db2f2cb4c9c5bf94f7f3e589ff9de2845462ed4a7717d3997130f0008ee71687bef05946ec86ddb11c347ed846ea364c3529479de8353a09edb369647d006d0c91e7650da48164d7a5975cfd68f5daf9ac257996708d8afc9a09a787a12cd104abe102e04a7686f192a6673d647c6cd941efd45b1f4d5f1dd15d23d9b578d0550da71f2321bf0e3f31f09e12c7fa93fe69e634bad93f6b3e8f478683d9293063a76245f589e3af9f849dc2c78b081d73218d232f738cdc6ff67332b162071b1d583d9f0515104bf67aa7e3794a0bf5e8cd5433278e61d82d9bc5e44144ca8cb51f6340c3cd83f6e90528ef40e38f01816c08da70b3532c75ac1763f23fa3241f4e576da53346afe89480bb2b6a3243962bf8b007ce74ebef967b1e41e6815dd82565a48cc0f7ccf4f339fd585207e0db8d4beaeb4496bcae40ce37fb2efb40d21a816f"}) (async) r5 = accept4$unix(r0, &(0x7f0000001280)=@abs, &(0x7f0000001300)=0x6e, 0x80000) recvfrom$unix(r5, &(0x7f0000001340)=""/4096, 0x1000, 0x42, &(0x7f0000002340)=@file={0x0, './file0\x00'}, 0x6e) (async) recvfrom$unix(r5, &(0x7f00000023c0)=""/131, 0x83, 0x0, &(0x7f0000002480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000002500)={@broadcast, @multicast1}, &(0x7f0000002540)=0xc) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000002580)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000002680)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000026c0)={{{@in=@broadcast, @in=@rand_addr=0x64010100, 0x4e23, 0x2e45, 0x4e23, 0x100, 0x0, 0x20, 0x30, 0x0, r3, r7}, {0x6, 0x8001, 0x0, 0x10000, 0x5, 0x7, 0x401, 0x2ae1}, {0x1, 0x9, 0x8000000000000001, 0x6}, 0xa8a, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d5, 0xff}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x7, 0x6, 0x0, 0x3}}, 0xe8) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000027c0)={0x3, 'vlan0\x00', {0xff}, 0x4}) (rerun: 32) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002800)='cgroup.threads\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r8, 0x80047210, &(0x7f0000002840)) 924.331711ms ago: executing program 4 (id=4506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 805.485418ms ago: executing program 0 (id=4507): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r3, &(0x7f0000000980)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) 750.90952ms ago: executing program 4 (id=4508): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="90007f0a0a0002000180c2"], 0x30}, 0x1, 0x0, 0x0, 0x2bfdd7b83b402990}, 0x14) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a50001280110001006272696467655f736c617665000000003800058005001900030000000500090001000000080025000100000006001f00d500000008002200", @ANYBLOB="040018000500010003"], 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x15) recvmmsg$unix(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x40000121, 0x0) 750.612134ms ago: executing program 3 (id=4509): r0 = socket$inet6(0xa, 0x3, 0x3) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRES32=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 661.540022ms ago: executing program 3 (id=4510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) 583.977696ms ago: executing program 4 (id=4511): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000da55ff56a9ff20e05338a00000000000000000000000000000000000000000000000000000000000000000000000003008000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) listen(r1, 0x6) close(0x3) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x100800) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)={0x54, r3, 0x11d, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xb}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x40}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5c}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4044084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 519.124261ms ago: executing program 3 (id=4512): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x4, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x4, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) 470.923637ms ago: executing program 4 (id=4513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800feea, [0x1]}}) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, @dev, 0x0, 0x80}}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x0, 0xff, 0x48, 0x7, 0x0, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) 455.80499ms ago: executing program 3 (id=4514): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa001780c4"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x8, 0xffff, 0x7, 0x4d82}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002fffffffffffffd0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0) 78.982843ms ago: executing program 3 (id=4515): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000000000007000000000000000400000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00Z\f\x00'/28, @ANYRES32, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000079104001000000000ed17a85b13486f1"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r5}, 0x38) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 73.527402ms ago: executing program 2 (id=4516): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x14, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0xe, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async, rerun: 64) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (rerun: 64) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) (async, rerun: 64) r5 = socket$igmp(0x2, 0x3, 0x2) close(0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r6, &(0x7f0000000280), 0x0}, 0x20) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f000048c000/0x3000)=nil, 0x3000, 0x8, 0x3032, r7, 0x3c73b000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) clock_gettime(0xa, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x40000009}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0x3}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x9, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (rerun: 32) 63.690725ms ago: executing program 4 (id=4517): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x2, r1, 0x21, r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x29000021}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000380), 0x4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x40) r7 = socket(0xf, 0x1, 0xfff) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x100, 0x10, 0x1}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r7) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r7) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xec2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xec2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x810) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd8, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20002852}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', r3, 0x8, 0x20, 0x7, 0x7, {{0x14, 0x4, 0x1, 0x2, 0x50, 0x64, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x7, 0x69, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x2b, 0x3, 0xa, [{@private=0xa010102, 0x101}, {@rand_addr=0x64010100, 0x2}, {@multicast2}, {@broadcast, 0x2}, {@remote, 0x4}, {@broadcast, 0xf}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', r3, 0x8, 0x20, 0x7, 0x7, {{0x14, 0x4, 0x1, 0x2, 0x50, 0x64, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x7, 0x69, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x2b, 0x3, 0xa, [{@private=0xa010102, 0x101}, {@rand_addr=0x64010100, 0x2}, {@multicast2}, {@broadcast, 0x2}, {@remote, 0x4}, {@broadcast, 0xf}]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe8, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x50054}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe8, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x50054}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000c40), 0x4) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000c80)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x401, 0x68, 0x53f0, 0x8, 0xe, 0x5}, {0x160149b4, 0x2, 0xa0, 0x5, 0x1, 0x101}], ['\x00', '\x00', '\x00']}) (async) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000c80)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x401, 0x68, 0x53f0, 0x8, 0xe, 0x5}, {0x160149b4, 0x2, 0xa0, 0x5, 0x1, 0x101}], ['\x00', '\x00', '\x00']}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000e00)={@mcast1, 0x5e, r3}) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x3f7, 0x10, 0x70bd2c, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000c045) (async) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x3f7, 0x10, 0x70bd2c, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000c045) socket(0x18, 0x80000, 0xff) (async) socket(0x18, 0x80000, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48890) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001040)) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r7, &(0x7f0000001d40)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d00)={&(0x7f00000010c0)={0xc30, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb6, 0x69}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xc10, 0x111, 0x0, 0x1, {0xc0c, 0x5, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x256}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb51d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x55}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x32f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x570, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x47}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd93d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x182}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x448, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x30}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x985}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x92}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xad9b}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff62}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x64}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0xc30}, 0x1, 0x0, 0x0, 0x20000020}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d80)) 0s ago: executing program 4 (id=4518): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) kernel console output (not intermixed with test programs): _ack socket option. [ 344.322344][T15777] Use struct sctp_sack_info instead [ 344.724399][T15803] tipc: Enabling of bearer rejected, failed to enable media [ 345.182035][T15836] netlink: 'syz.4.2783': attribute type 7 has an invalid length. [ 345.210532][T15836] netlink: 'syz.4.2783': attribute type 8 has an invalid length. [ 345.284042][T15840] IPVS: set_ctl: invalid protocol: 43637 255.255.255.255:20003 [ 345.536901][T15857] netlink: 'syz.0.2789': attribute type 1 has an invalid length. [ 345.729223][T15871] netlink: 'syz.1.2794': attribute type 39 has an invalid length. [ 346.255634][T15897] netlink: 'syz.2.2802': attribute type 1 has an invalid length. [ 346.272657][T15896] netlink: 'syz.2.2802': attribute type 1 has an invalid length. [ 346.297493][T15897] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.305064][T15896] __nla_validate_parse: 30 callbacks suppressed [ 346.305080][T15896] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2802'. [ 346.473877][T15897] veth7: entered promiscuous mode [ 346.519526][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2803'. [ 346.790440][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'. [ 347.003882][T15936] nft_compat: unsupported protocol 0 [ 347.132936][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 347.356260][T15963] macsec1: entered promiscuous mode [ 347.381604][T15966] sctp: [Deprecated]: syz.1.2819 (pid 15966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.381604][T15966] Use struct sctp_sack_info instead [ 347.511709][T15964] tipc: Enabled bearer , priority 0 [ 347.548015][T15975] IPv6: NLM_F_CREATE should be specified when creating new route [ 347.564613][T15964] syzkaller0: entered promiscuous mode [ 347.571479][T15964] syzkaller0: entered allmulticast mode [ 347.709215][T15980] bond5: Unable to set down delay as MII monitoring is disabled [ 347.721675][T15980] bond5 (unregistering): Released all slaves [ 347.756192][T15978] pim6reg: entered allmulticast mode [ 347.763125][T15962] tipc: Resetting bearer [ 347.802978][T15962] tipc: Disabling bearer [ 347.854217][T15991] netlink: 'syz.4.2829': attribute type 21 has an invalid length. [ 347.880419][T15991] netlink: 'syz.4.2829': attribute type 6 has an invalid length. [ 347.907996][T15991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2829'. [ 347.953950][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2832'. [ 348.119627][T16012] tipc: Enabling of bearer rejected, failed to enable media [ 348.133508][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2833'. [ 348.168165][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 348.274147][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 348.434592][T16033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2837'. [ 349.364236][T16078] netlink: 'syz.0.2856': attribute type 12 has an invalid length. [ 349.387116][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.397776][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.406671][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.417874][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.426392][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.489910][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.518431][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.527820][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.535951][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.543845][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.600711][T16080] vxcan1 speed is unknown, defaulting to 1000 [ 349.759139][T16105] netlink: 'syz.1.2861': attribute type 10 has an invalid length. [ 349.799036][T16105] team0: Port device geneve0 added [ 349.846337][T16105] netlink: 'syz.1.2861': attribute type 10 has an invalid length. [ 349.864607][T16112] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 349.885227][T16112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.064130][T16080] hsr0 speed is unknown, defaulting to 1000 [ 350.086048][T16080] lo speed is unknown, defaulting to 1000 [ 350.100440][T16080] lo speed is unknown, defaulting to 1000 [ 350.594809][T16080] chnl_net:caif_netlink_parms(): no params data found [ 350.628505][T16155] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 [ 350.849855][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.859380][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.867640][T16080] bridge_slave_0: entered allmulticast mode [ 350.875613][T16080] bridge_slave_0: entered promiscuous mode [ 350.947046][T16183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.965124][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.973240][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.981217][T16080] bridge_slave_1: entered allmulticast mode [ 350.990317][T16080] bridge_slave_1: entered promiscuous mode [ 351.196367][T16080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.226820][T16196] netlink: zone id is out of range [ 351.232317][T16080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.261184][T16196] netlink: zone id is out of range [ 351.271303][T16196] netlink: zone id is out of range [ 351.276454][T16196] netlink: zone id is out of range [ 351.295628][T16196] netlink: get zone limit has 4 unknown bytes [ 351.307908][T16080] team0: Port device team_slave_0 added [ 351.321571][T16080] team0: Port device team_slave_1 added [ 351.388925][T16208] x_tables: duplicate underflow at hook 1 [ 351.407921][T16209] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 