last executing test programs: 2m47.87051991s ago: executing program 32 (id=1391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x38, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m35.879070957s ago: executing program 2 (id=1752): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10) r2 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000040)=0x80) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4044) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 2m35.633925203s ago: executing program 2 (id=1756): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000020100000001003d"], 0x52) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 2m35.354933055s ago: executing program 2 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.186619004s ago: executing program 2 (id=1763): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @null, @null, @rose, @remote, @rose]}, &(0x7f0000000080)=0x48, 0x800) connect$netrom(r0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @bcast]}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x8000010) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000004c0)={'veth0\x00', {0x2, 0x0, @empty}}) sendto$inet6(r1, &(0x7f0000000500)="f3dacdbcc7cc598929c817d3921154b5197b6c02ee697640fc5cb18177d81ddde834529f35d00305dfa170d0faa1f06224b1aaf35736b7e22448d9d69749c2dffa36fceae16db3b126001d8d4d526e6ba6b4e6b842569ede5225f5c6faf5234ae1f401bea65ac3fad173532fb39de1444ebbd4f01f37", 0x76, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43aac6b9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '{!'}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x8c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005801}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x7}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000880)={r7, 0x40, 0xa2}, &(0x7f00000008c0)=0x8) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4e}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x18}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x3}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xa6}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff801, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r8 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x800) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000a80)=0x15, 0x4) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000ac0)={0x1, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xb0, r9, 0xb, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:netutils_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:auditctl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000004}, 0x805) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000dc0)='syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000e00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) connect$inet6(r11, &(0x7f0000000e40)={0xa, 0x4e22, 0x5, @private2, 0x2}, 0x1c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r3) sendmsg$IPVS_CMD_GET_DEST(r12, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r13, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000) 2m35.088969872s ago: executing program 2 (id=1767): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="04", 0x5e0, 0x0, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0xb0, 0x44, 0x107, 0xfffffffc, 0xfffffffe, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@nested={0x98, 0x149, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @fd}, @nested={0x18, 0x4a, 0x0, 0x1, [@typed={0x14, 0x123, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x5d, 0xc7, 0x0, 0x1, [@generic="1bc9aff29710760b591d32eb13bd647f378b2614e113fc5cd99b13746a6e4d64834767a828a886d4926e622907e837be203afee9058a0c68dc1fb7e6b9cca7237917348640e177c36e755085e7c851b904a8b26f655d59cda7"]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000001240)={0xc5c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x6d8, 0x111, 0x0, 0x1, {0x6d4, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xefc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x831}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x172}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}]}, {0x38c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc45c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x283}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x27c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x18}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x88e4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x91}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x252}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0x554, 0x111, 0x0, 0x1, {0x550, 0x5, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7a}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2de}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xc9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x88}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff00}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa7d3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3bcb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x60}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}]}, 0xc5c}}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @multicast1}}) 2m34.812940023s ago: executing program 2 (id=1771): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r0, 0x65ff0000) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r0, 0x65ff0000) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 2m21.484619048s ago: executing program 33 (id=1746): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61126500000000006113770000000000bf2000000000000015000500511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_clnt_new_err\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r5, 0x0, 0xf}, 0x18) 2m19.67492819s ago: executing program 34 (id=1771): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r0, 0x65ff0000) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', r1, 0x0, 0x3}, 0x18) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r0, 0x65ff0000) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 1m46.13997547s ago: executing program 0 (id=2285): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = gettid() (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r6, 0xffffffffffffffff, 0x4, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, 0x0, 0x0}, 0x20) (async) r8 = socket(0x10, 0x803, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r9) (async) setsockopt$inet_buf(r8, 0x0, 0x2a, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x50, r10, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000081}, 0x4000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x20040010) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000304bf072cbda430104100007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1m45.561023636s ago: executing program 0 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280007001d4001002ab67001fbdb000000001fad921747a4124d128d9535d20000", @ANYRES64, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2a, &(0x7f00000000c0)=0x7a, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x48}}, 0x8011) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x11) 1m45.346621832s ago: executing program 0 (id=2291): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2, 0x0, &(0x7f0000000240)) close(r0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000314010026bd7000d6dbdf250900020073797a3100000000080041007278650014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000025bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d474889500000100010000000000ffff1bf2995fffffabf137a1e9f79a"], 0x48) close(0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000271c9b348f859daf8ed2751d1500000000000000000000000000000000360af065fba86100ff3492dc02be2fe5605b4ed3604e0979501ab40dbfffe4641ef65b35726b4ef864aafcf98f119a68b1c3eca3a7cff80cdaee8c038e261537868eb5f9305ee094cacabde5925a4878f95ff14fcce2d1d24e0bd5634416b5e7fb703eb5022ad4f8eb6a40000000000000005ced7081ebcb805c0f730e6efa29938ad8d61ec60bd3f77d883cfcdef3fc428635e6c46b6c"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x3}, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xf}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 1m45.094632119s ago: executing program 0 (id=2294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011d000000000000000001000000000000000141ba7b683a7379"], 0x38}}, 0x0) 1m44.894702452s ago: executing program 0 (id=2296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5c6}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f000006"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f51cd12150816a2ba4e93c70d3ab9251d011a119c0a0bd", 0x17}, {&(0x7f0000000040)="2321fd251640680e0722dcaec284fae45fd5c283cf1e6d3b3b46f5a735d1f8a711b14865707257c158e9896d6e557bcc1920", 0x32}, {&(0x7f00000000c0)="f1a9ad35b3c771d20c8ea152002a996f8c88bff86701c572467ace190c1da1c009582d76f18b3625117011524ad108dd524159b94751ab47cc11603d5cca6d554b49a98ce552f6dc0c2a01655dfff2a25398d3bbf8e56a3fd9adab0c7cf8a4d04e9c4a6b5e69864481d1e0c219af659b40615364169058b44f717f790262b7b5ebd274811ad58a44c5ffa35a38c569fe06f9180cd0267aea3b493f05798af2dfda0e9580895e1ff02e94afed108d57d4ade0b7c74a69c5cf7cdb98f8422ebef7f66e554f9c", 0xc5}, {&(0x7f00000022c0)="ccd14d667a379245ad18210cb3811662cb41bda64c221f5f63940ed5484fbf6549b540935a8c38ecf7df4ab5089365e6108ad6619cd32997b49d57c62c2fd744254689a2a959d26c0478baa9da5d908117af89ee2b42ae2025f6311003dd31feb466264a7eb16aaf4b5e4164cc2360d494fe5551c4802172ec1a128154cb8bae8a5a8b598bb9bf66c61cca42df91fee89ab2dd65ea553acb6a5f3f6e1fd790b803bed568f99a152da6a470a1efcbdfa5f7ac7d97d135d040bc5b472953e62971399b839fa7c7d999e5d60a69dabd13", 0xcf}], 0x4, 0x0, 0x0, 0x400c080}], 0x1, 0x8080) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000640)=""/35, 0x23}], 0x3}, 0x5}], 0x1, 0x2001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="59e30000000000000000080000000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xf534, 0xffffffff, 0x0, 0x7, 0x8d, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000190001000300000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000400000a00800087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000e700000000000000000000000000000000000000feffffff0000000000000000ac000700ac1414300000000000000000000000007f0000010000000000000000000000004e24000a4e2000000a0080205e000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="02000000"], 0x2c0}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x90, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x353, 0x1b}}}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "a842b9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d28635f36f495a97e3a1df8ec2"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cb138ad17a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "041e60b0ecf3e21c3f4d6af3f9"}, @NL80211_ATTR_KEY_SEQ={0xfffffffffffffd85, 0xa, "8e9f5a952a77d8"}]}, 0x90}, 0x1, 0x0, 0x0, 0x20}, 0x41) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f9fb2bf000000000000000000f6b2000000000300000000000000000000620dc50c37750c8a3bfe8655233556aaf3a13c6986a69e1c02810a34dacee5ba4cb48425269d15530f4432a38c0fe61fa9de264cd0affd5e5c57e09a9338e8f5c3dbba214aa021"], 0xb8}}, 0x0) 1m44.387627722s ago: executing program 0 (id=2301): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x6, 0x76, 0x40000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0xa}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="6f7d00000080ffdbdf2502000000a94021d911b8"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) 1m29.288637947s ago: executing program 35 (id=2301): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x6, 0x76, 0x40000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0xa}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="6f7d00000080ffdbdf2502000000a94021d911b8"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) 1m29.084373948s ago: executing program 7 (id=2492): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="fc") 1m28.997953065s ago: executing program 7 (id=2493): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="4b0003000000", 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4090, 0xffa}], 0x1}}], 0x1, 0x10000, 0x0) 1m27.885762501s ago: executing program 7 (id=2506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000330603000000fdffffffffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200806000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026bd7000000000000a"], 0x138}}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x3, 0xffffffff}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m27.165577317s ago: executing program 7 (id=2511): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}}, 0x840) r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1m26.958478518s ago: executing program 7 (id=2513): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x10, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x89, &(0x7f0000000480), &(0x7f00000004c0)=0x4) listen(0xffffffffffffffff, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket(0x2b, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x11e, 0x1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r7, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'geneve0\x00', @link_local}) 1m26.838495307s ago: executing program 7 (id=2514): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b307"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="8aa0cb09c73751b4a3c0ba978603f175467a785f2ada3714"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) unshare(0x4000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1m16.430966947s ago: executing program 6 (id=2579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 1m16.255467915s ago: executing program 6 (id=2580): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000020400800000e2ff000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000020400800000e2ff000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1m16.0345833s ago: executing program 6 (id=2582): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x22020600) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r3, r2, 0x4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r4, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x5}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x46}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0xe}, {0xa, 0x3}, {0x0, 0x4}, {0x2acf, 0x5}, {0xb}, {0xc}]}, @fwd={0x2}, @ptr]}, {0x0, [0x30, 0x61, 0x2e, 0x30]}}, &(0x7f0000000400)=""/68, 0x9a, 0x44, 0x1, 0x4, 0x10000}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={0x0, 0x0, 0x18}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb92", 0x6a}], 0x5}], 0x1, 0x4814) recvmmsg(r10, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f0000000680)=""/246, 0xf6}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xd, 0x6, 0x8, 0x20, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x42, &(0x7f0000000180)=""/66, 0x41000, 0x8, '\x00', 0x0, @fallback=0x13, r8, 0x8, &(0x7f00000004c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r11, r7, 0x3, &(0x7f0000000800)=[0x1, r5, r5, r5, r5], &(0x7f0000000840)=[{0x0, 0x1, 0x0, 0x3}, {0x2, 0x2, 0xd, 0xa}, {0x4, 0x3, 0xe, 0x5}], 0x10, 0x8}, 0x94) 1m15.810804798s ago: executing program 6 (id=2585): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100e3f7005e"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1m15.266943971s ago: executing program 6 (id=2590): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaa"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xa0, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x101}, @val={0x5, 0x12, {0x3, 0xee, 0xff, "5df79bcd30da9004420fb6ecacbaa4"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x4, 0xb, 0x40}}}}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3e7}]}, 0xa0}}, 0x20000014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x19}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1m14.734305118s ago: executing program 6 (id=2594): socket$kcm(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x1, 0x1, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x65, 0x0, 0x65, 0x2f, 0x0, @loopback, @loopback}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000001000000000000a804000018110000", @ANYRES32, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000013009500000000000000037509000000000018550000f2ffffff000000000000000046ddd98f32d6000000009fd2beed839dd1d68377066d935d9f3020e200009500000000000000bf9100000053f00000008500000085000000b7000000000000009500000000000000e8550c488ba163f95b8d7dd5ef2b666863cdab5ee336c34d62e0a74777433149e9ac7bb9c77953"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9ba7}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r6}, 0x38) 1m11.748996094s ago: executing program 36 (id=2514): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b307"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="8aa0cb09c73751b4a3c0ba978603f175467a785f2ada3714"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) unshare(0x4000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 59.613873125s ago: executing program 37 (id=2594): socket$kcm(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x3, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x1, 0x1, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x65, 0x0, 0x65, 0x2f, 0x0, @loopback, @loopback}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000001000000000000a804000018110000", @ANYRES32, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000013009500000000000000037509000000000018550000f2ffffff000000000000000046ddd98f32d6000000009fd2beed839dd1d68377066d935d9f3020e200009500000000000000bf9100000053f00000008500000085000000b7000000000000009500000000000000e8550c488ba163f95b8d7dd5ef2b666863cdab5ee336c34d62e0a74777433149e9ac7bb9c77953"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9ba7}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r6}, 0x38) 40.544587345s ago: executing program 1 (id=2850): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socketpair(0x1, 0x5, 0x5, &(0x7f00000007c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) r2 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f00000003c0)=""/52, 0x34) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f0000000400)="7769f2dccdbe1fbb66ece41cb5e94e01dcb8b8126118169f0000000069360b78f52f26de061af7ae8770bc080f01de6f2b7e7c01f6aa8ec233358dbea47064e3951af59e885782b7566556462b28f022e062c811499ec4650e7e1ae2bc486bf34495c5fbdf1e3eff756a7e4e33a6e28e1ce6e95004d4983c06d79c4c390a8afcc2ab6f46b548c5043792bcfcfeaa765c9c0dac06d10039d5411a1713edf37ec69e5c15767f8216e39f0af5825658060297be191098d205db94d0d40c9cf3cad422bb9a45f1521115b149c2166bbb", 0xff7d}, {&(0x7f0000000200)="82c8d525397e81234e1002128e405f5bf270011e3018e1c929041ca27e1ed72cbca0e570fff8987f76eceab3d6d2c7f0137075f3e59ca02848000000007e4f4475e333be6380ba9b61604d3ee1fc7ad2d424bbf8b4afafad5d5ee24a416f97e248ac6269acf024ade55b83247b7481c09efc03a1eaec5571734f7a71c36a7a40e893b4d3a56688732bc335c6150a4c0d700671200fe800e544b8ee2fc8da25965c746de975000000000000000000"}, {&(0x7f00000002c0)="3f0b7fa6b2e5ee588e4ec9ece6749292d22ee64f6ed84e0f7645a8b788602c439fa040fb0a2e118e6799e18671d01db21c049fe440f144e35d1b3c4265202f3c42d8b5d034b2455a8bbe5ecedbfb8230afba35321b98b53041458c048afda5a142b62362a0c5560f"}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000300)=0xb0) bind$inet6(r3, &(0x7f00000005c0)={0xa, 0x4e23, 0x1, @remote, 0xfffffff7}, 0x1c) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x140e, 0x88d1b80c9581b3cd, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4804) syz_extract_tcp_res$synack(&(0x7f0000000800)={0x41424344}, 0x1, 0x0) write$tun(r4, &(0x7f0000000840)={@void, @val={0x1, 0x80, 0x1, 0x4445, 0x9, 0x9}, @ipv6=@tcp={0xf, 0x6, "cd8b3a", 0x21b, 0x6, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@fragment={0x6c, 0x0, 0x9, 0x1, 0x0, 0x1, 0x66}, @dstopts={0x5e, 0xa, '\x00', [@generic={0x4, 0x50, "81bf8485ff09ea030123c7e2da248efbce2efe55e1258953ff33b5d0ae7d9cde2bfb292c7f2fe95677d8515a12a02f17561cf828434a8efb20e17660e4a8dbf6f6bc7c17b67f8f4e546811f6d84f0310"}]}, @dstopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @dstopts={0x2f, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xce}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x80}, @enc_lim={0x4, 0x1, 0x2}]}, @dstopts={0x88, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x481}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x28, {0x2, 0x8, 0x80, 0x9a4e, [0x64, 0xb40, 0x5, 0x3]}}, @ra={0x5, 0x2, 0x3000}, @enc_lim={0x4, 0x1, 0x8c}, @hao={0xc9, 0x10, @local}, @pad1]}, @dstopts={0x3a, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x2, 0xffff, [0xe, 0xe1c0, 0x4, 0x4, 0x9, 0x47, 0x6]}}, @enc_lim, @enc_lim={0x4, 0x1, 0xfc}, @enc_lim={0x4, 0x1, 0x3}]}], {{0x4e24, 0x4e21, r9, 0x41424344, 0x0, 0x0, 0xf, 0x80, 0x9, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x101, 0x7}, @exp_fastopen={0xfe, 0x10, 0xf989, "2d4291b548f003fbd9dd8f03"}, @fastopen={0x22, 0xb, "b4605ac7fc37398088"}]}}, {"f6091b33258cafb8c5c558bccf8b5c7fc0914bf571a4bdbed850525c8ea92fc55d4296d85aab1057f61939d55210d117257c6ae7fbdfcb93b1055f706c693fcae87edcf79e12fb6507c70c7adf002f8fa83e50cda332e4a790c7e2ec1acc4c"}}}}}, 