last executing test programs: 40.699033363s ago: executing program 4 (id=3332): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0xc004800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x2}]}}]}, 0x38}}, 0x20000000) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000040)={0x7b, 0x2, 0x4, 0xa, 0x636, 0x81}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 39.837205016s ago: executing program 4 (id=3335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r5, {}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r7, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) close(0x4) 38.829596633s ago: executing program 4 (id=3344): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x14c}}, 0x844) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x6, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x24008004) (async) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="2f30c8307b0a", 0x6}], 0x1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x44, r3, 0x315, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000003180)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003140)={&(0x7f0000001fc0)={0x10f4, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2d64}, @NL80211_ATTR_PEER_MEASUREMENTS={0x558, 0x111, 0x0, 0x1, {0x554, 0x5, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x0, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x0, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x9}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x33}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}]}]}, {0x408, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x51b0}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2a5b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x399}]}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x47}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xb48, 0x111, 0x0, 0x1, {0xb44, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x387}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x463d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x33b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}]}, {0x3a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x105}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x54}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x92602f7e5f23a6fc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ec}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x14000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x294}]}]}, {0x318, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x27}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3987}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x386}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x40}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf01}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x902}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x375}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x73}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x10f4}, 0x1, 0x0, 0x0, 0x8000}, 0x10048014) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r10) sendmsg$NLBL_MGMT_C_LISTDEF(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="08020000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250c000000400003803500040022c6549bfd4c165cf33cc3433d23b60fc8afe440f2c256cc3ec7e9a063358f8a2982b3a980ae19ebdb93c64053eb72cc32000000040001002800018014000200708c6d367265673000000000000000000800030000000000080003000300000074010380080002009600000098000500d51fd985dfdabcca22c8c2f689785ceab01d3d297f8bfdbb34569602ce7456c16b3eeb98d8c1d0114f86405d13018c4a8a5e5df3502c660952513bf6323ae0d9a0d34ccda1acc8612f95575f40c6a6819ccbfa2a3af77fcceb517d924530ff725bac5808537fa57c190c023177e5f73d3516cc916e88a6739d68fc5fe84b604d695d5ba68d5eb4a3030bfd543e0f9cca6a696344ca00050058ea637033b56cccd9f70a0212a8ce36c9a40121d3a109bc12293435414a47dbaad5a1fc4498f2fc386581fdd0335170b17b3504aa8c022fe9395952a00cca42c4ee8b4adeea6403f6c79657f7e452ed19376d0ea30ffff83bfe349f374736e3834c6d4e330b19917e64bd34accaf489f1a258c05fc98ec566cf6ccb0a48a59617adcc74bf407d89e9cafdd7ab2a49559d091f5e80801d57665ddb65f0c2f5bd472b3f7351857a63e81782f4b8cadb142693a1ce985b41da3bcadfcdf9e61e67188d8116cfe3000004000100180001801400020076657468305f766972745f77696669"], 0x208}, 0x1, 0x0, 0x0, 0x45}, 0x4000800) (async, rerun: 32) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000fffffffeffffff685a38b94a2ead69f01dc09fec8477"], 0x48) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0000000000201030000000000000000070000108c000a800400028008000140000000017c0002802c00018014000300fe8000000000000000000000010000bb14000400fc0100000000000000000000000000021400018008000100ac1e0001080002007f0000010c00028005000100010000002c000180140003030000000000000000000000000000000114000400fc000000000000000000000000000003"], 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async, rerun: 64) r13 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) (async) sendto(r13, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7000003, 0x110, r13, 0xcaea0000) (async) recvmmsg(r13, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) (rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r14, r12}, 0xc) 12.347935226s ago: executing program 4 (id=3347): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x475) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r2, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x70}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x72}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '*:\'(+\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r9, 0x0, 0xcb, &(0x7f00000007c0)={0x0, 0x1, 0x5, 0x3, @vifc_lcl_addr=@multicast2, @remote}, 0x10) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r4, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008004) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000900)) syz_emit_ethernet(0x3a, &(0x7f0000000940)={@random="9d7089c53528", @multicast, @void, {@x25={0x805, {0x3, 0x4a, 0x9, "f792a9ee0aad0756fc01c9fa86669b31d3cc79d8202d453245020e1731f522e696f694c096f7d48661"}}}}, &(0x7f0000000980)={0x1, 0x2, [0x99e, 0xda4, 0x7c6, 0x4f6]}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x84, r2, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x33}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xb, 0x10000, 0x7, 0x0, 0x80000000, 0xfffff2f5, 0x3, 0x3ff, 0x1, 0xd6ac]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x713}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6fc}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}]}]}, 0x84}}, 0x48000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x38}}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000c40), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000c80)={0x0, 0x4, 0x8, 0x5}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000e00)={r0, &(0x7f0000000d00)='\x00', 0x500, &(0x7f0000000d40)={@_ha_fsid={[0x7, 0x6]}, {0xb, 0x9, 0x7, 0x200}}, 0x613e2c8e, &(0x7f0000000d80)={@_ha_fsid}, &(0x7f0000000dc0)=0x7fff}) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/mnt\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e80)={0x0}, &(0x7f0000000ec0)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008840) poll(&(0x7f0000001040)=[{r10, 0x8000}, {r9}, {}, {r12}, {0xffffffffffffffff, 0x8001}, {r10, 0x80a8}, {r9, 0x1}, {r10}], 0x8, 0x5) 12.340977291s ago: executing program 4 (id=3351): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c) 12.339177328s ago: executing program 4 (id=3353): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socket$kcm(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r0}, &(0x7f0000001c40), &(0x7f0000001c80)=r4}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.230083105s ago: executing program 2 (id=3382): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xce26, 0x200000, @loopback, 0x800}, 0x1c) (rerun: 32) 5.8600044s ago: executing program 3 (id=3384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)='%pI4 \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3c, 0x12, &(0x7f0000001380)=@framed={{}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x81}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7ff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x2000000}}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1802}) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1, 0x0, 0x9) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'dummy0\x00', 0x1}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r3, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x4000080) 5.787182308s ago: executing program 0 (id=3385): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 5.669401243s ago: executing program 2 (id=3386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES64=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000560800000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffff6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) 4.850309903s ago: executing program 1 (id=3387): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10, 0x800) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000006c0)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000700)=0x1, 0x4) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0400f3800c007100310a00000000000004003e8004003800000000ed28479c63d6b577e294685c798fc482d57aba8660c99b654016473f2171c67a6c241169154c3a575e89357030b59069212c860ffb3756c68d025c09cfe13360741f38aeb2fafe7f00abfae8fd5c736c3a5264790db8e3cb3329819a471ca5ab30fb8671ba27a9f2a4358a3c70b4050a97e200086df99bfe0fff94db9b649b23"], 0x2cc}, 0x1, 0x0, 0x0, 0x8000}, 0x22db68139b4f273e) 3.856689966s ago: executing program 0 (id=3388): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0xa4}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="01020000010006", 0x7) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x8, 0x3}, {0xfff1, 0xf}, {0xffff, 0x9}}}, 0x24}}, 0x4) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000000300)=[0x0, 0x81]) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x37}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x3, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x5c, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x884}, 0x1) socket$kcm(0x10, 0x2, 0x0) 3.035512844s ago: executing program 1 (id=3389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c0001800600060086"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x218, 0x0, 0x128, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010101, 0xffffff00, 0xff, 'virt_wifi0\x00', 'veth1\x00', {}, {0x5aa8dbcae4e57ba7}, 0x33, 0x3, 0x44}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x212, 0x114, 0x1, 0x1}}, @common=@ttl={{0x28}, {0x3, 0x59}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x2, 0x0, 0x1, 0x6], 0x5, 0x2}, {0x4, [0x0, 0x2], 0x2, 0x2}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x9]}}, @common=@icmp={{0x28}, {0x12, "7b15", 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ip={@rand_addr=0x64010102, @multicast2, 0xff, 0xff, 'pimreg1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x8001, {0x80}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x9, 0x6, 0x0, 0x100, 0x6, 0x4180107, r1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="09000000010003", 0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r10, &(0x7f00000000c0)={0x2c, 0x0, r12, 0x400000}, 0x10) bind$xdp(r10, &(0x7f0000000240)={0x2c, 0x1, r12, 0x0, r11}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYRES16=r5], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x44000) r13 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x50, 0x0, "5c1dc512ff7111014e66f8fc8517635e8281e15beb0fb82c7d7a950acdcfdf678c4a055ecfe6554cb0bcbfcf2a1a3b4d93d58de640f259b5ffc970c040af7a025ed85378211cf4417b816b681fc9b17e"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) 2.999811587s ago: executing program 2 (id=3390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000dc0)={&(0x7f0000000ac0)=@caif, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/190, 0xbe}, {&(0x7f0000000c00)=""/114, 0x72}], 0x2, &(0x7f0000000cc0)=""/225, 0xe1}, 0x2040) (async) recvmsg$can_bcm(r2, &(0x7f0000000dc0)={&(0x7f0000000ac0)=@caif, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/190, 0xbe}, {&(0x7f0000000c00)=""/114, 0x72}], 0x2, &(0x7f0000000cc0)=""/225, 0xe1}, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/116, 0x41, 0x74, 0x0, 0x21fe, 0x10000}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/116, 0x41, 0x74, 0x0, 0x21fe, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pi6 \x00'}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x5, 0xfffffff5, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, [@generic={0x4, 0x8, 0xe, 0x78ce, 0x4bdd}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @generic={0xa, 0x0, 0x6, 0x6, 0x8f7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0xa1, &(0x7f00000003c0)=""/161, 0x41100, 0x9, '\x00', r5, @fallback=0xc, r6, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x6, 0x36, 0x3ff}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000980)=[r7, r8, 0x1, r9, 0xffffffffffffffff, r10, r12, r0], &(0x7f00000009c0)=[{0x1, 0x5, 0x9, 0xb}, {0x0, 0x5, 0x10, 0xa}, {0x5, 0x5, 0x1, 0x7}, {0x3, 0x1, 0xb, 0x4}], 0x10, 0x8000}, 0x94) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32}]}}}]}, 0x3c}}, 0x0) 2.939758816s ago: executing program 3 (id=3391): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a7fbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r0, 0x9, 0x1, 0x200, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}, 0x40) 2.686659404s ago: executing program 0 (id=3392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0x11, 0x1}]}}, 0x0, 0x2a}, 0x28) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0x9, 0x7, 0x7, 0x5, 0xff, 0x8, 0x6, 0x0, 0x9, [0x5, 0x9, 0x2, 0x400, 0x3, 0x7, 0x7, 0x2]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x4000}, 0x38) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="000000000000000000ea7906668e13", 0xf}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x1, 0x0, 0x4}, {0x2, 0x0, 0x1}, 0x1, 0xff}, {0x0, 0x0, {0x1, 0xf0, 0x1}, {0x2, 0x1, 0x2}, 0xfe, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000000a580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0x11, 0x1}]}}, 0x0, 0x2a}, 0x28) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond_slave_1\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0x9, 0x7, 0x7, 0x5, 0xff, 0x8, 0x6, 0x0, 0x9, [0x5, 0x9, 0x2, 0x400, 0x3, 0x7, 0x7, 0x2]}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x4000}, 0x38) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="000000000000000000ea7906668e13", 0xf}], 0x1}}], 0x1, 0x41) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x1, 0x0, 0x4}, {0x2, 0x0, 0x1}, 0x1, 0xff}, {0x0, 0x0, {0x1, 0xf0, 0x1}, {0x2, 0x1, 0x2}, 0xfe, 0xff}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000000a580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 2.586347206s ago: executing program 3 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300400c1}, 0x814) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037005000000008000200", @ANYRES64=r5], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r9], 