351.450165][T16080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.477637][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.555804][T16080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.618378][ T5837] Bluetooth: hci2: command tx timeout [ 351.656776][T16080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.664510][T16080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.694309][T16080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.847886][T16080] hsr_slave_0: entered promiscuous mode [ 351.854675][T16080] hsr_slave_1: entered promiscuous mode [ 351.862373][T16080] debugfs: 'hsr0' already exists in 'hsr' [ 351.868523][T16080] Cannot create hsr debugfs directory [ 352.009713][T16251] __nla_validate_parse: 12 callbacks suppressed [ 352.009730][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2907'. [ 352.026328][T16250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2909'. [ 352.027014][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2907'. [ 352.181224][T16260] SET target dimension over the limit! [ 352.357237][T16267] tipc: Enabled bearer , priority 0 [ 352.382209][T16272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2915'. [ 352.455540][T16080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.465052][T16278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.466780][T16080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.511638][T16267] syzkaller0: entered promiscuous mode [ 352.517215][T16267] syzkaller0: entered allmulticast mode [ 352.526262][T16276] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.632999][T16080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.644991][T16080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.662717][T16265] tipc: Resetting bearer [ 352.681879][T16265] tipc: Disabling bearer [ 352.710638][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'. [ 352.720339][T16295] netlink: 'syz.2.2919': attribute type 10 has an invalid length. [ 352.721987][T16080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.740279][T16080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.752869][T16295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2919'. [ 352.827772][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'. [ 352.877927][T16295] bridge0: port 1(batadv0) entered blocking state [ 352.897944][T16295] bridge0: port 1(batadv0) entered disabled state [ 352.960732][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 353.212306][T16080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.241353][T16321] xt_l2tp: invalid flags combination: 8 [ 353.261090][T16080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.284290][T16080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.302265][ T3571] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 353.311600][ T3571] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 353.355103][T16080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.530141][T16320] syzkaller0: entered promiscuous mode [ 353.535664][T16320] syzkaller0: entered allmulticast mode [ 353.709422][ T5837] Bluetooth: hci2: command tx timeout [ 353.843324][T16354] xt_hashlimit: size too large, truncated to 1048576 [ 355.252518][T16365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.301468][T16080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.307378][T16376] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 355.322181][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2939'. [ 355.335907][T16080] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.359360][T16375] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2939'. [ 355.405650][T16365] team0: Mode changed to "loadbalance" [ 355.432832][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.440034][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.475342][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.482618][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.610867][T16389] sctp: [Deprecated]: syz.4.2946 (pid 16389) Use of int in max_burst socket option. [ 355.610867][T16389] Use struct sctp_assoc_value instead [ 355.778272][ T5837] Bluetooth: hci2: command tx timeout [ 355.841670][T16405] netlink: 'syz.4.2949': attribute type 1 has an invalid length. [ 355.926520][T16404] syzkaller0: entered promiscuous mode [ 355.931758][T16416] xt_l2tp: v2 doesn't support IP mode [ 355.932758][T16404] syzkaller0: entered allmulticast mode [ 355.949918][T16405] tc_dump_action: action bad kind [ 357.020804][T16434] __nla_validate_parse: 1 callbacks suppressed [ 357.020822][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2955'. [ 357.423111][T16080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.546930][T16080] veth0_vlan: entered promiscuous mode [ 357.577005][T16080] veth1_vlan: entered promiscuous mode [ 357.667540][T16452] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2961'. [ 357.688246][T16453] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2958'. [ 357.720727][T16080] veth0_macvtap: entered promiscuous mode [ 357.743232][T16080] veth1_macvtap: entered promiscuous mode [ 357.794188][T16080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.842778][T16080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.859551][ T5837] Bluetooth: hci2: command tx timeout [ 357.893603][ T2980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.923251][ T2980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.964268][ T2980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.979511][ T2980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.064697][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2968'. [ 358.310872][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.322061][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.377762][T16484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2971'. [ 358.436794][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.477620][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.522914][T16493] netlink: 'syz.2.2974': attribute type 8 has an invalid length. [ 358.534331][T16487] netlink: 'syz.0.2972': attribute type 12 has an invalid length. [ 358.633821][T16487] bond11: option primary_reselect: invalid value (255) [ 358.665396][T16487] bond11 (unregistering): Released all slaves [ 358.672479][T16505] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 359.616005][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.625752][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.634347][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.642700][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.653747][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.704390][T16555] vxcan1 speed is unknown, defaulting to 1000 [ 359.725544][T16561] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2990'. [ 359.982525][T16555] hsr0 speed is unknown, defaulting to 1000 [ 360.010753][T16555] lo speed is unknown, defaulting to 1000 [ 360.036516][T16555] lo speed is unknown, defaulting to 1000 [ 360.360416][T16555] chnl_net:caif_netlink_parms(): no params data found [ 360.435290][T16555] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.442653][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.450433][T16555] bridge_slave_0: entered allmulticast mode [ 360.458536][T16555] bridge_slave_0: entered promiscuous mode [ 360.466304][T16555] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.474396][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.482486][T16555] bridge_slave_1: entered allmulticast mode [ 360.490180][T16555] bridge_slave_1: entered promiscuous mode [ 360.526009][T16555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.539132][T16555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.575570][T16555] team0: Port device team_slave_0 added [ 360.584502][T16555] team0: Port device team_slave_1 added [ 360.613039][T16555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.620986][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.647944][T16555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.660355][T16555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.668497][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.670944][T16577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.701513][T16555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.803895][T16594] netlink: 'syz.1.2996': attribute type 1 has an invalid length. [ 360.812795][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 360.888202][T16555] hsr_slave_0: entered promiscuous mode [ 360.900217][T16555] hsr_slave_1: entered promiscuous mode [ 360.909748][T16555] debugfs: 'hsr0' already exists in 'hsr' [ 360.915503][T16555] Cannot create hsr debugfs directory [ 361.025650][T16606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3001'. [ 361.056081][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3002'. [ 361.080080][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 361.171542][T16555] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 361.243184][T16555] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 361.339876][T16555] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 361.503257][T16555] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 361.533497][T16628] vxcan1 speed is unknown, defaulting to 1000 [ 361.653671][T16634] netlink: 'syz.4.3011': attribute type 6 has an invalid length. [ 361.663740][T16634] netlink: 'syz.4.3011': attribute type 6 has an invalid length. [ 361.699008][ T5827] Bluetooth: hci4: command tx timeout [ 361.793648][T16555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 361.811858][T16555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 361.833449][T16555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.851592][T16555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.901925][T16628] hsr0 speed is unknown, defaulting to 1000 [ 361.918010][T16628] lo speed is unknown, defaulting to 1000 [ 361.948936][T16628] lo speed is unknown, defaulting to 1000 [ 361.974278][T16648] netlink: 'syz.4.3015': attribute type 12 has an invalid length. [ 362.093574][T16555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.142840][T16555] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.171113][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.178306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.192472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.199681][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.519156][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.580732][T16555] veth0_vlan: entered promiscuous mode [ 362.596357][T16555] veth1_vlan: entered promiscuous mode [ 362.641075][T16555] veth0_macvtap: entered promiscuous mode [ 362.652812][T16555] veth1_macvtap: entered promiscuous mode [ 362.683403][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.702141][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.722649][ T3571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.769656][ T3571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.806326][ T3571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.848480][ T3571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.954856][T16669] __nla_validate_parse: 6 callbacks suppressed [ 362.954872][T16669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3022'. [ 363.005322][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3022'. [ 363.035745][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.051988][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.130314][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.159510][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.280682][T16693] netlink: 'syz.4.3027': attribute type 16 has an invalid length. [ 363.288954][T16693] netlink: 'syz.4.3027': attribute type 17 has an invalid length. [ 363.310927][T16693] netdevsim0: left promiscuous mode [ 363.340719][T16694] xt_hashlimit: size too large, truncated to 1048576 [ 363.353698][T16693] 0ªî{X¹¦: left allmulticast mode [ 363.441472][T16693] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.448806][T16693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.456388][T16693] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.463605][T16693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.546644][T16693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.715175][T16712] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 363.744700][T16712] syzkaller0: linktype set to 778 [ 363.780298][ T5827] Bluetooth: hci4: command tx timeout [ 364.145451][T16730] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 364.420844][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.430936][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.440277][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.449022][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.456853][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.469642][T16737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3040'. [ 364.532122][T16747] sctp: [Deprecated]: syz.2.3042 (pid 16747) Use of int in max_burst socket option deprecated. [ 364.532122][T16747] Use struct sctp_assoc_value instead [ 364.657253][T16738] vxcan1 speed is unknown, defaulting to 1000 [ 364.682166][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 364.890088][T16751] team1: entered promiscuous mode [ 364.907027][T16751] team1: entered allmulticast mode [ 365.035518][ T2980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.059606][ T2980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.071403][ T2980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 365.105319][T16770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3049'. [ 365.117969][T16769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3049'. [ 365.147976][T16773] netlink: 'syz.3.3051': attribute type 14 has an invalid length. [ 365.186557][T16738] hsr0 speed is unknown, defaulting to 1000 [ 365.257579][ T2980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.270092][T16775] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3050'. [ 365.270330][ T2980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.290792][ T2980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 365.319202][T16738] lo speed is unknown, defaulting to 1000 [ 365.333850][T16738] lo speed is unknown, defaulting to 1000 [ 365.431365][ T2980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.453786][ T2980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.484425][ T2980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 365.616148][ T2980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.646496][ T2980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.669629][ T2980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 365.755351][T16804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3059'. [ 365.798705][T16804] vlan2: entered promiscuous mode [ 365.809612][T16804] bridge0: entered promiscuous mode [ 365.858205][ T5837] Bluetooth: hci4: command tx timeout [ 366.034110][ T2980] bridge_slave_1: left allmulticast mode [ 366.040624][ T2980] bridge_slave_1: left promiscuous mode [ 366.048920][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.060779][ T2980] bridge_slave_0: left allmulticast mode [ 366.066445][ T2980] bridge_slave_0: left promiscuous mode [ 366.072554][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.134271][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057672c00: rx timeout, send abort [ 366.171638][ T2980] tipc: Resetting bearer [ 366.336970][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 366.499525][ T5837] Bluetooth: hci0: command tx timeout [ 366.591396][ T2980] tipc: Disabling bearer [ 366.608864][ T2980] bond6 (unregistering): (slave gretap1): Releasing active interface [ 