0x24d) read(r8, &(0x7f0000000c40)=""/4096, 0x1000) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000030303030303030f4fc6f3830303030303030303067"]) sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) 39.047095598s ago: executing program 1 (id=2857): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 38.875274309s ago: executing program 1 (id=2859): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@isdn={0x22, 0x88, 0x5, 0xf7, 0xcd}, 0x80, 0x0}, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x80000) sendto$inet(r4, &(0x7f0000000140)="939dd2800a37a80faa422c120647ab00d436b696ede8422b7806a205a4aa5a929e436a4c7f2e88fa0f06cbbdab8f9fb0ea0dc1d2e857e433207b1b64a7215b3faeb03c6c2dfa7d039f136ed4e26d8aebb895a4f0", 0x54, 0x9, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) 38.715899051s ago: executing program 1 (id=2863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xffff, 0x8, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000100), 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 38.598962715s ago: executing program 1 (id=2864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040300000000001000000000001b070500010001000000"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040300000000001000000000001b070500010001000000"], 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) (async) 38.267017423s ago: executing program 1 (id=2867): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r2, 0x0, 0xfb3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 23.111529305s ago: executing program 38 (id=2867): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r2, 0x0, 0xfb3}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 19.8009439s ago: executing program 4 (id=3027): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x16, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000500)='\a0', &(0x7f0000000480)=@tcp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000100)="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", &(0x7f0000000000)=""/107}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x16, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000500)='\a0', &(0x7f0000000480)=@tcp=r2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000100)="bd3b9e0950d44af03854c33ec6ad9fd61ee2f6acb6c7d3328af86ea69033d41c28e850b582e272d797953faa46a42fb3edfa11b3ce08720d51fbd5079fcaa28bdee5bd0eeb9d4cf0df3fe00d8d0d8974dd3752173e3fae08854247bcec78144f64110615d9063a44bef074109df6748b2a0cf951b5d976882e109bccf62fd7d2ce7605ba816d6f51d2699ce5c02e074af819835d44e261fd965d66a8081345c37f3da10e05d78d2d9a87485fa449b696323d8bced151e8a2c5136552bbc407ca43484f793766389f834ed83e20c2da0b7479eda4fb2ed83453fc92c1e2bb3edeb4becdcd2ac0dbf4c84284f7909fc58fa5dec6c9140a98cad6deb2434125", &(0x7f0000000000)=""/107}, 0x20) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) (async) 19.472168685s ago: executing program 4 (id=3032): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0), 0x38) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x800) 19.259212334s ago: executing program 4 (id=3034): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x24, &(0x7f0000000080)=@bloom_filter, 0xa1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000000)="1aa60fb3fd9511503544e3aa4bbfe809242bd728", 0x14}], 0x1}}], 0x1, 0xc0000) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000840000000000000007000300060000042000000000000000840000000200000b00fe7fffffff000000000000", @ANYRES32=0x0], 0x38, 0x4014}, 0x80) 15.023021651s ago: executing program 4 (id=3062): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x8a, 0x0, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xed, 0x2, 0x38, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8, 0x8000, 0x6, 0x5}}) (async, rerun: 64) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r3, 0x2b, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @multicast}, 0x10) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x580}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3790}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfffffff7}]}, 0x3c}}, 0x40080) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000008d749e8e9637a5776dfcc4e5b2a3550001070000a550ff81f502017f000099a542e87674da19efeac8f3f4db1c519d0e8120eaccaeaee96d265a6315", @ANYRES32=0x0], 0x18}}, 0x0) (rerun: 64) 14.910443351s ago: executing program 4 (id=3064): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000f4849ab72622e68f00000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800084000000001140000131100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 14.71884012s ago: executing program 4 (id=3065): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x20000400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x10) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r1, 0x0, 0xfb3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}]}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='6'}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_IE={0x4}]}, 0x30}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.060776129s ago: executing program 5 (id=3182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r0, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0300, 0x0) (async, rerun: 64) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 1.778947129s ago: executing program 9 (id=3184): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010000002000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="030000000c00028008000700e000030a00ffffffff00"/32], 0x38}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket(0x1f, 0xa, 0x6) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000040)='veth1_to_bridge\x00') socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) bind$802154_dgram(r5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r3], 0x50}}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.726091714s ago: executing program 8 (id=3186): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x4a, &(0x7f0000000000), 0x20000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40440c4) 1.654583789s ago: executing program 5 (id=3187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff0a, 0x0) r3 = socket(0x18, 0xa, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0x20, 0x50}, 0x40880) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e21, 0x0, 0x4e22, 0x6, 0x2, 0xe0, 0x20, 0x16, 0x0, r6}, {0x7, 0x9, 0x29b, 0x2, 0x8, 0x1, 0x1, 0xfffffffffffffff9}, {0x200, 0x5, 0x3, 0x9}, 0xfffffff7, 0x6e6bb3, 0x1, 0x1, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@multicast2, 0x34ff, 0x1, 0x0, 0xb, 0x7, 0xff, 0x7fff}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e21, 0x0, 0x4e22, 0x6, 0x2, 0xe0, 0x20, 0x16, 0x0, r6}, {0x7, 0x9, 0x29b, 0x2, 0x8, 0x1, 0x1, 0xfffffffffffffff9}, {0x200, 0x5, 0x3, 0x9}, 0xfffffff7, 0x6e6bb3, 0x1, 0x1, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@multicast2, 0x34ff, 0x1, 0x0, 0xb, 0x7, 0xff, 0x7fff}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="811bfc59aaaaffffffffffff08004500001c000000008402907800000000e000030000009078006400d2"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.466260059s ago: executing program 9 (id=3189): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_raw(r2, &(0x7f00000000c0)={0x27, r4, 0xffffffffffffffff, 0x7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.362003087s ago: executing program 8 (id=3190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@default, @bcast, @rose, @default, @default, @netrom, @default]}, &(0x7f0000000000)=0x48, 0x80000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000200)=0x1, 0x4) pwrite64(r1, &(0x7f0000000240)="45f0f5de35c50ba18c2d19d65b53845e7647629d072fcde3d8fb89660497d7085e11708f2bd5b90743eb0e45c90f25acf7a56573f066ed041533d5d6f31d7fe5c492c10d9754ed893eb9fd60d9fc4baa147b7ea3da849f5d02d8345dc002f5bcea99bbd35dad1b52ddbee7ca5ab25d71776f252582d6a83150d4bee0417d517b0ae2c248c520e3fbfb9d933e7551b5e3f0f27431e8b2cb01bad6f2b67d4c40a03296c4dd5f2448702dc1183695c7a21348dcb64dd1a1b83262c5c08d36e62e46309543c4de6201ac0c8a647858693a011cf6091b6c2114efb4b78c4e01d56c3b6b5cfa1d2c8f3b0923490341171ef6ba", 0xf0, 0x81) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x7, 0x0, &(0x7f0000000040)) 1.300749254s ago: executing program 3 (id=3191): sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000000000000) 1.261112489s ago: executing program 8 (id=3192): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8400000010000104000000000300400000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a50001280110001006272696467655f736c617665000000003800058005001900030000000500090001000000080025000100000006001f00d500000008002200", @ANYRES32=0x0, @ANYBLOB="040018000500010003000000140003006272696467655f736c6176655f300000"], 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x34, r4, 0x2986b594068de4d5, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) (async) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) (async) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 1.106768346s ago: executing program 9 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x1e, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[], 0x24}}, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="68000000660ecb868d339ad68ca5eeedc7e5f400000000000000061d4030f72ae578", @ANYRES16=r10, @ANYBLOB="59cf0000000001000000080000001400018006000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8f020000", @ANYRES16=r2, @ANYBLOB="200027bd7000fedbdf253400000008000300", @ANYRES32=r5, @ANYBLOB="14005500389f603efa7dce4109dfc5d2ebf3ed7523003400f0c0c5e7fbc6fe91476e40aaf0607fdc17fcd01e0a32d8ff2841c933cb7ef1001400fe00a15b476cd5e0bcf56073982fd21f0efe140055004146319398426db478191f958194359a140055007031015e6f31e2df70ac13ede6446154"], 0x90}, 0x1, 0x0, 0x0, 0x881}, 0x40854) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x800) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x9) r11 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in=@empty, 0x0, 0xfffe, 0x4, 0x0, 0x2}, {0xfffffffffffffff7, 0x4, 0x913d, 0x2, 0xffffffffffffffff, 0xf42, 0x8}, {0xfffffffffffffffe, 0x0, 0xa7, 0xc}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in=@multicast1, 0x34ff, 0x0, 0x3, 0x4, 0xfffffffb, 0x0, 0x21}}, 0xe8) (async) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) r12 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00a37a4d07b65218a67e000000000000002400128009000100626f6e6400000024ee76f78005000100030000000800150000000000"], 0x44}}, 0x0) 1.105331492s ago: executing program 5 (id=3194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0xffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8004, {0x0, 0x0, 0x0, r9, {0x10, 0xffe0}, {}, {0xb, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000340)=0x28) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="100055d4590962b932230d4699e94864b5c400000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x2}, {}, {0x10, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10004800) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000022000000000b8"], 0x2c}}, 0x0) 1.047254971s ago: executing program 3 (id=3195): r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) syz_emit_ethernet(0xaa, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004607009c0066000005019078ffffffffac1414bb071bf4ffffffffac14145c0758fc5593bbe0000002ac1414aa64010101ffffffff0094040000831bbe000000000a010102ac1414bb7f000001e0000001e0000001830964505d16a107730b009078000100004e2000080068565e002f80007f000001ac1414bb890bdeffffffffac1414aa8917e90a010100ac141413ffffffff000000007f000001000009d856fe"], 0x0) 945.360974ms ago: executing program 8 (id=3196): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000100)=""/180, &(0x7f0000000200)=0xb4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r4], 0x4) r5 = socket$phonet(0x23, 0x2, 0x1) splice(r2, &(0x7f0000000040)=0x5, r5, &(0x7f0000000080)=0x2, 0xc5a4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 787.025814ms ago: executing program 3 (id=3197): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6020400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x300) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010001", 0x7) 786.58199ms ago: executing program 9 (id=3198): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000240)) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r3, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x50}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (rerun: 64) 651.508023ms ago: executing program 8 (id=3199): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x10, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="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", 0xfb) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0xf}}) 642.963457ms ago: executing program 5 (id=3200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff000007000008090002007379"], 0x4c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x400}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x7c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_ACT={0x4c, 0x1, [@m_tunnel_key={0x48, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}}]}, 0x7c}}, 0x40) getuid() ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0xffffff15) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000019580)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)=ANY=[@ANYRES32=r9], 0x114}, {&(0x7f000001af80)={0x1830, 0x41, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@generic="dd2ecd1acf71d78ac4afeb173a29be441e5b184efe90a988131085afc7b63fa110d7", @nested={0x37d, 0x1d, 0x0, 0x1, [@nested={0x362, 0xaa, 0x0, 0x1, [@typed={0x14, 0x120, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x253, 0xa7, 0x0, 0x1, [@nested={0x4, 0xa1}, @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x31}, @generic="0bc5d4b6bd72f45753988cbc00798dbdaa9bfbfc6667eebb4e74e72724af906498ce759b2741dcc32f9d82d8fc047541574fd231ad29a819a3efe02133cb5ad2d66e25c31f7e95383d4f6667cd8843553818634bf786b0bc173288ef47ab78b63cec6597f36b3a7f091ed53f4d5c9e5d1ffce63e1e2375e6", @generic="30b54182a9acae4c5e506f687e49462a9549022af3dc920ce7ed656305d6b1a5e58cf8e26cb378e2c3d6cc32c14d108a9152a50280a26097f616bb60c2058cc2b9b126491493d6a2ac5ed9e7ae045ee231b9b44c3942fd48cdf7c2304019dbafdce0440bf4962e0051f5ab", @typed={0xf2, 0x14, 0x0, 0x0, @binary="1bcaf7ab7c52249b094f46a82954b719085ea36ff524c53f8be2d6dc32ac349261350fda87b330d62cab9ea00dab402f92aa0265fcd273e2b488156a11733417467e2f6df29fb91b35d7d7ca9aa31d2545e2ab2747e5eb912ed40c302420faaea5f21dbf8abfb9b5414f3c9ca562ec630ebfdffc1ea8a7a53c8b618652fa13f1e7938e4e6099fb6406321fca283b2d3036a038c726e5da8b2a5f05fa0bfa95fac271db13b6cd195e5aa68e27ce91220c7de129cd2fa952e9c67b454a71bc3855996c2525b4694b9021c00481166420aad84989e5745fd723a94ef3fe60db2270449a21d60945b49e9b2b3fd4c189"}, @typed={0xf, 0x146, 0x0, 0x0, @str='tunnel_key\x00'}, @generic="e1b042d6949be0a8b735677f258b21fb58b6db110d72baf4ee32d246eccc50a8c4cfc7e5e29015a5f6df067b19996fa244599ede23cc61a64d5e8d2562bb73e0470fe523d80ac0cc93de823d"]}, @generic="bf6e95b2fe78084e01057231b0c9069b8e48cd44b1aea983853ce9f4b06b17e77412224c75b5baddf946415ee9c975ad9a4a9290cfcaec1bc61e2070af182970527dfe1cd4610aa86122780e5fde5f49516a16c6fbbef6b9d7d07a20581a410713500633812be3eae45fe6f46d040391e6e46231413172f3fc875e21d04904a6a42fd23f8ade7d5e61a1134b5fc9fbbf6f6985ca07d9ebd09daa0f2780c0b3029f20506f49e89d5533b15495a964b0f3d66c9817416111ffa9312670b3251913728fe61f2c334db9b609e0bd8237b7b978e09dcf", @generic="3747651d8f79af81ac7ecb43c4c2cf5943184978616667657499", @typed={0x8, 0xd3, 0x0, 0x0, @uid=r10}]}, @nested={0x4, 0x11d}, @generic="a111b4ae490f77dd0a56614bbefc34b09b"]}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@multicast1}, @generic="48a630eca268fc338e284e7439d966c5fa212f9d6e10d5cf3f5b27bba751f96a1b8c1f4c08498dd0e461dacff9bd8e7b5570b307ed05fe9e1f", @generic="c898e566d9b583b46e8815f0e2891c686c312b9590", @generic="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", @typed={0x4, 0x124}, @nested={0x25a, 0x49, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @pid=r7}, @typed={0x8, 0xb3, 0x0, 0x0, @u32}, @nested={0x4, 0x109}, @generic="5a57035a8efbe24605fdc8d6456a59c264a65ce344bc37740a32401add08aa0b70a21979f13b64d406ccbf3fe835f15dade2823d017022f6f9a50bdc733691d59daff96e2d2b222067e76532d3966a3e177dbb8722579bfbdb30422315f51f13016f670e899f134232e2999b7ad6e73dadd8f3d0a2a87b64ebb5ab4017743c3ece7a2fb0379a2a7e67fb27653a552b68e0e97fb76c43e6", @nested={0x4, 0x14c}, @nested={0x4, 0x85}, @generic="8c6a6b85dcf6dbc53ef44c4736149d4534399e70efcaf39a755dc95b268d541f9d837643af864485e54f92b0980e5cd0ba4ad8554add53637bb5fa1ade751348cc21406c7c7e8952004676c29683dc5c145bf78323e623", @generic="a1f149b8f98d147c343227a8cb541e8fc177c25da58280a8c4b8fc93bbc81e934651a08cd0604b11b2f037b7c6b6ea287e4a1d1abdae812b992ea4f4886ae2b67763d9612e6e0355b7d9de1534d4ac0e8a9a6de5377cf3c6c6cafeff62f1", @generic="3e58c5907df8fd740fc6ceb1a3e7f0a8b8915aceeb4135dc3c09ea4eab508d1ea873a59d8ab30853967532bc5a1bd60cfc347ab15324873a782288cf063affb1fb1ae42a853237a126360955ddcf4dea068be948396c550250ecb5ab5e7aad7c6237189ebaada06ac9068054651f6e2950c85b383d5bbad9664686600aeb2948119ea7da9dae365c9c17d356fb59563d4eafedcb0032a93a52f853382904d81bc9de55ba127237ba84d6db7e584e9c71e65454fb5af54f7d13e9dc67cb95b9fad2adeca4c623772018b3048ba043f017008d5c00a0e2480c7a63c7bc60bd783ad8b449e6cddb2526cc62f0e75077"]}, @typed={0xc4, 0x12f, 0x0, 0x0, @binary="5c39d174e4d005c6a79b2250a90b8636746c239d41cb4702d1011f1176664b2aa2b76fa73090ee82b77ccec473deac2ce148515b6a91de057b3a39ac7681c1985323428008df939fb9c9d0df0e5cd0bd83aa367d22c6f039f82bf599452bc6494c88bf68e865dd7327f5126026a4f96819961426ed94d674566c34dd50a26430febb6146d364a6f3c41927da7246a92c745771597348da490a178146f01081429bb6e0614308938444586a9d2f1749d419771e501f51de7c9aee4b10a8aa4eca"}, @nested={0x103, 0x7, 0x0, 0x1, [@nested={0x4, 0xff}, @generic="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"]}]}, 0x1830}, {&(0x7f0000000200)={0xf4, 0x2c, 0x100, 0x70bd29, 0x25dfdbfe, "", [@generic="31171f94c3fd192616a31832e4577f2532de3aec1ffe200438e1775c830d23b3556baa33c3659893d1716da064ffbca92ae24282176a7c3e58b94565204c6676da729f051ac6a69691790d5ecd345507ba860e9d654c4c38eb9639873f375c15f22f3e74169c203c6c663efd38a13143d09fd37e11f0037d5e83d702a0d0f5379d2f5cdba9f80ffd77272d2d9ecd495c709065c58fc4ad67b5ae38b7eb09345f2743cd9b9a4dd6a7982017c8afbf23525224692b79e946c72431c4d7944f3370665fe0d3ec31454219d2d012d312e783e58b47b9122e89cbc1e86b25", @typed={0x8, 0x60, 0x0, 0x0, @fd=r6}]}, 0xf4}], 0x3}, 0x0) socket$kcm(0x2, 0xa, 0x2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 538.90159ms ago: executing program 9 (id=3201): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) unshare(0xc040480) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket(0x25, 0x5, 0x38) (async, rerun: 64) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) (rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @random="5788a3a2cad7"}, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, &(0x7f0000000100)) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @private2}]}, 0x30}}, 0x0) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) (async, rerun: 64) r8 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 527.627967ms ago: executing program 3 (id=3202): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r2 = gettid() socket(0x25, 0x4, 0xfffffffe) (async) r3 = socket(0x25, 0x4, 0xfffffffe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c003d91fd47ad3f7dcdb6c66a17666e0000", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf25030000000800010000000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4c8c5}, 0x4000000) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r8, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40084) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r10 = socket(0x2d, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) connect$qrtr(r10, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, &(0x7f0000000040)=0x8) 392.104422ms ago: executing program 5 (id=3203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) shutdown(r0, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000000000000000000fffd00000a0010000100000000000000"], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f00000002c0), &(0x7f0000000440)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x56, 0x2f, &(0x7f00000001c0)="738498c8806c3b1e8a79bdf26188f6355e76260d8d8e772f162b83c6e889be8a5dfb13411b3be002e99276e71bdd4abedf9d39baeda88917195a51fce2a3cbdee2626f04ad5e7dd19e3e88bfe2ae96c3e721fb2b06cf", &(0x7f0000000140)=""/47, 0x7, 0x0, 0x0, 0xdc, &(0x7f0000000240), &(0x7f0000000440)="5a5161a8b13a00928c3eb9009f34b976d1ed35f42aeba239b9d5b34953108a484d5861fd718771397629c29e0da1f206ee751e96215ebfb463ac6a347a042c1584121b5188e979ba1a3bfcf97cb09e30f170ddfbd43ff1db9ead2afd2a62fca68d0a30ebde430887d9e6abdeac0460c7f12bacc2ebec16dc9513f2688f67993f03e836d3e62449dbc8e5110551d7f6abee328a2c208beca10eec214c4f3da88ea5f59fe602077b2d64d0a63f960405586260671b386b3ce953336a26fb1da9ea149b75bcb4e80615ad77341141cabd268ebaa7b4f5637dc9c17e24d3", 