0x30}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r8, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f0000003100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000030c0)={&(0x7f0000001880)=@delchain={0x183c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xd}, {0xb, 0xd}, {0xa, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_basic={{0xa}, {0x1804, 0x2, [@TCA_BASIC_POLICE={0x874, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x5, 0x30000, 0x1, {0x8, 0x2, 0x6, 0xfff4, 0x8, 0x3ff}, {0x9, 0x0, 0x7, 0x5, 0x8, 0xdc0f}, 0x4, 0x9, 0x4451}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x8b4, 0x6, 0x41c82777, 0x7d, 0x7, 0xf, 0x6, 0x0, 0x8, 0x0, 0x4, 0x6, 0x80, 0x1, 0xd67, 0x80, 0x81, 0x7, 0x7, 0x1000, 0x1000000, 0x0, 0x4, 0x8, 0x8, 0x8, 0x3, 0x1, 0x2, 0x8, 0x6, 0x67e, 0x2, 0x3, 0x8, 0x4, 0x3, 0x1, 0x2, 0x80000001, 0x6, 0x5, 0x0, 0x8, 0x0, 0x33, 0x401, 0x9, 0x9, 0x2, 0xd7, 0x3, 0x2, 0x1, 0x48e, 0x3, 0x3, 0x1, 0xfffffff8, 0x9, 0x4, 0x5afcab12, 0x80, 0x1, 0x3ee, 0x800, 0xb4, 0xb4, 0x100000, 0x80000001, 0x44, 0x7fffffff, 0x9, 0x6, 0x22, 0x1, 0x9, 0x8, 0x7, 0x1000, 0xfffeffff, 0xde, 0x3, 0x7, 0x2, 0x4, 0xce80, 0x72fa, 0x4, 0x17, 0x0, 0x1, 0x7, 0xfffffff9, 0x7, 0x9, 0x8000, 0x22d36cc5, 0x6, 0x7c7, 0x71, 0x8, 0xa33, 0x8, 0xffff, 0x7ff, 0x9, 0x5, 0x204000, 0x0, 0x7, 0x8000, 0xffff0000, 0x8, 0x8, 0x4a, 0x8, 0xb, 0x442, 0x8, 0x5, 0x200, 0x1, 0xfffffff7, 0x4, 0x3, 0x2, 0x6, 0x9, 0x3, 0x7, 0xd2f, 0xffffff8f, 0x3, 0xb54, 0x5, 0x1, 0x7, 0x949, 0x401, 0x179697be, 0x4, 0xd8bb, 0x101, 0x9, 0x7, 0x5, 0x40, 0x2, 0x3ff, 0x7, 0x3, 0x9, 0x1, 0x7ff, 0x7ff, 0x6, 0x80, 0x7, 0xe, 0x3, 0xf, 0xe66c, 0x7, 0x6, 0x1, 0x3, 0x8000, 0xffffff40, 0xff, 0xc, 0x6b56, 0x3000, 0x7f, 0x7, 0x101, 0x0, 0x7, 0x6, 0x800, 0x3, 0xc814, 0x744, 0x4eea, 0x4, 0xa, 0x1, 0xffffff80, 0xe13, 0xbcbe, 0x7, 0x4, 0xfff, 0x0, 0x63, 0x5, 0xe87b, 0x5, 0x2, 0x4, 0x9, 0x19e, 0xffff, 0x8, 0x0, 0xfffffff1, 0x5, 0x6, 0x1000, 0x8, 0x1, 0x1ff, 0x5, 0xfffffffa, 0x8, 0xfffffff8, 0x1, 0xa152, 0x3, 0x8, 0xc, 0xff, 0x1, 0x9, 0x0, 0x1, 0x7923, 0x1, 0x5, 0x7, 0x10000, 0x2, 0x3, 0x9, 0x0, 0x8, 0x2, 0x8, 0x7, 0x0, 0x67, 0x9, 0x458d017e, 0x5, 0x6, 0xff, 0x0, 0x9, 0x99, 0x400, 0x9, 0x2, 0x8a, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4ee8, 0xff, 0x6, 0x6, 0x9ac, 0x6, 0x9, 0xffffff26, 0x7, 0x9, 0x7fffffff, 0x7, 0xe5, 0x6, 0xffff, 0x7ff, 0x6, 0x77, 0xfffffe01, 0x488c, 0x10, 0x73d5, 0x4fb3, 0x8001, 0x8000, 0xf, 0x4, 0x5, 0x2, 0x4, 0x2, 0x9, 0xea, 0x8, 0x7, 0x0, 0x8, 0xfffffffa, 0x100, 0x9, 0x7, 0x9, 0xfffffffe, 0x56, 0x96, 0x9, 0x3, 0x5, 0x8, 0x200, 0x4, 0x5, 0x401, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x3df, 0x1, 0x7, 0xb8d, 0x7, 0x9, 0x73fbbb3, 0x8, 0x7, 0xfffffffe, 0xff, 0x1, 0xa00000, 0x9, 0x6, 0x1, 0x1, 0x401, 0x4, 0x3, 0x9, 0x7f, 0x7, 0x8b49, 0x8, 0x6, 0x25, 0xf37d, 0x1, 0x8, 0xa3, 0x6cc, 0x2, 0x7bc, 0x5, 0x6, 0x4, 0x7, 0xfffffc00, 0x1f, 0x5, 0x5, 0x6, 0x6, 0x9, 0x7, 0x8, 0x7ff, 0xb, 0x1, 0x10, 0xffff0001, 0x5, 0x173881e8, 0x1, 0x4000000, 0xf, 0x1, 0x0, 0x3, 0x1ff, 0x1, 0x3, 0xffffff7f, 0x1c00, 0xbe, 0x5, 0x0, 0xa3d4, 0x9, 0x0, 0x7a20b197, 0xa3, 0x7fff, 0xfffffffe, 0x8, 0x3, 0x6, 0x200, 0x5, 0x4, 0xa, 0x7, 0x4, 0x7, 0x5289, 0x5, 0x8, 0x6, 0x0, 0x8, 0x7ac3, 0x8, 0xffff8b4c, 0xf, 0x401, 0xffffffff, 0x7, 0x8, 0x10001, 0x6f1, 0x6, 0xf, 0x7fffffff, 0x6, 0x100000, 0xff, 0xff, 0x5, 0xe, 0x8, 0x1f, 0x8, 0x9, 0x7, 0xc, 0xe2, 0xffff7fff, 0x10001, 0xe3e4, 0x100, 0x6, 0x6b54, 0xd8, 0x8, 0x4, 0xffff, 0xc5, 0x4, 0x3ff, 0x0, 0x80000000, 0x4, 0xc2, 0x6, 0x3, 0x0, 0xe0, 0x5, 0x2000, 0xc, 0xfffffff8, 0x8, 0x200, 0x0, 0x3ff, 0x3, 0x63f, 0xe, 0x9, 0xb, 0xfffffffe, 0x5, 0x7f, 0xae, 0x80000001, 0x8, 0x8, 0x6, 0xee, 0x4, 0x1, 0x3, 0x6, 0x4, 0x10000, 0xc97, 0x4, 0x10001, 0x2, 0x4, 0x5, 0x6, 0x4, 0x8, 0x5, 0x1, 0x80000, 0xe, 0xfffffbff, 0x1, 0x17, 0x2, 0xc97, 0x6, 0x10000, 0x2e0, 0x5, 0x7, 0x2, 0x0, 0x6686, 0xae, 0x4, 0x3000]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}]}, @TCA_BASIC_EMATCHES={0x334, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x9, 0x0, 0x0, {{0x7, 0x3, 0x79}, {0x5, 0xfd, 0x4, 0x5ed3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x4}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0xfc, 0x3, 0x0, 0x0, {{0xf944, 0x9, 0x68}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf}, @TCA_EM_IPT_MATCH_DATA={0xd1, 0x5, "5d71c179f8f5185e3b4b0664c853c175a456988b6e939f363af2ac428d2967cbfd9b9256d2b3da70f4af89614385a2aa70ab8e84bc922d6bab2742a995f28ea0aea7747b09d8d999d985cc11432ac91b1cb9cc2e9612d0fe2a01b9b2163050d32ed102f546341c3f49ad2ca245087da5fee0b909647b631890b7a225703684b6379ac16dfc51e1fc846e0c75f27c7cfd7a90336df22ca272f0a55fe59c948b5bbecafb08ee972f71ed1d08e759360237f682d0039853e5f5a9a1296a479bdb1f2776b91ddf72d574a33d340ce9"}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x400}, {0x3ff, 0x3ff, 0x55, 0x5}}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0xf2c}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x1, 0x2}, {0xff80, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x46d, 0x6d}, {0x1, 0x1e, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xe4, 0x2}, {0x7f}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="b2a2685a", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="cb", @TCF_META_TYPE_VAR="b1a2fe30a38652"]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x400, 0x3, 0x401}, {0x8, 0xb8d, 0x4, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x401}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ec}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="2c17c2c51887", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="7fca173465889cbb"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8ed7d8f29b3172e2e862"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6, 0x1}, {0x5, 0x1}}}]}}, @TCF_EM_CONTAINER={0x88, 0x1, 0x0, 0x0, {{0xf0a5, 0x0, 0x27cd}, "915a3d59f82ef250203beb6e850f34c5d6130805c7478c482b18fcdecda7df62cde4e11121456a6bf865070be9963b8e57d7feebc210ec6dc4a1f29682f16d338d2cae005a705aa94432871d2f649ed5e4cd692fe063acdf7b72c65740e8f58603d156e8951e7a9899f2f619eb5dbfef318c0ab50328b2bc73c013e2"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0xc72}, {0xffffffffffffffff, 0x2, 0xa}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xfff7, 0x9, 0x9}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x100, 0x3, 0x9}, {0x8000, 0xb, 0x7798, 0x1e28}}}]}]}, @TCA_BASIC_POLICE={0x820, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe, 0x5, 0x6, 0x8, 0x5, 0x0, 0x3, 0x7, 0x7fffffff, 0x67dded5f, 0xa3, 0x10, 0x0, 0xffffff80, 0x9, 0xfffffff3, 0x100, 0x2, 0x40, 0x1, 0x8001, 0x2, 0xe5b, 0xa, 0x2a58, 0x7, 0x7ff, 0x53a0, 0x3ff, 0x73ba, 0x4, 0x800, 0x5, 0x9, 0x8c, 0x1000, 0x5, 0x10001, 0xe, 0x9, 0x5, 0x0, 0x7f, 0x80000000, 0x9, 0x402, 0x6, 0x10, 0x4, 0x68d, 0x9, 0x6, 0x3, 0xfffffe01, 0x7, 0x0, 0xfffffffb, 0x8, 0x0, 0xb, 0x8, 0x1, 0x8, 0xfffffff5, 0x4, 0xfffffff7, 0x0, 0x9365, 0x0, 0xe5a, 0x2, 0x6be, 0xe6d, 0x1ff, 0x401, 0x10000, 0x5, 0xec5, 0x6, 0x81, 0xfffffff5, 0x9, 0x0, 0x7ff, 0x5, 0x0, 0x2, 0x4, 0x400, 0x7, 0x0, 0x8, 0x7, 0x7, 0x6, 0xb494, 0xfffffffb, 0x4, 0xb, 0x8001, 0xd87, 0x6, 0x8, 0x1, 0x3, 0x85, 0x3, 0x50af, 0x2, 0xba, 0x1, 0x0, 0x5, 0x1, 0x3, 0xfff, 0x5, 0x8, 0x3, 0x6, 0x2, 0x0, 0x35ef, 0x6, 0xffffffff, 0x3a2, 0x2599, 0xfc, 0x7, 0x800, 0x400, 0x9, 0x53c86d51, 0x9, 0x9, 0x4, 0x5, 0xfffffff2, 0x1, 0x0, 0xc, 0xffff8001, 0x4, 0x9, 0x200, 0x1, 0x81, 0x3, 0x401, 0xfffffffb, 0x84, 0x5, 0x0, 0x7, 0xa, 0x8, 0x81, 0x6, 0x7ff, 0x10000, 0x0, 0x3c5a, 0x4, 0x4, 0x80, 0x1000, 0x2, 0xab00, 0x8000, 0x6, 0x9, 0x0, 0x8, 0xc6, 0x10001, 0xff, 0x7, 0x4, 0xffff, 0x7f, 0x1, 0x6, 0x4, 0xd, 0x172b, 0x5, 0x8, 0x400, 0x9, 0xffff0001, 0x7, 0x252, 0xc, 0x1, 0xe47, 0x8, 0x1, 0x80, 0xd89, 0x4, 0x4, 0xfffffffb, 0x13, 0x5, 0x51, 0x1, 0x1, 0x1, 0x2, 0x3, 0x10, 0x7ff, 0x8001, 0x4, 0x3ff, 0x6, 0x4, 0x4f, 0x5, 0x0, 0x6, 0x7, 0x3ff, 0x5, 0x6, 0x0, 0x5, 0x0, 0x7, 0x6, 0x3ff, 0x2, 0xb, 0x4, 0x7, 0xffff, 0x0, 0x3, 0x7, 0x3, 0x3, 0xa, 0x8, 0x5, 0x0, 0x2, 0x1, 0x3, 0x4, 0x1000, 0x1, 0xfffeffff, 0x2, 0x80, 0x12fff0ae]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x401, 0xee00, 0x7, 0x61ee000, 0x9, 0xff, 0x8, 0x800, 0x7, 0x1, 0x2000, 0x3, 0x10000, 0x3, 0x35, 0x4, 0x400, 0x4, 0x6a0, 0x4, 0xc, 0x31e, 0x4, 0x5, 0xa, 0xfffffffd, 0x100, 0x800, 0x20950a0e, 0x6, 0x0, 0xfffffffc, 0x81, 0x101, 0xff, 0x8000, 0x0, 0x10000, 0x9, 0x7fffffff, 0x2, 0x80000001, 0x7ff, 0x9, 0x7, 0x8, 0xcdf8, 0x7, 0x8, 0xd4, 0x9, 0xd, 0x52, 0x1, 0x1, 0x3, 0x7, 0x7, 0x4, 0x20cd, 0xfffffff3, 0x8, 0x80, 0x5, 0x1, 0x3, 0xe8, 0x3, 0x10001, 0x776a, 0x1, 0x7, 0x3, 0xffffffff, 0x9, 0x0, 0x3, 0x10000, 0x7, 0x3, 0x800, 0xce, 0x7, 0x10, 0x5, 0x42, 0x34, 0x4, 0x9, 0x2, 0x3, 0x0, 0x9, 0x325, 0x370, 0x0, 0x1, 0x10, 0x1, 0x1c, 0x8000, 0x0, 0x10, 0x80000000, 0x4, 0x7, 0x8, 0x7, 0x3, 0x5, 0x3, 0x8, 0x2, 0xfaa3ddd4, 0x8, 0x7, 0x92, 0x3ff, 0x45949cab, 0x3, 0x81, 0xe78, 0x3, 0x3, 0x9451, 0xd, 0x7, 0x2, 0xe, 0x4, 0x0, 0x6, 0x20000, 0x3, 0xffff, 0x9b, 0xb, 0x2, 0x388, 0x7c08, 0x6, 0x2, 0x6, 0x0, 0x8, 0x5, 0xfffff5de, 0x6, 0x81, 0x3, 0x0, 0x2, 0x5, 0xfff, 0x9, 0x10, 0x10001, 0x40, 0x3, 0x1, 0x8, 0x3, 0x0, 0x9, 0x3849, 0x0, 0x0, 0x10, 0xc00, 0xedcc, 0x25a, 0x6f, 0x101, 0x4, 0x6, 0x3, 0x878d, 0x1, 0x7, 0xffffffff, 0x0, 0xb13, 0x80000001, 0x0, 0x1, 0x3, 0x80000001, 0x7ff, 0x0, 0x80, 0x0, 0xd6f, 0x6, 0x4, 0x5b0, 0x3, 0x7, 0x7fff, 0x200, 0x3, 0x4, 0x7fffffff, 0xa2, 0x1, 0x3, 0xfffffff9, 0x3ad0, 0xf, 0x9, 0x80000000, 0x10000, 0x4, 0x3, 0x7, 0xfffffff7, 0x2, 0x1ffe000, 0x0, 0x8, 0xc9, 0x8001, 0x7, 0x5, 0x0, 0x9, 0xfffffff4, 0x1, 0x3, 0x2, 0x1, 0xe, 0x0, 0x6, 0x4, 0xfffffff9, 0x5, 0x10000, 0x2, 0x9, 0x27844bd6, 0x9, 0x9, 0x40, 0xfffffffd, 0x4, 0x0, 0x6fe, 0x800, 0x6e, 0x9, 0x0, 0xa, 0x2, 0xfffff475]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x9}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff2}}, @TCA_BASIC_POLICE={0x420, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f1, 0x7, 0x40, 0x8, 0x7, 0x9, 0x2, 0x8001, 0x8, 0x1, 0x9, 0x2, 0x3, 0x10000, 0x5, 0x200, 0xd93b1779, 0x99, 0x2, 0x200, 0xc10d, 0xe8f, 0x80000001, 0x2, 0x4, 0x0, 0x8, 0x101, 0x1, 0xfff, 0x100, 0x5, 0x5, 0x6, 0xa14, 0x40, 0x0, 0x9, 0x3, 0x80000001, 0x6afa, 0xb, 0xff, 0x36d1, 0x8, 0x2, 0xba, 0x40, 0x7ff, 0x100, 0x9, 0x8, 0x7, 0x1, 0x4, 0x7, 0xfffffff8, 0x1, 0x7, 0xfffffff9, 0x0, 0x1, 0xdfb4, 0xfffffffb, 0x5, 0x0, 0x1c, 0x101, 0x5, 0x7, 0x9, 0x5, 0xbd, 0x3, 0x2, 0x2, 0x7fff, 0x3, 0xc, 0x1, 0x7, 0x5, 0x7, 0x1, 0xffffffff, 0xbb38, 0xb8, 0x6, 0x3, 0x4d3c, 0x4, 0x5, 0x10001, 0x9, 0x2, 0x0, 0x4, 0xded, 0x9, 0x5, 0x9, 0x8, 0x5, 0xb8, 0x2, 0x6, 0xb74, 0x3, 0x2f, 0x3, 0xfff, 0x9, 0x9, 0x4, 0x6, 0x1ff, 0x8, 0xc, 0x3, 0x10, 0x3, 0x9, 0x1, 0x76, 0x9, 0x400, 0x6e, 0x10b, 0x1ff, 0x6d, 0x100, 0x49, 0x2, 0x1ff, 0x10001, 0x4, 0x5, 0xfffffffa, 0x1, 0x5, 0x9, 0x8, 0x4c82b0a4, 0x2, 0x747c, 0x2ba4, 0x6, 0x1ff, 0x0, 0x1, 0x4, 0x8, 0x86a8, 0x5, 0x4, 0x400, 0x6, 0x7fffffff, 0x8, 0x1, 0x4, 0x6, 0x9, 0x9, 0x89f, 0x4, 0x2, 0x2, 0x40, 0x200, 0x9, 0x6, 0x4, 0x3, 0x1, 0x7, 0xffffffff, 0x4, 0x0, 0x2, 0x1, 0x9, 0x7, 0x120, 0x9, 0x97a, 0x55, 0x2800, 0x98d7, 0x0, 0x2, 0xffffffff, 0x4, 0x0, 0x0, 0xb, 0x0, 0x8, 0xbce, 0x7, 0x3, 0x5, 0x125, 0x2, 0x7f, 0x6, 0xffff34ac, 0x1, 0x0, 0xccf792b, 0xff, 0xa, 0x7, 0x10, 0xfff, 0x0, 0xff, 0x40, 0x2, 0x9, 0x7, 0x10, 0x3, 0x7, 0x7, 0x4, 0x8, 0x2, 0x9, 0x7, 0x2, 0x14c3, 0xa, 0xffff, 0x1, 0xf, 0x4, 0x98e, 0x8, 0x8, 0x2, 0x1, 0x6, 0x0, 0xb56, 0x75a, 0xffff16da, 0x3ff, 0x7ff, 0x3, 0xf81, 0x10000, 0x4, 0xfff, 0x7, 0x7ff]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xe}}]}}]}, 0x183c}, 0x1, 0x0, 0x0, 0x20004001}, 0x10) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r12) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={0x110, r14, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x40}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.251339378s ago: executing program 2 (id=3394): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) (async) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c) (async) r3 = socket$kcm(0xa, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)="583f1906d8975f13816f2ee08ebf71538aba4a1361387c15b7cbc21b91400d2aed2e992942d62a12297b150765bcab452cf671c3161bdbe045ca3fa8449a5548083f5d117c7edee03e9a129bd320f0bba72650f56cea9fc6284ff29f4aba34639b42e0add360a852b6e27540bc1524bb9a05ad12c0c57b73d10fe7086d68ab872ad79e247b84a269059c27a4deb8290ae474a69c6f2081dbcb333f08776afaada92835b319a43d6ad6c212a91911558859af035d86ef83a8a2db87d16ac27103e0ffb63635591039e577f0823b525d9d708f254cfdc0258e77bf132b03f13e533fe776c5bae8", 0xe6}], 0x1, &(0x7f0000000880)=[{0xe8, 0x112, 0x0, "e1bece8e589b5d0a970dec58138f6b82cbdbd491de650e8ae96685f4ae7b4475cff8bfcf4d71196e4575499e302244f31b689a1cf627a40a1f0ba7fe1d0b0a522ccf8b29922ab28a5c1c4b3e075f87c71f51bf970537b1dc45f55063214144cc7407db3b5b1397734a18badb8a0bbf057593e9dfb8772f1f221e2f3849fba727bdbd0f11b973bd0061331f5554d97c72c754f4f7f7cddcc91e8bdf16ae3515059ee8e5e1b2eff288046ad26c5da91a08c81dff962f6df6b809378dc2c106ed724302dfd3a54f4516b8d336c1bfbe3b4a5b82138c3c8f"}, {0xb8, 0xb, 0x6, "d97f7a67337780d7940be96baa355e298f3c7be295daaa7a9215f3841d56dae7df63d7f541815f466898d1b30e360a6cefee3e5b2dfbae4806ed6f079157bbc45a78cd451fb3ed225cf537b6f0b53f4bf90f9dc9bbb55e5f3600f674a9c5a9a6bb4e9a8e8960a3ba597cebe0c9b45042cda68357f616873d7238bcd65018ffd12c4d8f7d2819dc2c87894a693ca157e49ea274269e6cf7828b4ab5a2d4096f2d4c0b5ed1733d"}], 0x1a0}, 0x5) 1.989988753s ago: executing program 2 (id=3395): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bc26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x0, 0xfff3}, {0x97c979544aced01, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xb, 0x207, 0x10, 0x0, 0xe, 0x7, 0x1}}, {0x6, 0x2, [0xb867]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000005c0)="05031c00d3fc140000004788ed1c", 0xe, 0x24000091, &(0x7f0000000140)={0x11, 0x7, r9, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x31, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_PROTOCOL={0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.969366167s ago: executing program 3 (id=3396): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @union={0x5, 0x1, 0x0, 0x5, 0x0, 0xc, [{0xb, 0x0, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f00000014c0)=""/229, 0x4b, 0xe5, 0x0, 0x10}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x80000001, '\x00', 0x0, r2, 0x1, 0x5, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) r3 = socket(0x9, 0xcd343f641fb127ca, 0x77e) socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440cf313ac1414aa80000009000000002400000000000000000000000700000044106300000007ff0000000000007fff94040000000000001400000000000000000000000200000004"], 0x60}}], 0x1, 0x50008000) sendmmsg(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000440)}, {&(0x7f00000004c0)="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", 0xfe8}, {&(0x7f00000014c0)}], 0x4}}], 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r3, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) 1.924419407s ago: executing program 0 (id=3397): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000080)=0x14) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000000000c6000000ffff00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"/270], 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x2}, 0x50) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2a, '\x00', r1, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0xff, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x1, r7, r2, 0x1, r8], &(0x7f0000000400)=[{0x1, 0x5, 0x5, 0x4}, {0x5, 