last executing test programs: 2.155124454s ago: executing program 1 (id=8497): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000b04000000000000000000000d04000000000000000000000200000000040000000000000f030000000000000061"], 0x0, 0x4e}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x3, 0x2, 0x100, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, r2, 0x4, 0x1, 0x5, 0x3}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x55) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) close(r4) ioctl(r3, 0x2, &(0x7f0000000180)="5a6d24727cc9943a7b9b4068b320f1e790451ee359b2db6eab02e4d904f3a12ba5006bc69e1f8e63ff229ec7e42cf33ac35e1f144c16a9f3") bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private1, 0x6}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=@ipv4_delroute={0x1c, 0x18, 0x4, 0x0, 0x25dfdbff, {0x2, 0x80, 0x20, 0x0, 0x0, 0x3, 0x0, 0x8, 0x2001000}}, 0x1c}}, 0x40850) 1.995682534s ago: executing program 1 (id=8501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe0, 0x14, 0x100, 0x70bd26, 0x25dfdbfd, {0x29, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "6b9eefad3d426e78684b58e07c4d0754e67b2dad92d87392d3039618e2bf23420f72f3ec00a263794ac68bc5301cc4ca8253ca65e2d37117c42a7425ba216226db7948e3a83df1b886bccf93b54f63d66898fdb736147e1f074e7c1f8c093fada910a5fb0ce0652e310924171c4fb234adfd1c0ef098753831b73dd12560fe3737997f94c016dd3ef08769c62a8310aa5bc8dce5f12ad5046fc67febcc9fe12909e25757bc365cfa7396ccff1a4c083857516a2ed1"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "6b011d33ab67a70c1fb8a9"}]}, 0xe0}}, 0x40000) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140007000000e4ff000000002b"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x40050) 1.916741124s ago: executing program 1 (id=8502): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 1.643556907s ago: executing program 1 (id=8507): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000001c0)=0x7, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 1.64221322s ago: executing program 4 (id=8508): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007b108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.501448611s ago: executing program 4 (id=8510): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffff7f, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x20, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x49054) 1.243406605s ago: executing program 4 (id=8515): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) (async) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f0000000740)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x0, 0x4000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.242799297s ago: executing program 1 (id=8516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x40, 0x7, 0x96d}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, r2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) recvmmsg(r7, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x89, 0x96, &(0x7f0000000240)="fe5828927f77ba76814909a3ee4936c3da255b8e3e569e16b0b826d789f3bfe72c8597682375032de4a5501a26de9e82cc5ea851d59eb21fa5561dd8430f666190e34b51349e9459c69c8593b7683b52cfd97033a62750111f4192de73b267a19e0c76848de2a553e274f21460d4dab20cf5edf519f6aea86b1371fcfc383062ac9d6e65362ecd3fe9", &(0x7f0000000300)=""/150, 0x80000000, 0x0, 0xf7, 0x1f, &(0x7f00000003c0)="7f0ef11899bf13cbcec3ea30b7c8fec89fbbbf53f7fee7671c5c4270bce03247a6a2565e43ae4a5fee88da3c83ea8cd838d4795d4147cba23e753e667c269c586fd833726a338f8228a0bc52ac441ddd171355dda8c1d14c2abb9c1d077783c5ab1aa36d520ef1c45a7ec4ab1a0d7e2740c4d417471d827ff4bc5da38642a337e61aa982842297560d7f9b647bf85a22d490c5c9633f590eadf05c8faba0eade75c25866fe67aafd7fc6206694fe3cc9b8ec4dcc1b95d50fc1603064c95829fedc4b5709cf3987740cca7c1c5287b2e073c5ced5176a25804ef00224c9f1b570368b9c591a4e9d2c6233b2b6a495a6805904c76e2f8da4", &(0x7f0000000080)="73785146b18e7de09b676d255919f62876826b409246369432e1b86ed5ad22", 0x2, 0x0, 0x24b}, 0x50) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000140)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}, {&(0x7f0000001280)="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", 0x1000}], 0x2}, 0x0) 963.86179ms ago: executing program 1 (id=8522): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0x1, 0xfffffffd, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44014}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x89, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1f, 0x0, 0x7800, 0x9, 0x40000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='freezer.parent_freezing\x00', 0x0, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x652f64244006f219, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040800) (async) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r12, 0xc040ff0b, 0x2000000000) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r13, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r14}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000100)='GPL\x00', 0x5a1, 0x60, &(0x7f00000001c0)=""/96, 0x41000, 0x9, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[r7, r8, r9, r12, r13, r14], &(0x7f0000000940)=[{0x1, 0x2, 0xe, 0x8}, {0x1, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x9, 0x5}, {0x0, 0x2, 0x1, 0x7}, {0x4, 0x2, 0x6, 0x9}]}, 0x94) 957.224652ms ago: executing program 0 (id=8523): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010001fffffffffa18000000000000000", @ANYRES32=0x0, @ANYBLOB="00080000003f09001c0012800b00010062726964676500000c000280050007000600000008000a00", @ANYRES32=r2, @ANYBLOB="08001f0002"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x20044094) 923.406359ms ago: executing program 3 (id=8524): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40e00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@sco, &(0x7f0000000240)=0x80) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) shutdown(r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x0, 0x80, 0x7, 0x1, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0xaf, 0x3, 0x1, [{@rand_addr=0x64010100, 0xffff}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@empty, 0xfffffff7}, {@private=0xa010100, 0x6}, {@multicast1, 0x400}, {@empty, 0x91}, {@remote, 0x6}, {@local, 0x24}]}, @generic={0x83, 0x10, "36837b4dba304970708b547dca86"}]}}}}}) r7 = socket(0x400000000010, 0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r10, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x11, 0x888e, r12, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltclass={0x54, 0x29, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x9, 0x8}, {0xfff2}, {0xf, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xf3}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x0, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8c, 0x9}}]}, 0x54}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x90}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x8, 0x20, 0x3, 0x5, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0xde, [@remote]}, @noop, @cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)={0xc8, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x6008800) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r17 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000006c0)="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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xe, &(0x7f0000001c40)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r17}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}}]}, &(0x7f0000000800)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x62}, 0x90) ioctl$FS_IOC_SETFLAGS(r15, 0x40086602, &(0x7f0000000080)=0x20) 843.503821ms ago: executing program 2 (id=8525): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="91b882b09a5b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x1, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) 805.032202ms ago: executing program 4 (id=8526): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/38, 0x15000, 0x800, 0x8, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000080)=0x7, 0x4) bind$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x2}, 0x10) (async) bind$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @multicast1, 0x2}, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) (async) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000080)) socketpair(0x2c, 0x80000, 0xd, &(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r7) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x94, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x471}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x94, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x471}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 699.028831ms ago: executing program 2 (id=8527): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x2}]}, {0x0, [0x6f, 0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0xb, 0x1, 0x80000000, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0xb, 0x1, 0x80000000, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2d338a994692af2a096292be"], 0x5) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x44, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x70}}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getchain={0x54, 0x66, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x5, 0x8}, {0xe}, {0xf, 0xfff1}}, [{0x8, 0xb, 0xf6}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x7e}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getchain={0x54, 0x66, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x5, 0x8}, {0xe}, {0xf, 0xfff1}}, [{0x8, 0xb, 0xf6}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x7e}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) (async) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r3, r1, 0x3, 0x2000, 0x0, @value=r5, @void, @void, @void, r2}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r3, r1, 0x3, 0x2000, 0x0, @value=r5, @void, @void, @void, r2}, 0x20) socket(0x2d, 0x2, 0x0) (async) socket(0x2d, 0x2, 0x0) 692.940124ms ago: executing program 4 (id=8528): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 627.442148ms ago: executing program 0 (id=8529): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) (async) 589.693326ms ago: executing program 3 (id=8530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000240)=""/193, 0x9a3d}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f0000000140)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x49}, &(0x7f0000000580)=0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0xfc, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4020090}, 0x4081) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000070000100007f000000fb3074af249dafe7c42a599f996000"/38, @ANYRES32=0x0], 0x18}}, 0x0) (async) r8 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in=@local, 0x4e21, 0xa48, 0x4e23, 0x7, 0xa, 0xa0, 0x0, 0x2e, 0x0, r8}, {0xe5, 0x3, 0x14e, 0x9, 0x9, 0x7, 0x52be, 0x7f45}, {0x0, 0xe, 0x4, 0x7ff}, 0x81, 0x6e6bb3, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x1, 0x1, 0xf, 0xfffff000, 0xd105, 0x4}}, 0xe8) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) (async) write$nci(r9, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r13}, 0x18) (async) r14 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r14, 0x0) accept4$rose(r14, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) 568.217874ms ago: executing program 0 (id=8531): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, &(0x7f0000000000)="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", 0xfc, 0x20000000, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000180)="aee550bbd2bc78c25d10a3e12ec8fe32f41b5e611a606abafb12daf06cca1afe18b5e83d82a27f3e41a578bcba33ea30b703775b1096b037e5b83d4d1bf862244f9efd153a9ec942f1bc839a24cdf6ee6e592544a1789340e5944e18a676ccf0cf5d1e0bf86d59a5e96891e31ce795e2db0c0e0c93037cc1cc2221ba412d245a1cd27aa867e98c1d3b4de14ab46ad9b3f43c77d41f8b130fab82bf08ee5cdc0610b818215d04f7f505cd51129cb5ee4b13f8bfc6ec98652336ed438a457de9c5248c9cdae5fcaf66ec9799500c067f63c9ce8505639348", 0xd7}, {&(0x7f0000000280)="5e648fce89e2238394b718f2e7e4ec37da509883869d00885afc62c23d48d442de024a481c91daafadeb1baa5761e9cd3ece2bc223c660a2bfe7526b865844dbaa3cb5ef0c25d7c68be5ba08fc609ea63f67adfa70d288e123076e7e73ec55c035dfefa97e9982735ed4754e01df1ec986cf56851e3f6ea6396c96623ca067acb41bea1ea81e0d509b461affff7a540b052d50d6fa47212288aa9e3bb2342ef0419b79d19e625758849006772a2869f48864e7db0e7c98cdff9b92b5338946e8c5a1d2784c668de0e5c4dad3d1204eb3a33e8900", 0xd4}, {&(0x7f0000000380)="619966b00ca884be43efd897e9df2e49069537110e7b6c148e4d796c60bbb71d7065383b1e533569cf0d5eedc64a5430182d69e67ee16c333dbe5a53e9a69b9446", 0x41}], 0x3, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb2e2}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xa4, 0x1, 0x7, [{@local, 0xffffff66}, {@empty, 0x80}, {@private=0xa010102, 0x1}, {@multicast1, 0xf}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9eb}, {@empty, 0x29e}, {@multicast2}]}, @cipso={0x86, 0x69, 0xffffffffffffffff, [{0x6, 0x9, "cc24bf620b280e"}, {0x1, 0x12, "e8519d3a6bb2b5a685b9fb8d2efc71f8"}, {0x2, 0xf, "fccf64015665ceb49426b7ae0f"}, {0x2, 0xe, "5d1a95e33a3a5cf72445ca83"}, {0x5, 0x3, '%'}, {0x0, 0x10, "b59ccc49b555f067b85f6d92d40a"}, {0x6, 0x10, "8e36488fa790bbd8899818cc21c8"}, {0x5, 0x8, "c7793f90a7ed"}]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x61, [@dev={0xac, 0x14, 0x14, 0x18}, @loopback, @broadcast, @rand_addr=0x64010101, @broadcast, @multicast1]}, @timestamp={0x44, 0x24, 0x80, 0x0, 0xa, [0xe00000, 0xffff, 0x9, 0x253, 0x9, 0xfff, 0x0, 0x3]}, @generic={0x82, 0x8, "d0776853e07d"}, @noop, @ra={0x94, 0x4, 0x1}]}}}], 0x138}, 0x80d1) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r2, 0x100, 0x70bd28, 0x7fffffff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c001}, 0x24000010) socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4$llc(r1, &(0x7f0000000780)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000007c0)=0x10, 0x80000) getsockname$llc(r3, &(0x7f0000000800)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000840)=0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r1}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000008c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x3, 0x6b, 0x44, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private1, 0x20, 0x10, 0x3, 0x5}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xa3bc, '\x00', r5, r4, 0x2, 0x0, 0x1}, 0x50) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a80), r1) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xe}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000400}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@ipv6_delroute={0x34, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0xfe, 0x1, 0x75890790aceb7215, 0x9, 0x5100}, [@RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4040840) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000d80)={0x0, 0xffff, 0x10, 0x7fff, 0x3}, &(0x7f0000000dc0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000e00)={r8, 0x342}, 0x8) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r9, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2000015}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000f80)) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r7) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r10, 0x200, 0x70bd29, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x90}, 0x24008001) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000001280), r7) sendmsg$FOU_CMD_DEL(r11, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r12, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48c0) 455.44291ms ago: executing program 4 (id=8532): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b00070066696c746572"], 0xf4}}, 0x0) 357.242204ms ago: executing program 2 (id=8533): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c0019000b000160", @ANYRES32=0x0, @ANYBLOB="17183c3056c656660fb6f5be3903a74565d9099a96d916891a32bd8547ce1e188574417feedee326084e0807f94b8db48f2218ea49597ca06848bb5f6eef2c6c9449981278a5e4087f93dd57142a2df24c2e5263ade9a6bf40455b638521106eb299e828b299ada98b8a50ac32ab77f7a033843338497f227c63ab171d1d"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/67, 0x43}], 0x1, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x40000101) preadv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)=""/231, 0xe7}], 0x2, 0x10, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c0019000b000160", @ANYRES32=0x0, @ANYBLOB="17183c3056c656660fb6f5be3903a74565d9099a96d916891a32bd8547ce1e188574417feedee326084e0807f94b8db48f2218ea49597ca06848bb5f6eef2c6c9449981278a5e4087f93dd57142a2df24c2e5263ade9a6bf40455b638521106eb299e828b299ada98b8a50ac32ab77f7a033843338497f227c63ab171d1d"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/67, 0x43}], 0x1, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x40000101) (async) preadv(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000600)=""/231, 0xe7}], 0x2, 0x10, 0x0) (async) 346.798764ms ago: executing program 0 (id=8534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x2b) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0x2, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 345.971743ms ago: executing program 3 (id=8535): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r2 = socket(0x1e, 0x4, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x4041) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x30000000, 0x80, 0x1, 0x7eb}, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x28) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000003c0)=0x1ff, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}]}, 0xa4}}, 0x24000814) (async) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r7}], 0x1, 0x2e90) (async) close(r8) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r10) sendmsg$IEEE802154_START_REQ(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="010037bd7000fedbdf250d000000272447d7c25cb58aaac6c2057abbb7df9f22ac6ea38c705b4727c750d657d87d606332537dbd8b2b59c898afe0f018e1d4cf508aa8c8ae2d4261611c289c40d893bbfd1aa1d016142e8dccde51f8cc445371b18568cff1605953ee90eaa667133418d4b49891ec1386e07b08aa3106e590d98d07a22863d0a426f03b0e5feddb34577291f31558d73b9143df4e80d6190dbf555cb6d4a74dba23e296ad36ab8b6bf6220c0c444d009d21750b2b1b911a1461128386f2d463f0f5"], 0x14}}, 