0x3, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf2532dd00000e0001006e657464657673696d0000000f0094679001b700bd4473696d30000008008e0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x64048444) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb9423523599751d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 186.884805ms ago: executing program 8 (id=3204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe) (async) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES16=r4, @ANYBLOB="0100000001000000000008000a00fc00000018000180140002006e727464657673696d3000000000fcffff08000900a5ee134471ead7c20000000008000e00800000000800"/80, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r6 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) (async) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) (async) sendto$packet(r2, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) 186.63273ms ago: executing program 3 (id=3205): sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x200000000000000) 134.378261ms ago: executing program 5 (id=3206): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x20960}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x20960}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) socket$inet6(0xa, 0xa, 0x0) (async) r3 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r3) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 121.016532ms ago: executing program 9 (id=3207): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffd6d, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c05008006d62c822fbb56ddd8dbbdd1e8d6eeec47000600800a0000110002800c001480080019000921000056000000"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 3 (id=3208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x40, r3, 0xcf04d8c4b35cd25, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x8, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x24}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970004000000c00028008000300e000000175ed678802da3a4e13aef976e659859307ecbc96f3a2470d37f0c57eb010b7039983a9b6fd15c8de68ad3cdd350eecc5baa4f4386adb8aa48b26a9a5efd209c88430c440a9a3d7ed32becd38ef532d7f926170fba9aa02f85f1d4c1462e2f43644a10290daedd93ba17901bdc3791d11c422d7b1804ad59692f741b51ccc0429f9a9f8736acb970a00e9c82611e2c3d9d386d345d9777971215ef2f9bb9b16080a30cea8bf476455d146cf83a176e813178277348133607aa530a148131a46be91"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ts. [ 262.946456][T12417] syzkaller0: entered promiscuous mode [ 262.971934][T12417] syzkaller0: entered allmulticast mode [ 263.253601][T12423] __nla_validate_parse: 9 callbacks suppressed [ 263.253624][T12423] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1809'. [ 263.284177][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.288785][T12421] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 263.404994][T12425] syzkaller1: entered promiscuous mode [ 263.412490][T12425] syzkaller1: entered allmulticast mode [ 263.976095][T12451] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 264.641473][T12479] netlink: 'syz.0.1827': attribute type 6 has an invalid length. [ 264.865049][T12490] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1831'. [ 265.289845][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'. [ 265.300485][T12511] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 265.504751][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 265.504758][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 265.767118][T12530] veth0: entered promiscuous mode [ 265.780482][T12526] veth0: left promiscuous mode [ 265.918989][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 265.955542][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'. [ 266.502846][T12561] net veth1_virt_wifi .: renamed from virt_wifi0 [ 266.645593][T12565] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 266.660054][T12565] tipc: Started in network mode [ 266.668065][T12565] tipc: Node identity 6, cluster identity 4711 [ 266.678218][T12565] tipc: Node number set to 6 [ 266.992677][ T7253] hid-generic 0005:0007:0008.0001: unknown main item tag 0x4 [ 266.997178][T12585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'. [ 267.003969][ T7253] hid-generic 0005:0007:0008.0001: reserved main item tag 0xe [ 267.012484][T12585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1865'. [ 267.018249][ T7253] hid-generic 0005:0007:0008.0001: item fetching failed at offset 6/7 [ 267.036278][ T7253] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 267.115547][T12589] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1865'. [ 267.176727][ T7253] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 267.193819][ T7253] hid-generic 0005:0007:0008.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 267.397222][T12594] fido_id[12594]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 267.831478][T12619] sctp: [Deprecated]: syz.0.1876 (pid 12619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.831478][T12619] Use struct sctp_sack_info instead [ 268.365470][T12635] netlink: 'syz.1.1884': attribute type 17 has an invalid length. [ 268.373646][T12635] __nla_validate_parse: 2 callbacks suppressed [ 268.373665][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 268.391689][T12636] nbd: device at index 0 is going down [ 268.394976][T12635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1884'. [ 268.438958][T12635] gretap0: entered promiscuous mode [ 268.490101][T12635] gretap0: left promiscuous mode [ 268.525139][T12640] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1882'. [ 268.656299][ T6033] udevd[6033]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 268.739491][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 268.956559][T12662] : entered promiscuous mode [ 269.095207][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 269.108308][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'. [ 269.132757][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 269.142243][T12670] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1894'. [ 269.155766][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 269.167560][T12671] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1894'. [ 270.343936][ T1326] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 270.409895][T12731] lo: entered allmulticast mode [ 270.447451][T12730] lo: left allmulticast mode [ 272.264835][T12790] rdma_rxe: rxe_newlink: failed to add lo [ 272.818223][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.828691][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.841274][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.852285][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.861724][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.590679][T12835] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 273.867068][T12807] lo speed is unknown, defaulting to 1000 [ 273.891373][T12847] __nla_validate_parse: 7 callbacks suppressed [ 273.891394][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'. [ 274.009437][T12847] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1945'. [ 274.230182][T12856] tipc: Enabled bearer , priority 0 [ 274.299018][T12858] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1947'. [ 274.422702][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'. [ 274.427907][T12856] syzkaller0: entered promiscuous mode [ 274.470386][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 274.493327][T12866] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1947'. [ 274.501179][T12856] syzkaller0: entered allmulticast mode [ 274.512330][T12856] tipc: Resetting bearer [ 274.909511][ T5873] Bluetooth: hci6: command tx timeout [ 274.973399][T12851] tipc: Resetting bearer [ 275.134924][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'. [ 275.192027][T12881] sctp: [Deprecated]: syz.0.1952 (pid 12881) Use of int in max_burst socket option deprecated. [ 275.192027][T12881] Use struct sctp_assoc_value instead [ 275.236860][ T5870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.267074][ T5870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.286332][ T5870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.307066][ T5870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.324936][ T5870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.385383][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 276.790978][T12851] tipc: Disabling bearer [ 276.819993][T12875] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 276.827274][T12875] team0: Device macvtap2 is already an upper device of the team interface [ 276.991222][ T5873] Bluetooth: hci6: command tx timeout [ 277.160445][T12898] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1955'. [ 277.356781][T12807] chnl_net:caif_netlink_parms(): no params data found [ 277.392746][ T5873] Bluetooth: hci7: command tx timeout [ 277.645727][T12913] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.705978][T12913] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.856639][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 277.956085][T12882] lo speed is unknown, defaulting to 1000 [ 278.335436][T12807] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.373288][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.389630][T12807] bridge_slave_0: entered allmulticast mode [ 278.398029][T12807] bridge_slave_0: entered promiscuous mode [ 278.435759][T12807] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.454957][T12807] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.466861][T12807] bridge_slave_1: entered allmulticast mode [ 278.477315][T12807] bridge_slave_1: entered promiscuous mode [ 278.658674][T12807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.709294][T12807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.980655][T12807] team0: Port device team_slave_0 added [ 279.013995][T12807] team0: Port device team_slave_1 added [ 279.079257][ T5873] Bluetooth: hci6: command tx timeout [ 279.273174][T12807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.281175][T12807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.331747][T12807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.352525][T12807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.363284][T12807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.419845][T12807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.471254][ T5873] Bluetooth: hci7: command tx timeout [ 279.584779][T12807] hsr_slave_0: entered promiscuous mode [ 279.592020][T12807] hsr_slave_1: entered promiscuous mode [ 279.598275][T12807] debugfs: 'hsr0' already exists in 'hsr' [ 279.605453][T12807] Cannot create hsr debugfs directory [ 279.899795][T12987] __nla_validate_parse: 4 callbacks suppressed [ 279.899817][T12987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1980'. [ 279.901889][T12882] chnl_net:caif_netlink_parms(): no params data found [ 280.082931][T12993] netlink: 'syz.4.1982': attribute type 2 has an invalid length. [ 280.099406][T12993] netlink: 'syz.4.1982': attribute type 2 has an invalid length. [ 280.377556][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1984'. [ 280.488367][T13006] bridge0: entered promiscuous mode [ 280.495942][T13006] macsec0: entered promiscuous mode [ 280.511307][T13006] macsec0: entered allmulticast mode [ 280.517199][T13006] bridge0: entered allmulticast mode [ 280.530114][T13006] bridge0: port 1(macsec0) entered blocking state [ 280.536887][T13006] bridge0: port 1(macsec0) entered disabled state [ 280.575456][T13006] bridge0: left allmulticast mode [ 280.581287][T13006] bridge0: left promiscuous mode [ 280.613447][T12882] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.621174][T12882] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.628371][T12882] bridge_slave_0: entered allmulticast mode [ 280.636973][T12882] bridge_slave_0: entered promiscuous mode [ 280.647234][T12882] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.654848][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.668392][T12882] bridge_slave_1: entered allmulticast mode [ 280.682343][T12882] bridge_slave_1: entered promiscuous mode [ 280.916793][T12882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.944929][T13029] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 280.969799][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 280.993057][T12882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.153178][ T5873] Bluetooth: hci6: command tx timeout [ 281.212661][T12882] team0: Port device team_slave_0 added [ 281.238952][T12807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 281.281970][T12882] team0: Port device team_slave_1 added [ 281.293039][T12807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.436749][T12807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.458571][T12807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.511212][T12882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.532541][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.560842][ T5873] Bluetooth: hci7: command tx timeout [ 281.567374][T12882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.582307][T12882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.591074][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.617789][T12882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.813270][T12882] hsr_slave_0: entered promiscuous mode [ 281.833290][T12882] hsr_slave_1: entered promiscuous mode [ 281.860565][T12882] debugfs: 'hsr0' already exists in 'hsr' [ 281.866624][T12882] Cannot create hsr debugfs directory [ 282.455201][T13082] netlink: 'syz.4.2005': attribute type 21 has an invalid length. [ 282.469483][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 282.531775][ T1334] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.540976][T13082] netlink: 'syz.4.2005': attribute type 21 has an invalid length. [ 282.554893][ T1334] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.564917][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 282.590739][ T1334] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.602445][ T1334] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.723461][T12807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.866774][T12807] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.890137][T13099] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2010'. [ 282.904412][T12882] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 282.931510][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.938774][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.966951][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.974231][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.049736][T12882] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 283.135926][T12882] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 283.160800][T13106] tipc: Enabled bearer , priority 0 [ 283.170443][T12882] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 283.189943][T13115] tipc: Enabling of bearer rejected, already enabled [ 283.238097][T13115] tipc: Resetting bearer [ 283.268118][T13105] tipc: Disabling bearer [ 283.629669][ T5873] Bluetooth: hci7: command tx timeout [ 283.732883][T12882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.781710][T13147] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2021'. [ 283.909697][T12882] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.968206][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.975444][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.040764][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.048013][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.384926][T12882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.546843][T12807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.608748][T13172] tipc: Enabling of bearer rejected, failed to enable media [ 284.855307][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2024'. [ 285.175780][T12882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.245706][T13200] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 285.413941][T13200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.506104][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 285.517115][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 285.527858][T13202] veth9: entered promiscuous mode [ 285.575793][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 285.585955][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 285.603893][T13208] bond7: entered allmulticast mode [ 285.801866][T12807] veth0_vlan: entered promiscuous mode [ 285.856630][T12807] veth1_vlan: entered promiscuous mode [ 286.016140][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2037'. [ 286.023658][T12807] veth0_macvtap: entered promiscuous mode [ 286.077383][T12807] veth1_macvtap: entered promiscuous mode [ 286.155172][T12807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.228365][T12807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.266653][T13237] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 286.399704][T13240] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 286.591259][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.613125][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.656175][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.718451][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.870794][T12882] veth0_vlan: entered promiscuous mode [ 286.992904][T12882] veth1_vlan: entered promiscuous mode [ 286.993141][ T7121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.046102][ T7121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.132607][ T7108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.163118][ T7108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.190567][T12882] veth0_macvtap: entered promiscuous mode [ 287.255333][T12882] veth1_macvtap: entered promiscuous mode [ 287.323446][T12882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.327131][T13262] netlink: 'syz.4.2046': attribute type 39 has an invalid length. [ 287.435560][T12882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.567087][ T7108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.580373][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1924'. [ 287.600146][ T7108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.636789][ T7108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.676645][ T7108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.774467][T13284] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 287.800958][T13284] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.201699][T13295] bridge4: entered promiscuous mode [ 288.228189][T13295] bridge4: entered allmulticast mode [ 288.688907][ T7104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.729537][ T7104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.740849][T13317] netlink: zone id is out of range [ 288.759468][T13317] netlink: zone id is out of range [ 288.765133][T13317] netlink: zone id is out of range [ 288.814541][T13317] netlink: zone id is out of range [ 288.859261][T13317] netlink: zone id is out of range [ 288.888836][T13317] netlink: zone id is out of range [ 288.908102][T13317] netlink: zone id is out of range [ 288.918384][T13317] netlink: zone id is out of range [ 288.956583][T13317] netlink: zone id is out of range [ 288.969775][T13317] netlink: zone id is out of range [ 289.178817][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.224587][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.249777][T13334] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2064'. [ 289.405164][T13340] netlink: 'syz.4.2066': attribute type 10 has an invalid length. [ 289.454817][T13340] netlink: 'syz.4.2066': attribute type 10 has an invalid length. [ 289.494781][T13340] dummy0: entered allmulticast mode [ 289.532380][T13340] `: (slave dummy0): Enslaving as an active interface with an up link [ 289.587449][T13349] gtp0: entered promiscuous mode [ 289.594388][T13349] gtp0: entered allmulticast mode [ 289.753731][T13358] netlink: 'syz.0.2072': attribute type 4 has an invalid length. [ 289.771303][T13354] tipc: Enabled bearer , priority 0 [ 289.789871][T13358] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2072'. [ 289.806046][T13354] syzkaller0: entered promiscuous mode [ 289.817631][T13354] syzkaller0: entered allmulticast mode [ 289.844690][T13360] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2072'. [ 289.917501][T13357] tipc: Resetting bearer [ 290.019991][T13365] vlan1: entered promiscuous mode [ 290.041231][T13365] vlan1: entered allmulticast mode [ 290.182005][T13353] tipc: Resetting bearer [ 290.250349][T13353] tipc: Disabling bearer [ 290.295483][T13376] netlink: 'syz.4.2077': attribute type 23 has an invalid length. [ 290.915729][T13407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2087'. [ 290.960753][T13407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2087'. [ 291.028127][T13407] tipc: Enabling of bearer rejected, failed to enable media [ 291.106329][T13422] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2091'. [ 291.644482][T13438] tipc: Enabling of bearer rejected, failed to enable media [ 291.848495][T13444] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 291.872458][T13444] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2101'. [ 291.893283][T13444] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 292.277409][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2107'. [ 292.339718][T13466] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2107'. [ 292.744262][T13483] sctp: [Deprecated]: syz.4.2115 (pid 13483) Use of int in maxseg socket option. [ 292.744262][T13483] Use struct sctp_assoc_value instead [ 292.784314][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'. [ 292.879466][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2118'. [ 292.894268][T13497] tipc: Enabling of bearer rejected, failed to enable media [ 293.238612][T13518] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2122'. [ 293.513767][T13525] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2123'. [ 294.201280][T13565] netlink: 'syz.0.2127': attribute type 2 has an invalid length. [ 294.586151][T13537] team0 (unregistering): Port device team_slave_0 removed [ 294.594228][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 294.655448][T13537] team0 (unregistering): Port device team_slave_1 removed [ 296.075739][T13613] __nla_validate_parse: 6 callbacks suppressed [ 296.075758][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2147'. [ 296.182491][T13620] siw: device registration error -23 [ 297.124321][T13658] tipc: Enabling of bearer rejected, failed to enable media [ 297.410224][T13676] tipc: Enabling of bearer rejected, failed to enable media [ 297.730560][T13687] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2169'. [ 298.080176][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2176'. [ 298.134165][T13708] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2176'. [ 298.136866][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2176'. [ 298.227239][T13711] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2176'. [ 298.273427][T13718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2181'. [ 298.303502][T13708] gretap1: entered promiscuous mode [ 298.310488][T13708] gretap1: entered allmulticast mode [ 298.316430][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'. [ 298.413451][T13720] netlink: 'syz.6.2182': attribute type 1 has an invalid length. [ 298.623972][T13720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.644152][T13725] bond1: (slave gretap1): making interface the new active one [ 298.656654][T13725] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 298.675075][T13727] vlan2: entered allmulticast mode [ 298.681539][T13727] bond1: entered allmulticast mode [ 298.686900][T13727] gretap1: entered allmulticast mode [ 298.693752][T13727] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 298.723117][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2184'. [ 298.783002][T13745] bridge_slave_1: left allmulticast mode [ 298.788732][T13745] bridge_slave_1: left promiscuous mode [ 298.811736][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.927520][T13745] bridge_slave_0: left allmulticast mode [ 298.968266][T13745] bridge_slave_0: left promiscuous mode [ 298.985630][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.052077][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2189'. [ 300.890492][ T6033] udevd[6033]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 300.964682][ T6033] udevd[6033]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 301.086422][T13832] sit2: entered promiscuous mode [ 301.109378][T13832] sit2: entered allmulticast mode [ 301.270852][T13837] netlink: 'syz.7.2215': attribute type 1 has an invalid length. [ 301.299359][T13837] netlink: 'syz.7.2215': attribute type 2 has an invalid length. [ 301.307322][T13837] __nla_validate_parse: 6 callbacks suppressed [ 301.307340][T13837] netlink: 1172 bytes leftover after parsing attributes in process `syz.7.2215'. [ 301.382991][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2218'. [ 301.426714][T13845] macvlan0: entered promiscuous mode [ 301.445400][T13845] batadv_slave_0: entered promiscuous mode [ 301.457972][T13841] netlink: 'syz.4.2217': attribute type 8 has an invalid length. [ 301.493484][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.522059][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.542840][T13841] netlink: 'syz.4.2217': attribute type 8 has an invalid length. [ 301.594534][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.628390][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.641220][T13854] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2220'. [ 301.657694][T13841] netlink: 'syz.4.2217': attribute type 8 has an invalid length. [ 301.677475][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.687919][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.719954][T13841] netlink: 'syz.4.2217': attribute type 8 has an invalid length. [ 301.730531][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 301.740252][T13841] netlink: 'syz.4.2217': attribute type 8 has an invalid length. [ 301.773868][T13841] netlink: 'syz.4.2217': attribute type 8 has an invalid length. [ 301.783398][T13841] netlink: 'syz.4.2217': attribute type 8 has an invalid length. [ 302.579785][T13889] bond0: (slave bond_slave_0): Releasing backup interface [ 302.633603][T13889] bond0: (slave bond_slave_1): Releasing backup interface [ 302.694619][T13889] team0: Port device team_slave_0 removed [ 302.740570][T13889] team0: Port device team_slave_1 removed [ 302.750415][ T5870] Bluetooth: hci7: command 0x0405 tx timeout [ 302.764477][T13889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.775821][T13889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.786564][T13889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.796460][T13889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.933854][T13907] vlan3: entered allmulticast mode [ 302.947684][T13907] bridge0: entered allmulticast mode [ 303.297176][T13918] : entered promiscuous mode [ 303.504579][T13931] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.529644][T13931] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.731839][T13931] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.754624][T13950] validate_nla: 7 callbacks suppressed [ 303.754644][T13950] netlink: 'syz.1.2246': attribute type 10 has an invalid length. [ 303.754990][T13942] netlink: 'syz.0.2245': attribute type 4 has an invalid length. [ 303.763720][T13931] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.788753][T13947] netlink: 'syz.0.2245': attribute type 4 has an invalid length. [ 303.900599][T13950] team0: Port device geneve0 added [ 303.920802][T13934] syz.6.2243 (13934) used greatest stack depth: 15864 bytes left [ 304.069001][ T7120] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 304.108254][ T7120] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 304.163514][T13931] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.185018][T13931] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.325083][T13971] netlink: 'syz.6.2250': attribute type 1 has an invalid length. [ 304.346769][ T7120] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 304.358605][ T7120] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 304.447315][T13931] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.461134][T13931] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.713536][ T7120] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.758479][ T7120] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.856150][T13990] netlink: 'syz.6.2254': attribute type 1 has an invalid length. [ 304.888787][T13993] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 304.923064][ T7108] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.958923][ T7108] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.062151][ T1326] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.085538][ T1326] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.263731][ T1326] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.290081][ T1326] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.587254][T13988] lo speed is unknown, defaulting to 1000 [ 306.008983][T14037] net_ratelimit: 348 callbacks suppressed [ 306.009006][T14037] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 306.053946][T14037] openvswitch: netlink: Message has 6332 unknown bytes. [ 306.306077][T14048] netlink: 'syz.0.2272': attribute type 21 has an invalid length. [ 306.314595][T14047] netlink: 'syz.0.2272': attribute type 21 has an invalid length. [ 306.331111][T14048] __nla_validate_parse: 28 callbacks suppressed [ 306.331130][T14048] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2272'. [ 306.332788][T14047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2272'. [ 306.715514][T14067] netlink: 'syz.7.2277': attribute type 3 has an invalid length. [ 306.968778][T14070] netlink: 'syz.7.2277': attribute type 3 has an invalid length. [ 306.984982][T14079] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 307.224613][T14089] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2284'. [ 307.838214][T14114] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2288'. [ 307.886765][T14114] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2288'. [ 307.901585][T14115] netlink: 'syz.4.2286': attribute type 10 has an invalid length. [ 308.195030][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 308.288514][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2292'. [ 308.358679][ T1326] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 308.369014][ T1326] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 308.380086][ T7254] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 308.451768][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2293'. [ 308.628969][T14128] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 308.655635][T14138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2296'. [ 308.732145][T14143] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2296'. [ 308.734071][T14128] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 308.979494][ T7253] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 309.309908][ T7253] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 309.351262][T14168] tipc: Enabled bearer , priority 0 [ 309.375866][T14168] syzkaller0: entered promiscuous mode [ 309.385928][T14168] syzkaller0: entered allmulticast mode [ 309.442052][T14168] tipc: Resetting bearer [ 309.479027][T14167] tipc: Resetting bearer [ 309.524867][T14167] tipc: Disabling bearer [ 309.834760][T14189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 310.155373][T14200] validate_nla: 1 callbacks suppressed [ 310.155393][T14200] netlink: 'syz.1.2313': attribute type 12 has an invalid length. [ 310.403312][T14215] netlink: 'syz.7.2318': attribute type 2 has an invalid length. [ 310.421145][T14216] netlink: 'syz.4.2319': attribute type 12 has an invalid length. [ 310.857677][T14235] syzkaller1: entered promiscuous mode [ 310.871225][T14235] syzkaller1: entered allmulticast mode [ 311.154309][T14248] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 311.549738][T14261] __nla_validate_parse: 7 callbacks suppressed [ 311.549760][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 311.641508][T14265] netlink: 'syz.7.2338': attribute type 1 has an invalid length. [ 311.923124][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2342'. [ 311.943270][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2342'. [ 312.127858][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2346'. [ 312.149763][T14282] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2343'. [ 312.275749][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2348'. [ 312.280376][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 312.692612][T14318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2355'. [ 312.792317][T14327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2358'. [ 313.197362][T14347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.441053][T14354] tipc: Enabled bearer , priority 0 [ 313.461286][T14354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 313.476431][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2365'. [ 313.512812][T14354] tipc: Resetting bearer [ 313.517395][T14361] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2366'. [ 313.538350][T14353] tipc: Disabling bearer [ 313.612452][T14361] bond0 (unregistering): Released all slaves [ 314.154231][T14389] macvlan2: entered promiscuous mode [ 314.179288][T14389] macvlan2: entered allmulticast mode [ 314.219514][T14389] bond3: (slave macvlan2): Opening slave failed [ 316.379730][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.636380][T14517] __nla_validate_parse: 7 callbacks suppressed [ 316.636401][T14517] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2407'. [ 316.844299][T14525] netlink: 'syz.6.2411': attribute type 7 has an invalid length. [ 316.877742][T14525] netlink: 'syz.6.2411': attribute type 8 has an invalid length. [ 316.969848][T14536] netlink: 'syz.4.2412': attribute type 1 has an invalid length. [ 316.977861][T14536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2412'. [ 317.400967][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.472817][T14559] openvswitch: netlink: Duplicate or invalid key (type 0). [ 317.481001][T14559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.486164][T14560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2420'. [ 318.196660][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2430'. [ 318.228981][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2428'. [ 318.230670][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2430'. [ 318.269822][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2430'. [ 318.274975][T14600] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2430'. [ 318.372364][T14600] veth0: entered promiscuous mode [ 318.435367][T14599] veth0: left promiscuous mode [ 318.508040][T14608] bridge0: port 3(ipvlan2) entered blocking state [ 318.536992][T14608] bridge0: port 3(ipvlan2) entered disabled state [ 318.567960][T14608] ipvlan2: entered allmulticast mode [ 318.591962][T14608] ipvlan2: left allmulticast mode [ 318.721285][T14613] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2431'. [ 318.739026][T14613] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2431'. [ 318.850563][T14622] nbd1: detected capacity change from 0 to 127 [ 318.961083][ T5873] block nbd1: Receive control failed (result -104) [ 319.226815][T14641] netlink: 'syz.6.2439': attribute type 1 has an invalid length. [ 319.243190][T14643] netlink: 'syz.6.2439': attribute type 1 has an invalid length. [ 319.284702][T14645] siw: device registration error -23 [ 319.666858][T14650] tipc: Enabled bearer , priority 0 [ 319.675699][T14650] syzkaller0: entered promiscuous mode [ 319.689614][T14650] syzkaller0: entered allmulticast mode [ 319.717361][T14650] tipc: Resetting bearer [ 319.754279][T14649] tipc: Resetting bearer [ 319.887997][T14649] tipc: Disabling bearer [ 319.959334][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 320.475046][T14680] netlink: 'syz.4.2449': attribute type 5 has an invalid length. [ 320.666196][T14686] macvtap1: entered promiscuous mode [ 320.680093][T14686] vlan0: entered promiscuous mode [ 320.685764][T14686] macvtap1: entered allmulticast mode [ 320.692022][T14686] vlan0: entered allmulticast mode [ 320.697302][T14686] veth0_vlan: entered allmulticast mode [ 320.725309][T14691] macvtap2: entered promiscuous mode [ 320.731825][T14691] macvtap2: entered allmulticast mode [ 321.006597][T14697] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 321.028357][T14703] netlink: 'syz.1.2459': attribute type 1 has an invalid length. [ 321.851133][T14735] openvswitch: netlink: Multiple metadata blocks provided [ 322.117915][T14742] __nla_validate_parse: 5 callbacks suppressed [ 322.117937][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2469'. [ 322.724406][T14782] nftables ruleset with unbound chain [ 323.619357][T14791] netlink: 'syz.6.2483': attribute type 4 has an invalid length. [ 323.816980][T14803] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2486'. [ 323.821551][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2485'. [ 324.037685][T14819] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2488'. [ 324.633874][T14836] netlink: 'syz.6.2494': attribute type 4 has an invalid length. [ 324.683236][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 324.705924][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 324.733424][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 324.808354][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 324.832709][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 324.883112][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 324.910923][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2498'. [ 324.933871][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 324.948382][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 324.958480][T14844] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 325.214233][T14852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.255547][ T5870] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 325.266390][ T5870] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 325.270707][T14854] veth5: entered promiscuous mode [ 325.281972][ T5870] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 325.290831][T14854] bond4: (slave veth5): Enslaving as an active interface with an up link [ 325.296914][ T5870] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 325.303576][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 325.308496][ T5870] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 325.417164][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 325.781498][T14883] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2506'. [ 325.864696][T14883] tipc: Started in network mode [ 325.879230][T14883] tipc: Node identity c60bf20f144a, cluster identity 4711 [ 325.901957][T14883] tipc: Enabled bearer , priority 0 [ 325.933797][T14883] syzkaller0: entered promiscuous mode [ 325.950574][T14883] syzkaller0: entered allmulticast mode [ 325.993015][T14883] tipc: Resetting bearer [ 326.038947][T14882] tipc: Resetting bearer [ 326.086986][T14882] tipc: Disabling bearer [ 326.091315][T14892] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2509'. [ 326.276378][T14859] lo speed is unknown, defaulting to 1000 [ 326.407945][T14897] syzkaller1: entered promiscuous mode [ 326.427619][T14897] syzkaller1: entered allmulticast mode [ 327.390030][ T5870] Bluetooth: hci8: command tx timeout [ 327.438702][T14925] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 327.700745][T14936] __nla_validate_parse: 4 callbacks suppressed [ 327.700767][T14936] netlink: 284 bytes leftover after parsing attributes in process `syz.6.2524'. [ 327.807447][T14859] chnl_net:caif_netlink_parms(): no params data found [ 328.253598][T14859] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.282611][T14859] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.336868][T14859] bridge_slave_0: entered allmulticast mode [ 328.364634][T14859] bridge_slave_0: entered promiscuous mode [ 328.392654][T14859] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.411068][T14859] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.430273][T14859] bridge_slave_1: entered allmulticast mode [ 328.454877][T14859] bridge_slave_1: entered promiscuous mode [ 328.611470][T14951] FAULT_INJECTION: forcing a failure. [ 328.611470][T14951] name failslab, interval 1, probability 0, space 0, times 1 [ 328.634262][T14951] CPU: 1 UID: 0 PID: 14951 Comm: syz.4.2528 Not tainted syzkaller #0 PREEMPT(full) [ 328.634290][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 328.634302][T14951] Call Trace: [ 328.634310][T14951] [ 328.634319][T14951] dump_stack_lvl+0x189/0x250 [ 328.634350][T14951] ? __pfx____ratelimit+0x10/0x10 [ 328.634373][T14951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.634397][T14951] ? __pfx__printk+0x10/0x10 [ 328.634432][T14951] ? __pfx___might_resched+0x10/0x10 [ 328.634467][T14951] should_fail_ex+0x414/0x560 [ 328.634504][T14951] should_failslab+0xa8/0x100 [ 328.634536][T14951] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 328.634566][T14951] ? __alloc_skb+0x112/0x2d0 [ 328.634594][T14951] __alloc_skb+0x112/0x2d0 [ 328.634622][T14951] netlink_sendmsg+0x5c6/0xb30 [ 328.634657][T14951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.634683][T14951] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.634706][T14951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.634728][T14951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.634752][T14951] __sock_sendmsg+0x219/0x270 [ 328.634787][T14951] ____sys_sendmsg+0x505/0x830 [ 328.634819][T14951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.634857][T14951] ? import_iovec+0x74/0xa0 [ 328.634888][T14951] ___sys_sendmsg+0x21f/0x2a0 [ 