0x4, 0x2, 0x8}], 0x10, 0x2}, 0x94) 1.884121229s ago: executing program 1 (id=3398): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x7) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r5, 0x8931, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_addrs=@nl=@unspec}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006f862152e2ecf506f7c3fe5b5bbfe64768497e1ff37708ceec0134393dafc0a6cbb3bdbafaa80ce3fea84867bf8a99d055ecacb804afac5691ce9a2b88b62a0743cb6c44e447bf6814b68ba4ff56fb1d544430191bc3607225f4edde4b17157563b0d9e3425b6156169faa389347a06568573799e41754a71687e5168542b7a3fe80cef5d0f54d111803cd3cd018b2e670ff40012df9f9e4a65914c5785003456a32942f4de258dbdde97a7eb76955", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf253a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b000600650000080000"], 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) 1.610077297s ago: executing program 0 (id=3399): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800090027bd7000fddbdf250400000007000b0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000500)='pids.current\x00', 0x275a, 0x0) bind$tipc(r2, &(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x204e20, 0x4}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x9, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x43}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000ac0)=0x4) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x20, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x19, 0x6, 0x9, 0x5, 0xfffffffb}, @jmp={0x5, 0x0, 0x3, 0x7, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xffff038a, 0x9e, &(0x7f00000003c0)=""/158, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xe, 0x6, 0x5bb22464}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x1, 0x1], &(0x7f0000000540)=[{0x5, 0x1, 0x1, 0x4}, {0x5, 0x5, 0xf, 0x8}, {0x5, 0x5, 0x9, 0xa}, {0x2, 0x1, 0x7, 0x3}, {0x1, 0x4, 0xb}, {0x3, 0x2, 0x10, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x2, 0x10}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000900)={{0xffffffffffffffff, &(0x7f00000006c0)='\x05\x00', 0x902c1, &(0x7f0000000700)={@_ha_fsid={[0x25d, 0x7]}, {0x7fff, 0x1, 0x4, 0x6}}, 0x8001, &(0x7f0000000740), &(0x7f0000000780)=0x7}, 0x2, &(0x7f00000008c0)=[{0x1, 0xffff2725, &(0x7f00000007c0)='/*{*}j\x00', &(0x7f0000000800)="61d84e2041d710061d", 0x9}, {0x2, 0x10001, &(0x7f0000000840), &(0x7f0000000880)="23d2f36ae20578edb05c9ba325fb99aee494b0f5ea3cbbbc14757c001054c18a4e4af724", 0x24, 0x8}]}) r8 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp, 0x80, 0x0}, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x8) 1.220159878s ago: executing program 1 (id=3400): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="008400000000040014001a80100004800c000180"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="6881faeecdbe4f775b", 0x9}, {&(0x7f0000000040)="96c1491e52cc60568ff43e327240", 0xe}], 0x2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x81b21000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40880) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 847.359717ms ago: executing program 2 (id=3401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "e1a4df85181bfbc4c1e30aea57856a20f95d4816d6d1909e36294d4a26e48196", "a94afd3c6761d8c189ba4416c20619af33da236f32d8105fc4e83a55b1ae83a7", "242cceda0f7f52455782629808ab8ff69bb175ff217581adfa4970ae915218c7", "84cd7ab832dd393ed9251dd2bba1c90b16802468174a3c4fd13e05a54af5d9be", "81c4839450d41c9be76ff19b07440169751edb23b7fa5b57ffa540780d73a3c7", "5565cecf39917b652fce7f75", 0x50, 0x8, 0x6, 0xccae, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='gretap0\x00', 0x10001, 0x8, 0x5}) 666.233043ms ago: executing program 1 (id=3402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0)={'veth0_to_bridge', 0x32, 0x34}, 0x12) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev}, &(0x7f00000003c0)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000000c0)={{r0}, {@void, @max}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000080)={0x8, 0x49}) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x20000004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000280), 0x2, 0x0) (async) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0)={'veth0_to_bridge', 0x32, 0x34}, 0x12) (async) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev}, &(0x7f00000003c0)=0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000000c0)={{r0}, {@void, @max}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000080)={0x8, 0x49}) (async) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x20000004) (async) 464.353008ms ago: executing program 3 (id=3403): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000001614016a61"], 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x5, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 231.43408ms ago: executing program 0 (id=3404): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r5, 0x7ff}, &(0x7f0000000180)=0x8) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=r6], 0x24}], 0x1, 0x0, 0x0, 0x20040880}, 0x0) 34.134499ms ago: executing program 1 (id=3405): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1b}}], 0x18}, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r4, @in={{0x2, 0x4e24, @empty}}, 0x7b2, 0x7}, &(0x7f0000000000)=0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r7 = accept$alg(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r8, 0x8b32, &(0x7f0000000040)) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000280)={{r9}, 0x3, &(0x7f00000000c0)=[0x3, 0x7, 0x40], 0x2, 0xf}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="4e6b4e70a8500eed025a4f7b40d2fb55919236d7edb067d10f7ac23e660aaba717c7a5290e3df7e27ea23424201457c6a7d502f378be34157e78f2", @ANYRES16=r6, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400) 0s ago: executing program 3 (id=3406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@srh={0x2c, 0x0, 0x4, 0x0, 0x3, 0x0, 0x365}]}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0xb4, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r8, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000740)={0xfffffffd, 0x10, 0x1, 0x1fa4, 0x4, 0x4, 0xfffffffe, 0x7}) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r11, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r12, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000060000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x24000040) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x405, 0x0, 0x200003, {0x0, 0x0, 0x0, r2, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) kernel console output (not intermixed with test programs): e dependency failed, not supported in mode balance-rr(0) [ 358.645170][T14872] bond7 (unregistering): Released all slaves [ 358.750060][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'. [ 358.800676][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 358.886437][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 358.910565][T14884] syzkaller0: entered promiscuous mode [ 358.923670][T14884] syzkaller0: entered allmulticast mode [ 358.964279][T14897] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 359.019675][T14901] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 359.028586][T14901] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2283'. [ 360.471615][T14897] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 360.474718][T14902] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 360.599074][T14913] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2285'. [ 360.656311][T14916] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 360.681381][T14916] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2286'. [ 360.840339][T14925] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2290'. [ 360.874130][T14929] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2290'. [ 360.907261][T14919] syzkaller0: entered promiscuous mode [ 360.919960][T14919] syzkaller0: entered allmulticast mode [ 360.928607][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'. [ 362.648567][T14921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.663226][T14921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.012283][ T12] net_ratelimit: 214 callbacks suppressed [ 363.012302][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.038740][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 363.082313][T14976] macsec0: entered promiscuous mode [ 363.105115][T14976] macsec0: entered allmulticast mode [ 363.123423][T14975] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.161432][T14976] veth1_macvtap: entered promiscuous mode [ 363.163552][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.174269][T14976] veth1_macvtap: entered allmulticast mode [ 363.187228][T14976] macsec0: left promiscuous mode [ 363.194475][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.205110][T14976] macsec0: left allmulticast mode [ 363.212703][T14976] veth1_macvtap: left allmulticast mode [ 363.222280][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.234214][ T6811] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 363.258572][T14980] veth0_macvtap: Caught tx_queue_len zero misconfig [ 363.347506][T14978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.362766][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.382037][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.425200][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.462030][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 363.547905][T14978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.558651][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b2400: rx timeout, send abort [ 363.641141][T14995] __nla_validate_parse: 5 callbacks suppressed [ 363.641160][T14995] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2309'. [ 363.768459][T14978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.917834][T15006] sctp: [Deprecated]: syz.3.2311 (pid 15006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.917834][T15006] Use struct sctp_sack_info instead [ 363.968956][T14978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.040556][T15008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2313'. [ 364.058774][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b2c00: rx timeout, send abort [ 364.068666][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b2400: abort rx timeout. Force session deactivation [ 364.099086][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880697b2c00: connection exists (fe ff). last cmd: 20 [ 364.328862][ T6807] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.348977][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a32d000: rx timeout, send abort [ 364.365886][ T6806] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.428833][ T6806] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.516821][ T6806] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.555297][T15021] syzkaller0: entered promiscuous mode [ 364.578490][T15021] syzkaller0: entered allmulticast mode [ 364.696422][T15025] netlink: 'syz.3.2319': attribute type 9 has an invalid length. [ 364.858108][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a32d000: abort rx timeout. Force session deactivation [ 365.083986][T15037] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2324'. [ 365.111399][T15037] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 365.167510][T15040] netlink: 'syz.0.2326': attribute type 83 has an invalid length. [ 365.253149][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 365.282931][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 365.343338][T15049] batadv_slave_0: Caught tx_queue_len zero misconfig [ 365.651742][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2330'. [ 366.083370][T15081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2338'. [ 366.788875][T15104] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2345'. [ 366.940902][T15114] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2348'. [ 366.948644][T15108] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2348'. [ 367.028672][T15109] 8021q: adding VLAN 0 to HW filter on device bond14 [ 367.401236][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079a09400: rx timeout, send abort [ 367.410183][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079a09400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 367.499228][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053b57000: rx timeout, send abort [ 367.508059][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888053b57000: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 367.849352][T15150] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 367.870506][T15150] netlink: 'syz.3.2354': attribute type 4 has an invalid length. [ 368.083683][ T6806] net_ratelimit: 110 callbacks suppressed [ 368.083701][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.147633][T15161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.159474][ T6806] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.293285][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.326650][ T6807] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.462400][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.475061][ T6806] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.592300][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.611380][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.743227][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 368.965964][T15195] __nla_validate_parse: 6 callbacks suppressed [ 368.965993][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 369.409664][T15213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2371'. [ 369.568627][T15223] netlink: 'syz.4.2375': attribute type 12 has an invalid length. [ 369.610910][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 369.650734][T15223] netlink: 'syz.4.2375': attribute type 12 has an invalid length. [ 369.688211][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 370.193625][T15240] bond7: (slave gre0): Device is not bonding slave [ 370.220463][T15240] bond7: option active_slave: invalid value (gre0) [ 370.242587][T15240] bond7 (unregistering): Released all slaves [ 370.616178][T15258] netlink: 'syz.1.2385': attribute type 8 has an invalid length. [ 370.851127][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 370.993449][T15275] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2388'. [ 371.104647][T15279] raw_sendmsg: syz.0.2384 forgot to set AF_INET. Fix it! [ 371.289291][T15288] sock: sock_timestamping_bind_phc: sock not bind to device [ 371.300862][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2391'. [ 371.331035][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2391'. [ 371.902740][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'. [ 372.073898][T15327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2397'. [ 372.198965][T15327] bond6: entered promiscuous mode [ 372.215809][T15327] bond6: entered allmulticast mode [ 373.102793][ T12] net_ratelimit: 126 callbacks suppressed [ 373.102846][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.165741][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.195688][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.224459][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.272420][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.292069][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.302221][T15359] openvswitch: netlink: IP tunnel dst address not specified [ 373.310203][T15359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.320956][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 373.359234][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 375.020289][T15358] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 375.048163][T15358] netlink: 'syz.1.2408': attribute type 2 has an invalid length. [ 375.265385][T15365] __nla_validate_parse: 1 callbacks suppressed [ 375.265403][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 375.680432][T15384] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2415'. [ 375.921248][T15393] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2417'. [ 375.959363][T15395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'. [ 376.184146][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2419'. [ 376.240085][T15397] netlink: 'syz.0.2419': attribute type 5 has an invalid length. [ 376.259624][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 376.276162][T15397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2419'. [ 376.345258][T15407] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 376.378378][T15407] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 376.539031][T15405] ip6gretap1: entered promiscuous mode [ 376.565066][T15405] ip6gretap1: entered allmulticast mode [ 376.650578][T15397] geneve4: entered promiscuous mode [ 376.678075][T15397] geneve4: entered allmulticast mode [ 376.698074][ T169] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 376.717339][ T169] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 376.750898][T15423] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 376.760129][ T169] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 376.778618][ T169] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 376.961697][T15431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2427'. [ 376.974338][T15423] bond7: entered promiscuous mode [ 376.979769][T15423] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.279800][ T30] audit: type=1800 audit(1783525112.039:7): pid=15438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2429" name="memory.events" dev="tmpfs" ino=2414 res=0 errno=0 [ 377.529792][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 378.123033][ T12] net_ratelimit: 175 callbacks suppressed [ 378.123052][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.192627][ T5639] block nbd1: Receive control failed (result -32) [ 378.193460][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.275724][T15468] netlink: 'syz.1.2437': attribute type 2 has an invalid length. [ 378.283647][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.302805][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.354864][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.368960][ T6830] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.492171][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.516185][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.653654][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.698941][ T6830] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 378.859119][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 378.884971][T15501] netlink: 'syz.3.2443': attribute type 1 has an invalid length. [ 379.390213][T15517] bridge0: port 3(team0) entered disabled state [ 379.430478][T15517] team0 (unregistering): left promiscuous mode [ 379.451754][T15517] team_slave_0: left promiscuous mode [ 379.460867][T15517] team_slave_1: left promiscuous mode [ 379.470488][T15517] bridge0: port 3(team0) entered disabled state [ 379.495463][T15517] team_slave_0: left allmulticast mode [ 379.515914][T15517] team0 (unregistering): Port device team_slave_0 removed [ 379.538743][T15517] team_slave_1: left allmulticast mode [ 379.553758][T15532] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 379.616473][T15517] team0 (unregistering): Port device team_slave_1 removed [ 379.788449][T15539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2453'. [ 379.828785][T15538] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 379.964843][T15545] netlink: 'syz.0.2454': attribute type 12 has an invalid length. [ 380.156461][T15555] netlink: 'syz.1.2456': attribute type 8 has an invalid length. [ 380.507443][T15566] netlink: 'syz.3.2460': attribute type 142 has an invalid length. [ 380.522034][T15568] __nla_validate_parse: 2 callbacks suppressed [ 380.522051][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2461'. [ 380.565408][T15568] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2461'. [ 380.851579][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2466'. [ 380.870024][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2464'. [ 380.971693][T15581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2466'. [ 381.119790][T15585] syzkaller0: entered promiscuous mode [ 381.141214][T15585] syzkaller0: entered allmulticast mode [ 381.310648][T15595] netlink: 42 bytes leftover after parsing attributes in process `syz.1.2470'. [ 381.608922][T15611] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 381.895166][T15611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.243595][T15645] ipt_ECN: cannot use operation on non-tcp rule [ 382.661233][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 382.694093][T15657] netlink: 'syz.1.2484': attribute type 5 has an invalid length. [ 382.711444][T15659] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.718494][T15657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2484'. [ 383.148481][ T6830] net_ratelimit: 120 callbacks suppressed [ 383.148541][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.182621][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.202215][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.222369][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.244993][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.274513][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.302611][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.322421][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.344481][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 383.382065][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 384.816222][T15657] geneve4: entered promiscuous mode [ 384.822304][T15657] geneve4: entered allmulticast mode [ 384.901100][T15669] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 384.910021][T15669] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 384.930290][T15669] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 384.955584][T15669] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 384.966226][T15669] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 384.984088][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 385.000085][T15669] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 385.027511][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 385.057819][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 385.095137][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 385.154908][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 385.164928][T15678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2491'. [ 385.645813][T15697] FAULT_INJECTION: forcing a failure. [ 385.645813][T15697] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 385.717410][T15697] CPU: 1 UID: 0 PID: 15697 Comm: syz.4.2497 Not tainted syzkaller #0 PREEMPT(full) [ 385.717441][T15697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.717468][T15697] Call Trace: [ 385.717477][T15697] [ 385.717487][T15697] dump_stack_lvl+0xe8/0x150 [ 385.717540][T15697] should_fail_ex+0x40c/0x560 [ 385.717590][T15697] _copy_from_iter+0x1d3/0x1660 [ 385.717620][T15697] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 385.717653][T15697] ? dev_get_by_index+0x22/0x2d0 [ 385.717680][T15697] ? __pfx__copy_from_iter+0x10/0x10 [ 385.717714][T15697] ? dev_get_by_index+0x22/0x2d0 [ 385.717736][T15697] ? dev_get_by_index+0x22/0x2d0 [ 385.717766][T15697] packet_sendmsg+0x2f1d/0x5040 [ 385.717790][T15697] ? aa_label_sk_perm+0x532/0x6e0 [ 385.717823][T15697] ? __lock_acquire+0x683/0x2cf0 [ 385.717865][T15697] ? __lock_acquire+0x683/0x2cf0 [ 385.717911][T15697] ? unwind_next_frame+0x8f/0x2550 [ 385.717952][T15697] ? __pfx_packet_sendmsg+0x10/0x10 [ 385.717987][T15697] ? __pfx_aa_sk_perm+0x10/0x10 [ 385.718024][T15697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 385.718052][T15697] ? __pfx_packet_sendmsg+0x10/0x10 [ 385.718072][T15697] sock_sendmsg_nosec+0x13a/0x180 [ 385.718101][T15697] ____sys_sendmsg+0x54e/0x850 [ 385.718140][T15697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.718183][T15697] ? import_iovec+0x73/0xa0 [ 385.718218][T15697] ___sys_sendmsg+0x2a5/0x360 [ 385.718249][T15697] ? __lock_acquire+0x683/0x2cf0 [ 385.718283][T15697] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.718354][T15697] ? __fget_files+0x2a/0x420 [ 385.718382][T15697] ? __fget_files+0x3a2/0x420 [ 385.718422][T15697] __x64_sys_sendmsg+0x1b1/0x290 [ 385.718458][T15697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.718512][T15697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.718536][T15697] do_syscall_64+0x174/0x580 [ 385.718572][T15697] ? trace_irq_disable+0x3b/0x140 [ 385.718600][T15697] ? clear_bhb_loop+0x40/0x90 [ 385.718627][T15697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.718651][T15697] RIP: 0033:0x7f7086b9de59 [ 385.718671][T15697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.718691][T15697] RSP: 002b:00007f70879e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.718715][T15697] RAX: ffffffffffffffda RBX: 00007f7086e26090 RCX: 00007f7086b9de59 [ 385.718732][T15697] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 385.718746][T15697] RBP: 00007f70879e3090 R08: 0000000000000000 R09: 0000000000000000 [ 385.718759][T15697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.718772][T15697] R13: 00007f7086e26128 R14: 00007f7086e26090 R15: 00007fff002c41d8 [ 385.718816][T15697] [ 385.992830][T15694] syzkaller0: entered promiscuous mode [ 385.998464][T15694] syzkaller0: entered allmulticast mode [ 386.305581][T15692] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 386.378770][T15713] Cannot find set identified by id 65535 to match [ 386.435436][T15714] xt_hashlimit: size too large, truncated to 1048576 [ 386.503595][T15718] validate_nla: 27 callbacks suppressed [ 386.503631][T15718] netlink: 'syz.2.2505': attribute type 32 has an invalid length. [ 386.664681][T15721] netlink: 'syz.3.2506': attribute type 18 has an invalid length. [ 386.977693][T15730] xt_TCPMSS: Only works on TCP SYN packets [ 387.638226][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 388.162724][ T6833] net_ratelimit: 202 callbacks suppressed [ 388.162763][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.191915][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.216043][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.242185][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.264261][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.291998][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.312643][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.333950][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.368061][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.397907][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 388.961020][T15744] __nla_validate_parse: 2 callbacks suppressed [ 388.961040][T15744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2510'. [ 389.356527][T15770] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2515'. [ 389.597704][T15782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2518'. [ 390.017762][T15796] ipvlan0: entered promiscuous mode [ 390.148363][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2526'. [ 390.323417][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 390.357697][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 390.368677][T15819] xt_TCPMSS: Only works on TCP SYN packets [ 390.999835][T15840] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 391.017388][T15837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2535'. [ 391.139265][T15840] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.238782][T15840] bond7: (slave dummy0): making interface the new active one [ 391.253471][T15840] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 391.266043][T15842] : renamed from dummy0 (while UP) [ 391.546032][T15856] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 391.769156][T15859] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 391.878330][T15879] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2544'. [ 392.032215][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 392.355841][T15893] sit0: Caught tx_queue_len zero misconfig [ 392.679658][T15908] syzkaller0: entered promiscuous mode [ 392.716174][T15908] syzkaller0: entered allmulticast mode [ 392.934671][T15920] syzkaller0: entered promiscuous mode [ 392.954084][T15920] syzkaller0: entered allmulticast mode [ 393.143631][T15936] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2557'. [ 393.172447][ T48] net_ratelimit: 133 callbacks suppressed [ 393.172466][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.236745][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.246145][T15926] netlink: 'syz.4.2557': attribute type 12 has an invalid length. [ 393.273534][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.315309][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.343719][T15937] gtp2: entered allmulticast mode [ 393.386327][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.442105][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.482041][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.523717][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.562126][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.602730][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 393.823792][T15934] syzkaller0: entered promiscuous mode [ 393.857160][T15934] syzkaller0: entered allmulticast mode [ 394.073853][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2561'. [ 394.124688][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 394.210035][T15965] netlink: 'syz.4.2564': attribute type 12 has an invalid length. [ 394.514074][ T5639] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 394.517683][ T5627] Bluetooth: hci0: command 0x0c20 tx timeout [ 396.097519][T15962] syzkaller0: entered promiscuous mode [ 396.103273][T15962] syzkaller0: entered allmulticast mode [ 396.114321][T15957] IPVS: Unknown mcast interface: vcan0 [ 396.525802][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2568'. [ 397.416222][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 397.538349][T16016] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2578'. [ 397.571527][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2578'. [ 397.628510][T16016] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2578'. [ 397.662095][T16016] netlink: 'syz.4.2578': attribute type 3 has an invalid length. [ 397.680191][T16016] netlink: 'syz.4.2578': attribute