366.617735][ T2980] gretap1 (unregistering): left allmulticast mode [ 366.634334][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056438800: rx timeout, send abort [ 366.643626][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057672c00: abort rx timeout. Force session deactivation [ 366.644303][ T2980] bond7 (unregistering): (slave gretap2): Releasing active interface [ 366.794898][ T2980] team0: Port device geneve0 removed [ 366.905867][T16842] netlink: 'syz.3.3067': attribute type 39 has an invalid length. [ 367.142598][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056438800: abort rx timeout. Force session deactivation [ 367.948752][ T5837] Bluetooth: hci4: command tx timeout [ 368.587635][ T5837] Bluetooth: hci0: command tx timeout [ 368.879231][ T2980] bond0 (unregistering): left promiscuous mode [ 368.885462][ T2980] bond_slave_0: left promiscuous mode [ 368.891707][ T2980] bond_slave_1: left promiscuous mode [ 368.900065][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.911237][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.921739][ T2980] bond0 (unregistering): Released all slaves [ 369.012385][ T2980] bond1 (unregistering): Released all slaves [ 369.024756][ T2980] bond2 (unregistering): Released all slaves [ 369.037251][ T2980] bond3 (unregistering): Released all slaves [ 369.125955][ T2980] bond4 (unregistering): Released all slaves [ 369.213506][ T2980] bond5 (unregistering): Released all slaves [ 369.225839][ T2980] bond6 (unregistering): Released all slaves [ 369.238997][ T2980] bond7 (unregistering): Released all slaves [ 369.251724][ T2980] bond8 (unregistering): Released all slaves [ 369.575547][T16738] chnl_net:caif_netlink_parms(): no params data found [ 369.733464][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 369.769386][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 369.806557][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 369.963487][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.988083][T16738] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.001319][T16738] bridge_slave_0: entered allmulticast mode [ 370.013389][T16738] bridge_slave_0: entered promiscuous mode [ 370.029753][T16893] netlink: 'syz.2.3079': attribute type 2 has an invalid length. [ 370.047855][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.055158][T16738] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.065270][T16738] bridge_slave_1: entered allmulticast mode [ 370.073206][T16738] bridge_slave_1: entered promiscuous mode [ 370.151030][T16902] netlink: 'syz.0.3082': attribute type 1 has an invalid length. [ 370.301404][T16738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.321531][T16907] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3083'. [ 370.346887][T16904] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 370.370685][T16904] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 370.443225][T16905] gretap3: entered promiscuous mode [ 370.454016][T16905] bond11: (slave gretap3): making interface the new active one [ 370.462976][T16905] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 370.483817][T16738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.502115][T16908] macvlan2: entered promiscuous mode [ 370.524567][T16908] macvlan2: entered allmulticast mode [ 370.532248][T16908] bond11: entered promiscuous mode [ 370.540724][T16908] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 370.581128][T16908] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 370.608753][T16908] bond11: left promiscuous mode [ 370.657587][ T5837] Bluetooth: hci0: command tx timeout [ 370.690903][T16910] netlink: 'syz.3.3084': attribute type 5 has an invalid length. [ 370.716772][T16913] dvmrp0: entered allmulticast mode [ 370.722742][T16916] dvmrp0: left allmulticast mode [ 370.790032][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 370.815529][T16738] team0: Port device team_slave_0 added [ 370.842863][T16738] team0: Port device team_slave_1 added [ 370.974182][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.994861][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.032937][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3089'. [ 371.044109][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.086159][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.103856][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.156777][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.194551][ T2980] tipc: Left network mode [ 371.275425][ T2980] IPVS: stopping master sync thread 10178 ... [ 371.280925][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 371.295918][ T2980] IPVS: stopping backup sync thread 16155 ... [ 371.324370][T16933] tipc: Enabling of bearer rejected, failed to enable media [ 371.376941][T16738] hsr_slave_0: entered promiscuous mode [ 371.393519][T16738] hsr_slave_1: entered promiscuous mode [ 371.408758][T16738] debugfs: 'hsr0' already exists in 'hsr' [ 371.419627][T16738] Cannot create hsr debugfs directory [ 371.797217][T16951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 372.262695][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 372.555386][T16992] netlink: 'syz.4.3108': attribute type 29 has an invalid length. [ 372.575098][T16992] netlink: 'syz.4.3108': attribute type 29 has an invalid length. [ 372.739602][ T5837] Bluetooth: hci0: command tx timeout [ 372.902863][T17008] netlink: 'syz.3.3112': attribute type 10 has an invalid length. [ 372.992111][T17012] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3113'. [ 373.006054][T17008] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.051647][T17008] bond0: (slave team0): Enslaving as an active interface with an up link [ 373.129118][T17010] bond1: option resend_igmp: invalid value (32767) [ 373.145530][T17010] bond1: option resend_igmp: allowed values 0 - 255 [ 373.170463][T17010] bond1 (unregistering): Released all slaves [ 373.334594][T17019] openvswitch: netlink: IP tunnel dst address not specified [ 373.388202][ T2980] batadv0: left promiscuous mode [ 373.414080][ T2980] hsr_slave_0: left promiscuous mode [ 373.427829][ T2980] hsr_slave_1: left promiscuous mode [ 373.434312][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.445062][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.454582][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.469079][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.503183][ T2980] veth0_macvtap: left promiscuous mode [ 373.516687][ T2980] veth1_vlan: left promiscuous mode [ 373.523408][ T5945] IPVS: starting estimator thread 0... [ 373.530082][T17031] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 373.638192][T17033] IPVS: using max 35 ests per chain, 84000 per kthread [ 373.654134][T17036] netlink: 'syz.3.3119': attribute type 1 has an invalid length. [ 373.838047][ T2980] pim6reg (unregistering): left allmulticast mode [ 374.002527][ T2980] pimreg3 (unregistering): left allmulticast mode [ 374.270001][ T2980] vlan1 (unregistering): left allmulticast mode [ 374.696774][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 374.742894][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 374.993525][ T3523] smc: removing ib device syz2 [ 375.382770][T17036] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 375.559462][ T5945] vxcan1 speed is unknown, defaulting to 1000 [ 375.601495][ T5945] syz2: Port: 1 Link DOWN [ 375.684307][T17040] veth3: entered promiscuous mode [ 376.072812][T17058] netlink: 'syz.3.3122': attribute type 6 has an invalid length. [ 376.151040][T17060] tipc: Enabling of bearer rejected, failed to enable media [ 376.160858][T17063] __nla_validate_parse: 1 callbacks suppressed [ 376.160877][T17063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3124'. [ 376.241705][T16738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.271260][T17063] netlink: 'syz.4.3124': attribute type 1 has an invalid length. [ 376.305290][T16738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.305856][T17063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3124'. [ 376.373998][T16738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.448615][T16738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.478657][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 376.494792][T17065] tipc: Started in network mode [ 376.499790][T17065] tipc: Node identity ce209021bc3b, cluster identity 4711 [ 376.500288][T17076] netlink: 'syz.4.3128': attribute type 2 has an invalid length. [ 376.507245][T17065] tipc: Enabled bearer , priority 0 [ 376.532506][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'. [ 376.556939][T17082] netlink: 'syz.4.3128': attribute type 2 has an invalid length. [ 376.568114][T17069] syzkaller0: entered promiscuous mode [ 376.578626][T17069] syzkaller0: entered allmulticast mode [ 376.599474][T17082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3128'. [ 376.692229][T17065] tipc: Resetting bearer [ 376.810842][T17065] tipc: Disabling bearer [ 377.101765][T17101] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3133'. [ 377.173759][T16738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.252502][T16738] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.353364][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.360568][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.399639][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.406831][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.609253][T17122] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3138'. [ 377.729277][T17121] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.736672][T17121] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.754081][T17121] team_slave_1: left promiscuous mode [ 377.768121][T17121] geneve0: left promiscuous mode [ 377.774482][T17121] dummy0: left promiscuous mode [ 377.812267][T17121] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 378.213841][T17146] netlink: 'syz.0.3143': attribute type 4 has an invalid length. [ 378.296567][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.424708][T16738] veth0_vlan: entered promiscuous mode [ 378.453287][T16738] veth1_vlan: entered promiscuous mode [ 378.467512][T17156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3147'. [ 378.486518][T17155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3147'. [ 378.553255][T16738] veth0_macvtap: entered promiscuous mode [ 378.565670][T16738] veth1_macvtap: entered promiscuous mode [ 378.622935][T16738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.651022][T16738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.682632][ T3523] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.716059][ T3523] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.742476][ T2980] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.762052][ T2980] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.944175][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.967402][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.998433][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3156'. [ 379.066614][T17179] veth7: entered promiscuous mode [ 379.076784][T17179] veth7: entered allmulticast mode [ 379.091776][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.101914][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.665368][T17211] netlink: 'syz.1.3162': attribute type 24 has an invalid length. [ 379.983820][T17220] mac80211_hwsim hwsim26 ÿ: renamed from wlan1 (while UP) [ 380.122031][T17222] xt_TCPMSS: Only works on TCP SYN packets [ 380.210447][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.221784][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.231338][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.235923][T17227] netlink: 'syz.2.3167': attribute type 5 has an invalid length. [ 380.247577][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.255397][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.352425][T17230] hsr0 speed is unknown, defaulting to 1000 [ 380.363467][T17230] lo speed is unknown, defaulting to 1000 [ 380.371397][T17230] lo speed is unknown, defaulting to 1000 [ 380.475577][T17240] netlink: 'syz.2.3171': attribute type 18 has an invalid length. [ 380.554260][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.569663][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.595602][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.615784][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.721675][T17249] veth0: entered promiscuous mode [ 380.739585][T17246] hsr0 speed is unknown, defaulting to 1000 [ 380.754123][T17246] lo speed is unknown, defaulting to 1000 [ 380.816114][T17246] lo speed is unknown, defaulting to 1000 [ 380.929507][T17243] veth0: left promiscuous mode [ 381.259746][T17230] chnl_net:caif_netlink_parms(): no params data found [ 381.468349][T17230] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.475601][T17230] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.483774][T17230] bridge_slave_0: entered allmulticast mode [ 381.491680][T17230] bridge_slave_0: entered promiscuous mode [ 381.518354][T17230] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.525515][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.538706][T17230] bridge_slave_1: entered allmulticast mode [ 381.566008][T17230] bridge_slave_1: entered promiscuous mode [ 381.642071][T17230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.668104][T17230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.755151][T17230] team0: Port device team_slave_0 added [ 381.764878][T17230] team0: Port device team_slave_1 added [ 381.834545][T17230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.842122][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.868304][T17230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.892892][T17230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.900837][T17230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.926940][T17230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.010685][T17230] hsr_slave_0: entered promiscuous mode [ 382.017823][T17230] hsr_slave_1: entered promiscuous mode [ 382.024258][T17230] debugfs: 'hsr0' already exists in 'hsr' [ 382.047895][T17230] Cannot create hsr debugfs directory [ 382.211924][T17230] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.305775][T17230] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.338742][ T5827] Bluetooth: hci3: command tx timeout [ 382.395858][T17230] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.485983][T17230] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.670919][T17230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.683096][T17230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.695794][T17230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.709325][T17230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.821879][T17230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.843101][T17230] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.858274][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.865419][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.884699][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.891902][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.071674][T17230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.113292][T17230] veth0_vlan: entered promiscuous mode [ 383.124300][T17230] veth1_vlan: entered promiscuous mode [ 383.151087][T17230] veth0_macvtap: entered promiscuous mode [ 383.160447][T17230] veth1_macvtap: entered promiscuous mode [ 