0x4008104) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="01000080", @ANYRES16=r13, @ANYBLOB="00012dbd7000fbdbdf250c000000280005800700010069620000070001006962000008000100756470000c00028008000100060000000c0007800800020007000000740001804400028008000200050000000800030003000000080004007500000008000100110000000800020004000000080002000700000008000400010001000800030000040000180001006574683a76657468315f766972745f7769666900130001006574683a73797a6b616c6c6572300000b00004801300010062726f6164636173742d6c696e6b00000900010073797a30000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001400078008000300469b000008000100150000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001c0007800800040000000000080002001000000008000200050000000900010073797a3100000000740001804400028008000400018000000800010001000000080002000700000008000300ff070000080002000f00000008000200080000000800020006000000080003000100008008000300030000000c00028008000300080000000d0001007564703a73797a31000000000800030001040000340003800800030006000000080002000500000008000200ff00000008000100080000000800020009000000080003000100000024000180080003000d0000000d0001007564703a73797a30000000000800030008000000cc000680080001000104000004000500080006001000000008000600000000000400020004000200040005003e00040067636d286165732900000000000000000000000000000000000000000000000016000000894288e74c2d7e7b64fa92acf153e0db65b13e45f87400000800010082e5e05058000300dfc22d6c99ce70c5e396f29dfed1b05b81d0ebd52413d439ad2b561905ffc4e2b480a5f3c7fcd9c30ada0c324443e9d6b9f4c5bcd71ff7036c99b44f77c01177fd880a266bcfae5b0aae3c66c4bb0d5806dc012d"], 0x304}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 187.475066ms ago: executing program 2 (id=8536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r1, 0x5, 0x0, 0x0, {0x22}}, 0x14}, 0x1, 0x0, 0x0, 0x8000040}, 0x2000c094) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x24010040}, 0x40408d1) 186.228618ms ago: executing program 3 (id=8537): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x45c1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r1}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff801}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x801) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040001}, 0x22376269decc1b28) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg2\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x814}, 0x240404d1) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000001800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000000880)={0xf38, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x65c, 0x111, 0x0, 0x1, {0x658, 0x5, 0x0, 0x1, [{0x4}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x5e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x70}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc4b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x72}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x408, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1c3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x160, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x180, 0x111, 0x0, 0x1, {0x17c, 0x5, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x73}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xec3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_PEER_MEASUREMENTS={0x72c, 0x111, 0x0, 0x1, {0x728, 0x5, 0x0, 0x1, [{0x2a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x29c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33d}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x12b}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xaf1d}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x84}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}]}]}}]}, 0xf38}}, 0x2000c0d0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r3) (async) r7 = gettid() (async) r8 = gettid() (async) r9 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x48, r6, 0x9b707da591f51fe9, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x78}}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040811) (async) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x80, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) socket$netlink(0x10, 0x3, 0x4) (async) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000002b40)={{&(0x7f0000001b00)=""/4096, 0x1000}, &(0x7f0000002b00), 0x5}, 0x20) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000002b80)=0x0) (async) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002c00)={&(0x7f0000002bc0)='fsi_master_acf_cmd_same_addr\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002c80)={r10, r11, 0x0, 0x3, &(0x7f0000002c40)='.\r\x00'}, 0x30) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002cc0), r12) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r13, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x2c, r0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20084084}, 0x4040080) 175.596848ms ago: executing program 0 (id=8538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000600)=[{@none}, {@none}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73878f7a}]}]}], {0x14}}, 0xb4}}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x10, 0x80, 0xffffffff, 0x7, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, {[@ssrr={0x89, 0x27, 0xe0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @multicast1, @broadcast, @multicast2, @private=0xa010100, @multicast1, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@loopback}, {@broadcast, 0x3}, {@private=0xa010100, 0x6c7}]}]}}}}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000640)={0x8, [0x5, 0x2, 0x2, 0x1, 0x4, 0xa, 0x2, 0x4]}, 0x14) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0x418, 0x12, 0x402, 0x70bd28, 0x25dfdbff, {0x1f, 0x73, 0x7, 0x3, {0x4e22, 0x4e20, [0x5, 0xe, 0x0, 0xfffffffb], [0x3, 0x1, 0x800, 0x8], r11, [0x7, 0x8]}, 0x3, 0xfffffff7}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "d8e631e58d4f3710ad13d618c236"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "8f8b2abf50af1e924e27"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "c2f50b92d5a82a78d54b85fe086df9c80d6fab03c7079679a33cba773d03874c4ad113534ae1ed4fb09b9744798fbcbd2f31e55d755ef4a52a306a4877aa98b3a48e90220d19ea43ad4822271b150478f33328655d87bb8d22679aba4d2e8248596ea20b07154bdc40ee3a28c57e7fc4b02fdc13673481b343f5e296de7f8c27de3c5fa923e78d4ad5a8ae77a43b270ec7368c996d2069adc3823e103e160e13cc079e735ec51beb967a6bcab166082bf4e30b87d239105e0e8fa8e7c2d09f22a335f71a24304fecfa67d25932839ac7ee784cd8d54257d051f440624aa3840102d688217d5c84782395f0"}, @INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "b86e968401de6fe394c5f68312675ce251bf61c0683a25f00857c978b97ace8059bfa10c521e79fecca98e730305dec404581c8c262aecca249d0c50aa80491b423c14e789859ec20cc014e140ade80ec33ed3a46e25feba7ec6f5376fbc89dc0df4545e83a79ee90c226358c4a56540b66af75c72c8f461609f5f0c5f116131e21a3eecb193a73a9060a51982ffd50a55742ae66d6f7717e21e3b95c6b1355375425ca7642327355dde048cc4bb9d31fcbf6a74cab47cbcd0ec47a4c630aa8f3707e2a016b135946848d12d7889ce955857d59575ce5b4ab6ac6464986814d522"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "cee52f43"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "7a6b5c4ece0e39dc17320db04c013dc11af6241949c6a2de9b89854ad73157cc4fe8024fb345770e88a9020be5a06c405f4e09a82a0ac512ab8cc093deab1e6c5327736584a114c6bb22da4bd9483695564d5def71ce71cc2674947128dcce9366d1058ac6a57ac00babe597d4b417598a98a13012f8703f861ffce8f3b50ef907cb8066c2ba04341e3b81561d2d1244c626cd79a196ad88f91b39482ff030775b95eba342badaff3a90a5eeb9a952a6ad7e90d3c6e3ae81efcea76f832d"}]}, 0x418}, 0x1, 0x0, 0x0, 0x4}, 0x4000881) 169.114529ms ago: executing program 2 (id=8539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 105.700126ms ago: executing program 3 (id=8540): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}}, 0x0) socket(0x2a, 0x2, 0x13) (async) socket(0x2a, 0x2, 0x13) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000006f00)=[{{&(0x7f0000002800)={0xa, 0x4e20, 0xd, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002f00)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x30}}], 0x1, 0x8000090) (async) sendmmsg$inet6(r6, &(0x7f0000006f00)=[{{&(0x7f0000002800)={0xa, 0x4e20, 0xd, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002f00)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x30}}], 0x1, 0x8000090) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000bb"], 0x64}}, 0x80) 47.360779ms ago: executing program 2 (id=8541): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) close(r3) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20) 11.925571ms ago: executing program 0 (id=8542): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000300000061020000d5df4f2100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54}, 0x28) listen(0xffffffffffffffff, 0xfffffffe) r4 = socket$tipc(0x1e, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @private2, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) r7 = socket(0x2a, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200180, 0x0) ioctl$TUNSETVNETLE(r11, 0x400454dc, &(0x7f0000000180)=0x1) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 0s ago: executing program 3 (id=8543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x11}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): ][T29589] ____sys_sendmsg+0x505/0x830 [ 841.910173][T29589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.910202][T29589] ? import_iovec+0x74/0xa0 [ 841.910260][T29589] ___sys_sendmsg+0x21f/0x2a0 [ 841.910279][T29589] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.910331][T29589] ? __fget_files+0x2a/0x420 [ 841.910347][T29589] ? __fget_files+0x3a0/0x420 [ 841.910373][T29589] __x64_sys_sendmsg+0x19b/0x260 [ 841.910395][T29589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.910424][T29589] ? __pfx_ksys_write+0x10/0x10 [ 841.910453][T29589] ? do_syscall_64+0xbe/0xfa0 [ 841.910476][T29589] do_syscall_64+0xfa/0xfa0 [ 841.910495][T29589] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.910516][T29589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.910533][T29589] ? clear_bhb_loop+0x60/0xb0 [ 841.910552][T29589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.910568][T29589] RIP: 0033:0x7f29e7f8f6c9 [ 841.910585][T29589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.910599][T29589] RSP: 002b:00007f29e8ecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.910618][T29589] RAX: ffffffffffffffda RBX: 00007f29e81e6090 RCX: 00007f29e7f8f6c9 [ 841.910630][T29589] RDX: 0000000020044094 RSI: 00002000000000c0 RDI: 0000000000000003 [ 841.910641][T29589] RBP: 00007f29e8ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 841.910651][T29589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.910660][T29589] R13: 00007f29e81e6128 R14: 00007f29e81e6090 R15: 00007ffdce01fdb8 [ 841.910687][T29589] [ 842.185526][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 842.276168][T16675] IPVS: starting estimator thread 0... [ 842.293525][T29597] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 842.344978][T29564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.369378][T29564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.386668][T29604] netlink: 'syz.2.6735': attribute type 1 has an invalid length. [ 842.411113][T29598] IPVS: using max 34 ests per chain, 81600 per kthread [ 842.521333][T29604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 842.528592][T29611] netlink: 'syz.4.6738': attribute type 29 has an invalid length. [ 842.667522][T29604] bond2: (slave veth3): Enslaving as an active interface with a down link [ 842.748087][T29615] veth5: entered promiscuous mode [ 842.758323][T29615] bond2: (slave veth5): Enslaving as an active interface with a down link [ 842.776335][T29616] vlan3: entered allmulticast mode [ 842.801314][T29616] bond2: entered allmulticast mode [ 842.824421][T29616] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 842.949530][T29564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.960223][T29564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.010988][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 843.084130][T29640] netlink: 'syz.2.6747': attribute type 1 has an invalid length. [ 843.174646][T29643] wlan0 speed is unknown, defaulting to 1000 [ 843.223074][T25818] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.240917][T25818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.258526][T29643] lo speed is unknown, defaulting to 1000 [ 843.291700][T25818] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.328518][T25818] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.334364][T29650] ip6t_srh: unknown srh match flags 5F28 [ 843.345593][T29656] nftables ruleset with unbound set [ 843.357300][T25818] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.377097][T25818] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.445821][T25818] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.464697][T25818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.738884][T29673] erspan0: entered promiscuous mode [ 843.751504][T29673] batadv_slave_1: entered promiscuous mode [ 843.778132][T29673] batadv_slave_1: left promiscuous mode [ 843.786956][T29673] erspan0: left promiscuous mode [ 843.968870][T29682] dvmrp0: entered allmulticast mode [ 844.008082][T29688] __nla_validate_parse: 13 callbacks suppressed [ 844.008101][T29688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6763'. [ 844.357775][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6766'. [ 844.634539][T29718] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6770'. [ 844.862721][T29730] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 844.917853][T29735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6774'. [ 844.931566][T29738] tun0: tun_chr_ioctl cmd 1074025675 [ 844.941592][T29738] tun0: persist disabled [ 844.945924][T29739] tun0: tun_chr_ioctl cmd 1074025675 [ 844.959957][T29739] tun0: persist disabled [ 844.959953][T29735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6774'. [ 844.984844][T29738] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6776'. [ 845.020947][T25810] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.021071][T29735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6774'. [ 845.055159][T29735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6774'. [ 845.068453][T25810] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.078825][T25810] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.095730][T25810] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.141036][T25810] net_ratelimit: 13 callbacks suppressed [ 845.141057][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.270361][T29758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6781'. [ 845.291717][T29755] Bluetooth: MGMT ver 1.23 [ 845.330622][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.435027][T29774] sctp: [Deprecated]: syz.2.6786 (pid 29774) Use of int in maxseg socket option. [ 845.435027][T29774] Use struct sctp_assoc_value instead [ 845.462053][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.494001][T29768] syzkaller1: entered promiscuous mode [ 845.503548][T29778] validate_nla: 6 callbacks suppressed [ 845.503635][T29778] netlink: 'syz.1.6787': attribute type 1 has an invalid length. [ 845.519981][T29768] syzkaller1: entered allmulticast mode [ 845.572339][T29780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6787'. [ 845.590901][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.608265][T29778] gretap1: entered promiscuous mode [ 845.619888][T29778] bond4: (slave gretap1): making interface the new active one [ 845.630859][T29778] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 845.639769][T29784] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 845.663807][T29778] macvlan2: entered promiscuous mode [ 845.669229][T29778] macvlan2: entered allmulticast mode [ 845.677926][T29778] bond4: entered promiscuous mode [ 845.688657][T29778] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 845.698156][T29778] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 845.717582][T26712] IPVS: starting estimator thread 0... [ 845.718537][T29778] bond4: left promiscuous mode [ 845.771286][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.810653][T29788] IPVS: using max 30 ests per chain, 72000 per kthread [ 845.881271][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.987390][T29803] tipc: Enabling of bearer rejected, failed to enable media [ 846.002842][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 846.069673][T29810] netlink: 'syz.3.6795': attribute type 16 has an invalid length. [ 846.109131][T29810] netlink: 'syz.3.6795': attribute type 17 has an invalid length. [ 846.119267][T29808] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.128930][T29808] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.178374][T29810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 846.220958][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 846.290222][T29820] netlink: 'syz.3.6798': attribute type 1 has an invalid length. [ 846.422101][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 847.075903][T29881] netlink: 'syz.2.6820': attribute type 3 has an invalid length. [ 847.106337][T29891] netlink: 'syz.0.6822': attribute type 3 has an invalid length. [ 847.257341][T29904] netlink: 'syz.1.6828': attribute type 1 has an invalid length. [ 847.322681][T29904] bond5: (slave gretap2): making interface the new active one [ 847.333409][T29904] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 847.407511][T29910] sctp: [Deprecated]: syz.0.6831 (pid 29910) Use of int in maxseg socket option. [ 847.407511][T29910] Use struct sctp_assoc_value instead [ 847.636697][T29929] netlink: 'syz.2.6834': attribute type 1 has an invalid length. [ 847.719360][T29929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 847.793027][T29935] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 847.808881][T29935] bond6 (unregistering): Released all slaves [ 847.840214][T29940] bond4: entered promiscuous mode [ 847.850813][T29940] bond4: entered allmulticast mode [ 847.886908][T29929] bond4: (slave dummy0): making interface the new active one [ 847.926087][T29929] dummy0: entered promiscuous mode [ 847.942253][T29929] dummy0: entered allmulticast mode [ 847.964129][T29929] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 848.126393][T29949] bond4 (unregistering): (slave dummy0): Releasing active interface [ 848.135027][T29949] dummy0: left promiscuous mode [ 848.140122][T29949] dummy0: left allmulticast mode [ 848.147421][T29949] bond4 (unregistering): Released all slaves [ 848.355775][T29970] wlan0 speed is unknown, defaulting to 1000 [ 848.369235][T29970] lo speed is unknown, defaulting to 1000 [ 848.454867][T29976] netlink: 'syz.0.6846': attribute type 1 has an invalid length. [ 848.468037][T29976] NCSI netlink: No device for ifindex 0 [ 849.072617][T30009] tipc: Enabled bearer , priority 0 [ 849.082312][T30012] netlink: 'syz.1.6856': attribute type 2 has an invalid length. [ 849.127893][T30012] 9: entered promiscuous mode [ 849.136738][T30008] syzkaller0: entered promiscuous mode [ 849.147312][T30008] syzkaller0: entered allmulticast mode [ 849.425217][T30014] tipc: Resetting bearer [ 849.497739][T30014] tipc: Disabling bearer [ 849.824275][T30032] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.833378][T30032] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.841359][ T5841] Bluetooth: hci3: command 0x0405 tx timeout [ 849.989791][T30032] bridge_slave_0: left allmulticast mode [ 849.996042][T30032] bridge_slave_0: left promiscuous mode [ 850.002724][T30032] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.032404][T30032] bridge_slave_1: left allmulticast mode [ 850.041375][T30032] bridge_slave_1: left promiscuous mode [ 850.047174][T30032] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.077508][T30032] bond0: (slave bond_slave_0): Releasing backup interface [ 850.117298][T30032] team0: Port device team_slave_0 removed [ 850.136984][T30032] team0: Port device team_slave_1 removed [ 850.151188][T30032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.165845][T30032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.185301][T30032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.201013][T30032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.225843][T30032] net_ratelimit: 22 callbacks suppressed [ 850.225862][T30032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 850.252757][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.373721][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.408420][T30067] __nla_validate_parse: 20 callbacks suppressed [ 850.408438][T30067] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6873'. [ 850.459546][T30067] NCSI netlink: No device for ifindex 813332851 [ 850.519980][T30077] vlan3: entered allmulticast mode [ 850.567570][T30085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6876'. [ 850.580163][T30085] validate_nla: 2 callbacks suppressed [ 850.580182][T30085] netlink: 'syz.4.6876': attribute type 7 has an invalid length. [ 850.614399][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.634882][T30085] netlink: 'syz.4.6876': attribute type 8 has an invalid length. [ 850.664937][T30085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6876'. [ 850.757848][T30096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6882'. [ 850.760969][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.784647][T30102] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6885'. [ 850.853375][T30096] bond6: option xmit_hash_policy: invalid value (64) [ 850.909011][T30096] bond6 (unregistering): Released all slaves [ 851.031459][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 851.282582][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 851.303661][T30134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6890'. [ 851.319474][T30134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.421233][T30134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.459496][T30147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6893'. [ 851.470623][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 851.552967][T30147] macvtap1: entered promiscuous mode [ 851.559037][T30147] vlan0: entered promiscuous mode [ 851.566192][T30147] macvtap1: entered allmulticast mode [ 851.571818][T30147] vlan0: entered allmulticast mode [ 851.577117][T30147] veth0_vlan: entered allmulticast mode [ 851.750698][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 851.875880][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 851.880035][T30170] sctp: [Deprecated]: syz.4.6901 (pid 30170) Use of int in max_burst socket option deprecated. [ 851.880035][T30170] Use struct sctp_assoc_value instead [ 851.908858][T30172] netlink: 'syz.3.6903': attribute type 29 has an invalid length. [ 851.942632][T30170] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6901'. [ 851.955409][T30172] netlink: 'syz.3.6903': attribute type 29 has an invalid length. [ 851.993360][T30172] netlink: 'syz.3.6903': attribute type 58 has an invalid length. [ 851.997862][T30175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6904'. [ 852.020824][T30172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6903'. [ 853.170107][T30240] bond6: option xmit_hash_policy: invalid value (64) [ 853.184991][T30240] bond6 (unregistering): Released all slaves [ 853.229916][T30245] pimreg: entered allmulticast mode [ 853.253963][T30242] pimreg: left allmulticast mode [ 853.332799][T30255] netlink: 'syz.1.6925': attribute type 6 has an invalid length. [ 853.342635][T30249] bond7 (unregistering): Released all slaves [ 853.397828][T30259] netlink: 'syz.1.6925': attribute type 6 has an invalid length. [ 853.419989][T30255] netlink: 'syz.1.6925': attribute type 6 has an invalid length. [ 853.428640][T30250] netlink: 'syz.0.6923': attribute type 1 has an invalid length. [ 853.646980][T26712] IPVS: starting estimator thread 0... [ 853.771854][T30281] IPVS: using max 27 ests per chain, 64800 per kthread [ 854.176978][T30320] netlink: 'syz.2.6937': attribute type 1 has an invalid length. [ 854.247894][T30320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 854.258683][T30328] tipc: Enabling of bearer rejected, failed to enable media [ 854.295711][T30330] bond4: (slave veth7): Enslaving as an active interface with a down link [ 854.344039][T30320] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 854.414735][T30330] bond4: (slave veth9): Enslaving as an active interface with a down link [ 854.436534][T30339] bond8: (slave bridge6): making interface the new active one [ 854.446544][T30339] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 854.553701][T30341] nbd7: detected capacity change from 0 to 127 [ 854.561363][ T5841] block nbd7: Receive control failed (result -32) [ 854.587806][T30352] vlan2: entered promiscuous mode [ 854.593632][T30352] bridge0: entered promiscuous mode [ 854.850642][T30364] bond6: (slave bridge1): making interface the new active one [ 854.888115][T30364] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 854.908051][T30369] bridge: RTM_NEWNEIGH with invalid ether address [ 854.992702][T30382] lo: Caught tx_queue_len zero misconfig [ 855.151294][T30388] xfrm1: entered promiscuous mode [ 855.156546][T30388] xfrm1: entered allmulticast mode [ 855.197283][T30393] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.331991][T25810] net_ratelimit: 21 callbacks suppressed [ 855.332011][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.419559][T30412] Unsupported ieee802154 address type: 0 [ 855.471786][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.593253][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.720610][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.829304][T30445] __nla_validate_parse: 22 callbacks suppressed [ 855.829321][T30445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6973'. [ 855.840800][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.847161][T30444] validate_nla: 4 callbacks suppressed [ 855.847178][T30444] netlink: 'syz.4.6975': attribute type 1 has an invalid length. [ 855.887132][T30449] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6975'. [ 855.922821][T30446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6974'. [ 855.959248][T30444] bond7: (slave geneve2): making interface the new active one [ 855.973047][T30444] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 855.973177][T30452] netlink: 'syz.0.6976': attribute type 1 has an invalid length. [ 855.992108][T25820] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 856.014200][T25820] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 856.083599][T30454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6978'. [ 856.255502][T25820] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 856.286910][T10149] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 856.309750][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 856.352443][T30465] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20004 [ 856.386407][T30465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6981'. [ 856.491375][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 856.602417][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 856.741467][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 856.800127][T30493] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6990'. [ 856.864926][T30492] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6990'. [ 856.911754][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 857.042850][T30502] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 857.051922][T30502] bond9: option packets_per_slave: allowed values 0 - 65535 [ 857.074042][T30502] bond9 (unregistering): Released all slaves [ 857.199693][T30510] netlink: 'syz.4.6994': attribute type 75 has an invalid length. [ 857.298945][T30514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 857.306404][T30514] IPv6: NLM_F_CREATE should be set when creating new route [ 858.440328][T30539] netlink: 'syz.0.7003': attribute type 1 has an invalid length. [ 858.524995][T30548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7003'. [ 858.610085][T30553] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7007'. [ 858.620130][T30553] ksmbd: Unknown IPC event: 3, ignore. [ 858.641091][T30548] bond9: (slave bridge7): making interface the new active one [ 858.673940][T30548] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 858.880141][T30563] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7013'. [ 858.894127][T30564] netlink: 'syz.2.7011': attribute type 1 has an invalid length. [ 859.442813][T30596] netlink: 'syz.3.7019': attribute type 1 has an invalid length. [ 859.893911][T30610] bond8: entered promiscuous mode [ 859.904877][T30610] bond8: entered allmulticast mode [ 859.911548][T30610] 8021q: adding VLAN 0 to HW filter on device bond8 [ 860.350713][T10149] net_ratelimit: 19 callbacks suppressed [ 860.350733][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.471323][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.612095][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.722060][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.850237][T30665] tipc: Enabled bearer , priority 0 [ 860.870759][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.901121][T30665] syzkaller0: entered promiscuous mode [ 860.906770][T30665] syzkaller0: entered allmulticast mode [ 860.919202][T30672] __nla_validate_parse: 7 callbacks suppressed [ 860.919221][T30672] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7042'. [ 861.010674][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 861.020773][T30665] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7040'. [ 861.055548][T30665] tipc: Resetting bearer [ 861.146445][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 861.302723][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 861.427069][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 861.561406][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 861.633671][T30663] tipc: Resetting bearer [ 861.668379][T30663] tipc: Disabling bearer [ 861.792274][T30697] wg2: entered promiscuous mode [ 861.802980][T30697] wg2: entered allmulticast mode [ 861.855034][T30700] netlink: 'syz.3.7050': attribute type 12 has an invalid length. [ 861.967676][T30705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7051'. [ 862.161798][T30714] tipc: Started in network mode [ 862.166881][T30714] tipc: Node identity 46e85a324f9c, cluster identity 4711 [ 862.197262][T30714] tipc: Enabled bearer , priority 0 [ 862.226187][T30714] syzkaller0: entered promiscuous mode [ 862.237620][T30714] syzkaller0: entered allmulticast mode [ 862.237827][T30711] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7053'. [ 862.320173][T30717] tipc: Resetting bearer [ 862.366564][T30717] tipc: Disabling bearer [ 862.469989][T30735] batman_adv: batadv0: Adding interface: dummy0 [ 862.477338][T30735] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.505075][T30735] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 862.577804][T30738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7061'. [ 862.685451][T30748] netlink: 'syz.2.7064': attribute type 62 has an invalid length. [ 862.730994][T30753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7063'. [ 862.904003][T30768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7068'. [ 863.211358][T30784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7075'. [ 863.269516][T30795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7078'. [ 863.289189][T30797] Bluetooth: MGMT ver 1.23 [ 863.376500][T30792] bond8: entered allmulticast mode [ 863.383325][T30792] 8021q: adding VLAN 0 to HW filter on device bond8 [ 863.391528][T30792] bridge0: port 3(bond8) entered blocking state [ 863.398114][T30792] bridge0: port 3(bond8) entered disabled state [ 863.398170][T30801] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7080'. [ 863.407113][T30792] bond8: entered promiscuous mode [ 863.420937][T30792] bridge0: port 3(bond8) entered blocking state [ 863.427492][T30792] bridge0: port 3(bond8) entered forwarding state [ 863.441416][T30785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.578433][T30811] netlink: 'syz.0.7084': attribute type 11 has an invalid length. [ 863.607711][ T3437] bridge0: port 3(bond8) entered disabled state [ 863.755684][T30821] syzkaller0: entered promiscuous mode [ 863.762090][T30821] syzkaller0: entered allmulticast mode [ 864.093860][T30829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.317993][T30836] IPVS: ip_vs_add_dest(): server weight less than zero [ 864.572133][T30823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.966057][T30823] bridge1: left promiscuous mode [ 865.032743][ T3437] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.060788][ T3437] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.090894][ T3437] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.099283][ T3437] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.122807][ T3437] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.141720][ T3437] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.150150][ T3437] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 865.190317][ T3437] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.221959][T30859] netlink: 'syz.4.7100': attribute type 1 has an invalid length. [ 865.234137][T10149] bridge_slave_1: left allmulticast mode [ 865.239819][T10149] bridge_slave_1: left promiscuous mode [ 865.256503][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.278232][T10149] bridge_slave_0: left allmulticast mode [ 865.286378][T10149] bridge_slave_0: left promiscuous mode [ 865.300827][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.339931][T30864] xt_ecn: cannot match TCP bits for non-tcp packets [ 865.483122][T10149] ip6gretap0 (unregistering): left promiscuous mode [ 865.504308][T10149] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 865.742675][T10149] bond7 (unregistering): (slave gretap3): Releasing active interface [ 866.292366][T10149] bond12 (unregistering): (slave bridge7): Releasing backup interface [ 866.453203][T10149] bond0 (unregistering): left promiscuous mode [ 866.459389][T10149] bond_slave_0: left promiscuous mode [ 866.465020][T10149] bond_slave_1: left promiscuous mode [ 866.470977][T10149] bond9 (unregistering): left promiscuous mode [ 866.488509][T10149] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 866.498990][T10149] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 866.509454][T10149] macvlan2 (unregistering): left promiscuous mode [ 866.521727][T10149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.533197][T10149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.544512][T10149] bond0 (unregistering): (slave bond9): Releasing backup interface [ 866.553459][T10149] bond0 (unregistering): Released all slaves [ 866.566890][T10149] bond1 (unregistering): Released all slaves [ 866.696003][T10149] bond2 (unregistering): Released all slaves [ 866.816589][T10149] bond3 (unregistering): Released all slaves [ 866.933931][T10149] bond4 (unregistering): Released all slaves [ 866.948339][T10149] bond5 (unregistering): Released all slaves [ 867.079828][T10149] bond6 (unregistering): Released all slaves [ 867.092424][T10149] bond7 (unregistering): Released all slaves [ 867.105005][T10149] bond8 (unregistering): Released all slaves [ 867.233992][T10149] bond9 (unregistering): Released all slaves [ 867.356505][T10149] bond10 (unregistering): (slave veth5): Releasing active interface [ 867.366697][T10149] bond10 (unregistering): Released all slaves [ 867.379618][T10149] bond11 (unregistering): Released all slaves [ 867.395570][T10149] bond12 (unregistering): Released all slaves [ 867.530577][T10149] bond13 (unregistering): Released all slaves [ 867.542708][T30854] __nla_validate_parse: 10 callbacks suppressed [ 867.542735][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7097'. [ 867.558174][T30854] netlink: 50 bytes leftover after parsing attributes in process `syz.3.7097'. [ 867.567271][T30854] netlink: 50 bytes leftover after parsing attributes in process `syz.3.7097'. [ 867.577511][T30859] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 867.578930][T30861] netlink: 'syz.3.7097': attribute type 12 has an invalid length. [ 867.603114][T30861] netlink: 'syz.3.7097': attribute type 29 has an invalid length. [ 867.626070][T30861] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7097'. [ 867.645849][T30861] netlink: 'syz.3.7097': attribute type 1 has an invalid length. [ 867.761401][T10149] : left promiscuous mode [ 867.796755][T26712] syû: Port: 1 Link DOWN [ 867.810609][T25810] net_ratelimit: 18 callbacks suppressed [ 867.810629][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 867.850823][T10149] 9: left promiscuous mode [ 867.932971][T10149] tipc: Left network mode [ 867.943839][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 868.081015][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 868.194013][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 868.286893][T30908] IPVS: length: 205 != 24 [ 868.366876][T30912] xt_hashlimit: size too large, truncated to 1048576 [ 868.374544][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 868.510926][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 868.630791][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 868.671025][T30926] netlink: 'syz.0.7116': attribute type 21 has an invalid length. [ 868.685501][T30926] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7116'. [ 868.740579][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 868.791453][T30934] openvswitch: netlink: Flow key attr not present in new flow. [ 868.858805][T30937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7120'. [ 868.858929][T30936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7120'. [ 868.868143][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 