328.634917][T14951] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.634988][T14951] ? __fget_files+0x2a/0x420 [ 328.635006][T14951] ? __fget_files+0x3a0/0x420 [ 328.635037][T14951] __x64_sys_sendmsg+0x19b/0x260 [ 328.635067][T14951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.635104][T14951] ? __pfx_ksys_write+0x10/0x10 [ 328.635129][T14951] ? rcu_is_watching+0x15/0xb0 [ 328.635156][T14951] ? do_syscall_64+0xbe/0x3b0 [ 328.635184][T14951] do_syscall_64+0xfa/0x3b0 [ 328.635206][T14951] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.635226][T14951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.635263][T14951] ? clear_bhb_loop+0x60/0xb0 [ 328.635288][T14951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.635308][T14951] RIP: 0033:0x7f081bd8eec9 [ 328.635327][T14951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.635345][T14951] RSP: 002b:00007f081cc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.635368][T14951] RAX: ffffffffffffffda RBX: 00007f081bfe5fa0 RCX: 00007f081bd8eec9 [ 328.635382][T14951] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 328.635395][T14951] RBP: 00007f081cc73090 R08: 0000000000000000 R09: 0000000000000000 [ 328.635407][T14951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.635419][T14951] R13: 00007f081bfe6038 R14: 00007f081bfe5fa0 R15: 00007ffcc2a5af48 [ 328.635462][T14951] [ 328.946130][T14954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2527'. [ 328.956222][T14954] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2527'. [ 329.106381][T14859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.161956][T14859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.286154][T14859] team0: Port device team_slave_0 added [ 329.409458][T14859] team0: Port device team_slave_1 added [ 329.416507][T14966] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2532'. [ 329.480187][ T5870] Bluetooth: hci8: command tx timeout [ 329.741275][T14859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.748492][T14859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.804549][T14859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.821787][T14859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.829338][T14859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.903497][T14859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.082808][T14859] hsr_slave_0: entered promiscuous mode [ 330.108812][T14859] hsr_slave_1: entered promiscuous mode [ 330.128758][T14859] debugfs: 'hsr0' already exists in 'hsr' [ 330.133672][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'. [ 330.165612][T14859] Cannot create hsr debugfs directory [ 330.694017][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2540'. [ 330.758237][T14999] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2542'. [ 331.207578][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2543'. [ 331.255054][T15005] validate_nla: 27 callbacks suppressed [ 331.255075][T15005] netlink: 'syz.6.2543': attribute type 29 has an invalid length. [ 331.271640][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2543'. [ 331.301506][T14859] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 331.335766][T14859] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 331.426750][T14859] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 331.458773][T14859] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 331.559336][ T5870] Bluetooth: hci8: command tx timeout [ 331.653885][T15016] FAULT_INJECTION: forcing a failure. [ 331.653885][T15016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.674896][T15016] CPU: 0 UID: 0 PID: 15016 Comm: syz.6.2544 Not tainted syzkaller #0 PREEMPT(full) [ 331.674926][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.674937][T15016] Call Trace: [ 331.674945][T15016] [ 331.674954][T15016] dump_stack_lvl+0x189/0x250 [ 331.674984][T15016] ? __pfx____ratelimit+0x10/0x10 [ 331.675007][T15016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.675030][T15016] ? __pfx__printk+0x10/0x10 [ 331.675056][T15016] ? __might_fault+0xb0/0x130 [ 331.675097][T15016] should_fail_ex+0x414/0x560 [ 331.675134][T15016] _copy_from_iter+0x1de/0x1790 [ 331.675167][T15016] ? rcu_is_watching+0x15/0xb0 [ 331.675190][T15016] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 331.675220][T15016] ? __pfx__copy_from_iter+0x10/0x10 [ 331.675271][T15016] ? __build_skb_around+0x257/0x3e0 [ 331.675300][T15016] ? netlink_sendmsg+0x642/0xb30 [ 331.675320][T15016] ? skb_put+0x11b/0x210 [ 331.675347][T15016] netlink_sendmsg+0x6b2/0xb30 [ 331.675381][T15016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.675409][T15016] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.675432][T15016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.675453][T15016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.675477][T15016] __sock_sendmsg+0x219/0x270 [ 331.675511][T15016] ____sys_sendmsg+0x505/0x830 [ 331.675544][T15016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.675580][T15016] ? import_iovec+0x74/0xa0 [ 331.675611][T15016] ___sys_sendmsg+0x21f/0x2a0 [ 331.675640][T15016] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.675719][T15016] ? __fget_files+0x2a/0x420 [ 331.675737][T15016] ? __fget_files+0x3a0/0x420 [ 331.675768][T15016] __x64_sys_sendmsg+0x19b/0x260 [ 331.675798][T15016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.675836][T15016] ? __pfx_ksys_write+0x10/0x10 [ 331.675861][T15016] ? rcu_is_watching+0x15/0xb0 [ 331.675887][T15016] ? do_syscall_64+0xbe/0x3b0 [ 331.675913][T15016] do_syscall_64+0xfa/0x3b0 [ 331.675934][T15016] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.675955][T15016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.675975][T15016] ? clear_bhb_loop+0x60/0xb0 [ 331.676000][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.676018][T15016] RIP: 0033:0x7f959a78eec9 [ 331.676037][T15016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.676053][T15016] RSP: 002b:00007f959b68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.676075][T15016] RAX: ffffffffffffffda RBX: 00007f959a9e5fa0 RCX: 00007f959a78eec9 [ 331.676090][T15016] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 331.676103][T15016] RBP: 00007f959b68f090 R08: 0000000000000000 R09: 0000000000000000 [ 331.676115][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.676126][T15016] R13: 00007f959a9e6038 R14: 00007f959a9e5fa0 R15: 00007ffdd29085e8 [ 331.676159][T15016] [ 332.015200][T14859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.327705][T14859] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.390307][T15020] C: renamed from team_slave_0 [ 332.736583][T15020] netlink: 'syz.6.2546': attribute type 1 has an invalid length. [ 332.789878][T15020] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 332.971447][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.978681][ T7121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.041508][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.048898][ T7121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.291141][T14859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.340974][T14859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.396904][T15033] netlink: 'syz.4.2550': attribute type 2 has an invalid length. [ 333.449314][T15033] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2550'. [ 333.479973][T15033] nbd: must specify at least one socket [ 333.631567][ T5870] Bluetooth: hci8: command tx timeout [ 333.662025][T15039] netlink: 81 bytes leftover after parsing attributes in process `syz.6.2551'. [ 333.834604][T14859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.093162][T15056] netlink: zone id is out of range [ 334.098566][T15056] netlink: zone id is out of range [ 334.108522][T15056] netlink: zone id is out of range [ 334.123700][T15056] netlink: zone id is out of range [ 334.139909][T15056] netlink: zone id is out of range [ 334.154134][T15056] netlink: zone id is out of range [ 334.174617][T15056] netlink: zone id is out of range [ 334.185099][T14859] veth0_vlan: entered promiscuous mode [ 334.197321][T15056] netlink: zone id is out of range [ 334.218621][T15056] netlink: zone id is out of range [ 334.241959][T14859] veth1_vlan: entered promiscuous mode [ 334.275819][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 334.296338][T15058] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2556'. [ 334.329615][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 334.392678][T14859] veth0_macvtap: entered promiscuous mode [ 334.449747][T14859] veth1_macvtap: entered promiscuous mode [ 334.536061][T14859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.622729][T14859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.720128][ T7112] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.729015][ T7108] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.794088][ T7108] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.846700][ T7108] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.082893][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.139547][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.231645][T15075] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 335.270059][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.293658][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.317966][T15075] bond10: entered promiscuous mode [ 335.325353][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 335.344058][T15075] 8021q: adding VLAN 0 to HW filter on device bond10 [ 335.656029][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 335.749264][T15099] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2490'. [ 335.771924][T15099] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2490'. [ 335.831753][T15097] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2490'. [ 335.854734][T15097] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2490'. [ 336.387666][T15116] atomic_op ffff88807c971998 conn xmit_atomic 0000000000000000 [ 336.555957][T15119] wg1: entered promiscuous mode [ 336.572080][T15119] wg1: entered allmulticast mode [ 336.910304][T15125] netlink: 'syz.8.2577': attribute type 3 has an invalid length. [ 337.000996][T15128] netlink: 'syz.8.2577': attribute type 10 has an invalid length. [ 337.102465][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.113393][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.122752][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.145731][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.154132][T15128] dummy0: entered promiscuous mode [ 337.166889][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.200453][T15128] bridge0: port 3(dummy0) entered blocking state [ 337.210503][T15128] bridge0: port 3(dummy0) entered disabled state [ 337.237569][T15128] dummy0: entered allmulticast mode [ 337.281558][T15128] bridge0: port 3(dummy0) entered blocking state [ 337.288100][T15128] bridge0: port 3(dummy0) entered forwarding state [ 338.401711][T15134] lo speed is unknown, defaulting to 1000 [ 339.027559][T15185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.035078][T15185] IPv6: NLM_F_CREATE should be set when creating new route [ 339.230601][ T5873] Bluetooth: hci0: command tx timeout [ 339.704255][T15198] __nla_validate_parse: 2 callbacks suppressed [ 339.704279][T15198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2599'. [ 339.720917][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2600'. [ 339.861840][T15203] netlink: 348 bytes leftover after parsing attributes in process `syz.8.2601'. [ 339.983962][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'. [ 340.031577][T15203] nbd2: detected capacity change from 0 to 127 [ 340.063562][ T5873] block nbd2: Receive control failed (result -104) [ 340.188969][T15211] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2603'. [ 340.239718][T15134] chnl_net:caif_netlink_parms(): no params data found [ 340.323529][T15213] net_ratelimit: 3 callbacks suppressed [ 340.323551][T15213] openvswitch: netlink: IPv4 tun info is not correct [ 341.309715][ T5873] Bluetooth: hci0: command tx timeout [ 341.490063][T15223] bridge0: port 3(dummy0) entered disabled state [ 341.496841][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.504686][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.529980][T15134] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.537377][T15134] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.550720][T15134] bridge_slave_0: entered allmulticast mode [ 341.579821][T15134] bridge_slave_0: entered promiscuous mode [ 341.600031][T15134] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.609032][T15134] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.616508][T15134] bridge_slave_1: entered allmulticast mode [ 341.671382][T15134] bridge_slave_1: entered promiscuous mode [ 341.721620][T15227] netlink: 'syz.8.2606': attribute type 2 has an invalid length. [ 341.901874][T15134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.935884][T15134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.181094][T15134] team0: Port device team_slave_0 added [ 342.207858][T15134] team0: Port device team_slave_1 added [ 342.411853][T15134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.425244][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.452663][T15134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.466208][T15134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.473792][T15134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.501203][T15134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.580628][ T5870] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 342.594536][ T5870] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 342.603133][ T7104] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 342.606669][ T5870] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 342.626955][ T5870] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 342.635774][ T5870] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 342.675064][T15134] hsr_slave_0: entered promiscuous mode [ 342.699425][T15134] hsr_slave_1: entered promiscuous mode [ 342.706278][T15134] debugfs: 'hsr0' already exists in 'hsr' [ 342.719331][T15134] Cannot create hsr debugfs directory [ 343.063722][T14905] Set syz1 is full, maxelem 65536 reached [ 343.221999][T15134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 343.249204][T15134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.366695][T15246] netlink: 'syz.8.2611': attribute type 1 has an invalid length. [ 343.390824][ T5873] Bluetooth: hci0: command tx timeout [ 343.561399][T15134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 343.574890][T15134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.689511][T15241] lo speed is unknown, defaulting to 1000 [ 343.765177][T15134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 343.807379][T15134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.054235][T15263] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2616'. [ 344.082779][T15134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 344.093725][T15134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.281339][T15266] netlink: 'syz.8.2617': attribute type 1 has an invalid length. [ 344.347363][ T3596] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.568767][ T3596] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.680111][ T5873] Bluetooth: hci9: command tx timeout [ 344.704568][ T3596] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.754029][T15281] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2622'. [ 344.867843][ T3596] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.111472][T15134] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.124793][T15134] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.140774][T15292] gretap1: entered allmulticast mode [ 345.162801][T15134] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.266218][T15134] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.321636][T15299] veth0_to_batadv: mtu less than device minimum [ 345.345998][T15241] chnl_net:caif_netlink_parms(): no params data found [ 345.469789][ T5873] Bluetooth: hci0: command tx timeout [ 345.470645][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2627'. [ 346.043740][ T3596] bond0 (unregistering): Released all slaves [ 346.078931][T15307] hsr_slave_0: left promiscuous mode [ 346.085947][T15307] hsr_slave_1: left promiscuous mode [ 346.144246][ T3596] : left promiscuous mode [ 346.314078][ T3596] tipc: Left network mode [ 346.480802][T15241] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.493788][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.501752][T15241] bridge_slave_0: entered allmulticast mode [ 346.512719][T15241] bridge_slave_0: entered promiscuous mode [ 346.534661][T15241] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.554088][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.568765][T15241] bridge_slave_1: entered allmulticast mode [ 346.580992][T15241] bridge_slave_1: entered promiscuous mode [ 346.704034][T15241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.714417][T15330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2633'. [ 346.717742][T15241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.759865][ T5873] Bluetooth: hci9: command tx timeout [ 346.920548][T15241] team0: Port device team_slave_0 added [ 346.952001][T15241] team0: Port device team_slave_1 added [ 347.281649][T15241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.294184][T15241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.321511][T15241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.416362][T15241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.440176][T15241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.466918][T15241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.652884][ T3596] hsr_slave_0: left promiscuous mode [ 347.662242][ T3596] hsr_slave_1: left promiscuous mode [ 347.704943][ T3596] vlan0: left allmulticast mode [ 347.710070][ T3596] veth0_vlan: left allmulticast mode [ 347.715441][ T3596] vlan0: left promiscuous mode [ 347.721307][ T3596] veth1_macvtap: left promiscuous mode [ 347.727194][ T3596] veth0_macvtap: left promiscuous mode [ 347.733985][ T3596] veth1_vlan: left promiscuous mode [ 347.739538][ T3596] veth0_vlan: left promiscuous mode [ 348.833232][ T5873] Bluetooth: hci9: command tx timeout [ 349.140995][T15241] hsr_slave_0: entered promiscuous mode [ 349.148075][T15241] hsr_slave_1: entered promiscuous mode [ 349.156547][T15241] debugfs: 'hsr0' already exists in 'hsr' [ 349.163336][T15241] Cannot create hsr debugfs directory [ 349.174474][T15134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.271000][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 349.651210][T15134] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.727486][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.731820][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2641'. [ 349.734789][ T7104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.786504][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 349.873509][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.880785][ T7104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.191694][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 350.333661][T15241] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 350.368764][T15241] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 350.401592][T15241] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 350.434244][T15241] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 350.786145][T15241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.863084][T15241] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.909862][ T5870] Bluetooth: hci9: command tx timeout [ 350.922366][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.929614][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.004887][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.012261][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.156727][T15134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.441946][T15134] veth0_vlan: entered promiscuous mode [ 351.467998][T15134] veth1_vlan: entered promiscuous mode [ 351.622599][T15134] veth0_macvtap: entered promiscuous mode [ 351.669902][T15134] veth1_macvtap: entered promiscuous mode [ 351.728721][T15134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.820760][T15134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.850285][ T7108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.903124][ T7108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.943021][ T1326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.982903][ T1326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.395037][ T7112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.448066][ T7112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.456241][T15241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.624870][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.642552][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.658020][T15435] netlink: 