type 2 has an invalid length. [ 397.715623][T16016] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2578'. [ 398.183397][ T48] net_ratelimit: 187 callbacks suppressed [ 398.183417][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.263148][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.303130][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.331162][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 398.488957][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.544995][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.585005][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.605675][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 398.732816][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 398.771623][ T6830] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 398.837929][T16065] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2589'. [ 398.996543][T16068] syzkaller0: entered promiscuous mode [ 399.016377][T16068] syzkaller0: entered allmulticast mode [ 399.270121][T16079] tipc: Enabled bearer , priority 0 [ 399.432370][T16079] syzkaller0: entered promiscuous mode [ 399.439073][T16079] syzkaller0: entered allmulticast mode [ 399.450100][T16079] tipc: Resetting bearer [ 399.568516][ T6833] tipc: Resetting bearer [ 399.585485][T16078] tipc: Resetting bearer [ 401.690245][T16078] tipc: Disabling bearer [ 401.715291][ T9223] tipc: Node number set to 10136234 [ 401.738954][T16107] kthread_run failed with err -4 [ 401.965275][T16116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2604'. [ 401.983206][T16119] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 402.309039][T16119] 8021q: adding VLAN 0 to HW filter on device bond13 [ 402.425696][T16123] bond13: (slave gretap4): making interface the new active one [ 402.485926][T16123] bond13: (slave gretap4): Enslaving as an active interface with an up link [ 402.682966][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 402.710216][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 403.000441][T16161] ip_vti0: entered allmulticast mode [ 403.038393][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 403.212975][ T6806] net_ratelimit: 179 callbacks suppressed [ 403.212996][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.230891][T16178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2614'. [ 403.280067][ T6806] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 403.341721][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'. [ 403.398840][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'. [ 403.423800][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.445772][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2615'. [ 403.473221][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.510421][T16175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2614'. [ 403.519661][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.572926][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.632148][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.696983][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.764277][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.814988][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 403.863392][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'. [ 406.585104][T16222] veth0_to_bridge: entered promiscuous mode [ 406.594363][T16225] veth0_to_bridge: left promiscuous mode [ 406.958801][T16253] ipt_rpfilter: unknown options [ 406.979358][T16249] sit0: entered promiscuous mode [ 407.112841][T16257] __nla_validate_parse: 9 callbacks suppressed [ 407.112857][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 407.161202][T16257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2635'. [ 407.204415][T16256] syzkaller0: entered promiscuous mode [ 407.221681][T16256] syzkaller0: entered allmulticast mode [ 407.545059][T16274] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2642'. [ 407.596880][T16274] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002 [ 407.846093][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2646'. [ 408.129328][T16297] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 408.169287][T16297] netlink: 'syz.1.2648': attribute type 2 has an invalid length. [ 408.302451][ T6833] net_ratelimit: 185 callbacks suppressed [ 408.302472][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 408.352637][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 408.495691][T16306] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2655'. [ 408.508142][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 408.531007][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 408.682693][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 408.716768][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 408.776969][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'. [ 408.862416][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 408.900947][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 408.955434][T16329] gretap0: entered promiscuous mode [ 409.054313][T16332] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2657'. [ 409.078245][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 409.099379][ T6806] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 409.502580][T16346] netlink: 'syz.2.2664': attribute type 1 has an invalid length. [ 409.513690][T16346] netlink: 'syz.2.2664': attribute type 4 has an invalid length. [ 409.529581][T16346] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.2664'. [ 409.847475][T16363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2670'. [ 409.885885][T16363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2670'. [ 410.245285][T16375] netlink: 'syz.1.2673': attribute type 4 has an invalid length. [ 410.677152][T16386] xt_NFQUEUE: number of total queues is 0 [ 410.853049][T16393] netlink: 'syz.0.2677': attribute type 4 has an invalid length. [ 412.145142][T16405] __nla_validate_parse: 1 callbacks suppressed [ 412.145175][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2682'. [ 412.203839][T16446] macvlan0: entered promiscuous mode [ 412.623734][T16465] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 412.864492][T16470] veth0: entered promiscuous mode [ 412.900282][T16470] xt_ecn: cannot match TCP bits for non-tcp packets [ 412.941526][T16469] veth0: left promiscuous mode [ 413.289727][T16491] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2701'. [ 413.327464][ T6806] net_ratelimit: 90 callbacks suppressed [ 413.327479][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 413.409818][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 413.456968][T16491] 8021q: VLANs not supported on ip6_vti0 [ 413.500521][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 413.546140][T16501] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 413.557888][ T6811] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 413.668701][T16508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2705'. [ 413.692108][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 413.700663][T16508] xt_hashlimit: size too large, truncated to 1048576 [ 413.722254][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 413.733266][T16506] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2705'. [ 413.778017][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 413.821968][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 413.985423][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 414.018269][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 414.483728][T16531] syzkaller0: entered promiscuous mode [ 414.518210][T16531] syzkaller0: entered allmulticast mode [ 414.797783][T16543] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2715'. [ 415.002718][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 418.165422][T16602] xt_connbytes: Forcing CT accounting to be enabled [ 418.173374][T16602] Cannot find set identified by id 65534 to match [ 418.433576][ T12] net_ratelimit: 176 callbacks suppressed [ 418.433596][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.482460][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.512034][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.542229][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.581950][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.623240][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.656705][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.713930][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.755801][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.792319][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 418.865544][T16630] x_tables: ip_tables: DSCP target: only valid in mangle table, not $ [ 419.101625][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'. [ 421.388012][T16651] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 421.688743][T16669] x_tables: duplicate underflow at hook 1 [ 421.723799][T16669] x_tables: duplicate underflow at hook 1 [ 421.742382][T16669] x_tables: duplicate underflow at hook 1 [ 421.965541][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2740'. [ 422.189826][T16682] syzkaller0: entered promiscuous mode [ 422.218046][T16682] syzkaller0: entered allmulticast mode [ 422.815694][T16712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.442919][ T12] net_ratelimit: 205 callbacks suppressed [ 423.442960][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.472110][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.491993][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.521895][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.543483][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.565264][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.595311][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.625915][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.653604][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 423.683133][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 424.669221][T16718] tipc: Enabling of bearer rejected, failed to enable media [ 424.700830][T16721] netlink: 'syz.2.2746': attribute type 2 has an invalid length. [ 424.741977][T16721] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2746'. [ 424.778920][T16697] lo speed is unknown, defaulting to 1000 [ 425.299660][T16746] syzkaller0: entered promiscuous mode [ 425.321581][T16746] syzkaller0: entered allmulticast mode [ 425.800129][T16764] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2759'. [ 425.956739][T16762] syzkaller0: entered promiscuous mode [ 425.963791][T16762] syzkaller0: entered allmulticast mode [ 426.256197][T16737] infiniband syz0: set active [ 426.266906][T16737] infiniband syz0: added ipvlan1 [ 426.328873][T16737] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 426.360318][T16737] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 426.387426][T16737] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 426.487033][T16737] RDS/IB: syz0: added [ 426.523968][T16737] smc: adding ib device syz0 with port count 1 [ 426.553748][T16737] smc: ib device syz0 port 1 has no pnetid [ 427.794066][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 428.435331][T16770] lo: entered promiscuous mode [ 428.440161][T16770] lo: left allmulticast mode [ 428.451731][T16770] tunl0: entered promiscuous mode [ 428.462517][ T6830] net_ratelimit: 222 callbacks suppressed [ 428.462548][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.464902][T16770] tunl0: left allmulticast mode [ 428.482180][T16770] gre0: entered promiscuous mode [ 428.486950][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.487274][T16770] gre0: left allmulticast mode [ 428.500222][T16770] 0ªX¹¦Dö»: entered promiscuous mode [ 428.506729][T16770] 0ªX¹¦Dö»: left allmulticast mode [ 428.512970][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.521317][T16770] erspan0: left allmulticast mode [ 428.527660][T16770] ip_vti0: entered promiscuous mode [ 428.534381][T16770] ip_vti0: left allmulticast mode [ 428.543325][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.602959][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.642548][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.665297][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 428.794500][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.821004][T16792] syzkaller0: entered promiscuous mode [ 428.840631][T16792] syzkaller0: entered allmulticast mode [ 428.852166][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 428.903219][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 429.035798][T16800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2768'. [ 429.319678][T16810] syzkaller0: entered allmulticast mode [ 429.423776][T16813] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 430.000979][T16829] syzkaller0: entered promiscuous mode [ 430.014285][T16829] syzkaller0: entered allmulticast mode [ 430.405612][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 430.423863][T16842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2780'. [ 430.442184][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2781'. [ 430.679889][T16848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2782'. [ 431.075804][T16859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2786'. [ 432.211054][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2797'. [ 432.643887][T16915] netlink: 'syz.3.2801': attribute type 1 has an invalid length. [ 432.679593][T16915] netlink: 'syz.3.2801': attribute type 2 has an invalid length. [ 432.890037][T16924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2804'. [ 433.463434][T16948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2811'. [ 433.479745][T16948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2811'. [ 433.532762][ T6830] net_ratelimit: 97 callbacks suppressed [ 433.532779][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.555496][T16954] nbd: must specify a size in bytes for the device [ 433.590968][ T6830] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.752006][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.775990][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2809'. [ 433.789837][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 433.922066][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 433.939554][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 434.082326][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.118352][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 434.170871][T16970] tipc: Enabled bearer , priority 0 [ 434.262196][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.304368][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 434.402580][T16981] netlink: 'syz.0.2820': attribute type 11 has an invalid length. [ 434.452955][T16981] netlink: 'syz.0.2820': attribute type 11 has an invalid length. [ 434.472744][T16970] syzkaller0: entered promiscuous mode [ 434.490573][T16970] syzkaller0: entered allmulticast mode [ 434.519971][T16970] tipc: Resetting bearer [ 435.192280][ T30] audit: type=1800 audit(1783525169.959:8): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2825" name="memory.events" dev="tmpfs" ino=2845 res=0 errno=0 [ 435.268963][ T30] audit: type=1804 