383.177407][T17230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.193554][T17230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.210576][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.219797][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.231244][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.240225][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.301868][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.312634][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.345399][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.354677][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.418546][ T5827] Bluetooth: hci3: command tx timeout [ 386.497563][ T5827] Bluetooth: hci3: command tx timeout [ 388.578447][ T5827] Bluetooth: hci3: command tx timeout [ 406.239658][T17284] tipc: Started in network mode [ 406.246577][T17284] tipc: Node identity 3630afa94436, cluster identity 4711 [ 406.254432][T17286] __nla_validate_parse: 3 callbacks suppressed [ 406.254448][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 406.272067][T17284] tipc: Enabled bearer , priority 0 [ 406.281313][T17286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.298850][T17290] tipc: Enabling of bearer rejected, already enabled [ 406.434016][T17290] tipc: Disabling bearer [ 406.554475][T17306] netlink: 'syz.0.3183': attribute type 32 has an invalid length. [ 406.573126][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 406.720814][T17306] bond1: option coupled_control: invalid value (31) [ 406.789646][T17306] bond1 (unregistering): Released all slaves [ 406.805191][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.809097][T17321] Cannot find set identified by id 65534 to match [ 406.814773][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.827793][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.836978][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.844834][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.910518][T17325] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 406.937187][T17325] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 406.955817][T17319] hsr0 speed is unknown, defaulting to 1000 [ 407.018364][T17319] lo speed is unknown, defaulting to 1000 [ 407.076558][T17319] lo speed is unknown, defaulting to 1000 [ 407.198122][T17342] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 407.207483][T17343] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 407.230548][T17340] syzkaller0: entered promiscuous mode [ 407.235107][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 407.236239][T17340] syzkaller0: entered allmulticast mode [ 407.258984][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 407.269956][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 407.528589][T17352] netlink: 'syz.2.3199': attribute type 10 has an invalid length. [ 407.550143][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'. [ 407.580264][T17362] netlink: 'syz.2.3199': attribute type 10 has an invalid length. [ 407.596501][T17352] team0: Port device dummy0 added [ 407.644806][T17361] geneve2: entered promiscuous mode [ 407.676153][T17362] team0: Port device dummy0 removed [ 407.684788][T17362] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 407.728985][T17367] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3202'. [ 407.938091][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 407.978803][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'. [ 408.011182][T17319] chnl_net:caif_netlink_parms(): no params data found [ 408.058922][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3206'. [ 408.143143][T17386] netlink: 'syz.3.3208': attribute type 4 has an invalid length. [ 408.268361][T17319] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.275700][T17319] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.284894][T17319] bridge_slave_0: entered allmulticast mode [ 408.293498][T17319] bridge_slave_0: entered promiscuous mode [ 408.308031][T17319] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.322905][T17319] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.331168][T17319] bridge_slave_1: entered allmulticast mode [ 408.344891][T17319] bridge_slave_1: entered promiscuous mode [ 408.355897][T17405] IPv6: addrconf: prefix option has invalid lifetime [ 408.402384][T17319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.422041][T17319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.471265][T17319] team0: Port device team_slave_0 added [ 408.491633][T17319] team0: Port device team_slave_1 added [ 408.516385][T17412] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 408.546983][T17412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.564054][T17319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.571295][T17319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.600446][T17319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.622042][T17319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.629384][T17319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.655605][T17319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.705118][T17416] macvtap1: entered promiscuous mode [ 408.730820][T17416] vlan0: entered promiscuous mode [ 408.736325][T17416] macvtap1: entered allmulticast mode [ 408.745540][T17416] vlan0: entered allmulticast mode [ 408.752123][T17416] veth0_vlan: entered allmulticast mode [ 408.770499][T17417] macvtap2: entered promiscuous mode [ 408.776297][T17417] macvtap2: entered allmulticast mode [ 408.854201][T17319] hsr_slave_0: entered promiscuous mode [ 408.891519][T17319] hsr_slave_1: entered promiscuous mode [ 408.897715][ T5827] Bluetooth: hci5: command tx timeout [ 408.907053][T17319] debugfs: 'hsr0' already exists in 'hsr' [ 408.916587][T17319] Cannot create hsr debugfs directory [ 409.343219][T17319] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.371790][T17319] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 409.429902][T17467] netlink: 'syz.3.3230': attribute type 83 has an invalid length. [ 409.486392][T17319] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.519642][T17319] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 409.611343][T17319] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.642718][T17319] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 409.684949][T17486] netlink: 'syz.1.3239': attribute type 2 has an invalid length. [ 409.750276][T17319] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.780863][T17319] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 410.158903][T17319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 410.194500][T17319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 410.227120][T17319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 410.248852][T17319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 410.281543][T17523] nftables ruleset with unbound set [ 410.495003][T17319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.531352][T17319] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.557825][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.564995][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.593384][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.600596][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.926731][T17567] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 410.942835][T17568] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 410.978158][ T5827] Bluetooth: hci5: command tx timeout [ 410.991744][T17319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.132393][T17578] tipc: Started in network mode [ 411.146582][T17578] tipc: Node identity a229dcc8fb07, cluster identity 4711 [ 411.158580][T17578] tipc: Enabled bearer , priority 0 [ 411.172992][T17578] syzkaller0: entered promiscuous mode [ 411.178959][T17578] syzkaller0: entered allmulticast mode [ 411.214681][T17578] tipc: Resetting bearer [ 411.235149][T17577] tipc: Resetting bearer [ 411.276554][T17577] tipc: Disabling bearer [ 411.623201][T17600] syzkaller0: entered promiscuous mode [ 411.637929][T17600] syzkaller0: entered allmulticast mode [ 411.652328][T17319] veth0_vlan: entered promiscuous mode [ 411.680671][T17319] veth1_vlan: entered promiscuous mode [ 411.714360][T17600] __nla_validate_parse: 9 callbacks suppressed [ 411.714377][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3268'. [ 411.726980][T17612] Bluetooth: MGMT ver 1.23 [ 411.799130][T17604] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3269'. [ 411.817772][T17319] veth0_macvtap: entered promiscuous mode [ 411.832538][T17319] veth1_macvtap: entered promiscuous mode [ 411.848688][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 411.875107][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3269'. [ 411.877208][T17319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.896232][T17319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.933079][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.966498][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.996497][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.022984][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.096877][T17630] x_tables: unsorted entry at hook 1 [ 412.138376][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.148309][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.215624][T17632] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 412.234037][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.249694][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.327650][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3278'. [ 412.890272][T17664] Cannot find del_set index 0 as target [ 412.907582][T17667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3286'. [ 413.057698][ T5827] Bluetooth: hci5: command tx timeout [ 413.079272][T17647] xt_time: unknown flags 0xf4 [ 413.212278][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 413.232826][T17673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.236536][T17674] team_slave_0: entered promiscuous mode [ 413.246701][T17674] team_slave_1: entered promiscuous mode [ 413.253382][T17674] macsec2: entered promiscuous mode [ 413.259108][T17674] team0: entered promiscuous mode [ 413.331797][T17682] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3290'. [ 413.406879][T17688] Bluetooth: MGMT ver 1.23 [ 413.417256][T17687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3292'. [ 413.433828][T17687] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 413.483428][T17690] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 413.553679][T17694] netlink: 'syz.0.3296': attribute type 6 has an invalid length. [ 413.610918][T17662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.627759][T17662] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 413.635143][T17697] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3297'. [ 413.646536][T17697] unsupported nlmsg_type 40 [ 413.713034][T17662] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.729063][T17662] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 413.783489][T17662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.801561][T17662] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 413.870821][T17662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.882205][T17662] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 413.976797][T17662] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 413.985580][T17662] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 414.161420][T17723] netlink: 'syz.4.3306': attribute type 1 has an invalid length. [ 414.214881][T17722] lo: entered allmulticast mode [ 414.220539][T17722] lo: left allmulticast mode [ 414.282016][T17732] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 414.306018][T17723] vlan2: entered allmulticast mode [ 414.311542][T17723] dummy0: entered allmulticast mode [ 414.543982][T17748] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.551764][T17748] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.668604][T17754] tipc: Enabled bearer , priority 0 [ 414.679851][T17754] syzkaller0: entered promiscuous mode [ 414.685464][T17754] syzkaller0: entered allmulticast mode [ 414.713352][T17758] netlink: 'syz.0.3317': attribute type 10 has an invalid length. [ 414.762689][T17758] team0: Port device dummy0 added [ 414.830846][T17766] veth0_to_bond: entered allmulticast mode [ 414.974126][T17753] tipc: Resetting bearer [ 415.002032][T17753] tipc: Disabling bearer [ 415.327973][ T5931] IPVS: starting estimator thread 0... [ 415.328005][T17791] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 415.419265][T17800] IPVS: using max 32 ests per chain, 76800 per kthread [ 415.521405][T17808] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 415.554426][T17808] bond2 (unregistering): Released all slaves [ 415.751447][T17834] netlink: 'syz.4.3339': attribute type 10 has an invalid length. [ 415.794446][T17834] team0: Port device dummy0 added [ 416.241387][T17874] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 416.402598][T17878] syzkaller0: entered promiscuous mode [ 416.437200][T17878] syzkaller0: entered allmulticast mode [ 416.677614][T17892] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 416.794755][T17907] netlink: 'syz.2.3363': attribute type 10 has an invalid length. [ 416.827035][T17907] __nla_validate_parse: 27 callbacks suppressed [ 416.827054][T17907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3363'. [ 416.863959][T17907] geneve0: entered promiscuous mode [ 416.879359][T17910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3364'. [ 416.885098][T17907] team0: Port device geneve0 added [ 441.127681][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 441.139738][T17936] tc_dump_action: action bad kind [ 441.189774][T17939] netlink: 'syz.2.3372': attribute type 1 has an invalid length. [ 441.290288][T17940] bond1: (slave bridge1): making interface the new active one [ 441.299224][T17940] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 441.527812][T17970] tipc: Started in network mode [ 441.538823][T17970] tipc: Node identity ba36a0d54a61, cluster identity 4711 [ 441.552802][T17970] tipc: Enabled bearer , priority 0 [ 441.564468][T17970] syzkaller0: entered promiscuous mode [ 441.570095][T17970] syzkaller0: entered allmulticast mode [ 441.641682][T17970] tipc: Resetting bearer [ 441.671673][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 441.795346][T17991] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 442.283872][T17962] tipc: Resetting bearer [ 442.297330][T17962] tipc: Disabling bearer [ 498.126253][T18024] netlink: 'syz.3.3400': attribute type 1 has an invalid length. [ 498.135978][T18021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3399'. [ 498.156248][T18024] netlink: 'syz.3.3400': attribute type 2 has an invalid length. [ 498.523952][T18059] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3408'. [ 498.616283][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 499.081253][T18091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3413'. [ 499.711817][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3420'. [ 499.851126][T18113] syzkaller1: entered promiscuous mode [ 499.868244][T18120] netlink: 'syz.1.3422': attribute type 1 has an invalid length. [ 499.876006][T18120] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3422'. [ 499.885239][T18113] syzkaller1: entered allmulticast mode [ 500.115913][T18133] tipc: Enabled bearer , priority 0 [ 500.127159][T18133] syzkaller0: MTU too low for tipc bearer [ 500.138135][T18133] tipc: Disabling bearer [ 500.235526][T18143] tipc: Started in network mode [ 500.240674][T18143] tipc: Node identity d25829d7653b, cluster identity 4711 [ 500.248669][T18143] tipc: Enabled bearer , priority 0 [ 500.256522][T18143] syzkaller0: entered promiscuous mode [ 500.263116][T18143] syzkaller0: entered allmulticast mode [ 500.303524][T18143] tipc: Resetting bearer [ 500.313406][T18141] tipc: Resetting bearer [ 500.329756][T18151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3433'. [ 500.341813][T18141] tipc: Disabling bearer [ 500.361021][T18147] pimreg3: entered allmulticast mode [ 500.464695][T18157] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3435'. [ 500.645509][T18166] syzkaller0: entered promiscuous mode [ 500.651329][T18166] syzkaller0: entered allmulticast mode [ 500.664358][T18161] netlink: 'syz.4.3436': attribute type 1 has an invalid length. [ 500.798638][T18175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3441'. [ 501.472519][T18196] netlink: 'syz.4.3444': attribute type 21 has an invalid length. [ 502.250587][T18191] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 502.253096][T18189] syzkaller1: entered allmulticast mode [ 502.282669][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 502.441080][T18207] GUP no longer grows the stack in syz.1.3447 (18207): 200000003000-20000000a000 (200000001000) [ 502.467036][T18207] CPU: 1 UID: 0 PID: 18207 Comm: syz.1.3447 Not tainted syzkaller #0 PREEMPT(full) [ 502.467062][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.467080][T18207] Call Trace: [ 502.467088][T18207] [ 502.467097][T18207] dump_stack_lvl+0x189/0x250 [ 502.467130][T18207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.467155][T18207] ? __pfx__printk+0x10/0x10 [ 502.467171][T18207] ? find_vma+0xe7/0x160 [ 502.467214][T18207] __get_user_pages+0x2470/0x2a00 [ 502.467244][T18207] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 502.467282][T18207] ? rcu_is_watching+0x15/0xb0 [ 502.467306][T18207] __gup_longterm_locked+0xde4/0x1660 [ 502.467333][T18207] ? try_grab_folio_fast+0x1bf/0x6a0 [ 502.467365][T18207] ? gup_fast_fallback+0x1b86/0x22d0 [ 502.467390][T18207] gup_fast_fallback+0x1d65/0x22d0 [ 502.467448][T18207] ? __pfx_gup_fast_fallback+0x10/0x10 [ 502.467468][T18207] ? __mutex_lock+0x335/0x1350 [ 502.467502][T18207] ? is_valid_gup_args+0x11f/0x200 [ 502.467527][T18207] ? get_user_pages_fast+0x4d/0xb0 [ 502.467554][T18207] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 502.467585][T18207] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 502.467604][T18207] ? wait_for_space+0x248/0x2d0 [ 502.467624][T18207] iov_iter_get_pages2+0x5e/0xa0 [ 502.467650][T18207] __se_sys_vmsplice+0x548/0x10d0 [ 502.467690][T18207] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 502.467709][T18207] ? __pfx_futex_wait+0x10/0x10 [ 502.467738][T18207] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 502.467820][T18207] ? do_syscall_64+0xbe/0xfa0 [ 502.467848][T18207] do_syscall_64+0xfa/0xfa0 [ 502.467870][T18207] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.467893][T18207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.467911][T18207] ? clear_bhb_loop+0x60/0xb0 [ 502.467932][T18207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.467956][T18207] RIP: 0033:0x7f0b9c38f6c9 [ 502.467974][T18207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.467990][T18207] RSP: 002b:00007f0b9a5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 502.468017][T18207] RAX: ffffffffffffffda RBX: 00007f0b9c5e5fa0 RCX: 00007f0b9c38f6c9 [ 502.468031][T18207] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 502.468043][T18207] RBP: 00007f0b9c411f91 R08: 0000000000000000 R09: 0000000000000000 [ 502.468054][T18207] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 502.468065][T18207] R13: 00007f0b9c5e6038 R14: 00007f0b9c5e5fa0 R15: 00007ffe91794c88 [ 502.468099][T18207] [ 503.033074][T18234] syzkaller0: entered promiscuous mode [ 503.043217][T18234] syzkaller0: entered allmulticast mode [ 503.051846][T18239] openvswitch: netlink: Message has -2 unknown bytes. [ 503.099681][T18239] netlink: 'syz.2.3458': attribute type 9 has an invalid length. [ 503.199575][T18248] tipc: Enabled bearer , priority 0 [ 503.219849][T18248] syzkaller0: entered promiscuous mode [ 503.239176][T18248] syzkaller0: entered allmulticast mode [ 503.260462][T18251] veth1_to_batadv: entered allmulticast mode [ 503.270574][T18248] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 503.311484][T18248] tipc: Resetting bearer [ 503.333307][T18247] tipc: Resetting bearer [ 503.378436][T18247] tipc: Disabling bearer [ 503.404202][T18254] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.414760][T18254] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.541156][T18262] __nla_validate_parse: 4 callbacks suppressed [ 503.541174][T18262] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3467'. [ 503.598694][T18262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3467'. [ 503.795079][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 503.805101][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3472'. [ 503.821040][T18280] netlink: 'syz.2.3472': attribute type 15 has an invalid length. [ 503.836776][T18274] syz.3.3470: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 503.862938][T18274] CPU: 0 UID: 0 PID: 18274 Comm: syz.3.3470 Not tainted syzkaller #0 PREEMPT(full) [ 503.862962][T18274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 503.862973][T18274] Call Trace: [ 503.862980][T18274] [ 503.862988][T18274] dump_stack_lvl+0x189/0x250 [ 503.863017][T18274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.863038][T18274] ? __pfx__printk+0x10/0x10 [ 503.863056][T18274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 503.863079][T18274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 503.863104][T18274] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 503.863128][T18274] warn_alloc+0x214/0x310 [ 503.863159][T18274] ? __pfx_warn_alloc+0x10/0x10 [ 503.863192][T18274] ? __get_vm_area_node+0x28f/0x300 [ 503.863215][T18274] ? packet_set_ring+0x6f3/0x2120 [ 503.863251][T18274] __vmalloc_node_range_noprof+0x690/0x12d0 [ 503.863305][T18274] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 503.863330][T18274] ? alloc_pages_mpol+0x3cd/0x4a0 [ 503.863350][T18274] ? packet_set_ring+0x6f3/0x2120 [ 503.863374][T18274] vzalloc_noprof+0xb2/0xf0 [ 503.863395][T18274] ? packet_set_ring+0x6f3/0x2120 [ 503.863426][T18274] packet_set_ring+0x6f3/0x2120 [ 503.863473][T18274] ? __pfx_packet_set_ring+0x10/0x10 [ 503.863514][T18274] ? _copy_from_user+0x94/0xb0 [ 503.863538][T18274] packet_setsockopt+0xc5a/0x12c0 [ 503.863566][T18274] ? __pfx_packet_setsockopt+0x10/0x10 [ 503.863591][T18274] ? file_init_path+0x3b/0x590 [ 503.863621][T18274] ? aa_sk_perm+0x81e/0x950 [ 503.863647][T18274] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.863668][T18274] ? aa_sock_opt_perm+0xff/0x1b0 [ 503.863692][T18274] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 503.863708][T18274] ? __pfx_packet_setsockopt+0x10/0x10 [ 503.863733][T18274] do_sock_setsockopt+0x17c/0x1b0 [ 503.863755][T18274] __x64_sys_setsockopt+0x13f/0x1b0 [ 503.863776][T18274] do_syscall_64+0xfa/0xfa0 [ 503.863798][T18274] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.863817][T18274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.863833][T18274] ? clear_bhb_loop+0x60/0xb0 [ 503.863854][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.863870][T18274] RIP: 0033:0x7f28ea78f6c9 [ 503.863887][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.863903][T18274] RSP: 002b:00007f28eb714038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 503.863921][T18274] RAX: ffffffffffffffda RBX: 00007f28ea9e5fa0 RCX: 00007f28ea78f6c9 [ 503.863933][T18274] RDX: 000000000000000d RSI: 0000000000000107 RDI: 00000000000000a8 [ 503.863941][T18274] RBP: 00007f28ea811f91 R08: 000000000000001c R09: 0000000000000000 [ 503.863949][T18274] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 503.863957][T18274] R13: 00007f28ea9e6038 R14: 00007f28ea9e5fa0 R15: 00007ffce76adcf8 [ 503.863985][T18274] [ 503.896919][T18274] Mem-Info: [ 504.183396][T18295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.219200][T18274] active_anon:6835 inactive_anon:0 isolated_anon:0 [ 504.219200][T18274] active_file:3143 inactive_file:39998 isolated_file:0 [ 504.219200][T18274] unevictable:768 dirty:39 writeback:0 [ 504.219200][T18274] slab_reclaimable:12093 slab_unreclaimable:121055 [ 504.219200][T18274] mapped:32850 shmem:4231 pagetables:1241 [ 504.219200][T18274] sec_pagetables:0 bounce:0 [ 504.219200][T18274] kernel_misc_reclaimable:0 [ 504.219200][T18274] free:1299588 free_pcp:14642 free_cma:0 [ 504.302763][T18274] Node 0 active_anon:27440kB inactive_anon:0kB active_file:12572kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118600kB dirty:156kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13680kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.377799][T18274] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.413035][T18303] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3476'. [ 504.444825][T18303] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3476'. [ 504.467469][T18274] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.515012][T18303] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3476'. [ 504.534035][T18274] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 504.545551][T18274] Node 0 DMA32 free:1290320kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16640kB inactive_anon:0kB active_file:12572kB inactive_file:159788kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:47212kB local_pcp:20940kB free_cma:0kB [ 504.597020][T18274] lowmem_reserve[]: 0 0 0 0 0 [ 504.623505][T18310] netem: unknown loss type 0 [ 504.626041][T18274] Node 0 [ 504.628628][T18310] netem: change failed [ 504.629131][T18274] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 504.634949][T18312] SET target dimension over the limit! [ 504.635650][T18274] lowmem_reserve[]: 0 0 0 0 0 [ 504.679827][T18274] Node 1 Normal free:3900372kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15716kB local_pcp:7168kB free_cma:0kB [ 504.746807][T18316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3481'. [ 504.763166][T18274] lowmem_reserve[]: 0 0 0 0 0 [ 504.783417][T18274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 504.823822][T18318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3482'. [ 504.833559][T18274] Node 0 DMA32: 59*4kB (ME) 450*8kB (ME) 383*16kB (UME) 1179*32kB (UME) 318*64kB (UME) 185*128kB (UME) 402*256kB (UM) 286*512kB (UME) 165*1024kB (UME) 9*2048kB (UM) 186*4096kB (UM) = 1290316kB [ 504.853787][T18274] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 504.858314][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 504.869107][T18274] Node 1 Normal: 165*4kB (UE) 42*8kB (UME) 33*16kB (UME) 91*32kB (UME) 26*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3900372kB [ 504.894402][T18274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.906754][T18274] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 504.916971][T18274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 504.929499][T18274] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 504.933882][T18322] netlink: 'syz.4.3484': attribute type 30 has an invalid length. [ 504.943184][T18274] 44519 total pagecache pages [ 504.973060][T18274] 0 pages in swap cache [ 504.977930][T18274] Free swap = 124996kB [ 504.982192][T18274] Total swap = 124996kB [ 505.005241][T18274] 2097051 pages RAM [ 505.012016][T18274] 0 pages HighMem/MovableOnly [ 505.025961][ T3523] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.035616][ T3523] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.075550][ T3523] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.077447][T18274] 424119 pages reserved [ 505.105328][T18274] 0 pages cma reserved [ 505.109028][ T3523] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.281941][T18342] veth5: entered allmulticast mode [ 505.967575][T18391] netlink: 'syz.3.3506': attribute type 4 has an invalid length. [ 506.446798][T18425] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.454572][T18425] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.514574][T18429] IPv6: sit1: Disabled Multicast RS [ 506.521154][T18429] sit1: entered allmulticast mode [ 506.751610][T18446] netlink: 'syz.0.3521': attribute type 3 has an invalid length. [ 506.836919][T18455] netlink: 'syz.4.3524': attribute type 5 has an invalid length. [ 507.010919][T18476] netlink: 'syz.2.3528': attribute type 64 has an invalid length. [ 507.080570][T18471] netlink: 'syz.4.3527': attribute type 13 has an invalid length. [ 507.126858][T18471] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 507.208338][T18485] netlink: 'syz.2.3530': attribute type 2 has an invalid length. [ 507.720848][T18521] sctp: [Deprecated]: syz.3.3543 (pid 18521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.720848][T18521] Use struct sctp_sack_info instead [ 507.757525][T18524] netlink: 'syz.4.3542': attribute type 9 has an invalid length. [ 507.788097][T18521] IPVS: length: 175 != 8 [ 508.117464][T18560] x_tables: duplicate underflow at hook 4 [ 508.532798][T18593] xt_hashlimit: size too large, truncated to 1048576 [ 508.533266][T18597] netlink: 'syz.3.3556': attribute type 1 has an invalid length. [ 508.558928][T18600] __nla_validate_parse: 18 callbacks suppressed [ 508.558946][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'. [ 508.630174][T18600] chnl_net:caif_netlink_parms(): no params data found [ 508.781536][T18597] sctp: [Deprecated]: syz.3.3556 (pid 18597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.781536][T18597] Use struct sctp_sack_info instead [ 508.799711][T18605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.842823][T18605] bond1: (slave bond2): making interface the new active one [ 508.858176][T18605] bond1: (slave bond2): Enslaving as an active interface with an up link [ 509.761402][T18624] Unsupported ieee802154 address type: 0 [ 509.871405][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'. [ 510.016087][T18646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3571'. [ 510.039910][T18645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3571'. [ 510.076299][T18648] tipc: Enabled bearer , priority 0 [ 510.089069][T18648] syzkaller0: entered promiscuous mode [ 510.102597][T18648] syzkaller0: entered allmulticast mode [ 510.174175][T18648] tipc: Resetting bearer [ 510.193751][T18647] tipc: Resetting bearer [ 510.246224][T18647] tipc: Disabling bearer [ 510.364685][T18676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3579'. [ 510.402209][T18679] netlink: 'syz.2.3582': attribute type 1 has an invalid length. [ 510.451330][T18680] netlink: 'syz.4.3581': attribute type 13 has an invalid length. [ 510.661704][T18697] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3586'. [ 510.670367][T18688] veth1_macvtap: left promiscuous mode [ 510.874492][T18710] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 510.965489][T18719] syzkaller0: entered promiscuous mode [ 510.973710][T18719] syzkaller0: entered allmulticast mode [ 511.044190][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 511.090628][T18725] bond3: option xmit_hash_policy: invalid value (64) [ 511.108799][T18725] bond3 (unregistering): Released all slaves [ 511.301169][T18745] netlink: 'syz.0.3601': attribute type 1 has an invalid length. [ 511.313317][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3602'. [ 511.494614][T18758] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 511.685917][T18779] netlink: 'syz.3.3612': attribute type 12 has an invalid length. [ 511.793079][T18779] bond3: option primary_reselect: invalid value (255) [ 511.809583][T18779] bond3 (unregistering): Released all slaves [ 511.875419][T18792] pim6reg: entered allmulticast mode [ 