'syz.8.2656': attribute type 1 has an invalid length. [ 353.125812][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'. [ 353.152838][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 353.170801][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2658'. [ 353.470804][T15468] tipc: Enabling of bearer rejected, failed to enable media [ 353.581260][T15241] veth0_vlan: entered promiscuous mode [ 353.619024][T15241] veth1_vlan: entered promiscuous mode [ 353.774150][T15241] veth0_macvtap: entered promiscuous mode [ 353.830570][T15241] veth1_macvtap: entered promiscuous mode [ 353.873968][T15477] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2663'. [ 353.899611][T15477] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2663'. [ 353.947823][T15241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.966056][T15479] openvswitch: netlink: EtherType 0 is less than min 600 [ 354.011799][T15241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.069457][ T7112] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.078372][ T7112] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.146836][T15482] FAULT_INJECTION: forcing a failure. [ 354.146836][T15482] name failslab, interval 1, probability 0, space 0, times 0 [ 354.149658][ T7112] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.196749][ T7112] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.206918][T15484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2667'. [ 354.217683][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.4.2666 Not tainted syzkaller #0 PREEMPT(full) [ 354.217710][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.217722][T15482] Call Trace: [ 354.217730][T15482] [ 354.217738][T15482] dump_stack_lvl+0x189/0x250 [ 354.217769][T15482] ? __pfx____ratelimit+0x10/0x10 [ 354.217791][T15482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.217811][T15482] ? __pfx__printk+0x10/0x10 [ 354.217838][T15482] ? __lock_acquire+0xab9/0xd20 [ 354.217879][T15482] should_fail_ex+0x414/0x560 [ 354.217914][T15482] should_failslab+0xa8/0x100 [ 354.217944][T15482] kmem_cache_alloc_noprof+0x73/0x3c0 [ 354.217968][T15482] ? skb_clone+0x212/0x3a0 [ 354.217997][T15482] skb_clone+0x212/0x3a0 [ 354.218016][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2667'. [ 354.218028][T15482] __netlink_deliver_tap+0x404/0x850 [ 354.218064][T15482] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.218086][T15482] netlink_deliver_tap+0x19c/0x1b0 [ 354.218106][T15482] netlink_unicast+0x7fa/0x9e0 [ 354.218144][T15482] ? __pfx_netlink_unicast+0x10/0x10 [ 354.218173][T15482] ? netlink_sendmsg+0x642/0xb30 [ 354.218190][T15482] ? skb_put+0x11b/0x210 [ 354.218215][T15482] netlink_sendmsg+0x805/0xb30 [ 354.218245][T15482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.218268][T15482] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.218289][T15482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.218308][T15482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.218328][T15482] __sock_sendmsg+0x219/0x270 [ 354.218368][T15482] ____sys_sendmsg+0x505/0x830 [ 354.218397][T15482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.218430][T15482] ? import_iovec+0x74/0xa0 [ 354.218458][T15482] ___sys_sendmsg+0x21f/0x2a0 [ 354.218483][T15482] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.218547][T15482] ? __fget_files+0x2a/0x420 [ 354.218563][T15482] ? __fget_files+0x3a0/0x420 [ 354.218592][T15482] __x64_sys_sendmsg+0x19b/0x260 [ 354.218618][T15482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.218651][T15482] ? __pfx_ksys_write+0x10/0x10 [ 354.218672][T15482] ? rcu_is_watching+0x15/0xb0 [ 354.218703][T15482] ? do_syscall_64+0xbe/0x3b0 [ 354.218728][T15482] do_syscall_64+0xfa/0x3b0 [ 354.218746][T15482] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.218765][T15482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.218781][T15482] ? clear_bhb_loop+0x60/0xb0 [ 354.218804][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.218820][T15482] RIP: 0033:0x7f081bd8eec9 [ 354.218837][T15482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.218853][T15482] RSP: 002b:00007f081cc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.218874][T15482] RAX: ffffffffffffffda RBX: 00007f081bfe5fa0 RCX: 00007f081bd8eec9 [ 354.218888][T15482] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 354.218899][T15482] RBP: 00007f081cc73090 R08: 0000000000000000 R09: 0000000000000000 [ 354.218910][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.218921][T15482] R13: 00007f081bfe6038 R14: 00007f081bfe5fa0 R15: 00007ffcc2a5af48 [ 354.218953][T15482] [ 354.565050][T15495] netlink: 'syz.4.2669': attribute type 27 has an invalid length. [ 354.889967][ T7104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.918268][ T7104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.053667][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.100634][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.101307][ T5873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.120521][ T5873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.130065][ T5873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.169966][ T5873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.183667][ T5873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.528886][T15522] FAULT_INJECTION: forcing a failure. [ 355.528886][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 355.592867][T15522] CPU: 0 UID: 0 PID: 15522 Comm: syz.4.2677 Not tainted syzkaller #0 PREEMPT(full) [ 355.592897][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.592909][T15522] Call Trace: [ 355.592918][T15522] [ 355.592927][T15522] dump_stack_lvl+0x189/0x250 [ 355.592958][T15522] ? __pfx____ratelimit+0x10/0x10 [ 355.592981][T15522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.593006][T15522] ? __pfx__printk+0x10/0x10 [ 355.593041][T15522] ? __pfx___might_resched+0x10/0x10 [ 355.593060][T15522] ? fs_reclaim_acquire+0x7d/0x100 [ 355.593085][T15522] should_fail_ex+0x414/0x560 [ 355.593131][T15522] should_failslab+0xa8/0x100 [ 355.593163][T15522] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 355.593192][T15522] ? __alloc_skb+0x112/0x2d0 [ 355.593220][T15522] __alloc_skb+0x112/0x2d0 [ 355.593248][T15522] netlink_ack+0x146/0xa50 [ 355.593275][T15522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.593303][T15522] ? ref_tracker_free+0x63a/0x7d0 [ 355.593324][T15522] ? __asan_memcpy+0x40/0x70 [ 355.593347][T15522] ? __pfx_ref_tracker_free+0x10/0x10 [ 355.593383][T15522] netlink_rcv_skb+0x28c/0x470 [ 355.593403][T15522] ? __lock_acquire+0xab9/0xd20 [ 355.593433][T15522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.593461][T15522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.593508][T15522] ? down_read+0x1ad/0x2e0 [ 355.593536][T15522] genl_rcv+0x28/0x40 [ 355.593561][T15522] netlink_unicast+0x82f/0x9e0 [ 355.593603][T15522] ? __pfx_netlink_unicast+0x10/0x10 [ 355.593638][T15522] ? netlink_sendmsg+0x642/0xb30 [ 355.593657][T15522] ? skb_put+0x11b/0x210 [ 355.593685][T15522] netlink_sendmsg+0x805/0xb30 [ 355.593718][T15522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.593746][T15522] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.593770][T15522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.593793][T15522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.593815][T15522] __sock_sendmsg+0x219/0x270 [ 355.593849][T15522] ____sys_sendmsg+0x505/0x830 [ 355.593883][T15522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.593932][T15522] ? import_iovec+0x74/0xa0 [ 355.593964][T15522] ___sys_sendmsg+0x21f/0x2a0 [ 355.593993][T15522] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.594066][T15522] ? __fget_files+0x2a/0x420 [ 355.594083][T15522] ? __fget_files+0x3a0/0x420 [ 355.594115][T15522] __x64_sys_sendmsg+0x19b/0x260 [ 355.594145][T15522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.594184][T15522] ? __pfx_ksys_write+0x10/0x10 [ 355.594207][T15522] ? rcu_is_watching+0x15/0xb0 [ 355.594236][T15522] ? do_syscall_64+0xbe/0x3b0 [ 355.594272][T15522] do_syscall_64+0xfa/0x3b0 [ 355.594292][T15522] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.594315][T15522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.594335][T15522] ? clear_bhb_loop+0x60/0xb0 [ 355.594360][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.594379][T15522] RIP: 0033:0x7f081bd8eec9 [ 355.594398][T15522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.594415][T15522] RSP: 002b:00007f081cc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.594438][T15522] RAX: ffffffffffffffda RBX: 00007f081bfe5fa0 RCX: 00007f081bd8eec9 [ 355.594453][T15522] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 355.594466][T15522] RBP: 00007f081cc73090 R08: 0000000000000000 R09: 0000000000000000 [ 355.594478][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.594489][T15522] R13: 00007f081bfe6038 R14: 00007f081bfe5fa0 R15: 00007ffcc2a5af48 [ 355.594525][T15522] [ 356.294497][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2679'. [ 356.310730][T15507] lo speed is unknown, defaulting to 1000 [ 356.340769][T15537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.395043][T15537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.441490][T15537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.497540][T15537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.652720][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2679'. [ 356.894002][T15556] netlink: 'syz.9.2687': attribute type 1 has an invalid length. [ 356.998059][T15555] 8021q: VLANs not supported on sit0 [ 357.230115][ T5870] Bluetooth: hci7: command tx timeout [ 357.239685][T15565] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 357.848988][T15600] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2698'. [ 357.944865][T15507] chnl_net:caif_netlink_parms(): no params data found [ 358.058947][T15507] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.066574][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.074570][T15507] bridge_slave_0: entered allmulticast mode [ 358.083862][T15507] bridge_slave_0: entered promiscuous mode [ 358.093997][T15507] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.101427][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.108677][T15507] bridge_slave_1: entered allmulticast mode [ 358.117514][T15507] bridge_slave_1: entered promiscuous mode [ 358.162442][T15507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.176393][T15507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.223017][T15507] team0: Port device team_slave_0 added [ 358.232190][T15507] team0: Port device team_slave_1 added [ 358.277271][T15507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.285920][T15507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.315403][T15507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.382618][T15507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.439191][T15507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.516067][T15507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.544603][ T5938] IPVS: starting estimator thread 0... [ 358.664203][T15612] IPVS: using max 25 ests per chain, 60000 per kthread [ 358.773616][T15623] netlink: 'syz.9.2704': attribute type 1 has an invalid length. [ 358.811546][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2703'. [ 358.833264][T15507] hsr_slave_0: entered promiscuous mode [ 358.845461][T15620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2703'. [ 358.860711][T15507] hsr_slave_1: entered promiscuous mode [ 358.875020][T15626] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2704'. [ 358.875915][T15507] debugfs: 'hsr0' already exists in 'hsr' [ 358.894267][T15627] netlink: 'syz.8.2705': attribute type 33 has an invalid length. [ 358.935393][T15507] Cannot create hsr debugfs directory [ 358.941467][T15632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.990847][T15632] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2704'. [ 359.043362][T15627] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 359.145694][ T3596] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 359.309673][ T5870] Bluetooth: hci7: command tx timeout [ 359.977733][T15507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.035612][T15654] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2713'. [ 360.055983][T15507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.131605][T15660] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 360.155284][T15507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.209252][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2711'. [ 360.219476][T15507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.275525][T15663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2711'. [ 361.390543][ T5870] Bluetooth: hci7: command tx timeout [ 361.547665][T15701] __nla_validate_parse: 3 callbacks suppressed [ 361.547686][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 361.611825][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2726'. [ 361.670484][T15507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.727853][T15707] netlink: 'syz.9.2727': attribute type 33 has an invalid length. [ 361.791982][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2726'. [ 361.817329][T15507] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.822728][T15705] netlink: 'syz.8.2726': attribute type 22 has an invalid length. [ 361.849930][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2726'. [ 361.871203][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2728'. [ 361.911175][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2728'. [ 361.922889][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.930206][ T7120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.991617][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2728'. [ 362.002496][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2728'. [ 362.012260][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2726'. [ 362.022765][T15705] netlink: 'syz.8.2726': attribute type 22 has an invalid length. [ 362.031295][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2726'. [ 362.082628][T15715] veth3: entered allmulticast mode [ 362.108585][ T3596] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.133645][ T3596] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.166798][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.174032][ T7112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.236897][ T3596] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.307459][ T3596] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.906536][T15746] netlink: 'syz.9.2740': attribute type 13 has an invalid length. [ 363.312681][T15507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.489869][ T5873] Bluetooth: hci7: command tx timeout [ 363.699012][T15507] veth0_vlan: entered promiscuous mode [ 363.801633][T15507] veth1_vlan: entered promiscuous mode [ 363.862517][T15780] netlink: 'syz.9.2751': attribute type 1 has an invalid length. [ 364.018854][T15507] veth0_macvtap: entered promiscuous mode [ 364.068204][T15507] veth1_macvtap: entered promiscuous mode [ 364.147287][T15507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.176468][T15507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.240660][ T1326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.271136][ T7121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.315158][ T7121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.376991][ T7121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.655898][ T7121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.699263][ T7121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.762192][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 364.824014][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.842875][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.973957][T15816] netlink: 'syz.9.2765': attribute type 11 has an invalid length. [ 365.325088][T15827] macvlan2: entered promiscuous mode [ 365.334697][T15827] macvlan2: entered allmulticast mode [ 366.081141][T15853] netlink: 'syz.3.2775': attribute type 3 has an invalid length. [ 366.097701][T15853] netlink: 'syz.3.2775': attribute type 10 has an invalid length. [ 366.124420][T15853] team0: Port device geneve0 added [ 366.371336][T15872] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002 [ 366.638888][T15877] netlink: 'syz.9.2782': attribute type 30 has an invalid length. [ 366.779356][T15889] nbd3: detected capacity change from 0 to 127 [ 366.788384][T15883] netlink: 'syz.8.2783': attribute type 7 has an invalid length. [ 366.811622][T15883] : entered promiscuous mode [ 366.818470][ T5873] block nbd3: Receive control failed (result -32) [ 366.849475][ T5925] block nbd3: Dead connection, failed to find a fallback [ 366.858543][T15883] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 366.862421][T15885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.876396][ T5925] block nbd3: shutting down sockets [ 366.883999][ T5925] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.893725][ T5925] Buffer I/O error on dev nbd3, logical block 0, async page read [ 366.904209][ T5925] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.915962][ T5925] Buffer I/O error on dev nbd3, logical block 1, async page read [ 366.924338][ T5925] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.927559][T15892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.933639][ T5925] Buffer I/O error on dev nbd3, logical block 2, async page read [ 366.933863][ T5925] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.933889][ T5925] Buffer I/O error on dev nbd3, logical block 3, async page read [ 366.934239][ T5925] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.934266][ T5925] Buffer I/O error on dev nbd3, logical block 0, async page read [ 366.934433][ T5925] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.998339][ T5925] Buffer I/O error on dev nbd3, logical block 1, async page read [ 367.006420][ T5925] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.016083][ T5925] Buffer I/O error on dev nbd3, logical block 2, async page read [ 367.024724][T15883] __nla_validate_parse: 72 callbacks suppressed [ 367.024742][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2783'. [ 367.040510][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2783'. [ 367.111901][ T5925] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.134662][ T5925] Buffer I/O error on dev nbd3, logical block 3, async page read [ 367.167098][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 367.176954][ T5925] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.203729][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 367.215153][ T5925] Buffer I/O error on dev nbd3, logical block 0, async page read [ 367.240970][ T5925] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.292724][ T5925] Buffer I/O error on dev nbd3, logical block 1, async page read [ 367.334294][ T5925] ldm_validate_partition_table(): Disk read failed. [ 367.394092][ T5925] Dev nbd3: unable to read RDB block 0 [ 367.417577][ T5925] nbd3: unable to read partition table [ 367.430644][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2790'. [ 367.508212][ T5925] ldm_validate_partition_table(): Disk read failed. [ 367.532720][ T5925] Dev nbd3: unable to read RDB block 0 [ 367.546988][ T5925] nbd3: unable to read partition table [ 367.741511][T15920] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2796'. [ 367.816708][T15924] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 367.835214][T15931] netlink: 'syz.3.2798': attribute type 1 has an invalid length. [ 368.125694][T15938] netlink: 'syz.4.2801': attribute type 9 has an invalid length. [ 368.157143][T15938] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.2801'. [ 368.296046][T15942] ieee802154 phy0 wpan0: encryption failed: -90 [ 368.320654][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2804'. [ 368.679781][T15933] lo speed is unknown, defaulting to 1000 [ 368.705027][T15960] sctp: [Deprecated]: syz.3.2812 (pid 15960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.705027][T15960] Use struct sctp_sack_info instead [ 368.761775][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 368.820096][T15959] ip6tnl0: Caught tx_queue_len zero misconfig [ 368.829542][T15962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2811'. [ 369.190536][T15971] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 369.326401][T15978] netlink: 'syz.9.2818': attribute type 7 has an invalid length. [ 369.463304][T15983] team0: Device wireguard0 is of different type [ 369.963601][T15999] syzkaller1: entered promiscuous mode [ 369.970605][T15999] syzkaller1: entered allmulticast mode [ 371.837357][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.847615][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.857199][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.891027][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.910729][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.151920][T16064] __nla_validate_parse: 