audit(1783525169.989:9): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2825" name="/newroot/556/memory.events" dev="tmpfs" ino=2845 res=1 errno=0 [ 435.516143][ T8645] udevd[8645]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 435.704469][T16995] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.713461][T16995] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.188948][T17034] can: request_module (can-proto-0) failed. [ 436.209210][T17040] __nla_validate_parse: 4 callbacks suppressed [ 436.209240][T17040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2835'. [ 436.875207][T16995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.292316][T17058] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2838'. [ 437.408909][T16995] bond0: left promiscuous mode [ 437.414930][T16995] bond_slave_0: left promiscuous mode [ 437.420674][T16995] bond_slave_1: left promiscuous mode [ 437.601055][T16969] tipc: Resetting bearer [ 438.548002][ T6806] net_ratelimit: 199 callbacks suppressed [ 438.548050][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.582105][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.605137][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.634069][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.677265][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.703024][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.725401][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.763834][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.795319][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 438.823276][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 439.574583][T16969] tipc: Disabling bearer [ 439.585418][ T9221] tipc: Node number set to 989511025 [ 439.632489][T17034] : (slave dummy0): Releasing backup interface [ 439.700106][ T6811] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 439.710420][ T9228] syz0: Port: 1 Link DOWN [ 439.739408][ T6811] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 439.775546][ T6811] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.798803][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.821122][ T6811] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 439.862616][ T6811] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 439.883797][ T6811] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.909310][ T5755] lo speed is unknown, defaulting to 1000 [ 439.916695][T17067] netlink: 'syz.0.2841': attribute type 3 has an invalid length. [ 439.927534][T17065] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2840'. [ 439.944179][ T5755] syz2: Port: 1 Link DOWN [ 439.950360][ T6811] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 439.975374][ T6811] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 439.986393][ T6811] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.000020][ T6811] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 440.028139][ T6811] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 440.040141][ T6811] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.091669][T17071] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2841'. [ 440.144247][T17077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.164879][T17071] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2841'. [ 440.408961][T17087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2847'. [ 441.060795][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'. [ 441.350562][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'. [ 441.379487][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2858'. [ 441.415968][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'. [ 441.468685][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'. [ 441.711500][T17130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2862'. [ 441.856621][T17136] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 441.973037][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2863'. [ 442.032924][T17145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2864'. [ 442.205971][T17150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2866'. [ 442.393949][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2869'. [ 442.404635][T17166] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2869'. [ 442.760432][T17176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.809893][T17176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.345936][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.365036][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.377681][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.388323][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.403802][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.606592][ T6833] net_ratelimit: 136 callbacks suppressed [ 443.606611][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.655257][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 443.714343][T17217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.743636][T17217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.772128][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.810142][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.827892][T17217] .`: (slave batadv0): Releasing backup interface [ 443.842414][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.882922][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 443.916262][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 444.053088][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.088476][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.109944][T17203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.125494][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 444.883351][T17198] lo speed is unknown, defaulting to 1000 [ 445.136883][T17263] syzkaller0: entered promiscuous mode [ 445.156540][T17263] syzkaller0: entered allmulticast mode [ 445.473364][ T5639] Bluetooth: hci5: command tx timeout [ 445.829174][T17291] 8021q: adding VLAN 0 to HW filter on device bond14 [ 445.926450][T17287] syzkaller0: entered promiscuous mode [ 445.932922][T17287] syzkaller0: entered allmulticast mode [ 445.941401][T17278] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 445.949033][T17278] syzkaller1: group set to 0 [ 447.553462][ T5639] Bluetooth: hci5: command tx timeout [ 447.976960][T17291] __nla_validate_parse: 6 callbacks suppressed [ 447.976979][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2898'. [ 447.993184][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2898'. [ 448.171097][T17308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2901'. [ 448.356602][T17314] netlink: 'syz.0.2904': attribute type 1 has an invalid length. [ 448.386725][T17314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2904'. [ 448.399950][T17316] netlink: 'syz.2.2905': attribute type 39 has an invalid length. [ 448.411161][T17318] netlink: 'syz.2.2905': attribute type 39 has an invalid length. [ 448.467315][T17313] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2903'. [ 448.632039][ T48] net_ratelimit: 184 callbacks suppressed [ 448.632059][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.683584][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.696749][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 448.722869][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.762602][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.813809][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.862098][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.893426][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.910365][T17331] gre0: Caught tx_queue_len zero misconfig [ 448.922648][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 448.974903][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.022610][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 449.260737][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.287087][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.302626][T17198] bridge_slave_0: entered allmulticast mode [ 449.320793][T17198] bridge_slave_0: entered promiscuous mode [ 449.348026][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.356835][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.366794][T17198] bridge_slave_1: entered allmulticast mode [ 449.375226][T17198] bridge_slave_1: entered promiscuous mode [ 449.518358][T17198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.613103][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.633400][ T5639] Bluetooth: hci5: command tx timeout [ 449.766600][T17198] team0: Port device team_slave_0 added [ 449.821432][T17378] bridge6: entered promiscuous mode [ 449.833401][T17378] bridge6: entered allmulticast mode [ 449.864549][T17198] team0: Port device team_slave_1 added [ 450.009144][T17198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.035345][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.079924][T17198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.094805][T17198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.134848][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.182349][T17198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.247316][T17393] pimreg: entered allmulticast mode [ 450.467919][T17198] hsr_slave_0: entered promiscuous mode [ 450.483849][T17198] hsr_slave_1: entered promiscuous mode [ 450.496187][T17198] debugfs: 'hsr0' already exists in 'hsr' [ 450.518800][T17198] Cannot create hsr debugfs directory [ 450.751702][ T30] audit: type=1804 audit(1783525185.509:10): pid=17418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2931" name="/newroot/596/cgroup.controllers" dev="tmpfs" ino=3059 res=1 errno=0 [ 450.825776][ T30] audit: type=1800 audit(1783525185.519:11): pid=17418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2931" name="cgroup.controllers" dev="tmpfs" ino=3059 res=0 errno=0 [ 451.022735][T17427] netlink: 'syz.0.2934': attribute type 3 has an invalid length. [ 451.146992][T17434] geneve4: entered promiscuous mode [ 451.196988][T17434] geneve4: entered allmulticast mode [ 451.253390][ T169] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 451.272767][ T169] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 451.323701][ T169] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 451.356698][ T169] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 451.653621][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.674301][T17198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.712871][ T5639] Bluetooth: hci5: command tx timeout [ 451.811009][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 451.820480][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 451.830835][T17464] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2943'. [ 451.840792][T17463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2943'. [ 451.929758][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.941615][T17198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.123881][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.155471][T17198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.474746][T17485] netlink: 'syz.4.2948': attribute type 39 has an invalid length. [ 452.504456][T17483] lo: left promiscuous mode [ 452.509216][T17483] lo: entered allmulticast mode [ 452.529332][T17483] tunl0: left promiscuous mode [ 452.536622][T17483] tunl0: entered allmulticast mode [ 452.544510][T17483] gre0: left promiscuous mode [ 452.549924][T17483] gre0: entered allmulticast mode [ 452.556206][T17483] 0ªX¹¦Dö»: left promiscuous mode [ 452.562558][T17483] 0ªX¹¦Dö»: entered allmulticast mode [ 452.569282][T17483] erspan0: entered allmulticast mode [ 452.577671][T17483] ip_vti0: left promiscuous mode [ 452.583542][T17483] ip_vti0: entered allmulticast mode [ 452.603028][T17483] sit0: left promiscuous mode [ 452.823505][T17490] netlink: 'syz.2.2951': attribute type 1 has an invalid length. [ 453.152302][T17502] bond0: option miimon: invalid value (18446744071829782528) [ 453.175635][T17502] bond0: option miimon: allowed values 0 - 2147483647 [ 453.352192][T17198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.425388][T17198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.504891][T17198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.550962][T17198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.615853][T17198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.651397][T17198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.702474][ T6806] net_ratelimit: 182 callbacks suppressed [ 453.702506][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.748636][ T6806] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.776865][T17198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 453.830682][T17198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.875447][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.908755][ T631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 453.943635][T17537] __nla_validate_parse: 4 callbacks suppressed [ 453.943652][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'. [ 454.043190][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.066234][ T169] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.194925][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.234797][ T169] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 454.316330][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 454.373657][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.394828][T17198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.423761][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 454.495853][T17198] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.579043][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.587691][ T6807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.686032][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.694147][ T6807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.749217][T17562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'. [ 455.135333][T17565] sit0: left promiscuous mode [ 455.256826][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 455.329237][T17565] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.336911][T17565] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.622278][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2974'. [ 455.644912][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2974'. [ 455.864397][T17565] vlan0: left promiscuous mode [ 455.869270][T17565] bridge0: left promiscuous mode [ 455.880263][T17565] gretap1: left promiscuous mode [ 455.911070][T17565] bond5: left promiscuous mode [ 455.918759][T17565] vlan1: left promiscuous mode [ 455.923637][T17565] hsr0: left promiscuous mode [ 455.928440][T17565] vlan1: left allmulticast mode [ 455.936988][T17565] hsr0: left allmulticast mode [ 455.941934][T17565] hsr_slave_0: left allmulticast mode [ 455.947350][T17565] hsr_slave_1: left allmulticast mode [ 455.959836][T17565] geneve3: left promiscuous mode [ 455.964940][T17565] geneve3: left allmulticast mode [ 455.983036][T17565] ipvlan0: left promiscuous mode [ 455.989979][T17565] gtp2: left allmulticast mode [ 455.996671][T17565] geneve4: left promiscuous mode [ 456.001660][T17565] geneve4: left allmulticast mode [ 456.198685][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.221195][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.232877][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 