511.925862][T18792] pim6reg: left allmulticast mode [ 512.155567][T18819] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3621'. [ 512.278713][T18835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3623'. [ 512.305249][T18835] xt_TCPMSS: Only works on TCP SYN packets [ 512.314050][T18828] lo: Caught tx_queue_len zero misconfig [ 512.492115][T18845] : entered promiscuous mode [ 512.786230][T18854] syzkaller0: entered promiscuous mode [ 512.792066][T18854] syzkaller0: entered allmulticast mode [ 512.843232][T18856] ipt_ECN: cannot use operation on non-tcp rule [ 514.484822][T18890] __nla_validate_parse: 8 callbacks suppressed [ 514.484866][T18890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3638'. [ 514.494183][T18904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3642'. [ 514.614805][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3643'. [ 514.885487][T18930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3650'. [ 515.024655][T18945] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3656'. [ 515.061136][T17927] IPVS: starting estimator thread 0... [ 515.167722][T18949] IPVS: using max 35 ests per chain, 84000 per kthread [ 515.220382][T18956] vxcan3: entered promiscuous mode [ 515.226017][T18956] vxcan3: entered allmulticast mode [ 515.271360][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3663'. [ 515.281634][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3663'. [ 515.306168][T18968] xt_l2tp: v2 doesn't support IP mode [ 515.350668][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'. [ 515.392951][T18978] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3666'. [ 515.426342][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 515.437829][T18982] x_tables: duplicate underflow at hook 3 [ 515.555450][T18994] bridge_slave_1: left allmulticast mode [ 515.567454][T18994] bridge_slave_1: left promiscuous mode [ 515.575015][T18994] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.592176][T18994] bridge_slave_0: left allmulticast mode [ 515.598106][T18994] bridge_slave_0: left promiscuous mode [ 515.603870][T18994] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.221049][T19013] tipc: Enabled bearer , priority 0 [ 516.229545][T19013] syzkaller0: entered promiscuous mode [ 516.235210][T19013] syzkaller0: entered allmulticast mode [ 516.246460][T19015] tipc: Enabled bearer , priority 0 [ 516.255412][T19015] syzkaller0: entered promiscuous mode [ 516.262953][T19015] syzkaller0: entered allmulticast mode [ 516.294233][T19013] tipc: Resetting bearer [ 516.307613][T19015] tipc: Resetting bearer [ 516.322857][ T2980] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.332173][T19012] tipc: Resetting bearer [ 516.351306][T19012] tipc: Disabling bearer [ 516.362779][ T2980] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.371961][ T2980] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.381175][T19014] tipc: Resetting bearer [ 516.399642][T19014] tipc: Disabling bearer [ 516.410818][ T2980] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.436547][T19020] syz_tun: entered allmulticast mode [ 516.448767][T19020] dvmrp6: entered allmulticast mode [ 516.456757][T19019] syz_tun: left allmulticast mode [ 516.633468][T19032] bond3: entered promiscuous mode [ 516.639145][T19032] bond3: entered allmulticast mode [ 516.644967][T19032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.698944][T19035] tipc: Enabled bearer , priority 0 [ 516.713409][T19035] syzkaller0: entered promiscuous mode [ 516.720773][T19035] syzkaller0: entered allmulticast mode [ 516.751416][T19035] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 516.823564][T19035] tipc: Resetting bearer [ 516.858082][T19034] tipc: Resetting bearer [ 516.906333][T19034] tipc: Disabling bearer [ 517.421306][ T2980] ip6_vti0 (unregistering): left allmulticast mode [ 517.472601][T19093] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 517.480607][T19093] netlink: 'syz.0.3695': attribute type 2 has an invalid length. [ 517.528010][T19094] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 517.536768][T19094] netlink: 'syz.0.3695': attribute type 2 has an invalid length. [ 517.545199][ T2980] bond1 (unregistering): (slave gretap1): Releasing active interface [ 517.555492][ T2980] gretap1 (unregistering): left promiscuous mode [ 517.564259][ T2980] gretap1 (unregistering): left allmulticast mode [ 517.589635][ T2980] bond4 (unregistering): (slave gretap2): Releasing active interface [ 517.646190][ T2980] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 517.922282][ T2980] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 517.933719][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.945078][ T2980] bond0 (unregistering): Released all slaves [ 518.048100][ T2980] bond1 (unregistering): Released all slaves [ 518.062102][ T2980] bond2 (unregistering): (slave bond3): Releasing backup interface [ 518.070745][ T2980] bond2 (unregistering): Released all slaves [ 518.164143][ T2980] bond3 (unregistering): Released all slaves [ 518.177004][ T2980] bond4 (unregistering): Released all slaves [ 518.189835][ T2980] bond5 (unregistering): Released all slaves [ 518.218863][T19072] tipc: Enabling of bearer rejected, failed to enable media [ 518.318761][ T2980] : left promiscuous mode [ 518.397869][T19104] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 518.489434][ T2980] tipc: Left network mode [ 518.746174][T19124] netlink: 'syz.2.3705': attribute type 3 has an invalid length. [ 518.806162][T19136] netlink: 'syz.3.3709': attribute type 1 has an invalid length. [ 518.870798][T19126] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 518.893585][T19126] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 518.927311][T19136] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 518.940608][T19136] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 518.949868][T19136] gretap1: entered promiscuous mode [ 518.955177][T19136] gretap1: entered allmulticast mode [ 519.075286][T19137] macvlan2: entered promiscuous mode [ 519.080815][T19137] macvlan2: entered allmulticast mode [ 519.086597][T19137] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 519.265703][T19150] 0: reclassify loop, rule prio 0, protocol 800 [ 519.396240][T19157] tipc: Enabled bearer , priority 0 [ 519.412438][T19157] syzkaller0: entered promiscuous mode [ 519.427026][T19157] syzkaller0: entered allmulticast mode [ 519.450929][T19157] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 519.497618][T19160] __nla_validate_parse: 76 callbacks suppressed [ 519.497634][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 519.534783][T19160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3715'. [ 519.611812][ T2980] hsr_slave_1: left promiscuous mode [ 519.645857][ T2980] vlan0: left allmulticast mode [ 519.656446][ T2980] veth0_vlan: left allmulticast mode [ 519.661716][T19178] sctp: [Deprecated]: syz.3.3721 (pid 19178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.661716][T19178] Use struct sctp_sack_info instead [ 519.682943][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3722'. [ 519.692726][ T2980] vlan0: left promiscuous mode [ 519.698594][ T2980] veth0_macvtap: left promiscuous mode [ 519.704359][ T2980] veth1_vlan: left promiscuous mode [ 519.772447][ T2980] pim6reg (unregistering): left allmulticast mode [ 519.858461][ T2980] pimreg3 (unregistering): left allmulticast mode [ 520.389924][T17927] tipc: Node number set to 1496243400 [ 520.419059][T19157] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 520.450758][T19160] tipc: Resetting bearer [ 520.474892][T19179] bridge0: entered promiscuous mode [ 520.481448][T19179] macsec2: entered promiscuous mode [ 520.486839][T19179] macsec2: entered allmulticast mode [ 520.493117][T19179] bridge0: entered allmulticast mode [ 520.500742][T19179] bridge0: port 3(macsec2) entered blocking state [ 520.508075][T19179] bridge0: port 3(macsec2) entered disabled state [ 520.517856][T19179] bridge0: left allmulticast mode [ 520.523337][T19179] bridge0: left promiscuous mode [ 520.541130][T19182] : renamed from bridge_slave_0 (while UP) [ 520.549223][ T9] hsr0 speed is unknown, defaulting to 1000 [ 520.555166][ T5889] lo speed is unknown, defaulting to 1000 [ 520.562349][ T5889] infiniband s: ib_query_port failed (-19) [ 520.567745][T19156] tipc: Resetting bearer [ 520.568720][ T9] infiniband syz1: ib_query_port failed (-19) [ 520.612984][T19156] tipc: Disabling bearer [ 520.756101][T19190] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3725'. [ 520.881460][ T2980] IPVS: stop unused estimator thread 0... [ 521.022931][T19211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3733'. [ 521.160817][T19217] tipc: Enabled bearer , priority 0 [ 521.225346][T19217] syzkaller0: entered promiscuous mode [ 521.231128][T19217] syzkaller0: entered allmulticast mode [ 521.300331][T19231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3738'. [ 521.311471][T19232] netlink: 'syz.2.3737': attribute type 13 has an invalid length. [ 521.327349][T19232] netlink: 'syz.2.3737': attribute type 17 has an invalid length. [ 521.414385][T19236] netlink: 'syz.1.3740': attribute type 16 has an invalid length. [ 521.427142][T19236] netlink: 'syz.1.3740': attribute type 17 has an invalid length. [ 522.277498][ T9] tipc: Node number set to 1914408993 [ 522.655225][T19233] tipc: Resetting bearer [ 522.725328][T19232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.784267][T19236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.819269][T19216] tipc: Resetting bearer [ 522.841615][T19216] tipc: Disabling bearer [ 523.003477][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 523.168891][T19273] netlink: 'syz.0.3749': attribute type 4 has an invalid length. [ 523.198380][T19262] netlink: 'syz.3.3746': attribute type 1 has an invalid length. [ 523.206147][T19262] netlink: 'syz.3.3746': attribute type 2 has an invalid length. [ 523.228754][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3751'. [ 523.401272][T19293] macvtap2: entered promiscuous mode [ 523.416851][T19293] macvtap2: entered allmulticast mode [ 523.422283][T19295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3757'. [ 523.450298][T19291] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3755'. [ 523.494410][T19296] macvtap2: entered promiscuous mode [ 523.504078][T19296] macvtap2: entered allmulticast mode [ 523.535476][T19300] syzkaller0: entered promiscuous mode [ 523.541538][T19300] syzkaller0: entered allmulticast mode [ 523.681747][T19307] vlan2: entered promiscuous mode [ 523.686979][T19307] vlan2: entered allmulticast mode [ 523.696469][T19307] hsr_slave_1: entered allmulticast mode [ 523.732255][T19307] lo speed is unknown, defaulting to 1000 [ 524.558501][T19352] __nla_validate_parse: 2 callbacks suppressed [ 524.558518][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3776'. [ 524.626000][T19352] hsr_slave_0 (unregistering): left promiscuous mode [ 524.636733][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3777'. [ 524.645820][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3777'. [ 524.655132][T19354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3777'. [ 525.034530][T19382] netlink: 'syz.3.3786': attribute type 4 has an invalid length. [ 525.397455][T19405] netlink: 'syz.0.3791': attribute type 29 has an invalid length. [ 525.470531][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3792'. [ 525.539753][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3796'. [ 525.558111][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3792'. [ 525.569610][T19409] netlink: 5080 bytes leftover after parsing attributes in process `syz.3.3792'. [ 525.581285][T19425] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3795'. [ 525.658526][T19425] dvmrp6: left allmulticast mode [ 525.799709][T19440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3799'. [ 526.098690][T19465] netlink: 'syz.1.3807': attribute type 5 has an invalid length. [ 526.209046][T19463] bond0: (slave team0): Releasing backup interface [ 526.249536][T19463] : left allmulticast mode [ 526.254094][T19463] : left promiscuous mode [ 526.319024][T19463] bridge0: port 1() entered disabled state [ 526.341581][T19463] bridge_slave_1: left allmulticast mode [ 526.347654][T19463] bridge_slave_1: left promiscuous mode [ 526.353512][T19463] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.372044][T19463] bond0: (slave bond_slave_0): Releasing backup interface [ 526.391212][T19463] bond0: (slave bond_slave_1): Releasing backup interface [ 526.406846][T19463] team0: Port device team_slave_0 removed [ 526.419819][T19463] team0: Port device team_slave_1 removed [ 526.428425][T19463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.435831][T19463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.444803][T19463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.452733][T19463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.461655][T19463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 526.667177][T19487] team0: Port device team_slave_0 removed [ 526.734165][T19499] ip6tnl0: Caught tx_queue_len zero misconfig [ 526.834216][ T3523] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.912932][ T3523] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.999395][T19525] netlink: 'syz.2.3824': attribute type 1 has an invalid length. [ 527.009620][ T3523] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.046805][ T3523] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.058306][T19525] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 527.186270][T19540] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 527.203771][T19540] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 527.213102][T19540] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 528.546773][T19550] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 528.577630][T19551] tipc: Enabled bearer , priority 10 [ 528.651337][T19554] validate_nla: 3 callbacks suppressed [ 528.651355][T19554] netlink: 'syz.3.3832': attribute type 1 has an invalid length. [ 528.684956][T19555] netlink: 'syz.1.3833': attribute type 1 has an invalid length. [ 528.718756][T19559] netlink: 'syz.4.3834': attribute type 1 has an invalid length. [ 528.841773][T19559] bond1: entered promiscuous mode [ 528.847922][T19559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.899162][T19560] bond1: (slave bridge0): making interface the new active one [ 528.906920][T19560] bridge0: entered promiscuous mode [ 528.915678][T19560] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 528.964201][T19566] bond3 (unregistering): Released all slaves [ 529.049618][T19568] syzkaller0: entered promiscuous mode [ 529.055780][T19568] syzkaller0: entered allmulticast mode [ 529.165504][T19590] sctp: [Deprecated]: syz.4.3839 (pid 19590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.165504][T19590] Use struct sctp_sack_info instead [ 529.446776][T19607] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 529.682483][T19624] __nla_validate_parse: 23 callbacks suppressed [ 529.682502][T19624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3850'. [ 529.698167][ T9] tipc: Node number set to 1913040809 [ 530.867710][T19628] tipc: Enabling of bearer rejected, failed to enable media [ 530.912445][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3853'. [ 530.924401][T19634] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3853'. [ 531.048880][T19639] syzkaller0: refused to change device tx_queue_len [ 531.072538][T19646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.094671][T19646] netlink: 'syz.1.3859': attribute type 10 has an invalid length. [ 