869.130392][T30959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7127'. [ 869.152552][T30958] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7126'. [ 869.158981][T30960] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 869.310087][T30971] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7129'. [ 869.321709][T30972] netlink: 'syz.4.7130': attribute type 83 has an invalid length. [ 869.502816][T10149] hsr_slave_0: left promiscuous mode [ 869.509484][T10149] hsr_slave_1: left promiscuous mode [ 869.516116][T10149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.530887][T10149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.562137][T10149] veth1_macvtap: left promiscuous mode [ 869.569419][T10149] veth0_macvtap: left promiscuous mode [ 869.575268][T10149] veth1_vlan: left promiscuous mode [ 870.210230][T10149] team0 (unregistering): Port device team_slave_1 removed [ 870.268331][T10149] team0 (unregistering): Port device team_slave_0 removed [ 870.365901][T25818] smc: removing ib device syû [ 870.764924][T10149] vcan0 (unregistering): left allmulticast mode [ 870.831990][T30994] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 871.106249][T31015] syzkaller0: entered promiscuous mode [ 871.120281][T31015] syzkaller0: entered allmulticast mode [ 871.711799][T31050] netlink: 'syz.3.7154': attribute type 2 has an invalid length. [ 871.811845][T31052] bond5: option all_slaves_active: invalid value (222) [ 871.822792][T31052] bond5 (unregistering): Released all slaves [ 872.969296][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.004919][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.021417][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.039779][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.070607][T25812] net_ratelimit: 10 callbacks suppressed [ 873.070626][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 873.121062][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.159684][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.162845][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.182135][T31084] __nla_validate_parse: 6 callbacks suppressed [ 873.182153][T31084] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7163'. [ 873.216257][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.243642][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 873.263316][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.277730][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.293876][T31084] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 873.304213][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.320678][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.327293][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.333962][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.338075][T31086] syzkaller0: entered promiscuous mode [ 873.340290][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.348928][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.352109][T31082] xt_TCPMSS: Only works on TCP SYN packets [ 873.372189][T31086] syzkaller0: entered allmulticast mode [ 873.380581][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 873.389573][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.433040][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.477716][T31081] netlink: 'syz.0.7162': attribute type 83 has an invalid length. [ 873.491009][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 873.536969][T31096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7165'. [ 873.612521][T31098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7166'. [ 873.715987][T31098] bridge_slave_1: left allmulticast mode [ 873.732097][T31098] bridge_slave_1: left promiscuous mode [ 873.749636][T31098] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.807043][T31098] bridge_slave_0: left promiscuous mode [ 873.819948][T31098] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.023366][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.183406][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.283378][T31133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7171'. [ 874.329845][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.368642][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7171'. [ 874.464613][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.557548][T31142] sctp: [Deprecated]: syz.3.7175 (pid 31142) Use of int in max_burst socket option. [ 874.557548][T31142] Use struct sctp_assoc_value instead [ 874.620626][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.645748][T10149] IPVS: stop unused estimator thread 0... [ 875.714072][T31220] Unsupported ieee802154 address type: 0 [ 875.719108][T31218] wlan0 speed is unknown, defaulting to 1000 [ 875.732167][T31218] lo speed is unknown, defaulting to 1000 [ 876.069655][T31241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7204'. [ 876.079698][T31241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7204'. [ 876.144700][T31245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7206'. [ 876.362437][T31256] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7210'. [ 876.472001][T31256] º: renamed from veth1_vlan [ 876.484680][T31268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7213'. [ 876.661058][T31278] xt_l2tp: unknown flags: 10 [ 876.696773][T31274] 8021q: adding VLAN 0 to HW filter on device bond11 [ 876.864665][T31282] bond11: (slave veth15): Enslaving as an active interface with a down link [ 876.981984][T31274] veth17: entered promiscuous mode [ 877.030212][T31295] vlan2: entered allmulticast mode [ 877.035979][T31295] erspan0: entered allmulticast mode [ 877.478810][T31343] bridge0: port 3(batadv1) entered blocking state [ 877.498571][T31343] bridge0: port 3(batadv1) entered disabled state [ 877.516782][T31343] batadv1: entered allmulticast mode [ 877.544346][T31343] batadv1: entered promiscuous mode [ 877.749844][T31357] vlan0: entered promiscuous mode [ 877.771560][T31357] bridge0: entered promiscuous mode [ 877.829272][T31366] team0: Device vti0 is of different type [ 877.970578][T25812] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 877.979998][T25812] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 878.085289][T31377] validate_nla: 29 callbacks suppressed [ 878.085308][T31377] netlink: 'syz.0.7248': attribute type 3 has an invalid length. [ 878.120902][ T12] net_ratelimit: 22 callbacks suppressed [ 878.120921][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 878.231965][T31395] __nla_validate_parse: 8 callbacks suppressed [ 878.231984][T31395] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7252'. [ 878.257586][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 878.381055][T31403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7257'. [ 878.382728][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 878.541607][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 878.674922][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 878.771106][T31427] netlink: 'syz.1.7265': attribute type 1 has an invalid length. [ 878.792190][T31427] netlink: 'syz.1.7265': attribute type 1 has an invalid length. [ 878.802379][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 878.866485][T31424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7263'. [ 878.903130][T31424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7263'. [ 878.921066][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 879.044901][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 879.107452][T31441] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 879.157002][T31442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7270'. [ 879.171915][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 879.292141][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 879.602827][T31482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7280'. [ 879.990106][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7288'. [ 880.012178][T31516] netlink: 'syz.2.7288': attribute type 1 has an invalid length. [ 880.027226][T31516] netlink: 'syz.2.7288': attribute type 2 has an invalid length. [ 880.035638][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7288'. [ 880.046943][T31516] netlink: 'syz.2.7288': attribute type 1 has an invalid length. [ 880.054982][T31516] netlink: 'syz.2.7288': attribute type 2 has an invalid length. [ 880.071114][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7288'. [ 880.085892][T31516] netlink: 'syz.2.7288': attribute type 1 has an invalid length. [ 880.094070][T31516] netlink: 'syz.2.7288': attribute type 2 has an invalid length. [ 880.102556][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7288'. [ 880.113177][T31516] netlink: 'syz.2.7288': attribute type 1 has an invalid length. [ 880.243589][T31520] netem: change failed [ 881.267229][T31582] macvtap1: entered allmulticast mode [ 881.273128][T31582] veth0_macvtap: entered allmulticast mode [ 881.337061][T31585] Bluetooth: MGMT ver 1.23 [ 881.751181][T31610] tipc: Enabled bearer , priority 0 [ 881.759064][T31610] syzkaller0: entered promiscuous mode [ 881.765593][T31610] syzkaller0: entered allmulticast mode [ 881.777765][T31610] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 881.813365][T31610] tipc: Resetting bearer [ 881.826411][T31609] tipc: Resetting bearer [ 881.856181][T31609] tipc: Disabling bearer [ 881.939252][T31627] FAULT_INJECTION: forcing a failure. [ 881.939252][T31627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.952715][T31627] CPU: 1 UID: 0 PID: 31627 Comm: syz.3.7322 Not tainted syzkaller #0 PREEMPT(full) [ 881.952749][T31627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 881.952761][T31627] Call Trace: [ 881.952768][T31627] [ 881.952776][T31627] dump_stack_lvl+0x189/0x250 [ 881.952804][T31627] ? __pfx____ratelimit+0x10/0x10 [ 881.952828][T31627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 881.952850][T31627] ? __pfx__printk+0x10/0x10 [ 881.952869][T31627] ? __might_fault+0xb0/0x130 [ 881.952907][T31627] should_fail_ex+0x414/0x560 [ 881.952937][T31627] _copy_from_user+0x2d/0xb0 [ 881.952960][T31627] ___sys_recvmsg+0x12e/0x510 [ 881.952987][T31627] ? __pfx____sys_recvmsg+0x10/0x10 [ 881.953033][T31627] ? __fget_files+0x3a0/0x420 [ 881.953062][T31627] do_recvmmsg+0x307/0x770 [ 881.953092][T31627] ? __pfx_do_recvmmsg+0x10/0x10 [ 881.953125][T31627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 881.953244][T31627] __x64_sys_recvmmsg+0x190/0x240 [ 881.953266][T31627] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 881.953288][T31627] ? do_syscall_64+0xbe/0xfa0 [ 881.953313][T31627] do_syscall_64+0xfa/0xfa0 [ 881.953334][T31627] ? lockdep_hardirqs_on+0x9c/0x150 [ 881.953354][T31627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.953371][T31627] ? clear_bhb_loop+0x60/0xb0 [ 881.953391][T31627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.953407][T31627] RIP: 0033:0x7f503578f6c9 [ 881.953422][T31627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.953436][T31627] RSP: 002b:00007f5036692038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 881.953455][T31627] RAX: ffffffffffffffda RBX: 00007f50359e5fa0 RCX: 00007f503578f6c9 [ 881.953466][T31627] RDX: 0000000000000001 RSI: 0000200000002a40 RDI: 0000000000000003 [ 881.953476][T31627] RBP: 00007f5036692090 R08: 0000000000000000 R09: 0000000000000000 [ 881.953487][T31627] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 881.953515][T31627] R13: 00007f50359e6038 R14: 00007f50359e5fa0 R15: 00007ffe848d14b8 [ 881.953544][T31627] [ 882.198578][T31629] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 882.222791][T31631] tipc: Enabling of bearer rejected, failed to enable media [ 882.484683][T31652] Cannot find add_set index 65532 as target [ 882.538965][T31652] bond5 (unregistering): Released all slaves [ 882.698718][T31664] FAULT_INJECTION: forcing a failure. [ 882.698718][T31664] name failslab, interval 1, probability 0, space 0, times 0 [ 882.716733][T31664] CPU: 0 UID: 0 PID: 31664 Comm: syz.3.7334 Not tainted syzkaller #0 PREEMPT(full) [ 882.716759][T31664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 882.716770][T31664] Call Trace: [ 882.716778][T31664] [ 882.716786][T31664] dump_stack_lvl+0x189/0x250 [ 882.716815][T31664] ? __pfx____ratelimit+0x10/0x10 [ 882.716838][T31664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 882.716859][T31664] ? __pfx__printk+0x10/0x10 [ 882.716884][T31664] ? __pfx___might_resched+0x10/0x10 [ 882.716901][T31664] ? fs_reclaim_acquire+0x7d/0x100 [ 882.716931][T31664] should_fail_ex+0x414/0x560 [ 882.716958][T31664] should_failslab+0xa8/0x100 [ 882.716977][T31664] kmem_cache_alloc_node_noprof+0x77/0x710 [ 882.716998][T31664] ? __alloc_skb+0x112/0x2d0 [ 882.717019][T31664] __alloc_skb+0x112/0x2d0 [ 882.717039][T31664] netlink_dump+0x1b7/0xe90 [ 882.717075][T31664] ? __pfx_netlink_dump+0x10/0x10 [ 882.717115][T31664] ? netlink_recvmsg+0x5b2/0xa30 [ 882.717131][T31664] ? kmem_cache_free+0x19b/0x690 [ 882.717160][T31664] netlink_recvmsg+0x676/0xa30 [ 882.717187][T31664] ? __pfx_netlink_recvmsg+0x10/0x10 [ 882.717202][T31664] ? __lock_acquire+0xab9/0xd20 [ 882.717224][T31664] ? aa_sock_msg_perm+0xf1/0x1d0 [ 882.717250][T31664] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 882.717267][T31664] ? security_socket_recvmsg+0x7e/0x2e0 [ 882.717369][T31664] ? __pfx_netlink_recvmsg+0x10/0x10 [ 882.717386][T31664] sock_recvmsg+0x22c/0x270 [ 882.717413][T31664] ____sys_recvmsg+0x1c9/0x460 [ 882.717442][T31664] ? __pfx_____sys_recvmsg+0x10/0x10 [ 882.717476][T31664] ? import_iovec+0x74/0xa0 [ 882.717500][T31664] ___sys_recvmsg+0x1b5/0x510 [ 882.717526][T31664] ? __pfx____sys_recvmsg+0x10/0x10 [ 882.717566][T31664] ? __fget_files+0x3a0/0x420 [ 882.717595][T31664] do_recvmmsg+0x307/0x770 [ 882.717625][T31664] ? __pfx_do_recvmmsg+0x10/0x10 [ 882.717657][T31664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 882.717698][T31664] __x64_sys_recvmmsg+0x190/0x240 [ 882.717721][T31664] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 882.717749][T31664] ? do_syscall_64+0xbe/0xfa0 [ 882.717776][T31664] do_syscall_64+0xfa/0xfa0 [ 882.717796][T31664] ? lockdep_hardirqs_on+0x9c/0x150 [ 882.717819][T31664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.717836][T31664] ? clear_bhb_loop+0x60/0xb0 [ 882.717858][T31664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.717875][T31664] RIP: 0033:0x7f503578f6c9 [ 882.717891][T31664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.717905][T31664] RSP: 002b:00007f5036692038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 882.717931][T31664] RAX: ffffffffffffffda RBX: 00007f50359e5fa0 RCX: 00007f503578f6c9 [ 882.717944][T31664] RDX: 0000000000000001 RSI: 0000200000002a40 RDI: 0000000000000003 [ 882.717955][T31664] RBP: 00007f5036692090 R08: 0000000000000000 R09: 0000000000000000 [ 882.717967][T31664] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 882.717978][T31664] R13: 00007f50359e6038 R14: 00007f50359e5fa0 R15: 00007ffe848d14b8 [ 882.718011][T31664] [ 883.043217][T31675] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 883.055861][T31675] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 883.064282][T31675] gretap1: entered promiscuous mode [ 883.069537][T31675] gretap1: entered allmulticast mode [ 883.129978][T31680] validate_nla: 125 callbacks suppressed [ 883.129997][T31680] netlink: 'syz.2.7339': attribute type 1 has an invalid length. [ 883.191567][ T12] net_ratelimit: 25 callbacks suppressed [ 883.191589][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 883.361165][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 883.471872][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 883.546085][T31700] ipt_REJECT: TCP_RESET invalid for non-tcp [ 883.555943][T31698] tipc: Started in network mode [ 883.564143][T31698] tipc: Node identity 2e27de3c96d1, cluster identity 4711 [ 883.572282][T31698] tipc: Enabled bearer , priority 0 [ 883.583450][T31703] __nla_validate_parse: 75 callbacks suppressed [ 883.583469][T31703] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7349'. [ 883.601591][T31703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7349'. [ 883.627811][T31703] IPv6: sit1: Disabled Multicast RS [ 883.644183][T31703] sit1: entered allmulticast mode [ 883.706948][T31698] syzkaller0: entered promiscuous mode [ 883.714192][T31698] syzkaller0: entered allmulticast mode [ 883.722117][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 883.794088][T31711] syzkaller0: entered promiscuous mode [ 883.801653][T31711] syzkaller0: entered allmulticast mode [ 883.816595][T31698] tipc: Resetting bearer [ 884.014113][T31722] netlink: 'syz.0.7351': attribute type 41 has an invalid length. [ 885.084872][T31727] FAULT_INJECTION: forcing a failure. [ 885.084872][T31727] name fail_futex, interval 1, probability 0, space 0, times 1 [ 885.107596][T31727] CPU: 0 UID: 0 PID: 31727 Comm: syz.4.7353 Not tainted syzkaller #0 PREEMPT(full) [ 885.107622][T31727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.107631][T31727] Call Trace: [ 885.107640][T31727] [ 885.107647][T31727] dump_stack_lvl+0x189/0x250 [ 885.107674][T31727] ? __pfx____ratelimit+0x10/0x10 [ 885.107696][T31727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.107726][T31727] ? __pfx__printk+0x10/0x10 [ 885.107744][T31727] ? is_bpf_text_address+0x26/0x2b0 [ 885.107758][T31727] should_fail_ex+0x414/0x560 [ 885.107777][T31727] get_futex_key+0x1a8/0x1660 [ 885.107791][T31727] ? look_up_lock_class+0x74/0x170 [ 885.107809][T31727] ? __pfx_get_futex_key+0x10/0x10 [ 885.107820][T31727] ? __lock_acquire+0xab9/0xd20 [ 885.107837][T31727] futex_wake+0xf8/0x560 [ 885.107847][T31727] ? __pfx___mutex_trylock_common+0x10/0x10 [ 885.107865][T31727] ? __pfx_futex_wake+0x10/0x10 [ 885.107881][T31727] ? __lock_acquire+0xab9/0xd20 [ 885.107905][T31727] do_futex+0x395/0x420 [ 885.107931][T31727] ? __pfx_do_futex+0x10/0x10 [ 885.107952][T31727] ? __might_fault+0xb0/0x130 [ 885.107978][T31727] mm_release+0x188/0x390 [ 885.107995][T31727] ? __pfx_mm_release+0x10/0x10 [ 885.108010][T31727] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.108041][T31727] exit_mm+0xa8/0x2c0 [ 885.108066][T31727] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.108087][T31727] ? __pfx_exit_mm+0x10/0x10 [ 885.108111][T31727] ? rcu_is_watching+0x15/0xb0 [ 885.108134][T31727] do_exit+0x648/0x2300 [ 885.108154][T31727] ? cgroup_freezing+0x20/0x350 [ 885.108170][T31727] ? __pfx_do_exit+0x10/0x10 [ 885.108184][T31727] ? cgroup_freezing+0x20/0x350 [ 885.108196][T31727] ? cgroup_freezing+0x20/0x350 [ 885.108213][T31727] do_group_exit+0x21c/0x2d0 [ 885.108226][T31727] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.108240][T31727] get_signal+0x1285/0x1340 [ 885.108261][T31727] arch_do_signal_or_restart+0xa0/0x790 [ 885.108278][T31727] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 885.108303][T31727] ? exit_to_user_mode_loop+0x40/0x130 [ 885.108315][T31727] exit_to_user_mode_loop+0x72/0x130 [ 885.108325][T31727] do_syscall_64+0x2bd/0xfa0 [ 885.108338][T31727] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.108350][T31727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.108360][T31727] ? clear_bhb_loop+0x60/0xb0 [ 885.108372][T31727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.108381][T31727] RIP: 0033:0x7f16abf8f6c9 [ 885.108392][T31727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.108400][T31727] RSP: 002b:00007f16ace39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 885.108419][T31727] RAX: fffffffffffffe00 RBX: 00007f16ac1e5fa0 RCX: 00007f16abf8f6c9 [ 885.108433][T31727] RDX: 0000000000000001 RSI: 0000200000002a40 RDI: 0000000000000003 [ 885.108439][T31727] RBP: 00007f16ace39090 R08: 0000000000000000 R09: 0000000000000000 [ 885.108445][T31727] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000001 [ 885.108452][T31727] R13: 00007f16ac1e6038 R14: 00007f16ac1e5fa0 R15: 00007ffffeedc6d8 [ 885.108468][T31727] [ 886.102463][T31697] tipc: Resetting bearer [ 886.121404][T31697] tipc: Disabling bearer [ 886.132558][T31716] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 886.143176][T31716] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 886.151033][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 886.295749][T26714] tipc: Node number set to 3103186492 [ 886.302510][T31730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7354'. [ 886.333948][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 886.463783][T31747] netlink: 404 bytes leftover after parsing attributes in process `syz.4.7360'. [ 886.512485][T31741] netlink: 'syz.2.7358': attribute type 4 has an invalid length. [ 886.522512][T31744] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7359'. [ 886.549836][T31741] netlink: 'syz.2.7358': attribute type 4 has an invalid length. [ 886.550532][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 886.717129][T31763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7364'. [ 886.731013][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 886.795430][T31771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7367'. [ 886.856996][T31771] netlink: 'syz.3.7367': attribute type 1 has an invalid length. [ 886.864900][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 886.897537][T31778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7369'. [ 886.991100][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 887.128798][T31784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7371'. [ 887.454185][T31811] can: request_module (can-proto-0) failed. [ 887.576758][T31823] bridge0: entered promiscuous mode [ 887.582259][T31823] bridge0: entered allmulticast mode [ 887.609238][T31823] team0: Port device bridge0 added [ 887.635409][T31828] bridge1: entered promiscuous mode [ 887.640846][T31828] bridge1: entered allmulticast mode [ 887.648824][T31828] team0: Port device bridge1 added [ 887.671170][T31823] bridge0: port 1(team0) entered blocking state [ 887.677538][T31823] bridge0: port 1(team0) entered disabled state [ 887.704312][T31823] team0: entered allmulticast mode [ 887.709593][T31823] team_slave_0: entered allmulticast mode [ 887.728102][T31823] team_slave_1: entered allmulticast mode [ 887.747273][T31823] team0: left allmulticast mode [ 887.761601][T31823] team_slave_0: left allmulticast mode [ 887.772536][T31823] team_slave_1: left allmulticast mode [ 887.786647][T31844] netlink: 'syz.1.7387': attribute type 1 has an invalid length. [ 887.786919][T31834] bridge0: port 1(team0) entered blocking state [ 887.804233][T31834] bridge0: port 1(team0) entered disabled state [ 887.811396][T31834] team0: entered allmulticast mode [ 887.816775][T31834] team_slave_0: entered allmulticast mode [ 887.822807][T31834] team_slave_1: entered allmulticast mode [ 887.833417][T31834] team0: left allmulticast mode [ 887.838910][T31834] team_slave_0: left allmulticast mode [ 887.845273][T31834] team_slave_1: left allmulticast mode [ 887.931840][T31849] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7389'. [ 888.054488][T31863] netlink: 'syz.4.7392': attribute type 4 has an invalid length. [ 888.204337][ T3437] net_ratelimit: 6 callbacks suppressed [ 888.204358][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 888.337373][T31881] tipc: Enabled bearer , priority 0 [ 888.401492][T31881] syzkaller0: entered promiscuous mode [ 888.408845][T31881] syzkaller0: entered allmulticast mode [ 888.454502][T31884] veth3: entered promiscuous mode [ 888.534251][T31892] syzkaller0: mtu less than device minimum [ 888.574740][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 888.597009][T31880] tipc: Resetting bearer [ 888.637583][T31880] tipc: Disabling bearer [ 888.670102][T31898] __nla_validate_parse: 6 callbacks suppressed [ 888.670119][T31898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7405'. [ 888.842058][T31903] netlink: 'syz.2.7406': attribute type 1 has an invalid length. [ 888.850150][T31903] netlink: 'syz.2.7406': attribute type 1 has an invalid length. [ 888.885588][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 888.943529][T31918] syzkaller0: entered promiscuous mode [ 888.949036][T31918] syzkaller0: entered allmulticast mode [ 889.100828][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 889.215106][T31944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7417'. [ 889.234217][T31945] x_tables: unsorted underflow at hook 3 [ 889.290841][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 889.397951][T31954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7420'. [ 889.451069][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 889.462969][T31954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7420'. [ 889.473247][T31954] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7420'. [ 889.496930][T31964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7421'. [ 889.501821][T31954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7420'. [ 889.643532][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 889.766459][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 889.816542][T31988] netlink: 'syz.2.7430': attribute type 18 has an invalid length. [ 889.854423][T31991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7431'. [ 889.891241][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 889.928832][T31993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7434'. [ 889.940522][T31997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7432'. [ 890.013946][T32003] netlink: 'syz.4.7435': attribute type 9 has an invalid length. [ 890.189282][T32012] netlink: 'syz.0.7439': attribute type 6 has an invalid length. [ 890.206739][T32012] netlink: 'syz.0.7439': attribute type 6 has an invalid length. [ 890.347628][T32027] pimreg3: entered allmulticast mode [ 890.801519][T32047] delete_channel: no stack [ 891.024367][T32068] netlink: 'syz.3.7455': attribute type 7 has an invalid length. [ 891.059017][T32072] erspan0: entered promiscuous mode [ 891.100935][T32068] netlink: 'syz.3.7455': attribute type 8 has an invalid length. [ 891.556553][T32112] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 891.957650][T32130] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 892.546011][T25818] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.557900][T25818] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.575604][T25818] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.607731][T25818] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.832112][T32210] netlink: 'syz.4.7498': attribute type 3 has an invalid length. [ 892.852678][T32210] netlink: 'syz.4.7498': attribute type 1 has an invalid length. [ 893.093311][T32224] tipc: Enabled bearer , priority 0 [ 893.113123][T32224] syzkaller0: entered promiscuous mode [ 893.130295][T32224] syzkaller0: entered allmulticast mode [ 893.156965][T32224] tipc: Resetting bearer [ 893.223503][T32223] tipc: Resetting bearer [ 893.301417][T32223] tipc: Disabling bearer [ 893.330599][T25818] net_ratelimit: 28 callbacks suppressed [ 893.330620][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 893.470622][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 893.594129][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 893.618314][T32253] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 893.711707][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 893.830877][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 893.861950][T32273] validate_nla: 5 callbacks suppressed [ 893.861963][T32273] netlink: 'syz.4.7518': attribute type 1 has an invalid length. [ 893.940594][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 893.994795][T32279] __nla_validate_parse: 25 callbacks suppressed [ 893.994809][T32279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7519'. [ 894.051060][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 894.161980][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 894.270759][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 894.380712][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 894.539244][T32266] netlink: 412 bytes leftover after parsing attributes in process `syz.2.7516'. [ 894.949983][T32307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.967742][T32313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7530'. [ 894.977159][T32307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.988997][T32316] xt_l2tp: missing protocol rule (udp|l2tpip) [ 895.005927][T32312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7530'. [ 895.025736][T32313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7530'. [ 895.132175][T32307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.152085][T32307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.305233][T32307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.307655][T32331] block nbd8: Unsupported socket: should be TCP or UNIX. [ 895.317195][T32307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.400421][T32331] x_tables: duplicate underflow at hook 1 [ 895.454381][T32307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.476765][T32307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.673881][T32353] netlink: 'syz.0.7542': attribute type 1 has an invalid length. [ 895.685411][T10149] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.696326][T10149] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.741197][T32353] bond12: entered promiscuous mode [ 895.746381][T32353] bond12: entered allmulticast mode [ 895.752640][T32353] 8021q: adding VLAN 0 to HW filter on device bond12 [ 895.808931][T25810] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.829952][T25810] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.863489][T25812] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.881207][T25812] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.892623][T32354] syzkaller0: entered promiscuous mode [ 895.898124][T32354] syzkaller0: entered allmulticast mode [ 895.928845][T10149] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.945361][T10149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.059366][T32372] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7547'. [ 896.271659][T32381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7551'. [ 896.332273][T32387] netlink: 'syz.3.7552': attribute type 12 has an invalid length. [ 896.345189][T32387] netlink: 'syz.3.7552': attribute type 29 has an invalid length. [ 896.367288][T32387] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7552'. [ 896.397601][T32387] netlink: 'syz.3.7552': attribute type 2 has an invalid length. [ 896.408648][T32387] netlink: 'syz.3.7552': attribute type 3 has an invalid length. [ 896.443897][T32387] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7552'. [ 896.509992][T32392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7553'. [ 896.554024][T32394] tipc: Enabled bearer , priority 0 [ 896.562308][T32394] syzkaller0: entered promiscuous mode [ 896.567858][T32394] syzkaller0: entered allmulticast mode [ 896.646697][T32394] tipc: Resetting bearer [ 896.684935][T32393] tipc: Resetting bearer [ 896.723076][T32393] tipc: Disabling bearer [ 896.843305][T32412] syzkaller0: entered promiscuous mode [ 896.848816][T32412] syzkaller0: entered allmulticast mode [ 897.012696][T32431] siw: device registration error -23 [ 897.288897][T32442] geneve2: entered promiscuous mode [ 897.298920][T32442] geneve2: entered allmulticast mode [ 898.283835][T32485] netlink: 'syz.2.7579': attribute type 1 has an invalid length. [ 898.494277][T25812] net_ratelimit: 25 callbacks suppressed [ 898.494296][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 898.613089][T32506] netlink: 'syz.1.7584': attribute type 10 has an invalid length. [ 898.640842][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 898.665367][T32512] IPVS: set_ctl: invalid protocol: 183 100.1.1.0:20004 [ 898.760991][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 898.808437][T32522] netlink: 'syz.1.7588': attribute type 1 has an invalid length. [ 898.872573][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 898.993631][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 899.045903][T32537] netlink: 'syz.1.7593': attribute type 3 has an invalid length. [ 899.060894][T32539] __nla_validate_parse: 5 callbacks suppressed [ 899.060913][T32539] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7592'. [ 899.090591][T32537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7593'. [ 899.111951][T32537] netlink: 332 bytes leftover after parsing attributes in process `syz.1.7593'. [ 899.121182][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 899.231048][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 899.321774][T32546] pim6reg: entered allmulticast mode [ 899.328395][T32551] tipc: Enabled bearer , priority 0 [ 899.339058][T32546] syzkaller0: entered promiscuous mode [ 899.367070][T32546] syzkaller0: entered allmulticast mode [ 899.422885][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 899.449869][T32546] tipc: Resetting bearer [ 899.479607][T32546] tipc: Disabling bearer [ 899.524706][T32559] netlink: 'syz.1.7598': attribute type 11 has an invalid length. [ 899.533601][T32559] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7598'. [ 899.540599][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 899.636446][T32565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7602'. [ 899.702507][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 899.714203][T32576] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7601'. [ 899.723630][T32576] nbd: couldn't find a device at index 0 [ 899.959306][T32591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 900.217391][T32601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7610'. [ 900.267391][T32605] nbd: must specify an index to disconnect [ 900.363927][T32609] xt_hashlimit: invalid rate [ 900.399963][T32611] syzkaller0: entered promiscuous mode [ 900.408893][T32611] syzkaller0: entered allmulticast mode [ 900.668626][T32619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7616'. [ 900.695839][T32619] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7616'. [ 900.772596][T32629] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7619'. [ 900.837999][T32629] bond6 (unregistering): Released all slaves [ 900.917460][T32643] bond13: option xmit_hash_policy: invalid value (64) [ 900.929173][T32643] bond13 (unregistering): Released all slaves [ 901.174168][T32661] netlink: 'syz.0.7630': attribute type 2 has an invalid length. [ 901.192247][T32661] netlink: 'syz.0.7630': attribute type 1 has an invalid length. [ 902.385232][T32734] IPVS: length: 239 != 24 [ 902.897187][ T303] netlink: 'syz.0.7663': attribute type 12 has an invalid length. [ 903.189221][ T330] netlink: 'syz.3.7671': attribute type 5 has an invalid length. [ 903.213775][ T330] netlink: 'syz.3.7671': attribute type 6 has an invalid length. [ 903.570818][T25820] net_ratelimit: 32 callbacks suppressed [ 903.570838][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 903.650339][ T361] ipt_rpfilter: unknown options [ 903.691046][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 903.821454][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 903.938459][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.062303][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.076871][ T390] __nla_validate_parse: 20 callbacks suppressed [ 904.076890][ T390] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7692'. [ 904.170918][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.291362][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.346008][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7697'. [ 904.368596][ T413] syzkaller0: entered promiscuous mode [ 904.375993][ T413] syzkaller0: entered allmulticast mode [ 904.462965][ T413] netlink: 'syz.4.7699': attribute type 23 has an invalid length. [ 904.505417][ T420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7702'. [ 904.551027][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.667122][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 904.707025][ T432] pim6reg: entered allmulticast mode [ 904.717172][ T436] netlink: 'syz.1.7706': attribute type 1 has an invalid length. [ 904.805116][ T436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 904.814539][ T432] pim6reg: left allmulticast mode [ 904.868598][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.118015][ T464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7715'. [ 905.420342][ T490] netlink: 'syz.0.7722': attribute type 58 has an invalid length. [ 905.441677][ T490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7722'. [ 905.821581][ T513] gre0: entered allmulticast mode [ 905.831297][ T515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 905.901237][ T517] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7733'. [ 906.015113][ T522] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.023141][ T522] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.084446][ T528] netlink: 'syz.3.7737': attribute type 1 has an invalid length. [ 906.191705][ T528] 8021q: adding VLAN 0 to HW filter on device bond10 [ 906.272517][ T537] 8021q: adding VLAN 0 to HW filter on device bond10 [ 906.294022][ T537] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 906.310098][ T537] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 906.359045][ T543] gre0: entered promiscuous mode [ 906.475518][ T553] delete_channel: no stack [ 906.505606][ T528] veth5: entered promiscuous mode [ 906.607448][ T561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7746'. [ 