6 callbacks suppressed [ 372.151941][T16064] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2844'. [ 372.199498][T16065] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2844'. [ 372.245343][T16064] gretap0: entered promiscuous mode [ 372.258751][T16065] 0{X: renamed from gretap0 [ 372.302785][T16065] 0{X: left promiscuous mode [ 372.320338][T16065] 0{X: entered allmulticast mode [ 372.328093][T16065] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 372.361660][T16068] netlink: 'syz.8.2843': attribute type 4 has an invalid length. [ 372.813769][T16081] netlink: 232 bytes leftover after parsing attributes in process `syz.8.2846'. [ 372.839617][T16083] Bluetooth: MGMT ver 1.23 [ 372.916033][T16057] lo speed is unknown, defaulting to 1000 [ 373.328002][T16103] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 373.952927][ T5870] Bluetooth: hci3: command tx timeout [ 374.048117][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2852'. [ 374.544144][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2858'. [ 374.751465][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2863'. [ 374.909193][T16135] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 374.938637][T16121] tunl0: Caught tx_queue_len zero misconfig [ 374.963040][T16129] bond0: Caught tx_queue_len zero misconfig [ 375.284853][T16057] chnl_net:caif_netlink_parms(): no params data found [ 375.481834][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 375.650226][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.667414][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.676333][T16057] bridge_slave_0: entered allmulticast mode [ 375.685548][T16057] bridge_slave_0: entered promiscuous mode [ 375.695594][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.703757][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.712332][T16057] bridge_slave_1: entered allmulticast mode [ 375.721438][T16057] bridge_slave_1: entered promiscuous mode [ 375.823876][T16168] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 375.925891][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.973948][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.021764][T16173] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2875'. [ 376.032691][ T5870] Bluetooth: hci3: command tx timeout [ 376.104410][T16183] sctp: [Deprecated]: syz.3.2876 (pid 16183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.104410][T16183] Use struct sctp_sack_info instead [ 376.188112][T16057] team0: Port device team_slave_0 added [ 376.218200][T16057] team0: Port device team_slave_1 added [ 376.422234][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.442030][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.500709][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.532828][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.550163][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.636787][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2882'. [ 376.646109][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.826007][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2883'. [ 376.829970][T16202] netlink: 'syz.9.2884': attribute type 1 has an invalid length. [ 376.847666][T16057] hsr_slave_0: entered promiscuous mode [ 376.857616][T16057] hsr_slave_1: entered promiscuous mode [ 376.865321][T16057] debugfs: 'hsr0' already exists in 'hsr' [ 376.876662][T16057] Cannot create hsr debugfs directory [ 377.097300][T16214] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 377.186178][T16220] netlink: 'syz.8.2888': attribute type 10 has an invalid length. [ 377.635308][T16057] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.695618][T16057] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.853817][T16057] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.894279][T16057] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.947697][T16241] __nla_validate_parse: 1 callbacks suppressed [ 377.947716][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 377.960259][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2898'. [ 378.002702][T16057] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.036745][T16057] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.111937][ T5870] Bluetooth: hci3: command tx timeout [ 378.168823][T16245] netlink: 'syz.9.2898': attribute type 1 has an invalid length. [ 378.184906][T16245] netlink: 'syz.9.2898': attribute type 2 has an invalid length. [ 378.239789][T16057] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.266056][T16057] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.317620][T16255] netlink: 'syz.3.2899': attribute type 4 has an invalid length. [ 378.625365][T16057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.685292][T16057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.704329][T16057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.720229][T16057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.800634][T16275] tipc: Started in network mode [ 378.805651][T16275] tipc: Node identity 6af9eebebd3b, cluster identity 4711 [ 378.824458][T16275] tipc: Enabled bearer , priority 0 [ 378.852650][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.861175][T16277] syzkaller0: entered promiscuous mode [ 378.868025][T16277] syzkaller0: entered allmulticast mode [ 378.877714][T16282] netlink: 'syz.8.2906': attribute type 1 has an invalid length. [ 378.885943][T16282] netlink: 'syz.8.2906': attribute type 1 has an invalid length. [ 378.897424][T16275] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.977559][T16275] tipc: Resetting bearer [ 379.024365][T16271] tipc: Resetting bearer [ 379.098860][T16271] tipc: Disabling bearer [ 379.310268][T16057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.356417][T16057] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.374453][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.381709][ T7108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.407659][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.414922][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.538731][T16299] netlink: 'syz.9.2912': attribute type 45 has an invalid length. [ 379.565381][T16299] C: renamed from lo (while UP) [ 379.575847][T16299] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 379.803015][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.189481][ T5870] Bluetooth: hci3: command tx timeout [ 380.355980][T16057] veth0_vlan: entered promiscuous mode [ 380.385406][T16057] veth1_vlan: entered promiscuous mode [ 380.446252][T16057] veth0_macvtap: entered promiscuous mode [ 380.476060][T16057] veth1_macvtap: entered promiscuous mode [ 380.525013][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.588883][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.635287][ T3596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.643985][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803344a800: rx timeout, send abort [ 380.644292][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803344a800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 380.712997][ T3596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.818978][T16335] netlink: 'syz.3.2921': attribute type 4 has an invalid length. [ 380.832978][T16335] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2921'. [ 380.868373][ T3596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.893603][T16337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2921'. [ 380.916659][ T3596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.128519][T16347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 381.156415][T16347] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 381.168278][T16347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.457946][ T7108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.510054][ T7108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.586552][T16358] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2927'. [ 381.634288][ T7120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.689949][ T7120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.780391][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 381.914343][T16370] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 381.927473][T16368] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2929'. [ 381.975347][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 382.593657][T16386] netlink: 4600 bytes leftover after parsing attributes in process `syz.4.2935'. [ 383.010480][T16398] __nla_validate_parse: 1 callbacks suppressed [ 383.010503][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2939'. [ 383.604657][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2948'. [ 383.775878][T16432] netlink: 'syz.8.2950': attribute type 1 has an invalid length. [ 383.826050][T16430] tipc: Started in network mode [ 383.831057][T16430] tipc: Node identity , cluster identity 4711 [ 383.862004][T16430] tipc: Failed to obtain node identity [ 383.867645][T16430] tipc: Enabling of bearer rejected, failed to enable media [ 383.901136][T16439] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2952'. [ 383.904524][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2950'. [ 383.910434][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 383.910478][T16439] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2952'. [ 383.910494][T16439] netlink: 'syz.4.2952': attribute type 3 has an invalid length. [ 383.910513][T16439] netlink: 'syz.4.2952': attribute type 2 has an invalid length. [ 383.910526][T16439] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2952'. [ 383.928816][T16432] bond1: (slave gretap2): making interface the new active one [ 384.012884][T16439] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2952'. [ 384.015830][T16432] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 384.031509][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2950'. [ 384.060056][T16435] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2951'. [ 384.184800][T16436] syzkaller0: entered promiscuous mode [ 384.190876][T16436] syzkaller0: entered allmulticast mode [ 387.543299][T16488] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 387.697528][T16481] team0 (unregistering): Port device team_slave_0 removed [ 387.735823][T16481] team0 (unregistering): Port device team_slave_1 removed [ 387.781044][T16453] lo speed is unknown, defaulting to 1000 [ 388.045387][T16502] __nla_validate_parse: 3 callbacks suppressed [ 388.045408][T16502] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2970'. [ 388.093437][T16505] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2971'. [ 388.467129][T16515] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.203014][T16529] tipc: Started in network mode [ 389.207951][T16529] tipc: Node identity 62a4745b0fef, cluster identity 4711 [ 389.249538][T16529] tipc: Enabled bearer , priority 0 [ 389.284376][T16529] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 389.303317][T16529] syzkaller0: entered promiscuous mode [ 389.308847][T16529] syzkaller0: entered allmulticast mode [ 389.447622][T16534] IPv6: sit1: Disabled Multicast RS [ 389.463558][T16534] sit1: entered allmulticast mode [ 389.554288][T16535] tipc: Resetting bearer [ 389.601879][T16535] tipc: Disabling bearer [ 389.657853][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 389.742110][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 389.773333][T16547] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2984'. [ 390.006685][T16553] netlink: 'syz.4.2987': attribute type 58 has an invalid length. [ 390.015712][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2987'. [ 390.030946][ T5873] Bluetooth: hci3: command tx timeout [ 390.105892][ T7121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.136627][ T7121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.214444][T16562] Bluetooth: MGMT ver 1.23 [ 391.152051][ T5873] Bluetooth: hci5: command 0x0406 tx timeout [ 391.409892][ T5873] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 391.429659][ T5873] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 391.439539][ T5873] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 391.455652][ T5873] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 391.467699][ T5873] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 391.637148][T16607] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 391.906304][T16619] netlink: 'syz.3.3008': attribute type 1 has an invalid length. [ 391.989439][T16619] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3008'. [ 392.362097][T16637] netlink: 'syz.8.3013': attribute type 1 has an invalid length. [ 392.523633][T16641] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 392.541384][T16641] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 392.600684][T16591] lo speed is unknown, defaulting to 1000 [ 392.680996][T16645] macvlan2: entered promiscuous mode [ 392.703452][T16645] macvlan2: entered allmulticast mode [ 392.724789][T16645] bond2: entered promiscuous mode [ 392.741933][T16645] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.791893][T16645] bond2: left promiscuous mode [ 393.180488][T16665] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 393.556220][ T5873] Bluetooth: hci10: command tx timeout [ 393.566849][T16679] C: Caught tx_queue_len zero misconfig [ 394.162570][T16591] chnl_net:caif_netlink_parms(): no params data found [ 394.791101][T16722] netlink: 'syz.9.3037': attribute type 58 has an invalid length. [ 394.810264][T16722] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3037'. [ 395.050931][T16713] lo speed is unknown, defaulting to 1000 [ 395.056974][T16591] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.085568][T16591] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.120345][T16591] bridge_slave_0: entered allmulticast mode [ 395.147086][T16591] bridge_slave_0: entered promiscuous mode [ 395.297459][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3039'. [ 395.362113][T16733] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3039'. [ 395.411580][T16736] netlink: 516 bytes leftover after parsing attributes in process `syz.9.3039'. [ 395.436747][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3040'. [ 395.574240][T16741] Unsupported ieee802154 address type: 0 [ 395.629423][ T5870] Bluetooth: hci10: command tx timeout [ 395.870386][T16591] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.877659][T16591] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.887539][T16591] bridge_slave_1: entered allmulticast mode [ 395.897671][T16591] bridge_slave_1: entered promiscuous mode [ 395.943966][T16736] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3039'. [ 396.232252][T16591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.269296][ T5870] Bluetooth: hci6: command 0x0406 tx timeout [ 396.292990][T16752] netlink: 'syz.3.3044': attribute type 11 has an invalid length. [ 396.307737][T16591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.453577][T16591] team0: Port device team_slave_0 added [ 396.468486][T16591] team0: Port device team_slave_1 added [ 396.632511][T16591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.654566][T16591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.728169][T16591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.790696][T16591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.797774][T16591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.905469][T16591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.152601][T16777] kthread_run failed with err -4 [ 397.651177][T16591] hsr_slave_0: entered promiscuous mode [ 397.658246][T16591] hsr_slave_1: entered promiscuous mode [ 397.665806][T16591] debugfs: 'hsr0' already exists in 'hsr' [ 397.673515][T16591] Cannot create hsr debugfs directory [ 397.709969][ T5873] Bluetooth: hci10: command tx timeout [ 398.112814][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3059'. [ 398.318013][T16591] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.394092][T16823] netlink: 'syz.9.3060': attribute type 4 has an invalid length. [ 399.115986][T16813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.134689][T16813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.468477][T16591] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.506266][ T49] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.552561][ T49] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.580659][ T49] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.611586][ T49] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.665566][ T49] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.688702][ T49] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.794428][ T5873] Bluetooth: hci10: command tx timeout [ 399.815807][T16591] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.848104][ T49] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.857639][ T49] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.887324][T16848] tipc: Started in network mode [ 399.892700][T16848] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 399.902083][T16848] tipc: Enabling of bearer rejected, failed to enable media [ 400.014686][T16591] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.108378][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3073'. [ 400.435934][T16591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.437036][T16872] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3075'. [ 400.517568][T16591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.547526][T16591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.650099][T16591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 400.884047][T16894] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3079'. [ 400.917427][T16894] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3079'. [ 400.955963][T16894] netlink: 'syz.3.3079': attribute type 5 has an invalid length. [ 400.990667][T16894] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3079'. [ 401.146484][T16591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.272538][T16591] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.302904][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.310272][ T7120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.345425][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3082'. [ 401.392079][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.399430][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.547891][T16920] tipc: Enabled bearer , priority 0 [ 401.557572][T16920] syzkaller0: entered promiscuous mode [ 401.563393][T16920] syzkaller0: entered allmulticast mode [ 401.649485][T16921] tipc: Resetting bearer [ 401.686359][T16916] tipc: Resetting bearer [ 401.686407][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3085'. [ 401.703651][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3085'. [ 401.738023][T16916] tipc: Disabling bearer [ 401.868521][T16923] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.070804][T16923] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.272523][T16923] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.465540][T16923] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.733839][ T7120] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.825041][T16954] netlink: 'syz.3.3094': attribute type 26 has an invalid length. [ 402.849635][ T7121] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.922563][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.934434][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.997268][ T7121] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.012083][ T7121] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.114056][T16591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.522972][T16978] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 403.761861][T16985] netlink: 'syz.8.3101': attribute type 10 has an invalid length. [ 403.782311][T16985] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3101'. [ 403.807109][T16985] team0: Port device geneve0 added [ 403.848166][ T1326] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.875332][ T1326] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.908440][ T1326] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.934965][ T1326] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.148888][T16591] veth0_vlan: entered promiscuous mode [ 404.233060][T16591] veth1_vlan: entered promiscuous mode [ 404.233712][T17001] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 404.262149][T17002] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 404.368553][T16591] veth0_macvtap: entered promiscuous mode [ 404.376316][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'. [ 404.405823][T16591] veth1_macvtap: entered promiscuous mode [ 404.514938][T17010] tipc: Enabled bearer , priority 0 [ 404.560791][T16591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.576807][T17010] syzkaller0: entered promiscuous mode [ 404.582785][T17010] syzkaller0: entered allmulticast mode [ 