531.104284][T19644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.136396][T19646] veth1_macvtap: left promiscuous mode [ 531.320370][T19661] nbd: must specify at least one socket [ 531.449003][T19674] netlink: 'syz.1.3865': attribute type 1 has an invalid length. [ 531.449003][T19675] netlink: 'syz.1.3865': attribute type 1 has an invalid length. [ 531.501199][T19675] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 531.512475][T19675] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 531.534797][T19674] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 531.546343][T19674] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 531.642435][T19683] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 531.971643][T19699] netlink: 'syz.4.3872': attribute type 2 has an invalid length. [ 531.981677][T19699] netlink: 'syz.4.3872': attribute type 2 has an invalid length. [ 531.992001][T19699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.035447][T19705] xt_hashlimit: size too large, truncated to 1048576 [ 532.200783][T19718] veth0_to_bridge: entered promiscuous mode [ 532.220498][T19717] veth0_to_bridge: left promiscuous mode [ 532.307646][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3883'. [ 532.318103][T19725] netlink: 'syz.1.3881': attribute type 12 has an invalid length. [ 532.591814][T19745] netlink: 'syz.4.3889': attribute type 3 has an invalid length. [ 532.968852][T19766] sit0: mtu less than device minimum [ 533.008697][T19780] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3898'. [ 533.140549][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3901'. [ 533.440174][T19811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3908'. [ 533.515716][T19815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3911'. [ 533.572743][T19819] tipc: Enabling of bearer rejected, failed to enable media [ 533.611648][T19819] tipc: Enabled bearer , priority 0 [ 533.638855][T19819] syzkaller0: entered promiscuous mode [ 533.644438][T19819] syzkaller0: entered allmulticast mode [ 533.652417][T19821] syzkaller1: entered promiscuous mode [ 533.658528][T19821] syzkaller1: entered allmulticast mode [ 533.669674][T19817] tipc: Resetting bearer [ 533.696455][T19817] tipc: Disabling bearer [ 533.753268][T19823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3915'. [ 533.880331][T19831] openvswitch: netlink: Actions may not be safe on all matching packets [ 534.078435][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3922'. [ 534.112822][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.221671][T19855] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 534.272504][T19858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.622521][T19877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.753462][T19877] __nla_validate_parse: 3 callbacks suppressed [ 534.753481][T19877] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3938'. [ 534.786809][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3938'. [ 534.838031][T19888] tipc: Enabled bearer , priority 0 [ 534.846238][T19888] syzkaller0: entered promiscuous mode [ 534.854557][T19888] syzkaller0: entered allmulticast mode [ 534.928816][T19888] tipc: Resetting bearer [ 534.957687][T19888] tipc: Disabling bearer [ 535.011331][T19901] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 535.079489][T19903] validate_nla: 1 callbacks suppressed [ 535.079508][T19903] netlink: 'syz.2.3947': attribute type 1 has an invalid length. [ 535.207532][T19909] netlink: 'syz.4.3950': attribute type 9 has an invalid length. [ 535.235331][T19916] xt_l2tp: v2 doesn't support IP mode [ 535.264111][T19916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3953'. [ 535.428261][T19929] netlink: 'syz.0.3957': attribute type 10 has an invalid length. [ 535.586951][T19944] tipc: New replicast peer: 255.255.255.255 [ 535.594674][T19944] tipc: Enabled bearer , priority 10 [ 535.605765][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3961'. [ 535.619162][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 535.715318][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'. [ 535.930587][T19973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3968'. [ 574.886132][T19995] netem: change failed [ 574.897584][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3978'. [ 575.212817][T20023] xt_hashlimit: overflow, rate too high: 0 [ 575.239571][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3985'. [ 575.365403][T20026] syz.4.3987 (20026) used greatest stack depth: 17832 bytes left [ 575.440934][T20021] Set syz1 is full, maxelem 6117 reached [ 575.504207][T20038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3991'. [ 575.666704][T20051] ip6t_srh: unknown srh match flags 5F28 [ 575.690327][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3995'. [ 575.717374][T20051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3995'. [ 575.741175][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3995'. [ 575.776702][T20051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3995'. [ 575.796921][T20059] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 575.892013][T20070] netlink: 'syz.2.4000': attribute type 4 has an invalid length. [ 575.949974][T20070] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4000'. [ 575.953040][T20076] syzkaller0: entered promiscuous mode [ 575.975593][T20076] syzkaller0: entered allmulticast mode [ 575.988243][T20075] netlink: 'syz.1.4002': attribute type 29 has an invalid length. [ 576.035802][T20075] netlink: 'syz.1.4002': attribute type 29 has an invalid length. [ 576.060555][T20075] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4002'. [ 576.067644][T20070] `: renamed from bond0 (while UP) [ 576.099428][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4006'. [ 576.138412][T20083] vxcan2: entered allmulticast mode [ 576.312662][T20089] netlink: 'syz.1.4008': attribute type 1 has an invalid length. [ 578.394817][T20158] syzkaller0: entered promiscuous mode [ 578.402988][T20158] syzkaller0: entered allmulticast mode [ 578.491069][T20163] Cannot find add_set index 3 as target [ 578.500696][T20163] syzkaller0: entered promiscuous mode [ 578.506248][T20163] syzkaller0: entered allmulticast mode [ 578.853551][T20189] team0: Caught tx_queue_len zero misconfig [ 579.173083][T20216] bond0: entered promiscuous mode [ 579.178289][T20216] bond_slave_0: entered promiscuous mode [ 579.184172][T20216] bond_slave_1: entered promiscuous mode [ 579.192243][T20216] batadv0: entered promiscuous mode [ 579.206332][T20216] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 579.227310][T20216] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 579.237970][T20216] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 581.971703][T20229] __nla_validate_parse: 11 callbacks suppressed [ 581.971722][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 582.110305][T20225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.122269][T20225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.133999][T20225] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 582.146458][T20225] bond0 (unregistering): Released all slaves [ 582.262400][T20239] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4054'. [ 582.431116][T20251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4058'. [ 582.800140][T20272] netlink: 'syz.1.4065': attribute type 12 has an invalid length. [ 582.869701][T20273] xt_hashlimit: size too large, truncated to 1048576 [ 583.033810][T20286] SET target dimension over the limit! [ 583.458241][T20304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4070'. [ 583.478823][T20290] : entered promiscuous mode [ 583.589494][T20313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4071'. [ 583.673006][T20324] x_tables: duplicate underflow at hook 3 [ 583.744418][T20329] syzkaller0: entered promiscuous mode [ 583.754891][T20329] syzkaller0: entered allmulticast mode [ 583.766863][T20327] netlink: 'syz.1.4075': attribute type 1 has an invalid length. [ 583.768363][T20330] netlink: 'syz.1.4075': attribute type 1 has an invalid length. [ 583.835145][T20327] bond4 (unregistering): Released all slaves [ 583.874165][T20330] ip6tnl1: entered promiscuous mode [ 583.879487][T20330] ip6tnl1: entered allmulticast mode [ 583.971896][T20343] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 584.134398][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4084'. [ 584.290179][T20374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4086'. [ 584.378703][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4086'. [ 584.633611][T20392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4092'. [ 584.651704][T20399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4094'. [ 584.794057][T20408] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 584.802150][T20408] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 584.816509][T20406] netlink: 'syz.0.4097': attribute type 21 has an invalid length. [ 584.826315][T20408] netlink: 'syz.2.4095': attribute type 1 has an invalid length. [ 584.874569][T20412] bond0: (slave gre0): Device is not bonding slave [ 584.882020][T20412] bond0: option active_slave: invalid value (gre0) [ 584.894863][T20412] bond0 (unregistering): Released all slaves [ 584.915157][T20417] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 584.998960][T20424] netlink: 'syz.1.4099': attribute type 21 has an invalid length. [ 585.027480][T20424] netlink: 'syz.1.4099': attribute type 4 has an invalid length. [ 585.035259][T20424] netlink: 'syz.1.4099': attribute type 5 has an invalid length. [ 585.049029][T20422] tipc: Enabled bearer , priority 0 [ 585.111253][T20422] tipc: Disabling bearer [ 585.321400][T20435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.488283][T20459] netlink: zone id is out of range [ 585.515279][T20459] netlink: zone id is out of range [ 585.549118][T20459] netlink: zone id is out of range [ 585.570002][T20459] netlink: zone id is out of range [ 585.600226][T20459] netlink: zone id is out of range [ 585.617461][T20459] netlink: zone id is out of range [ 585.636841][T20459] netlink: zone id is out of range [ 585.654378][T20459] netlink: zone id is out of range [ 585.659966][T20459] netlink: zone id is out of range [ 586.129187][T20507] syzkaller1: entered promiscuous mode [ 586.134707][T20507] syzkaller1: entered allmulticast mode [ 586.155987][T20507] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 586.426142][T20530] batadv_slave_0: entered promiscuous mode [ 586.443252][T20527] batadv_slave_0: left promiscuous mode [ 586.565744][T20542] sctp: [Deprecated]: syz.4.4131 (pid 20542) Use of int in maxseg socket option. [ 586.565744][T20542] Use struct sctp_assoc_value instead [ 587.358214][T20595] syzkaller0: entered promiscuous mode [ 587.363967][T20595] syzkaller0: entered allmulticast mode [ 587.859750][T20620] __nla_validate_parse: 21 callbacks suppressed [ 587.859768][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4152'. [ 587.884287][T20620] bridge0: entered promiscuous mode [ 587.890136][T20620] macsec1: entered promiscuous mode [ 587.895618][T20620] macsec1: entered allmulticast mode [ 587.901587][T20620] bridge0: entered allmulticast mode [ 587.907941][T20620] bridge0: port 3(macsec1) entered blocking state [ 587.914600][T20620] bridge0: port 3(macsec1) entered disabled state [ 587.924538][T20620] bridge0: left allmulticast mode [ 587.930047][T20620] bridge0: left promiscuous mode [ 588.117797][T20627] validate_nla: 6 callbacks suppressed [ 588.117814][T20627] netlink: 'syz.0.4154': attribute type 1 has an invalid length. [ 588.147621][T20629] netlink: 'syz.0.4154': attribute type 1 has an invalid length. [ 588.229191][T20627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.256420][T20640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4158'. [ 588.264114][T20634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.265614][ T10] IPVS: starting estimator thread 0... [ 588.273771][T20634] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 588.289144][T20634] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 588.377445][T20641] IPVS: using max 34 ests per chain, 81600 per kthread [ 588.596858][T20660] pim6reg: entered allmulticast mode [ 588.617886][T20660] pim6reg: left allmulticast mode [ 588.621647][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 588.760597][T20672] batadv_slave_1: entered promiscuous mode [ 588.823898][T20671] batadv_slave_1: left promiscuous mode [ 588.880778][T20680] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 589.070559][T20691] veth7: entered allmulticast mode [ 589.314367][T20718] netlink: 5328 bytes leftover after parsing attributes in process `syz.1.4182'. [ 589.662749][T20752] netlink: 'syz.4.4190': attribute type 4 has an invalid length. [ 589.716683][T20759] netlink: 'syz.4.4190': attribute type 4 has an invalid length. [ 589.803164][T20768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 590.024616][T20782] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 590.119082][T20788] netlink: 'syz.2.4198': attribute type 13 has an invalid length. [ 590.124952][T20789] tipc: New replicast peer: 255.255.255.255 [ 590.133738][T20789] tipc: Enabled bearer , priority 10 [ 590.190033][T20788] veth0_macvtap: left promiscuous mode [ 590.199698][T20788] macvtap0: entered allmulticast mode [ 590.224432][T20795] netlink: 'syz.4.4200': attribute type 1 has an invalid length. [ 590.227034][T20788] macvtap0: refused to change device tx_queue_len [ 590.247642][T20795] netlink: 'syz.4.4200': attribute type 3 has an invalid length. [ 590.255896][T20795] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4200'. [ 590.596495][T20821] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 590.786110][T20834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4210'. [ 590.814500][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4210'. [ 591.012947][T20849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4212'. [ 591.064795][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4215'. [ 591.258752][ T5916] tipc: Node number set to 4032274645 [ 591.424079][T20867] bond0: entered allmulticast mode [ 591.702302][T20887] netlink: 'syz.4.4223': attribute type 32 has an invalid length. [ 591.779791][T20887] bond0: option coupled_control: invalid value (52) [ 591.790500][T20887] bond0 (unregistering): Released all slaves [ 592.305290][T20922] netlink: 'syz.0.4234': attribute type 1 has an invalid length. [ 592.540539][T20938] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 592.580098][T20938] bond4 (unregistering): Released all slaves [ 592.657947][ T5827] Bluetooth: hci3: command tx timeout [ 592.737158][T20937] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 592.834261][T20961] net_ratelimit: 10 callbacks suppressed [ 592.834278][T20961] openvswitch: netlink: Flow actions attr not present in new flow. [ 592.894236][T20964] __nla_validate_parse: 14 callbacks suppressed [ 592.894252][T20964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4244'. [ 593.030196][T20972] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4246'. [ 593.203265][T20986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4250'. [ 593.212423][T20991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4251'. [ 593.285541][T20986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.299316][T20986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.356222][T20997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4255'. [ 593.521422][T20986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.531844][T20986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.635579][T20986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.658058][T20986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.712895][T21011] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 