906.766907][ T569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7749'. [ 906.876714][ T577] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7754'. [ 907.052668][ T586] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 907.074102][ T586] netlink: 'syz.0.7757': attribute type 1 has an invalid length. [ 907.197775][ T596] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 907.246018][ T590] nbd: must specify an index to disconnect [ 907.428212][ T609] x_tables: duplicate underflow at hook 3 [ 908.190384][ T604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 908.196822][ T604] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 908.971485][T25820] net_ratelimit: 20 callbacks suppressed [ 908.971504][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 909.045883][ T635] syzkaller0: entered allmulticast mode [ 909.093915][ T636] __nla_validate_parse: 8 callbacks suppressed [ 909.093931][ T636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7773'. [ 909.122545][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 909.131464][ T635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7773'. [ 909.163445][ T645] netlink: 'syz.4.7776': attribute type 10 has an invalid length. [ 909.174781][ T645] bridge_slave_1: left allmulticast mode [ 909.181108][ T645] bridge_slave_1: left promiscuous mode [ 909.187291][ T645] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.292949][ T645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 909.321919][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 909.344861][ T662] netlink: 'syz.0.7782': attribute type 1 has an invalid length. [ 909.457488][ T662] 8021q: adding VLAN 0 to HW filter on device bond13 [ 909.474562][ T665] tipc: Enabled bearer , priority 0 [ 909.482452][ T665] syzkaller0: entered promiscuous mode [ 909.488040][ T665] syzkaller0: entered allmulticast mode [ 909.535543][ T662] gre0: entered promiscuous mode [ 909.557974][ T662] veth19: entered promiscuous mode [ 909.634547][ T665] tipc: Resetting bearer [ 909.653690][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 909.674026][ T664] tipc: Resetting bearer [ 909.733648][ T664] tipc: Disabling bearer [ 909.790603][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 909.873290][ T675] bond10: Removing last ns target with arp_interval on [ 909.923033][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.020061][ T688] netlink: 'syz.4.7793': attribute type 13 has an invalid length. [ 910.029110][ T681] veth15: entered promiscuous mode [ 910.053792][ T688] veth0_macvtap: left promiscuous mode [ 910.077744][ T688] macvtap0: entered allmulticast mode [ 910.107115][ T688] macvtap0: refused to change device tx_queue_len [ 910.135028][ T691] veth17: entered promiscuous mode [ 910.146616][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.186095][ T693] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7792'. [ 910.463384][ T693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.480147][ T693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.496531][ T693] bond0 (unregistering): Released all slaves [ 910.550633][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.665714][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.793225][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 910.820883][ T729] tipc: Enabled bearer , priority 0 [ 910.829650][ T729] syzkaller0: entered promiscuous mode [ 910.835582][ T729] syzkaller0: entered allmulticast mode [ 910.871512][ T729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7805'. [ 910.893948][ T729] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 910.952252][ T737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7807'. [ 910.962318][ T739] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7805'. [ 911.003160][T25818] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.021055][ T737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7807'. [ 911.031884][T25818] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.071401][T25818] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.099381][ T739] tipc: Resetting bearer [ 911.127687][T25818] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.182000][ T749] gtp0: entered promiscuous mode [ 911.187206][ T749] gtp0: entered allmulticast mode [ 911.257696][ T728] tipc: Resetting bearer [ 911.271141][ T757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7810'. [ 911.293300][ T728] tipc: Disabling bearer [ 911.305487][ T753] netlink: 'syz.4.7810': attribute type 10 has an invalid length. [ 911.324044][ T753] team0: Port device dummy0 added [ 911.430031][ T762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7813'. [ 911.589321][ T773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7815'. [ 911.902707][ T801] netlink: 'syz.3.7824': attribute type 8 has an invalid length. [ 912.161601][ T818] netlink: 'syz.1.7830': attribute type 11 has an invalid length. [ 912.609419][ T844] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.676759][ T853] team0: No ports can be present during mode change [ 912.685944][ T852] team0: No ports can be present during mode change [ 912.974291][ T871] netlink: 'syz.4.7851': attribute type 1 has an invalid length. [ 913.068573][ T871] 8021q: adding VLAN 0 to HW filter on device bond11 [ 913.172337][ T880] bond7: option all_slaves_active: invalid value (222) [ 913.182469][ T880] bond7 (unregistering): Released all slaves [ 913.206283][ T871] macvlan2: entered promiscuous mode [ 913.212414][ T871] macvlan2: entered allmulticast mode [ 913.218474][ T871] bond11: entered allmulticast mode [ 913.224339][ T871] bond11: entered promiscuous mode [ 913.230152][ T871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 913.240936][ T871] team0: Port device macvlan2 added [ 913.363816][ T899] netlink: 'syz.4.7859': attribute type 11 has an invalid length. [ 913.384242][ T899] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 913.653615][ T922] ipt_REJECT: TCP_RESET invalid for non-tcp [ 913.818774][ T948] veth1_macvtap: left promiscuous mode [ 913.898530][ T955] netlink: 'syz.2.7873': attribute type 1 has an invalid length. [ 913.986109][ T955] 8021q: adding VLAN 0 to HW filter on device bond7 [ 914.065666][ T962] bond7: Removing last arp target with arp_interval on [ 914.238180][ T955] macvlan3: entered promiscuous mode [ 914.254381][ T955] macvlan3: entered allmulticast mode [ 914.264257][ T955] bond7: entered allmulticast mode [ 914.290362][ T955] bond7: entered promiscuous mode [ 914.303955][ T955] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 914.332287][ T955] team0: Port device macvlan3 added [ 914.341151][ T3437] net_ratelimit: 22 callbacks suppressed [ 914.341170][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 914.367488][ T991] __nla_validate_parse: 13 callbacks suppressed [ 914.367506][ T991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7881'. [ 915.256137][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7885'. [ 915.265499][ T1014] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7885'. [ 915.275881][ T1014] netlink: 'syz.3.7885': attribute type 5 has an invalid length. [ 916.504227][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 916.604089][ T1024] netlink: 'syz.1.7889': attribute type 1 has an invalid length. [ 916.621324][ T1025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7888'. [ 916.641072][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7888'. [ 916.703961][ T1025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7888'. [ 916.726907][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 916.748105][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7888'. [ 916.748498][ T1041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7891'. [ 916.779253][ T1030] netlink: 'syz.2.7890': attribute type 29 has an invalid length. [ 916.813285][ T1030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7890'. [ 916.824530][ T1041] 8021q: VLANs not supported on gre0 [ 916.862860][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 916.870395][ T1045] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7894'. [ 916.970598][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 917.011029][ T1056] netlink: 'syz.0.7895': attribute type 29 has an invalid length. [ 917.123123][ T1077] netlink: 'syz.2.7898': attribute type 1 has an invalid length. [ 917.144870][ T1078] netlink: 'syz.0.7895': attribute type 3 has an invalid length. [ 917.309727][ T1090] openvswitch: netlink: Flow actions attr not present in new flow. [ 917.557747][ T1081] veth1_macvtap: left promiscuous mode [ 917.582778][ T1082] bond8: (slave bridge2): making interface the new active one [ 917.591637][ T1082] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 917.622570][ T1095] syzkaller1: entered promiscuous mode [ 917.628081][ T1095] syzkaller1: entered allmulticast mode [ 917.643898][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 917.695400][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.702645][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.725764][ T1099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 917.755575][ T1106] netlink: 'syz.0.7903': attribute type 1 has an invalid length. [ 917.893465][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 918.053416][ T1125] syzkaller0: entered promiscuous mode [ 918.081249][ T1125] syzkaller0: entered allmulticast mode [ 918.101481][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 918.236282][ T1138] netlink: 'syz.4.7912': attribute type 10 has an invalid length. [ 918.411487][ T1146] IPVS: set_ctl: invalid protocol: 38 10.1.1.1:20002 [ 918.767253][ T1175] 8021q: adding VLAN 0 to HW filter on device bond9 [ 919.342659][ T1226] netlink: 'syz.0.7939': attribute type 4 has an invalid length. [ 919.356145][ T1226] SET target dimension over the limit! [ 919.380664][T25818] net_ratelimit: 9 callbacks suppressed [ 919.380683][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 919.384973][ T1228] Cannot find add_set index 2 as target [ 919.490802][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 919.603130][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 919.685624][ T1252] __nla_validate_parse: 10 callbacks suppressed [ 919.685642][ T1252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7947'. [ 919.703995][ T1253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7947'. [ 919.721278][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 919.798918][ T1256] netlink: 'syz.2.7948': attribute type 13 has an invalid length. [ 919.821268][ T1258] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7949'. [ 919.859428][ T1258] bond12: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 919.885451][ T1258] bond12: entered promiscuous mode [ 919.892496][ T1258] bond12: entered allmulticast mode [ 919.898197][ T1258] 8021q: adding VLAN 0 to HW filter on device bond12 [ 920.010342][ T1265] geneve2: entered promiscuous mode [ 920.016160][ T1265] geneve2: entered allmulticast mode [ 920.025774][ T1267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7952'. [ 920.035501][T25818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 920.060549][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.068346][T25820] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 920.089195][T25820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 920.115434][T25820] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 920.159193][ T1273] FAULT_INJECTION: forcing a failure. [ 920.159193][ T1273] name failslab, interval 1, probability 0, space 0, times 0 [ 920.173733][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.196272][ T1273] CPU: 1 UID: 0 PID: 1273 Comm: syz.1.7954 Not tainted syzkaller #0 PREEMPT(full) [ 920.196299][ T1273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.196310][ T1273] Call Trace: [ 920.196318][ T1273] [ 920.196326][ T1273] dump_stack_lvl+0x189/0x250 [ 920.196362][ T1273] ? __pfx____ratelimit+0x10/0x10 [ 920.196385][ T1273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.196406][ T1273] ? __pfx__printk+0x10/0x10 [ 920.196430][ T1273] ? __pfx___might_resched+0x10/0x10 [ 920.196453][ T1273] should_fail_ex+0x414/0x560 [ 920.196484][ T1273] should_failslab+0xa8/0x100 [ 920.196504][ T1273] __kmalloc_noprof+0xcb/0x7f0 [ 920.196527][ T1273] ? __local_bh_enable_ip+0x12d/0x1c0 [ 920.196544][ T1273] ? sock_kmalloc+0xd6/0x160 [ 920.196563][ T1273] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.196591][ T1273] sock_kmalloc+0xd6/0x160 [ 920.196613][ T1273] alg_setkey+0x55/0x190 [ 920.196737][ T1273] ? alg_setsockopt+0x3c5/0x4a0 [ 920.196760][ T1273] alg_setsockopt+0x3da/0x4a0 [ 920.196781][ T1273] ? __pfx_alg_setsockopt+0x10/0x10 [ 920.196803][ T1273] do_sock_setsockopt+0x17c/0x1b0 [ 920.196827][ T1273] __x64_sys_setsockopt+0x13f/0x1b0 [ 920.196851][ T1273] do_syscall_64+0xfa/0xfa0 [ 920.196873][ T1273] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.196895][ T1273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.196913][ T1273] ? clear_bhb_loop+0x60/0xb0 [ 920.196935][ T1273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.196952][ T1273] RIP: 0033:0x7f29e7f8f6c9 [ 920.196968][ T1273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.196982][ T1273] RSP: 002b:00007f29e8eec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 920.197001][ T1273] RAX: ffffffffffffffda RBX: 00007f29e81e5fa0 RCX: 00007f29e7f8f6c9 [ 920.197014][ T1273] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 920.197025][ T1273] RBP: 00007f29e8eec090 R08: 0000000000000018 R09: 0000000000000000 [ 920.197036][ T1273] R10: 0000200000c18000 R11: 0000000000000246 R12: 0000000000000001 [ 920.197047][ T1273] R13: 00007f29e81e6038 R14: 00007f29e81e5fa0 R15: 00007ffdce01fdb8 [ 920.197078][ T1273] [ 920.419931][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.480633][ T1280] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7958'. [ 920.486396][ T1279] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7956'. [ 920.493961][ T1280] validate_nla: 1 callbacks suppressed [ 920.493978][ T1280] netlink: 'syz.1.7958': attribute type 29 has an invalid length. [ 920.513724][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7958'. [ 920.532602][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.584526][ T1281] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7957'. [ 920.598087][ T1281] netlink: 'syz.0.7957': attribute type 1 has an invalid length. [ 920.641674][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.754734][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 920.830576][ T1300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7962'. [ 920.873706][ T1300] bond0: Caught tx_queue_len zero misconfig [ 920.881602][ T1309] x_tables: duplicate entry at hook 1 [ 921.021318][ T1319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7969'. [ 921.275870][ T1339] netlink: 'syz.2.7973': attribute type 8 has an invalid length. [ 921.291603][ T1339] bond0: entered promiscuous mode [ 921.296797][ T1339] bond_slave_0: entered promiscuous mode [ 921.302866][ T1339] bond_slave_1: entered promiscuous mode [ 921.323750][ T1339] gretap0: entered promiscuous mode [ 921.338971][ T1339] bond0: left promiscuous mode [ 921.351226][ T1339] bond_slave_0: left promiscuous mode [ 921.358129][ T1339] bond_slave_1: left promiscuous mode [ 921.368499][ T1339] gretap0: left promiscuous mode [ 921.586074][ T1360] macvtap0: left allmulticast mode [ 921.612411][ T1360] geneve2: left promiscuous mode [ 921.619232][ T1360] geneve2: left allmulticast mode [ 921.648121][ T1360] veth5: left promiscuous mode [ 921.657732][ T1360] vlan0: left allmulticast mode [ 921.663947][ T1360] veth0_vlan: left allmulticast mode [ 921.669401][ T1360] vlan0: left promiscuous mode [ 921.675378][ T1360] macvtap1: left promiscuous mode [ 921.681064][ T1360] macvtap1: left allmulticast mode [ 921.706925][ T1360] gretap1: left promiscuous mode [ 921.713749][ T1360] gretap1: left allmulticast mode [ 921.724401][ T1360] bridge0: left promiscuous mode [ 921.729758][ T1360] bridge0: left allmulticast mode [ 921.737861][ T1360] bridge1: left promiscuous mode [ 921.743111][ T1360] bridge1: left allmulticast mode [ 921.763512][ T1360] veth15: left promiscuous mode [ 921.770909][ T1360] veth17: left promiscuous mode [ 921.776122][ T1360] gtp0: left promiscuous mode [ 921.781987][ T1360] gtp0: left allmulticast mode [ 921.802495][ T1360] bond7: left allmulticast mode [ 921.807475][ T1360] bond7: left promiscuous mode [ 921.816445][ T1360] macvlan3: left promiscuous mode [ 921.821739][ T1360] macvlan3: left allmulticast mode [ 921.835072][T25820] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.851605][T25820] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 921.862755][T25820] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.873788][T25820] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 921.885913][ T1371] tipc: Invalid UDP bearer configuration [ 921.885971][ T1371] tipc: Enabling of bearer rejected, failed to enable media [ 921.900396][T25820] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.909740][T25820] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 921.919342][T25820] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.931716][T25820] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 921.980203][ T1375] syzkaller1: entered promiscuous mode [ 922.019617][ T1375] syzkaller1: entered allmulticast mode [ 922.044436][ T1374] syzkaller1: left promiscuous mode [ 922.057704][ T1374] syzkaller1: left allmulticast mode [ 922.283931][ T1390] bond15: Unable to set down delay as MII monitoring is disabled [ 922.297501][ T1390] bond15 (unregistering): Released all slaves [ 922.675845][ T1425] 8021q: VLANs not supported on dvmrp0 [ 922.682368][ T1424] net veth1_virt_wifi .: renamed from virt_wifi0 [ 923.028642][ T1462] netlink: 'syz.3.8011': attribute type 1 has an invalid length. [ 923.251369][ T1475] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 923.515875][ T1497] IPv6: sit2: Disabled Multicast RS [ 923.562584][ T1497] sit2: entered allmulticast mode [ 923.877872][ T1524] netlink: 'syz.3.8028': attribute type 1 has an invalid length. [ 924.140096][ T1534] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 924.391863][ T1547] tipc: Enabled bearer , priority 0 [ 924.408609][ T1548] syzkaller0: entered promiscuous mode [ 924.425657][ T1548] syzkaller0: entered allmulticast mode [ 924.480749][T25818] net_ratelimit: 26 callbacks suppressed [ 924.480769][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 924.513663][ T1548] tipc: Resetting bearer [ 924.586763][ T1548] tipc: Disabling bearer [ 924.676689][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 924.737646][ T1571] __nla_validate_parse: 20 callbacks