404.625519][T16591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.669752][T17007] tipc: Resetting bearer [ 404.752482][T17007] tipc: Disabling bearer [ 404.773996][ T7108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.792424][ T7108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.840498][ T7108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.875341][ T7108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.018045][T17027] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 405.036300][T17027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.120039][ T7108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.130624][ T7108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.197101][T17030] __nla_validate_parse: 2 callbacks suppressed [ 405.197138][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3116'. [ 405.224431][T17032] netlink: 'syz.9.3117': attribute type 2 has an invalid length. [ 405.233214][T17030] netlink: 'syz.3.3116': attribute type 2 has an invalid length. [ 405.256516][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'. [ 405.265844][T17032] netlink: 'syz.9.3117': attribute type 1 has an invalid length. [ 405.311268][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.329169][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.588430][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 405.612494][T17038] macvtap1: entered promiscuous mode [ 405.617854][T17038] vlan0: entered promiscuous mode [ 405.632163][T17038] macvtap1: entered allmulticast mode [ 405.650653][T17038] vlan0: entered allmulticast mode [ 405.655928][T17038] veth0_vlan: entered allmulticast mode [ 405.683686][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3122'. [ 405.693193][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3122'. [ 405.723299][T17046] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 405.767230][T17041] veth3: entered promiscuous mode [ 405.772729][T17041] veth3: entered allmulticast mode [ 405.793361][T17051] macvtap2: entered promiscuous mode [ 405.799268][T17051] macvtap2: entered allmulticast mode [ 406.242544][T17067] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3129'. [ 406.270715][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3129'. [ 406.297304][T17067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.471952][T17077] tipc: Enabled bearer , priority 0 [ 406.507620][T17077] syzkaller0: entered promiscuous mode [ 406.515637][T17077] syzkaller0: entered allmulticast mode [ 406.543762][T17077] tipc: Resetting bearer [ 406.664528][T17075] tipc: Resetting bearer [ 406.683936][T17075] tipc: Disabling bearer [ 406.711103][T17088] syzkaller1: entered promiscuous mode [ 406.716621][T17088] syzkaller1: entered allmulticast mode [ 407.044047][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 407.460858][T17103] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.176482][T17142] siw: device registration error -23 [ 408.347346][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3153'. [ 408.818291][T17165] openvswitch: netlink: Unknown key attributes 2 [ 408.925502][T17139] lo speed is unknown, defaulting to 1000 [ 409.205068][ T30] audit: type=1107 audit(1759217407.128:5): pid=17168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0rltݕ/ 6򊨊' [ 409.670464][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3164'. [ 409.712512][T17182] bridge_slave_1 (unregistering): left allmulticast mode [ 409.731455][T17182] bridge_slave_1 (unregistering): left promiscuous mode [ 409.748636][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.307600][T17205] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3169'. [ 410.766414][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3174'. [ 411.213451][T17227] mac80211_hwsim hwsim33 : renamed from wlan1 [ 411.252782][T17233] netlink: 'syz.5.3180': attribute type 6 has an invalid length. [ 411.261378][T17228] netlink: 'syz.5.3180': attribute type 6 has an invalid length. [ 411.846853][T17251] 8021q: VLANs not supported on ip_vti0 [ 411.885891][T17262] syz_tun: entered allmulticast mode [ 411.910375][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 411.959257][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 412.114725][T17261] syz_tun (unregistering): left allmulticast mode [ 412.497006][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3194'. [ 412.534409][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'. [ 412.977833][T17311] netlink: 'syz.8.3199': attribute type 6 has an invalid length. [ 412.999778][T17315] netlink: 'syz.9.3201': attribute type 22 has an invalid length. [ 413.010903][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3201'. [ 413.049196][ T7112] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.059931][T17315] netlink: 'syz.9.3201': attribute type 22 has an invalid length. [ 413.086987][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3201'. [ 413.094552][ T7112] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.120884][ T7112] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.175483][ T7112] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.403190][ T31] INFO: task syz.5.1746:12188 blocked for more than 143 seconds. [ 413.416131][ T31] Not tainted syzkaller #0 [ 413.433693][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.474153][ T31] task:syz.5.1746 state:D stack:25864 pid:12188 tgid:12187 ppid:11698 task_flags:0x400140 flags:0x00004004 [ 413.486693][T17339] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3207'. [ 413.508527][ T31] Call Trace: [ 413.512403][T17339] openvswitch: netlink: Flow key attr not present in new flow. [ 413.532943][ T31] [ 413.535956][ T31] __schedule+0x1798/0x4cc0 [ 413.549946][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.559553][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.567681][ T31] ? __pfx___schedule+0x10/0x10 [ 413.573580][ T31] ? schedule+0x91/0x360 [ 413.578099][ T31] schedule+0x165/0x360 [ 413.582805][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.588605][ T31] __mutex_lock+0x7e6/0x1350 [ 413.595443][ T31] ? __mutex_lock+0x5bb/0x1350 [ 413.603938][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 413.612641][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.617750][ T31] ? __asan_memset+0x22/0x50 [ 413.623921][ T31] ? ____sys_sendmsg+0x505/0x830 [ 413.628973][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 413.634531][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 413.639946][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 413.645828][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 413.653393][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 413.661872][ T31] ? __nla_parse+0x40/0x60 [ 413.666441][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 413.673029][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 413.678626][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 413.685310][ T31] ? bpf_lsm_capable+0x9/0x20 [ 413.690791][ T31] ? security_capable+0x7e/0x2e0 [ 413.695792][ T31] genl_rcv_msg+0x60e/0x790 [ 413.700975][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.706044][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 413.714948][ T31] netlink_rcv_skb+0x208/0x470 [ 413.720226][ T31] ? __lock_acquire+0xab9/0xd20 [ 413.725217][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.731260][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.736679][ T31] ? down_read+0x1ad/0x2e0 [ 413.741300][ T31] genl_rcv+0x28/0x40 [ 413.745318][ T31] netlink_unicast+0x82f/0x9e0 [ 413.750306][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 413.757221][ T31] ? netlink_sendmsg+0x642/0xb30 [ 413.763039][ T31] ? skb_put+0x11b/0x210 [ 413.767328][ T31] netlink_sendmsg+0x805/0xb30 [ 413.772257][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.777582][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 413.782607][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.787926][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.794112][ T31] __sock_sendmsg+0x219/0x270 [ 413.798835][ T31] ____sys_sendmsg+0x505/0x830 [ 413.803953][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.809460][ T31] ? import_iovec+0x74/0xa0 [ 413.816802][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 413.822603][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.827916][ T31] ? __fget_files+0x2a/0x420 [ 413.832700][ T31] ? __fget_files+0x3a0/0x420 [ 413.837416][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 413.842504][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.848224][ T31] ? __task_pid_nr_ns+0x28/0x470 [ 413.856525][ T31] ? do_syscall_64+0xbe/0x3b0 [ 413.861773][ T31] do_syscall_64+0xfa/0x3b0 [ 413.866454][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.872477][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.878714][ T31] ? clear_bhb_loop+0x60/0xb0 [ 413.884345][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.890413][ T31] RIP: 0033:0x7f276418eec9 [ 413.894857][ T31] RSP: 002b:00007f2764fd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.903447][ T31] RAX: ffffffffffffffda RBX: 00007f27643e5fa0 RCX: 00007f276418eec9 [ 413.912630][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 413.921000][ T31] RBP: 00007f2764211f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.929006][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.937196][ T31] R13: 00007f27643e6038 R14: 00007f27643e5fa0 R15: 00007ffdbc942a48 [ 413.946100][ T31] [ 413.949423][ T31] INFO: task syz.2.1771:12273 blocked for more than 143 seconds. [ 413.960694][ T31] Not tainted syzkaller #0 [ 413.965819][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.977657][ T31] task:syz.2.1771 state:D stack:24968 pid:12273 tgid:12272 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 413.990306][ T31] Call Trace: [ 413.993852][ T31] [ 413.996897][ T31] __schedule+0x1798/0x4cc0 [ 414.002417][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.007433][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.013050][ T31] ? __pfx___schedule+0x10/0x10 [ 414.017964][ T31] ? schedule+0x91/0x360 [ 414.022483][ T31] schedule+0x165/0x360 [ 414.026679][ T31] schedule_preempt_disabled+0x13/0x30 [ 414.033495][ T31] __mutex_lock+0x7e6/0x1350 [ 414.038434][ T31] ? __mutex_lock+0x5bb/0x1350 [ 414.047043][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.054564][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 414.060927][ T31] ? __asan_memset+0x22/0x50 [ 414.066641][ T31] ? ____sys_sendmsg+0x505/0x830 [ 414.071743][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 414.076629][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 414.082055][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.088081][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 414.093973][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 414.100265][ T31] ? __nla_parse+0x40/0x60 [ 414.104810][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 414.111429][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 414.117017][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.123437][ T31] ? bpf_lsm_capable+0x9/0x20 [ 414.128270][ T31] ? security_capable+0x7e/0x2e0 [ 414.133552][ T31] genl_rcv_msg+0x60e/0x790 [ 414.138253][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.143487][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 414.149993][ T31] netlink_rcv_skb+0x208/0x470 [ 414.154907][ T31] ? __lock_acquire+0xab9/0xd20 [ 414.162211][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.167382][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.172950][ T31] ? down_read+0x1ad/0x2e0 [ 414.177494][ T31] genl_rcv+0x28/0x40 [ 414.181629][ T31] netlink_unicast+0x82f/0x9e0 [ 414.186471][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 414.192274][ T31] ? netlink_sendmsg+0x642/0xb30 [ 414.197420][ T31] ? skb_put+0x11b/0x210 [ 414.201915][ T31] netlink_sendmsg+0x805/0xb30 [ 414.206804][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.212509][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 414.217489][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.222913][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.228337][ T31] __sock_sendmsg+0x219/0x270 [ 414.233373][ T31] ____sys_sendmsg+0x505/0x830 [ 414.238198][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.244051][ T31] ? import_iovec+0x74/0xa0 [ 414.248719][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 414.253672][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.259199][ T31] ? __fget_files+0x2a/0x420 [ 414.265851][ T31] ? __fget_files+0x3a0/0x420 [ 414.276314][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 414.284485][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.291706][ T31] ? rcu_is_watching+0x15/0xb0 [ 414.296644][ T31] ? do_syscall_64+0xbe/0x3b0 [ 414.301636][ T31] do_syscall_64+0xfa/0x3b0 [ 414.306173][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.312538][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.318649][ T31] ? clear_bhb_loop+0x60/0xb0 [ 414.323580][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.329650][ T31] RIP: 0033:0x7f68a9b8eec9 [ 414.334188][ T31] RSP: 002b:00007f68aaa66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.343308][ T31] RAX: ffffffffffffffda RBX: 00007f68a9de5fa0 RCX: 00007f68a9b8eec9 [ 414.351755][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 414.360084][ T31] RBP: 00007f68a9c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.370531][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.378562][ T31] R13: 00007f68a9de6038 R14: 00007f68a9de5fa0 R15: 00007ffc2b28db88 [ 414.387245][ T31] [ 414.390659][ T31] [ 414.390659][ T31] Showing all locks held in the system: [ 414.393122][T17329] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3207'. [ 414.398614][ T31] 1 lock held by khungtaskd/31: [ 414.434824][T17331] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.438961][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.452500][ T31] 3 locks held by kworker/1:1/45: [ 414.457656][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.472683][ T31] #1: ffffc90000b57bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.484087][ T31] #2: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 414.496905][ T31] 2 locks held by getty/5630: [ 414.513070][ T31] #0: ffff88814dc970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.542914][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 414.574501][ T31] 1 lock held by udevd/5924: [ 414.579633][ T31] #0: ffff8880258e3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 414.589370][ T31] 1 lock held by udevd/6033: [ 414.594253][ T31] #0: ffff8881433eb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 414.605072][ T31] 3 locks held by kworker/u8:14/7112: [ 414.612379][ T31] 5 locks held by kworker/u8:16/7121: [ 414.618065][ T31] 5 locks held by kworker/1:10/7242: [ 414.623777][ T31] 2 locks held by syz.3.1391/10982: [ 414.631229][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.639885][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.651023][ T31] 2 locks held by syz.5.1746/12188: [ 414.656356][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.665354][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.687231][ T31] 2 locks held by syz.2.1771/12273: [ 414.693480][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.701767][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.712222][ T31] 2 locks held by syz.0.2301/14161: [ 414.717427][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.726831][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.737641][ T31] 2 locks held by syz.6.2594/15184: [ 414.743495][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.752294][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 414.762704][ T31] 2 locks held by syz.1.2867/16146: [ 414.767964][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.778692][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.790574][ T31] 2 locks held by syz.4.3065/16838: [ 414.795901][ T31] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.804588][ T31] #1: ffffffff8e418a88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 414.814917][ T31] 2 locks held by syz.8.3204/17334: [ 414.821137][ T31] #0: ffff888059d7e808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 414.831976][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 414.843552][ T31] [ 414.845925][ T31] ============================================= [ 414.845925][ T31] [ 414.855563][ T31] NMI backtrace for cpu 0 [ 414.855584][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.855606][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 414.855616][ T31] Call Trace: [ 414.855623][ T31] [ 414.855631][ T31] dump_stack_lvl+0x189/0x250 [ 414.855662][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.855684][ T31] ? __pfx__printk+0x10/0x10 [ 414.855724][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 414.855757][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 414.855789][ T31] ? __pfx__printk+0x10/0x10 [ 414.855822][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.855855][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 414.855888][ T31] watchdog+0xf93/0xfe0 [ 414.855924][ T31] ? watchdog+0x1de/0xfe0 [ 414.855959][ T31] kthread+0x70e/0x8a0 [ 414.855989][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.856014][ T31] ? __pfx_kthread+0x10/0x10 [ 414.856040][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.856058][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.856077][ T31] ? __pfx_kthread+0x10/0x10 [ 414.856101][ T31] ret_from_fork+0x439/0x7d0 [ 414.856124][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.856151][ T31] ? __switch_to_asm+0x39/0x70 [ 414.856174][ T31] ? __switch_to_asm+0x33/0x70 [ 414.856197][ T31] ? __pfx_kthread+0x10/0x10 [ 414.856222][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.856265][ T31] [ 414.856273][ T31] Sending NMI from CPU 0 to CPUs 1: [ 415.011202][ C1] NMI backtrace for cpu 1 [ 415.011222][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 415.011239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.011249][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 415.011272][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 b9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 415.011286][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 415.011302][ C1] RAX: 168df9c77b22e400 RBX: ffffffff81968528 RCX: 168df9c77b22e400 [ 415.011314][ C1] RDX: 0000000000000001 RSI: ffffffff8d9ba4bd RDI: ffffffff8be33f80 [ 415.011325][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 415.011336][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa3a830 [ 415.011348][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 415.011359][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 415.011372][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.011382][ C1] CR2: 00007fff88ca3de8 CR3: 000000007b56a000 CR4: 00000000003526f0 [ 415.011399][ C1] Call Trace: [ 415.011405][ C1] [ 415.011411][ C1] default_idle+0x13/0x20 [ 415.011429][ C1] default_idle_call+0x74/0xb0 [ 415.011448][ C1] do_idle+0x1e8/0x510 [ 415.011467][ C1] ? __pfx_do_idle+0x10/0x10 [ 415.011480][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.011503][ C1] cpu_startup_entry+0x44/0x60 [ 415.011518][ C1] start_secondary+0x101/0x110 [ 415.011540][ C1] common_startup_64+0x13e/0x147 [ 415.011566][ C1] [ 415.012299][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 415.184512][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.193730][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.203795][ T31] Call Trace: [ 415.207079][ T31] [ 415.210031][ T31] dump_stack_lvl+0x99/0x250 [ 415.214635][ T31] ? __asan_memcpy+0x40/0x70 [ 415.219232][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.224488][ T31] ? __pfx__printk+0x10/0x10 [ 415.229128][ T31] vpanic+0x281/0x750 [ 415.233163][ T31] ? __pfx_vpanic+0x10/0x10 [ 415.237833][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 415.243418][ T31] ? preempt_schedule+0xae/0xc0 [ 415.248275][ T31] ? preempt_schedule_common+0x83/0xd0 [ 415.253827][ T31] panic+0xb9/0xc0 [ 415.257558][ T31] ? __pfx_panic+0x10/0x10 [ 415.261982][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 415.267377][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 415.273551][ T31] watchdog+0xfd2/0xfe0 [ 415.277734][ T31] ? watchdog+0x1de/0xfe0 [ 415.282083][ T31] kthread+0x70e/0x8a0 [ 415.286165][ T31] ? __pfx_watchdog+0x10/0x10 [ 415.290866][ T31] ? __pfx_kthread+0x10/0x10 [ 415.295561][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.300764][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.305971][ T31] ? __pfx_kthread+0x10/0x10 [ 415.310578][ T31] ret_from_fork+0x439/0x7d0 [ 415.315291][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 415.320427][ T31] ? __switch_to_asm+0x39/0x70 [ 415.325202][ T31] ? __switch_to_asm+0x33/0x70 [ 415.329992][ T31] ? __pfx_kthread+0x10/0x10 [ 415.334690][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.339484][ T31] [ 415.342793][ T31] Kernel Offset: disabled [ 415.347126][ T31] Rebooting in 86400 seconds..