593.805640][T20986] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.826182][T20986] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.000569][ T3571] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.011957][ T3571] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.082904][ T43] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.096349][ T43] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.134691][ T43] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.154802][ T43] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.225784][ T3571] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.257666][ T3571] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.329847][T21056] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4271'. [ 594.401855][T21062] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 594.448000][T21062] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 594.471698][T21062] netlink: 'syz.3.4272': attribute type 29 has an invalid length. [ 594.572131][T21079] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4278'. [ 594.640291][T21081] openvswitch: netlink: Missing key (keys=40, expected=80) [ 594.863499][T21100] netlink: 'syz.4.4285': attribute type 10 has an invalid length. [ 594.901496][T21100] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 594.923716][T21100] team0: Port device dummy0 removed [ 595.054248][T21119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4291'. [ 595.062029][T21121] pimreg3: entered allmulticast mode [ 595.450095][T21155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4300'. [ 595.477042][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4300'. [ 595.568330][T21162] team0: Port device team_slave_0 removed [ 595.581804][T21162] team0: Port device team_slave_1 removed [ 595.592460][T21162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.600480][T21162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.620249][T21162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.635289][T21162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.645831][T21162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.821294][T21178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.858184][T21175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.061428][T21196] x_tables: duplicate underflow at hook 3 [ 596.539265][T21224] netlink: 'syz.0.4321': attribute type 2 has an invalid length. [ 596.548020][T21224] netlink: 'syz.0.4321': attribute type 2 has an invalid length. [ 596.791112][T21235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.809832][T21235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.835486][T21235] bond0 (unregistering): Released all slaves [ 596.863677][T21240] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 596.936619][T21253] netlink: 'syz.3.4330': attribute type 10 has an invalid length. [ 597.028691][T21259] netlink: 'syz.1.4334': attribute type 1 has an invalid length. [ 598.860221][T21317] __nla_validate_parse: 11 callbacks suppressed [ 598.860237][T21317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4346'. [ 599.830329][T21341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4353'. [ 600.082350][T21359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4357'. [ 600.294766][T21367] netlink: 'syz.0.4363': attribute type 27 has an invalid length. [ 600.316308][T21367] netlink: 'syz.0.4363': attribute type 1 has an invalid length. [ 600.336295][T21369] sch_fq: defrate 0 ignored. [ 600.364837][T21367] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 600.383223][T21371] syzkaller0: entered promiscuous mode [ 600.388846][T21371] syzkaller0: entered allmulticast mode [ 600.414973][T21378] netlink: 38 bytes leftover after parsing attributes in process `syz.2.4364'. [ 600.456407][T21383] netlink: 'syz.4.4366': attribute type 33 has an invalid length. [ 600.485995][T21367] netlink: 'syz.0.4363': attribute type 13 has an invalid length. [ 600.518043][T21381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.598870][T21389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4368'. [ 600.618766][T21389] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 600.818654][T21408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4371'. [ 600.892116][T21408] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4371'. [ 600.995698][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4378'. [ 601.078550][T21429] x_tables: unsorted underflow at hook 3 [ 601.230976][T21443] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.289403][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4384'. [ 601.385845][T21455] batadv_slave_0: entered promiscuous mode [ 601.407791][T21455] batman_adv: batadv0: Adding interface: macsec0 [ 601.414160][T21455] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.462234][T21455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.481475][T21455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.507846][T21455] batman_adv: batadv0: Interface activated: macsec0 [ 601.540592][T21461] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 601.598330][T21469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4392'. [ 601.733520][T21478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.865828][T21494] geneve2: entered promiscuous mode [ 601.885437][T21494] geneve2: entered allmulticast mode [ 602.069488][T21512] pim6reg1: entered promiscuous mode [ 602.075006][T21512] pim6reg1: entered allmulticast mode [ 602.391847][T21538] netlink: 'syz.1.4412': attribute type 8 has an invalid length. [ 602.992986][T21576] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 603.021686][T21576] netlink: 'syz.0.4427': attribute type 4 has an invalid length. [ 603.390075][T21591] tipc: Enabling of bearer rejected, failed to enable media [ 603.739168][T21619] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 604.144824][T21644] __nla_validate_parse: 14 callbacks suppressed [ 604.144843][T21644] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4451'. [ 604.170332][T21647] netlink: 'syz.4.4452': attribute type 29 has an invalid length. [ 604.189068][T21647] netlink: 'syz.4.4452': attribute type 29 has an invalid length. [ 604.696309][T21677] netlink: 'syz.1.4461': attribute type 21 has an invalid length. [ 604.737702][T21677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4461'. [ 604.816262][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4458'. [ 604.816432][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4459'. [ 604.835857][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4459'. [ 604.849463][T21684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4462'. [ 604.869362][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4459'. [ 604.884183][T21293] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.887394][T21670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4459'. [ 604.954405][T21299] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.973738][T21299] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.996998][T21299] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.307873][T21696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.324640][T21699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4466'. [ 605.386661][T21698] validate_nla: 2 callbacks suppressed [ 605.386677][T21698] netlink: 'syz.0.4468': attribute type 12 has an invalid length. [ 605.446834][T21698] bond4: option primary_reselect: invalid value (255) [ 605.461722][T21698] bond4 (unregistering): Released all slaves [ 605.522776][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4471'. [ 605.597680][T21714] team1: entered promiscuous mode [ 605.603276][T21714] team1: entered allmulticast mode [ 605.998741][T21741] netlink: 'syz.3.4480': attribute type 21 has an invalid length. [ 606.296520][T21751] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 606.936661][T21784] veth3: entered allmulticast mode [ 607.036724][T21794] erspan0: entered allmulticast mode [ 607.622460][T21830] lo speed is unknown, defaulting to 1000 [ 607.739977][T21840] bridge_slave_0: entered promiscuous mode [ 608.021698][T21861] netlink: 'syz.3.4514': attribute type 23 has an invalid length. [ 608.058203][T21861] netlink: 'syz.3.4514': attribute type 1 has an invalid length. [ 608.176967][T21861] bond5: entered promiscuous mode [ 608.194421][T21861] bond5: entered allmulticast mode [ 608.200774][T21861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.426191][T21870] syz_tun: entered allmulticast mode [ 608.437608][T21872] netlink: 'syz.3.4515': attribute type 2 has an invalid length. [ 608.440332][T21882] [ 608.447679][T21882] ====================================================== [ 608.454696][T21882] WARNING: possible circular locking dependency detected [ 608.457023][T21869] syz_tun: left allmulticast mode [ 608.461724][T21882] syzkaller #0 Not tainted [ 608.461734][T21882] ------------------------------------------------------ [ 608.461741][T21882] syz.4.4518/21882 is trying to acquire lock: [ 608.461751][T21882] ffffffff8f4262d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 608.493617][T21882] [ 608.493617][T21882] but task is already holding lock: [ 608.501007][T21882] ffff888032f8f970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 608.510334][T21882] [ 608.510334][T21882] which lock already depends on the new lock. [ 608.510334][T21882] [ 608.520762][T21882] [ 608.520762][T21882] the existing dependency chain (in reverse order) is: [ 608.529775][T21882] [ 608.529775][T21882] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 608.537823][T21882] lock_acquire+0x120/0x360 [ 608.542862][T21882] _raw_spin_lock_bh+0x36/0x50 [ 608.548173][T21882] nr_rt_device_down+0x12a/0x720 [ 608.553642][T21882] nr_device_event+0x137/0x150 [ 608.558941][T21882] notifier_call_chain+0x1b6/0x3e0 [ 608.564587][T21882] __dev_notify_flags+0x18d/0x2e0 [ 608.570142][T21882] netif_change_flags+0xe8/0x1a0 [ 608.575612][T21882] dev_change_flags+0x130/0x260 [ 608.580990][T21882] dev_ioctl+0x7b4/0x1150 [ 608.585856][T21882] sock_do_ioctl+0x22c/0x300 [ 608.590982][T21882] sock_ioctl+0x576/0x790 [ 608.595838][T21882] __se_sys_ioctl+0xfc/0x170 [ 608.600958][T21882] do_syscall_64+0xfa/0xfa0 [ 608.605978][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.612379][T21882] [ 608.612379][T21882] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 608.620184][T21882] lock_acquire+0x120/0x360 [ 608.625194][T21882] _raw_spin_lock_bh+0x36/0x50 [ 608.630471][T21882] nr_rt_device_down+0xa9/0x720 [ 608.635839][T21882] nr_device_event+0x137/0x150 [ 608.641123][T21882] notifier_call_chain+0x1b6/0x3e0 [ 608.646748][T21882] __dev_notify_flags+0x18d/0x2e0 [ 608.652279][T21882] netif_change_flags+0xe8/0x1a0 [ 608.657722][T21882] dev_change_flags+0x130/0x260 [ 608.663087][T21882] dev_ioctl+0x7b4/0x1150 [ 608.667923][T21882] sock_do_ioctl+0x22c/0x300 [ 608.673021][T21882] sock_ioctl+0x576/0x790 [ 608.677859][T21882] __se_sys_ioctl+0xfc/0x170 [ 608.682970][T21882] do_syscall_64+0xfa/0xfa0 [ 608.687995][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.694393][T21882] [ 608.694393][T21882] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 608.702295][T21882] validate_chain+0xb9b/0x2140 [ 608.707579][T21882] __lock_acquire+0xab9/0xd20 [ 608.712763][T21882] lock_acquire+0x120/0x360 [ 608.717769][T21882] _raw_spin_lock_bh+0x36/0x50 [ 608.723036][T21882] nr_remove_neigh+0x25/0xe0 [ 608.728132][T21882] nr_add_node+0x1d9f/0x2570 [ 608.733229][T21882] nr_rt_ioctl+0xc12/0xd50 [ 608.738152][T21882] sock_do_ioctl+0xdc/0x300 [ 608.743162][T21882] sock_ioctl+0x576/0x790 [ 608.747995][T21882] __se_sys_ioctl+0xfc/0x170 [ 608.753091][T21882] do_syscall_64+0xfa/0xfa0 [ 608.758099][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.764495][T21882] [ 608.764495][T21882] other info that might help us debug this: [ 608.764495][T21882] [ 608.774704][T21882] Chain exists of: [ 608.774704][T21882] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 608.774704][T21882] [ 608.788503][T21882] Possible unsafe locking scenario: [ 608.788503][T21882] [ 608.795956][T21882] CPU0 CPU1 [ 608.801302][T21882] ---- ---- [ 608.806648][T21882] lock(&nr_node->node_lock); [ 608.811400][T21882] lock(nr_node_list_lock); [ 608.818493][T21882] lock(&nr_node->node_lock); [ 608.825759][T21882] lock(nr_neigh_list_lock); [ 608.830429][T21882] [ 608.830429][T21882] *** DEADLOCK *** [ 608.830429][T21882] [ 608.838548][T21882] 1 lock held by syz.4.4518/21882: [ 608.843634][T21882] #0: ffff888032f8f970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 608.853372][T21882] [ 608.853372][T21882] stack backtrace: [ 608.859253][T21882] CPU: 0 UID: 0 PID: 21882 Comm: syz.4.4518 Not tainted syzkaller #0 PREEMPT(full) [ 608.859270][T21882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 608.859278][T21882] Call Trace: [ 608.859284][T21882] [ 608.859290][T21882] dump_stack_lvl+0x189/0x250 [ 608.859311][T21882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.859327][T21882] ? __pfx__printk+0x10/0x10 [ 608.859338][T21882] ? stack_trace_save+0x9c/0xe0 [ 608.859358][T21882] print_circular_bug+0x2ee/0x310 [ 608.859375][T21882] check_noncircular+0x134/0x160 [ 608.859392][T21882] validate_chain+0xb9b/0x2140 [ 608.859414][T21882] __lock_acquire+0xab9/0xd20 [ 608.859428][T21882] ? nr_remove_neigh+0x25/0xe0 [ 608.859443][T21882] lock_acquire+0x120/0x360 [ 608.859454][T21882] ? nr_remove_neigh+0x25/0xe0 [ 608.859471][T21882] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 608.859488][T21882] ? nr_remove_neigh+0x25/0xe0 [ 608.859503][T21882] _raw_spin_lock_bh+0x36/0x50 [ 608.859518][T21882] ? nr_remove_neigh+0x25/0xe0 [ 608.859533][T21882] nr_remove_neigh+0x25/0xe0 [ 608.859548][T21882] nr_add_node+0x1d9f/0x2570 [ 608.859564][T21882] ? __asan_memcpy+0x40/0x70 [ 608.859580][T21882] ? nr_call_to_digi+0x126/0x1b0 [ 608.859595][T21882] nr_rt_ioctl+0xc12/0xd50 [ 608.859613][T21882] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 608.859626][T21882] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.859645][T21882] ? apparmor_capable+0x137/0x1b0 [ 608.859662][T21882] ? capable+0x89/0xe0 [ 608.859681][T21882] ? nr_ioctl+0x1b1/0x3b0 [ 608.859694][T21882] sock_do_ioctl+0xdc/0x300 [ 608.859711][T21882] ? __pfx_sock_do_ioctl+0x10/0x10 [ 608.859731][T21882] sock_ioctl+0x576/0x790 [ 608.859746][T21882] ? __pfx_sock_ioctl+0x10/0x10 [ 608.859761][T21882] ? __fget_files+0x3a0/0x420 [ 608.859772][T21882] ? __fget_files+0x2a/0x420 [ 608.859784][T21882] ? bpf_lsm_file_ioctl+0x9/0x20 [ 608.859798][T21882] ? __pfx_sock_ioctl+0x10/0x10 [ 608.859812][T21882] __se_sys_ioctl+0xfc/0x170 [ 608.859829][T21882] do_syscall_64+0xfa/0xfa0 [ 608.859850][T21882] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.859866][T21882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.859878][T21882] ? clear_bhb_loop+0x60/0xb0 [ 608.859892][T21882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.859904][T21882] RIP: 0033:0x7ff28b18f6c9 [ 608.859917][T21882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.859929][T21882] RSP: 002b:00007ff28bf88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.859943][T21882] RAX: ffffffffffffffda RBX: 00007ff28b3e5fa0 RCX: 00007ff28b18f6c9 [ 608.859952][T21882] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 608.859961][T21882] RBP: 00007ff28b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 608.859969][T21882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.859977][T21882] R13: 00007ff28b3e6038 R14: 00007ff28b3e5fa0 R15: 00007ffefb9f31b8 [ 608.859992][T21882]