suppressed [ 924.737664][ T1571] netlink: 900 bytes leftover after parsing attributes in process `syz.2.8041'. [ 924.800763][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 924.815128][ T1575] tipc: Enabled bearer , priority 2 [ 924.911054][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 925.020945][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 925.130862][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 925.240886][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 925.350682][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 925.460914][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 925.570836][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 925.931088][T30848] tipc: Node number set to 3923155388 [ 929.550749][T25812] net_ratelimit: 35 callbacks suppressed [ 929.550771][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 929.670826][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 929.780944][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 929.890896][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.000751][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.111049][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.220799][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.330687][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.440947][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 930.550702][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 934.641254][ T12] net_ratelimit: 36 callbacks suppressed [ 934.641274][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 934.760815][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 934.871015][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 934.980854][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.091147][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.201134][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.311170][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.420698][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.530916][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 935.641100][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 939.730840][T25818] net_ratelimit: 36 callbacks suppressed [ 939.730861][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 939.850667][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 939.961107][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.070775][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.180610][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.290887][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.400827][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.510697][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.621065][ T3437] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 940.730645][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 941.931681][ T3437] batadv1: left allmulticast mode [ 941.936760][ T3437] batadv1: left promiscuous mode [ 941.944146][ T3437] bridge0: port 1(batadv1) entered disabled state [ 942.327475][ T3437] bond5 (unregistering): (slave geneve3): Releasing active interface [ 942.374222][ T3437] team0: Port device geneve0 removed [ 942.750044][ T3437] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 942.832274][ T3437] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 943.102443][ T3437] bond1 (unregistering): Released all slaves [ 943.115069][ T3437] bond2 (unregistering): Released all slaves [ 943.237856][ T3437] bond3 (unregistering): Released all slaves [ 943.250151][ T3437] bond4 (unregistering): Released all slaves [ 943.375965][ T3437] bond5 (unregistering): Released all slaves [ 943.388275][ T3437] bond6 (unregistering): Released all slaves [ 943.401517][ T3437] bond7 (unregistering): Released all slaves [ 944.770688][T25818] net_ratelimit: 22 callbacks suppressed [ 944.770710][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 944.891044][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.000656][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.110825][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.220845][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.330731][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.440708][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.550912][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.660657][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 945.770816][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 949.870712][ T12] net_ratelimit: 36 callbacks suppressed [ 949.870733][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 949.990831][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.100946][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.210688][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.320972][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.430840][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.540746][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.651186][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.760726][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 950.870959][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 952.636801][ T1614] vlan0: entered promiscuous mode [ 952.653275][ T1614] vlan0: entered allmulticast mode [ 952.658435][ T1614] veth0_vlan: entered allmulticast mode [ 952.696166][ T1626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8059'. [ 952.696284][ T1625] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8059'. [ 952.716333][ T1623] sctp: [Deprecated]: syz.2.8060 (pid 1623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 952.716333][ T1623] Use struct sctp_sack_info instead [ 952.796703][ T1624] : entered promiscuous mode [ 952.802857][ T1630] netlink: 'syz.3.8061': attribute type 11 has an invalid length. [ 952.825753][ T1630] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8061'. [ 952.895358][ T1625] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 952.909028][ T1625] bond15 (unregistering): Released all slaves [ 952.978978][ T1626] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 952.995999][ T1626] bond15 (unregistering): Released all slaves [ 953.024920][ T1633] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.032232][ T1633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.458504][ T1679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8075'. [ 953.622609][ T1689] netlink: 'syz.2.8079': attribute type 1 has an invalid length. [ 953.720203][ T1695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8081'. [ 953.757758][ T1703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8084'. [ 953.822199][ T1707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8084'. [ 954.046490][ T1714] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 954.162619][ T1728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8091'. [ 954.188616][ T1725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8090'. [ 954.258251][ T1724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8088'. [ 954.540567][ T1758] netlink: 'syz.1.8099': attribute type 1 has an invalid length. [ 954.638051][ T1765] netlink: 'syz.0.8101': attribute type 4 has an invalid length. [ 954.647125][ T1765] nbd: couldn't find a device at index 0 [ 954.728103][ T1762] bond10: (slave bridge5): making interface the new active one [ 954.764261][ T1762] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 954.799541][ T1774] tipc: Enabled bearer , priority 0 [ 954.808412][ T1774] syzkaller0: entered promiscuous mode [ 954.814149][ T1774] syzkaller0: entered allmulticast mode [ 954.830947][ T1774] tipc: Resetting bearer [ 954.878472][ T1773] tipc: Resetting bearer [ 954.904511][ T1773] tipc: Disabling bearer [ 954.911917][ T1785] net_ratelimit: 28 callbacks suppressed [ 954.911933][ T1785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.927535][ T1776] tipc: Enabled bearer , priority 0 [ 954.934280][ T1780] : renamed from hsr0 (while UP) [ 954.943049][ T1787] syzkaller0: entered promiscuous mode [ 954.948562][ T1787] syzkaller0: entered allmulticast mode [ 954.970840][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 954.980094][ T1776] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 955.046719][ T1776] tipc: Resetting bearer [ 955.072974][ T1775] tipc: Resetting bearer [ 955.109321][ T1797] netlink: 'syz.4.8113': attribute type 11 has an invalid length. [ 955.119024][ T1775] tipc: Disabling bearer [ 955.160868][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 955.197953][ T1799] wlan0 speed is unknown, defaulting to 1000 [ 955.417126][ T1799] lo speed is unknown, defaulting to 1000 [ 955.465840][ T1814] netlink: 'syz.2.8114': attribute type 5 has an invalid length. [ 955.621127][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 955.678934][ T1825] netlink: 'syz.0.8117': attribute type 11 has an invalid length. [ 955.693053][ T1827] netlink: 'syz.2.8119': attribute type 1 has an invalid length. [ 955.783842][ T1832] bond9: (slave bridge4): making interface the new active one [ 955.812092][ T1832] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 955.890633][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.002046][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.040302][ T1855] xt_hashlimit: invalid rate [ 956.126713][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.241877][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.264202][ T1868] syzkaller0: entered promiscuous mode [ 956.269824][ T1868] syzkaller0: entered allmulticast mode [ 956.431167][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.433551][ T1876] netlink: 'syz.2.8133': attribute type 1 has an invalid length. [ 956.552032][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 956.621448][ T1876] bond10: (slave bridge5): making interface the new active one [ 956.629997][ T1876] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 956.970139][ T1910] netlink: 'syz.1.8141': attribute type 11 has an invalid length. [ 956.997163][ T1910] tap0: tun_chr_ioctl cmd 1074025672 [ 957.011920][ T1910] tap0: ignored: set checksum disabled [ 957.477079][ T1943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.604120][ T1943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.697174][ T1957] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 957.715140][ T1962] __nla_validate_parse: 80 callbacks suppressed [ 957.715160][ T1962] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8159'. [ 957.718254][ T1957] team0: Device macvtap2 is already an upper device of the team interface [ 957.778569][ T1965] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000 [ 957.869716][ T1973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8163'. [ 957.889065][ T1972] tipc: Enabled bearer , priority 0 [ 957.944454][ T1972] syzkaller0: entered promiscuous mode [ 957.958650][ T1979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8164'. [ 957.960568][ T1972] syzkaller0: entered allmulticast mode [ 958.090713][ T1972] tipc: Resetting bearer [ 958.139460][ T1969] tipc: Resetting bearer [ 958.156981][ T1997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8170'. [ 958.167120][ T1997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8170'. [ 958.177458][ T1969] tipc: Disabling bearer [ 958.545481][ T2027] veth0: entered promiscuous mode [ 958.557587][ T2026] veth0: left promiscuous mode [ 958.666651][ T2039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8181'. [ 958.756924][ T2050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8183'. [ 958.908955][ T2061] sctp: [Deprecated]: syz.4.8186 (pid 2061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 958.908955][ T2061] Use struct sctp_sack_info instead [ 958.934764][ T2057] pim6reg: entered allmulticast mode [ 958.943702][ T2057] pim6reg: left allmulticast mode [ 959.041026][ T2068] syz.2.8189 uses old SIOCAX25GETINFO [ 959.100816][ T2072] tcpmss_tg4_check: 23 callbacks suppressed [ 959.100838][ T2072] xt_TCPMSS: Only works on TCP SYN packets [ 959.126769][ T2072] x_tables: duplicate entry at hook 2 [ 959.345781][ T2084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8196'. [ 959.365734][ T2087] netlink: 'syz.4.8197': attribute type 1 has an invalid length. [ 959.374744][ T2089] veth0: entered promiscuous mode [ 959.378243][ T2087] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8197'. [ 959.395447][ T2089] veth0: left promiscuous mode [ 959.508494][ T2096] C: renamed from lo [ 959.579830][ T2106] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8204'. [ 959.671973][ T2114] netlink: 'syz.0.8206': attribute type 13 has an invalid length. [ 959.728224][ T2114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.737357][ T2114] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.910154][ T2127] tipc: Enabled bearer , priority 0 [ 959.923283][ T2130] netlink: 'syz.2.8212': attribute type 25 has an invalid length. [ 959.941729][ T2127] tipc: Resetting bearer [ 959.985195][ T2125] tipc: Disabling bearer [ 959.989617][ T2134] netlink: 'syz.4.8213': attribute type 1 has an invalid length. [ 960.020822][T25800] net_ratelimit: 25 callbacks suppressed [ 960.021031][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 960.078433][ T2136] netlink: 'syz.2.8215': attribute type 3 has an invalid length. [ 960.163491][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 960.280804][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 960.390635][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 960.642740][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 960.771564][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 960.829191][ T2187] netlink: 'syz.0.8228': attribute type 1 has an invalid length. [ 960.886143][ T2185] tipc: Enabled bearer , priority 0 [ 960.894260][ T2185] syzkaller0: entered promiscuous mode [ 960.899761][ T2185] syzkaller0: entered allmulticast mode [ 961.133320][ T2187] tipc: Resetting bearer [ 961.140054][ T2197] ip6tnl0: Caught tx_queue_len zero misconfig [ 961.156846][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 961.172043][ T2182] tipc: Resetting bearer [ 961.261170][ T2182] tipc: Disabling bearer [ 961.304134][ T2205] gtp1: entered promiscuous mode [ 961.309162][ T2205] gtp1: entered allmulticast mode [ 961.434072][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 961.453490][ T2218] xt_l2tp: invalid flags combination: 8 [ 961.572812][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 961.666783][ T2229] pim6reg: entered allmulticast mode [ 961.690827][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 961.864879][ T2242] bond0: entered promiscuous mode [ 961.879028][ T2242] bond_slave_0: entered promiscuous mode [ 961.892209][ T2244] netlink: 'syz.1.8248': attribute type 1 has an invalid length. [ 961.920718][ T2242] bond_slave_1: entered promiscuous mode [ 961.926601][ T2242] team0: entered promiscuous mode [ 961.942359][ T2242] team_slave_0: entered promiscuous mode [ 961.955377][ T2242] team_slave_1: entered promiscuous mode [ 962.117880][ T2251] bond12: (slave bridge6): making interface the new active one [ 962.162613][ T2251] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 962.564259][ T2290] netlink: 'syz.3.8262': attribute type 1 has an invalid length. [ 962.719886][ T2290] 8021q: adding VLAN 0 to HW filter on device bond12 [ 962.741421][ T2293] team0: Caught tx_queue_len zero misconfig [ 962.748382][ T2309] __nla_validate_parse: 13 callbacks suppressed [ 962.748399][ T2309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8267'. [ 962.785917][ T2312] netlink: 'syz.1.8266': attribute type 3 has an invalid length. [ 962.820939][ T2312] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8266'. [ 962.906131][ T2303] bond12: (slave veth7): Enslaving as an active interface with a down link [ 962.926805][ T2306] veth9: entered promiscuous mode [ 962.937201][ T2306] bond12: (slave veth9): Enslaving as an active interface with a down link [ 962.959057][ T2290] vlan1: entered allmulticast mode [ 962.965014][ T2290] bond12: entered allmulticast mode [ 962.972627][ T2290] bond12: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 963.172141][ T2338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8275'. [ 963.192807][ T2335] netlink: 'syz.3.8276': attribute type 26 has an invalid length. [ 963.193403][ T2332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.576176][ T2362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8283'. [ 963.695266][ T2371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8286'. [ 963.749721][ T2373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8287'. [ 963.840750][ T2379] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8288'. [ 963.906277][ T2386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.064858][ T2401] xt_TCPMSS: Only works on TCP SYN packets [ 964.113578][ T2408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8296'. [ 964.256411][ T2422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8300'. [ 964.266088][ T2422] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 964.427064][ T2434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8302'. [ 964.511624][ T2438] team0: No ports can be present during mode change [ 964.539079][ T2440] tipc: Enabled bearer , priority 0 [ 964.547505][ T2440] syzkaller0: entered promiscuous mode [ 964.553551][ T2440] syzkaller0: entered allmulticast mode [ 964.585712][ T2425] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 964.605032][ T2440] tipc: Resetting bearer [ 964.614963][ T2440] syzkaller0: left promiscuous mode [ 964.621302][ T2440] syzkaller0: left allmulticast mode [ 964.628788][ T2439] tipc: Resetting bearer [ 964.658599][ T2439] tipc: Disabling bearer [ 965.142153][ T12] net_ratelimit: 25 callbacks suppressed [ 965.142173][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 965.350861][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 965.461356][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 965.514212][ T2513] syzkaller0: entered promiscuous mode [ 965.519852][ T2513] syzkaller0: entered allmulticast mode [ 965.612453][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 965.743648][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 965.871719][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 965.914829][ T2548] validate_nla: 3 callbacks suppressed [ 965.914849][ T2548] netlink: 'syz.1.8335': attribute type 4 has an invalid length. [ 965.984777][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 966.111735][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 966.218135][ T2566] netlink: 'syz.4.8340': attribute type 10 has an invalid length. [ 966.248135][ T2566] bond0: (slave team0): Releasing backup interface [ 966.297240][ T2566] bridge0: port 2(team0) entered blocking state [ 966.317223][ T2566] bridge0: port 2(team0) entered disabled state [ 966.333640][ T2566] team0: entered allmulticast mode [ 966.339078][ T2566] C: entered allmulticast mode [ 966.349258][ T2566] team_slave_1: entered allmulticast mode [ 966.359513][ T2566] dummy0: entered allmulticast mode [ 966.380845][ T2566] team0: entered promiscuous mode [ 966.392775][ T2566] C: entered promiscuous mode [ 966.403178][ T2566] team_slave_1: entered promiscuous mode [ 966.417445][ T2566] dummy0: entered promiscuous mode [ 966.431014][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 966.535234][ T2598] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 966.562878][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 966.641256][ T2608] netlink: 'syz.3.8349': attribute type 29 has an invalid length. [ 966.679539][ T2608] netlink: 'syz.3.8349': attribute type 29 has an invalid length. [ 966.701911][ T2608] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 966.718971][ T2608] netlink: 'syz.3.8349': attribute type 6 has an invalid length. [ 966.741824][ T2608] netlink: 'syz.3.8349': attribute type 6 has an invalid length. [ 966.826149][ T2619] netlink: 'syz.1.8354': attribute type 1 has an invalid length. [ 966.924709][ T2630] bond13: (slave bridge7): making interface the new active one [ 966.947415][ T2630] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 967.184465][ T2656] syzkaller1: entered promiscuous mode [ 967.192097][ T2656] syzkaller1: entered allmulticast mode [ 967.260384][ T2663] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 967.273708][ T2663] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 967.428552][ T2673] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 967.550082][ T2687] netlink: 'syz.1.8368': attribute type 1 has an invalid length. [ 967.651643][ T2692] bond14: (slave bridge8): making interface the new active one [ 967.660104][ T2692] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 967.942095][ T2721] __nla_validate_parse: 23 callbacks suppressed [ 967.942178][ T2721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8377'. [ 968.043093][ T2725] xt_hashlimit: max too large, truncated to 1048576 [ 968.159984][ T2728] netlink: 'syz.4.8379': attribute type 1 has an invalid length. [ 968.252872][ T2740] netlink: 'syz.2.8381': attribute type 8 has an invalid length. [ 968.279301][ T2740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8381'. [ 968.509942][ T2738] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 968.523138][ T2738] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 968.528685][ T2751] ip6t_rpfilter: unknown options [ 968.534275][ T2752] ip6t_rpfilter: unknown options [ 968.568126][ T2742] gretap3: entered promiscuous mode [ 968.606753][T25815] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 968.615860][T25815] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 968.625013][T25815] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 968.634280][T25815] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 968.797906][ T2772] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 968.825056][ T2774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8389'. [ 968.829361][ T2772] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 968.849379][ T2774] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8389'. [ 968.909751][ T2774] syz_tun: entered promiscuous mode [ 969.004614][ T2774] syz_tun: left promiscuous mode [ 969.164412][ T2793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8395'. [ 969.605923][ T2841] sch_tbf: peakrate 1 is lower than or equals to rate 7414298230131460954 ! [ 969.614724][ T2845] SET target dimension over the limit! [ 969.799342][ T2865] syzkaller0: entered promiscuous mode [ 969.819825][ T2865] syzkaller0: entered allmulticast mode [ 969.854312][ T2879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8415'. [ 969.922121][ T2885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8415'. [ 971.000842][ T2922] IPv6: NLM_F_CREATE should be specified when creating new route [ 971.022787][ T2922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8425'. [ 972.352473][ T2912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8422'. [ 972.420890][T25812] net_ratelimit: 25 callbacks suppressed [ 972.420913][T25812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 972.537424][ T2929] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8427'. [ 972.559107][ T2936] validate_nla: 4 callbacks suppressed [ 972.559125][ T2936] netlink: 'syz.2.8431': attribute type 10 has an invalid length. [ 972.565050][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 972.601523][ T2934] sctp: [Deprecated]: syz.0.8429 (pid 2934) Use of int in max_burst socket option deprecated. [ 972.601523][ T2934] Use struct sctp_assoc_value instead [ 972.623856][ T2933] sctp: [Deprecated]: syz.0.8429 (pid 2933) Use of int in max_burst socket option deprecated. [ 972.623856][ T2933] Use struct sctp_assoc_value instead [ 972.723693][ T2948] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000 [ 972.743244][ T2942] netlink: 'syz.4.8432': attribute type 10 has an invalid length. [ 972.743255][ T2949] syzkaller1: entered promiscuous mode [ 972.743273][ T2949] syzkaller1: entered allmulticast mode [ 972.763292][ T2950] netlink: 'syz.3.8435': attribute type 2 has an invalid length. [ 972.780323][ T2950] netlink: 'syz.3.8435': attribute type 11 has an invalid length. [ 972.812345][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 972.957406][ T2960] syzkaller0: entered promiscuous mode [ 972.978695][ T2960] syzkaller0: entered allmulticast mode [ 973.010699][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 973.034687][ T2968] netlink: 'syz.0.8440': attribute type 1 has an invalid length. [ 973.102172][ T2971] __nla_validate_parse: 8 callbacks suppressed [ 973.102190][ T2971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8440'. [ 973.143377][ T2974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8442'. [ 973.188623][ T2971] bond16: (slave bridge15): making interface the new active one [ 973.197791][ T2971] bond16: (slave bridge15): Enslaving as an active interface with an up link [ 973.226842][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 973.363033][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 973.439040][ T2983] tipc: New replicast peer: 255.255.255.255 [ 973.446018][ T2996] netlink: 'syz.2.8450': attribute type 1 has an invalid length. [ 973.457457][ T2983] tipc: Enabled bearer , priority 10 [ 973.508220][ T2983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8444'. [ 973.546995][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 973.593323][ T3009] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 973.619979][ T3012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8452'. [ 973.659196][ T3014] netlink: 'syz.0.8453': attribute type 63 has an invalid length. [ 973.679205][ T3017] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 973.727419][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 973.827124][ T3026] netlink: 596 bytes leftover after parsing attributes in process `syz.2.8456'. [ 973.866658][ T3028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8458'. [ 973.875713][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 974.112313][ T3053] netlink: 'syz.0.8465': attribute type 1 has an invalid length. [ 974.204398][ T3053] 8021q: adding VLAN 0 to HW filter on device bond17 [ 974.283030][ T3052] bond17: (slave geneve4): making interface the new active one [ 974.292952][ T3052] bond17: (slave geneve4): Enslaving as an active interface with an up link [ 974.304080][ T3062] tipc: New replicast peer: 255.255.255.255 [ 974.319862][ T3062] tipc: Enabled bearer , priority 10 [ 974.362411][T25818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.385348][ T3073] netlink: 'syz.4.8469': attribute type 12 has an invalid length. [ 974.400827][ T3073] netlink: 'syz.4.8469': attribute type 29 has an invalid length. [ 974.419348][ T3073] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8469'. [ 974.432290][ T3073] netlink: 23 bytes leftover after parsing attributes in process `syz.4.8469'. [ 974.452023][ T3070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8467'. [ 974.466718][T25818] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.515347][T25818] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.524021][T25818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.663556][ T3094] bridge6: entered allmulticast mode [ 974.678883][ T3103] Cannot find del_set index 49151 as target [ 974.907847][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8481'. [ 975.290379][ T3128] can: request_module (can-proto-0) failed. [ 975.626408][ T3148] syzkaller0: entered promiscuous mode [ 975.651413][ T3148] syzkaller0: entered allmulticast mode [ 975.825273][ T3165] erspan0: entered allmulticast mode [ 975.869346][ T3165] bond13: entered allmulticast mode [ 975.876360][ T3165] 8021q: adding VLAN 0 to HW filter on device bond13 [ 975.982237][ T3177] team0: Device gtp0 is of different type [ 976.151229][T25815] batman_adv: batadv1: IGMP Querier appeared [ 976.157309][T25815] batman_adv: batadv1: MLD Querier appeared [ 976.217605][ T3201] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 976.289727][ T3194] bond15 (unregistering): Released all slaves [ 976.380231][ T3206] bond14: (slave bridge7): making interface the new active one [ 976.400290][ T3206] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 976.541577][ T3221] tipc: Enabled bearer , priority 0 [ 976.654765][ T3215] tipc: Resetting bearer [ 976.808963][ T3213] tipc: Disabling bearer [ 976.886189][ T3248] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 976.912006][ T3249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.002403][ T3258] bond18: (slave bridge16): making interface the new active one [ 977.011594][ T3258] bond18: (slave bridge16): Enslaving as an active interface with an up link [ 977.287273][ T3281] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 977.510958][T25815] net_ratelimit: 27 callbacks suppressed [ 977.510980][T25815] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 977.660657][T25815] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 977.782092][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 977.858115][ T3332] [ 977.860480][ T3332] ====================================================== [ 977.867494][ T3332] WARNING: possible circular locking dependency detected [ 977.874621][ T3332] syzkaller #0 Not tainted [ 977.879059][ T3332] ------------------------------------------------------ [ 977.886087][ T3332] syz.3.8543/3332 is trying to acquire lock: [ 977.892077][ T3332] ffffffff8f426458 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 977.900787][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 977.901575][ T3332] [ 977.901575][ T3332] but task is already holding lock: [ 977.901584][ T3332] ffff88804acce570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 977.925692][ T3332] [ 977.925692][ T3332] which lock already depends on the new lock. [ 977.925692][ T3332] [ 977.936085][ T3332] [ 977.936085][ T3332] the existing dependency chain (in reverse order) is: [ 977.945187][ T3332] [ 977.945187][ T3332] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 977.953179][ T3332] lock_acquire+0x120/0x360 [ 977.958298][ T3332] _raw_spin_lock_bh+0x36/0x50 [ 977.963581][ T3332] nr_rt_device_down+0x12a/0x720 [ 977.969027][ T3332] nr_device_event+0x137/0x150 [ 977.974396][ T3332] notifier_call_chain+0x1b6/0x3e0 [ 977.980020][ T3332] __dev_notify_flags+0x18d/0x2e0 [ 977.985624][ T3332] netif_change_flags+0xe8/0x1a0 [ 977.991068][ T3332] dev_change_flags+0x130/0x260 [ 977.996475][ T3332] dev_ioctl+0x7b4/0x1150 [ 978.001636][ T3332] sock_do_ioctl+0x22c/0x300 [ 978.006751][ T3332] sock_ioctl+0x576/0x790 [ 978.011603][ T3332] __se_sys_ioctl+0xfc/0x170 [ 978.016789][ T3332] do_syscall_64+0xfa/0xfa0 [ 978.021899][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.028297][ T3332] [ 978.028297][ T3332] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 978.036103][ T3332] lock_acquire+0x120/0x360 [ 978.041155][ T3332] _raw_spin_lock_bh+0x36/0x50 [ 978.046433][ T3332] nr_rt_device_down+0xa9/0x720 [ 978.051789][ T3332] nr_device_event+0x137/0x150 [ 978.057055][ T3332] notifier_call_chain+0x1b6/0x3e0 [ 978.062672][ T3332] __dev_notify_flags+0x18d/0x2e0 [ 978.068218][ T3332] netif_change_flags+0xe8/0x1a0 [ 978.073668][ T3332] dev_change_flags+0x130/0x260 [ 978.079020][ T3332] dev_ioctl+0x7b4/0x1150 [ 978.083951][ T3332] sock_do_ioctl+0x22c/0x300 [ 978.089047][ T3332] sock_ioctl+0x576/0x790 [ 978.093882][ T3332] __se_sys_ioctl+0xfc/0x170 [ 978.098978][ T3332] do_syscall_64+0xfa/0xfa0 [ 978.103989][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.110385][ T3332] [ 978.110385][ T3332] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 978.118304][ T3332] validate_chain+0xb9b/0x2140 [ 978.123597][ T3332] __lock_acquire+0xab9/0xd20 [ 978.128797][ T3332] lock_acquire+0x120/0x360 [ 978.133833][ T3332] _raw_spin_lock_bh+0x36/0x50 [ 978.139106][ T3332] nr_remove_neigh+0x25/0xe0 [ 978.144221][ T3332] nr_add_node+0x1d9f/0x2570 [ 978.149318][ T3332] nr_rt_ioctl+0xc12/0xd50 [ 978.154270][ T3332] sock_do_ioctl+0xdc/0x300 [ 978.159291][ T3332] sock_ioctl+0x576/0x790 [ 978.164141][ T3332] __se_sys_ioctl+0xfc/0x170 [ 978.169326][ T3332] do_syscall_64+0xfa/0xfa0 [ 978.174346][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.181004][ T3332] [ 978.181004][ T3332] other info that might help us debug this: [ 978.181004][ T3332] [ 978.191213][ T3332] Chain exists of: [ 978.191213][ T3332] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 978.191213][ T3332] [ 978.205113][ T3332] Possible unsafe locking scenario: [ 978.205113][ T3332] [ 978.212644][ T3332] CPU0 CPU1 [ 978.218087][ T3332] ---- ---- [ 978.223439][ T3332] lock(&nr_node->node_lock); [ 978.228278][ T3332] lock(nr_node_list_lock); [ 978.235460][ T3332] lock(&nr_node->node_lock); [ 978.242729][ T3332] lock(nr_neigh_list_lock); [ 978.247397][ T3332] [ 978.247397][ T3332] *** DEADLOCK *** [ 978.247397][ T3332] [ 978.255787][ T3332] 1 lock held by syz.3.8543/3332: [ 978.260791][ T3332] #0: ffff88804acce570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 978.270800][ T3332] [ 978.270800][ T3332] stack backtrace: [ 978.276695][ T3332] CPU: 1 UID: 0 PID: 3332 Comm: syz.3.8543 Not tainted syzkaller #0 PREEMPT(full) [ 978.276718][ T3332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 978.276727][ T3332] Call Trace: [ 978.276736][ T3332] [ 978.276745][ T3332] dump_stack_lvl+0x189/0x250 [ 978.276769][ T3332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 978.276787][ T3332] ? __pfx__printk+0x10/0x10 [ 978.276799][ T3332] ? stack_trace_save+0x9c/0xe0 [ 978.276821][ T3332] print_circular_bug+0x2ee/0x310 [ 978.276840][ T3332] check_noncircular+0x134/0x160 [ 978.276859][ T3332] validate_chain+0xb9b/0x2140 [ 978.276883][ T3332] __lock_acquire+0xab9/0xd20 [ 978.276899][ T3332] ? nr_remove_neigh+0x25/0xe0 [ 978.276916][ T3332] lock_acquire+0x120/0x360 [ 978.276928][ T3332] ? nr_remove_neigh+0x25/0xe0 [ 978.276948][ T3332] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 978.276966][ T3332] ? nr_remove_neigh+0x25/0xe0 [ 978.276982][ T3332] _raw_spin_lock_bh+0x36/0x50 [ 978.276999][ T3332] ? nr_remove_neigh+0x25/0xe0 [ 978.277015][ T3332] nr_remove_neigh+0x25/0xe0 [ 978.277031][ T3332] nr_add_node+0x1d9f/0x2570 [ 978.277049][ T3332] ? __asan_memcpy+0x40/0x70 [ 978.277067][ T3332] ? nr_call_to_digi+0x126/0x1b0 [ 978.277083][ T3332] nr_rt_ioctl+0xc12/0xd50 [ 978.277103][ T3332] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 978.277117][ T3332] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.277140][ T3332] ? apparmor_capable+0x137/0x1b0 [ 978.277159][ T3332] ? capable+0x89/0xe0 [ 978.277175][ T3332] ? nr_ioctl+0x1b1/0x3b0 [ 978.277188][ T3332] sock_do_ioctl+0xdc/0x300 [ 978.277206][ T3332] ? __pfx_sock_do_ioctl+0x10/0x10 [ 978.277229][ T3332] sock_ioctl+0x576/0x790 [ 978.277245][ T3332] ? __pfx_sock_ioctl+0x10/0x10 [ 978.277262][ T3332] ? __fget_files+0x3a0/0x420 [ 978.277275][ T3332] ? __fget_files+0x2a/0x420 [ 978.277288][ T3332] ? bpf_lsm_file_ioctl+0x9/0x20 [ 978.277304][ T3332] ? __pfx_sock_ioctl+0x10/0x10 [ 978.277319][ T3332] __se_sys_ioctl+0xfc/0x170 [ 978.277336][ T3332] do_syscall_64+0xfa/0xfa0 [ 978.277354][ T3332] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.277371][ T3332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.277385][ T3332] ? clear_bhb_loop+0x60/0xb0 [ 978.277400][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.277419][ T3332] RIP: 0033:0x7f503578f6c9 [ 978.277434][ T3332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.277447][ T3332] RSP: 002b:00007f5036671038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.277463][ T3332] RAX: ffffffffffffffda RBX: 00007f50359e6090 RCX: 00007f503578f6c9 [ 978.277474][ T3332] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000007 [ 978.277484][ T3332] RBP: 00007f5035811f91 R08: 0000000000000000 R09: 0000000000000000 [ 978.277493][ T3332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.277501][ T3332] R13: 00007f50359e6128 R14: 00007f50359e6090 R15: 00007ffe848d14b8 [ 978.277517][ T3332] [ 978.569988][T10149] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 978.585822][ T3332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.610869][ T5841] Bluetooth: hci3: command tx timeout [ 978.678766][ T3330] vlan2: entered promiscuous mode [ 978.710857][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 978.820524][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 978.931432][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 979.040606][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 982.580855][T25818] net_ratelimit: 31 callbacks suppressed [ 982.580870][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 982.700696][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 982.810554][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 982.920641][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 983.030896][T25818] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 983.140553][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 983.250982][T25800] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 983.360678][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 983.470753][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 983.580647][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 987.681013][T25810] net_ratelimit: 36 callbacks suppressed [ 987.681033][T25810] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 987.801101][T25820] bond2: (slave ip6gretap1): failed to get link speed/duplex