456.246982][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 456.321034][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.378841][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.408142][T17601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2978'. [ 456.418390][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 456.432525][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 456.443397][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.479368][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.489609][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 456.499938][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 456.555916][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.574417][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.589887][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 456.599131][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 456.648499][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 456.719737][T17610] netlink: 'syz.0.2980': attribute type 1 has an invalid length. [ 456.734460][T17614] netlink: 'syz.1.2981': attribute type 3 has an invalid length. [ 456.799560][T17610] netlink: 'syz.0.2980': attribute type 2 has an invalid length. [ 456.857292][T17614] IPVS: Error joining to the multicast group [ 457.167760][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2984'. [ 457.907350][T17198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.960814][T17657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2988'. [ 458.231403][T17198] veth0_vlan: entered promiscuous mode [ 458.313959][T17198] veth1_vlan: entered promiscuous mode [ 458.488493][T17198] veth0_macvtap: entered promiscuous mode [ 458.524649][T17198] veth1_macvtap: entered promiscuous mode [ 458.687489][T17198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.723582][ T631] net_ratelimit: 155 callbacks suppressed [ 458.723598][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.746883][T17198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.802459][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.824826][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.862651][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.870573][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.912832][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.931154][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.972520][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.991420][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.022707][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.072345][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.132592][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.193520][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.272509][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 459.367160][T17696] __nla_validate_parse: 2 callbacks suppressed [ 459.367176][T17696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3000'. [ 459.389758][ T6807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.421456][ T6807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.545584][ T6807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.579299][ T6807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.480834][T17728] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3010'. [ 460.609356][T17721] team0: Port device bridge7 added [ 460.635318][T17724] bridge0: port 3(team0) entered blocking state [ 460.672424][T17724] bridge0: port 3(team0) entered disabled state [ 460.682268][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.694251][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.706180][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.707111][T17724] team0: entered allmulticast mode [ 460.729540][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.737941][T17724] team_slave_1: entered allmulticast mode [ 460.746623][T17724] geneve1: entered allmulticast mode [ 460.746843][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.788958][T17724] bridge7: entered allmulticast mode [ 460.799661][T17724] team0: entered promiscuous mode [ 460.805070][T17724] team_slave_1: entered promiscuous mode [ 460.817575][T17724] macvlan0: entered promiscuous mode [ 460.829908][T17724] geneve1: entered promiscuous mode [ 460.850921][T17724] bridge7: entered promiscuous mode [ 460.857416][T17724] bridge0: port 3(team0) entered blocking state [ 460.864756][T17724] bridge0: port 3(team0) entered forwarding state [ 461.159218][T17742] x_tables: duplicate underflow at hook 3 [ 461.907397][T17735] lo speed is unknown, defaulting to 1000 [ 462.792394][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 462.819909][T17808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 462.843544][ T5627] Bluetooth: hci2: command tx timeout [ 463.480123][T17833] netlink: 'syz.4.3033': attribute type 1 has an invalid length. [ 463.524529][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 463.563144][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 463.617030][T17735] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.643301][T17735] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.652515][T17735] bridge_slave_0: entered allmulticast mode [ 463.667383][T17735] bridge_slave_0: entered promiscuous mode [ 463.681094][T17735] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.702910][T17735] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.723332][T17735] bridge_slave_1: entered allmulticast mode [ 463.732925][ T48] net_ratelimit: 118 callbacks suppressed [ 463.732942][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.747676][T17735] bridge_slave_1: entered promiscuous mode [ 463.793989][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.817746][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 463.841984][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.882782][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.924353][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.956564][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.991944][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.001312][T17735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.032428][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.071958][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.088462][T17735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.124175][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.313385][T17735] team0: Port device team_slave_0 added [ 464.344804][T17735] team0: Port device team_slave_1 added [ 464.514156][T17735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.533459][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.561939][T17735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.575453][T17735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.583569][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.610708][T17735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.665699][T17873] vlan3: entered promiscuous mode [ 464.748467][T17876] geneve5: entered promiscuous mode [ 464.756750][T17876] geneve5: entered allmulticast mode [ 464.788487][ T6830] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 19999 - 0 [ 464.819208][T17735] hsr_slave_0: entered promiscuous mode [ 464.849714][T17735] hsr_slave_1: entered promiscuous mode [ 464.862629][T17735] debugfs: 'hsr0' already exists in 'hsr' [ 464.877830][T17735] Cannot create hsr debugfs directory [ 464.889285][ T6830] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 19999 - 0 [ 464.903648][ T6811] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 19999 - 0 [ 464.912338][ T5627] Bluetooth: hci2: command tx timeout [ 464.942124][ T6811] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 19999 - 0 [ 465.103169][T17886] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 465.494328][T17735] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.522902][T17735] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.656807][T17735] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.684967][T17735] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 465.854407][T17912] bond15: option resend_igmp: invalid value (32767) [ 465.863564][T17912] bond15: option resend_igmp: allowed values 0 - 255 [ 465.887392][T17912] bond15 (unregistering): Released all slaves [ 465.939222][T17735] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.980644][T17735] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 466.110278][T17735] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.132344][ T6811] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 466.184101][T17735] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 466.227007][T17937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3061'. [ 466.668572][T17735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.704840][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.731383][T17735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.771451][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.799678][T17735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.866804][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.896033][T17735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.954579][T17735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.993478][ T5627] Bluetooth: hci2: command tx timeout [ 467.165598][T17960] can: request_module (can-proto-0) failed. [ 467.269687][T17975] netlink: 'syz.2.3070': attribute type 30 has an invalid length. [ 467.500959][T17735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.607820][T17735] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.678694][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.685939][ T6811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.788509][ T6830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.801622][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.808860][ T6811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.829593][ T6830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.987749][T18006] netlink: 'syz.0.3079': attribute type 1 has an invalid length. [ 468.068343][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'. [ 468.097544][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'. [ 468.105638][T18006] bond9: entered promiscuous mode [ 468.113816][T18006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 468.142533][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'. [ 468.155116][T18015] netlink: 'syz.2.3081': attribute type 1 has an invalid length. [ 468.223962][T18006] bond9: (slave bridge8): making interface the new active one [ 468.243954][T18006] bridge8: entered promiscuous mode [ 468.280853][T18006] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 468.386749][T18015] 8021q: adding VLAN 0 to HW filter on device bond15 [ 468.412888][T18019] vlan3: entered allmulticast mode [ 468.418182][T18019] bond15: entered allmulticast mode [ 468.773852][ T6833] net_ratelimit: 169 callbacks suppressed [ 468.773871][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.840298][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 468.913282][T18037] openvswitch: netlink: IPv6 tunnel dst address is zero [ 468.940770][T18040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3086'. [ 468.983072][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.008486][ T6830] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.072086][ T5627] Bluetooth: hci2: command tx timeout [ 469.153415][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.184357][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.193138][T18048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3089'. [ 469.226136][ T6830] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 469.283153][T18052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3090'. [ 469.322331][T18053] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3090'. [ 469.372762][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.393412][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 470.187469][T18085] netlink: 'syz.3.3100': attribute type 1 has an invalid length. [ 470.281376][T18085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.385871][T18095] ip6t_srh: unknown srh match flags 5F28 [ 470.390567][T17735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.398890][T18093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3101'. [ 470.475996][T18100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3103'. [ 470.658187][T17735] veth0_vlan: entered promiscuous mode [ 470.689640][T17735] veth1_vlan: entered promiscuous mode [ 470.776984][T17735] veth0_macvtap: entered promiscuous mode [ 470.809222][T17735] veth1_macvtap: entered promiscuous mode [ 470.880856][T17735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.903649][T17735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.938488][ T6807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.984467][ T6807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.012569][T18114] veth1_macvtap: left promiscuous mode [ 471.053645][ T6807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.074719][ T6807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.572703][T18130] syzkaller0: entered promiscuous mode [ 471.578830][T18130] syzkaller0: entered allmulticast mode [ 471.748636][T18140] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 471.969050][T18152] __nla_validate_parse: 1 callbacks suppressed [ 471.969075][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 472.030562][T18152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 473.358995][T18095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.493953][ T6807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.555052][ T6807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.727562][T18166] tipc: Enabling of bearer rejected, failed to enable media [ 473.752857][ T6807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.784874][ T6807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.853017][ T631] net_ratelimit: 109 callbacks suppressed [ 473.853036][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.911367][ T631] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.035736][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.105251][ T6811] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.162438][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.207799][ T169] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.366918][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.413491][ T48] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.432375][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 474.543708][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.562833][T18195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3128'. [ 474.847701][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.861147][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.878731][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.892921][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.901689][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.999109][T18241] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3138'. [ 476.360158][T18199] lo speed is unknown, defaulting to 1000 [ 476.995422][ T5627] Bluetooth: hci3: command tx timeout [ 477.639461][T18299] bond5: option mode: unable to set because the bond device has slaves [ 477.733203][T18301] bond5: option mode: unable to set because the bond device has slaves [ 477.849794][T18310] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 477.880854][T18314] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3158'. [ 478.057167][T18318] macvtap1: entered allmulticast mode [ 478.083445][T18310] macvtap2: entered allmulticast mode [ 478.094350][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3159'. [ 478.154166][T18318] bond2: (slave bridge1): making interface the new active one [ 478.164312][T18318] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 478.604251][T18334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3162'. [ 478.617012][T18199] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.627775][T18199] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.637145][T18199] bridge_slave_0: entered allmulticast mode [ 478.655329][T18199] bridge_slave_0: entered promiscuous mode [ 478.678425][T18334] pim6reg527: entered allmulticast mode [ 478.686883][T18199] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.695764][T18199] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.703960][T18199] bridge_slave_1: entered allmulticast mode [ 478.714796][T18199] bridge_slave_1: entered promiscuous mode [ 478.867980][ T169] net_ratelimit: 122 callbacks suppressed [ 478.867998][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.885483][T18338] bond9: option resend_igmp: invalid value (32767) [ 478.917678][T18338] bond9: option resend_igmp: allowed values 0 - 255 [ 478.955784][T18338] bond9 (unregistering): Released all slaves [ 478.968243][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.002128][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.042262][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.072252][ T5627] Bluetooth: hci3: command tx timeout [ 479.093949][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.142043][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.217009][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.252559][T18199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.282192][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.307838][T18199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.342920][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.382245][ T631] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.529666][T18199] team0: Port device team_slave_0 added [ 479.578885][T18199] team0: Port device team_slave_1 added [ 479.647797][T18359] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 479.826360][T18199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.849033][T18199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.888997][T18199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.935972][T18199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.978539][T18199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.104377][T18199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.183683][T18377] sctp: [Deprecated]: syz.3.3173 (pid 18377) Use of int in max_burst socket option. [ 480.183683][T18377] Use struct sctp_assoc_value instead [ 480.206302][T18379] netlink: 'syz.4.3174': attribute type 12 has an invalid length. [ 480.406237][T18382] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 480.502577][T18199] hsr_slave_0: entered promiscuous mode [ 480.536561][T18199] hsr_slave_1: entered promiscuous mode [ 480.550731][T18199] debugfs: 'hsr0' already exists in 'hsr' [ 480.567207][T18199] Cannot create hsr debugfs directory [ 480.718989][T18387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3177'. [ 480.846502][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3177'. [ 481.152364][ T5627] Bluetooth: hci3: command tx timeout [ 482.075885][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'. [ 482.097105][T18409] IPv6: NLM_F_CREATE should be specified when creating new route [ 482.257762][T18199] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.358223][T18199] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.460675][T18199] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 482.545541][T18199] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 482.626344][T18199] netdevsim netdevsim0 eth3 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 483.088776][T18199] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.111689][T18199] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.159795][T18199] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.195132][T18199] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 483.206152][T18442] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 483.231681][T18442] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 483.235494][ T5627] Bluetooth: hci3: command tx timeout [ 483.248140][T18199] netdevsim netdevsim0 eth2 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 483.275294][T18442] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 483.284501][T18442] netlink: 'syz.1.3188': attribute type 2 has an invalid length. [ 483.293487][T18442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3188'. [ 483.308311][T18445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3189'. [ 483.384388][T18435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.388945][T18199] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.450509][T18199] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.469929][T18199] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.483218][T18199] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 483.496131][T18199] netdevsim netdevsim0 eth1 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 483.586989][T18451] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3190'. [ 483.631229][T18451] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 483.650012][T18199] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.662152][T18199] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.673796][T18199] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.686289][T18199] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 483.697165][T18199] netdevsim netdevsim0 eth0 (unregistering): unset [1, 3] type 2 family 0 port 19999 - 0 [ 483.788062][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3192'. [ 483.798329][T18455] xt_NFQUEUE: number of total queues is 0 [ 483.807536][T18456] xt_NFQUEUE: number of total queues is 0 [ 483.902537][ T6828] net_ratelimit: 178 callbacks suppressed [ 483.902557][ T6828] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.961918][ T6828] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.991992][ T6828] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.026311][ T6828] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.164257][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.184412][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 484.342864][ T6828] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.365120][T18473] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 484.433512][ T6828] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.510169][ T6828] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.552483][ T6830] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.577348][T18199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 484.643299][T18199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.668968][T18199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 484.715784][T18199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.727663][T18199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 484.770146][T18199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.801224][T18199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.856787][T18199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.235227][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 485.240515][T18199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.272798][T18199] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.379162][T18503] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 485.451586][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.458772][ T6830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.517417][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.524592][ T6828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.734518][T18507] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3204'. [ 486.069110][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3208'. [ 486.248233][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'. [ 486.407924][T18530] SET target dimension over the limit! [ 487.518964][T18199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.786746][T18199] veth0_vlan: entered promiscuous mode [ 487.913938][T18199] veth1_vlan: entered promiscuous mode [ 488.002870][T18199] veth0_macvtap: entered promiscuous mode [ 488.045775][T18199] veth1_macvtap: entered promiscuous mode [ 488.096113][T18199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.111702][T18199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.188657][ T6831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.235707][ T6831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.284076][ T6831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.296516][ T6831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.333335][T18595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3225'. [ 488.439082][T18595] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 488.690734][T18600] gretap1: entered promiscuous mode [ 488.702727][T18600] batman_adv: batadv0: Adding interface: gretap1 [ 488.719128][T18600] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.781735][T18600] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 488.868178][ T6807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.903036][ T6807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.998120][ T6807] net_ratelimit: 182 callbacks suppressed [ 488.998138][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.077414][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.099971][T18614] netlink: 400 bytes leftover after parsing attributes in process `syz.1.3230'. [ 489.137543][ T6833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.147368][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.169990][ T6833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.202255][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.227968][T18622] veth1_to_bond: entered allmulticast mode [ 489.267058][T18622] veth1_to_bond: entered promiscuous mode [ 489.279100][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.322750][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.346208][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 489.361136][T18569] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 489.498119][T18620] veth1_to_bond (unregistering): left allmulticast mode [ 489.505980][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.528442][T18620] veth1_to_bond (unregistering): left promiscuous mode [ 489.543493][T18571] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.556861][T18620] bond0: (slave bond_slave_1): Releasing backup interface [ 489.572674][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.587785][T18631] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3233'. [ 489.935400][T18628] syzkaller0: entered allmulticast mode [ 490.498036][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.508204][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.520953][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.541405][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.554598][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.333555][T18666] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 491.387446][T18666] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3238'. [ 491.468035][T18666] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 492.245797][T18658] lo speed is unknown, defaulting to 1000 [ 492.542210][T18700] netlink: 'syz.0.3246': attribute type 2 has an invalid length. [ 492.611700][T18700] : entered promiscuous mode [ 492.644965][T18702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.652261][T18702] IPv6: NLM_F_CREATE should be set when creating new route [ 492.659519][T18702] IPv6: NLM_F_CREATE should be set when creating new route [ 492.685245][ T5627] Bluetooth: hci0: command tx timeout [ 493.290490][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'. [ 493.338844][T18720] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3252'. [ 493.387117][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'. [ 493.906983][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3257'. [ 493.967982][T18740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3257'. [ 494.012619][ T169] net_ratelimit: 146 callbacks suppressed [ 494.012653][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.122124][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.253044][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.313558][T18571] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.396194][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 494.425009][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.497818][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.506973][T18763] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 494.534622][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 494.545528][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.593120][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.622987][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.662642][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.662658][T18658] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.749821][T18658] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.764180][ T5627] Bluetooth: hci0: command tx timeout [ 494.801500][T18658] bridge_slave_0: entered allmulticast mode [ 494.875324][T18658] bridge_slave_0: entered promiscuous mode [ 494.909092][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3259'. [ 494.947449][T18658] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.980120][T18658] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.016429][T18658] bridge_slave_1: entered allmulticast mode [ 495.056868][T18658] bridge_slave_1: entered promiscuous mode [ 495.298770][T18658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.340750][T18658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.507711][T18658] team0: Port device team_slave_0 added [ 495.534367][T18658] team0: Port device team_slave_1 added [ 495.649956][T18658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.678413][T18658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.788681][T18658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.850214][T18658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.879905][T18658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.981018][T18658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.136955][T18797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3270'. [ 496.412160][T18658] hsr_slave_0: entered promiscuous mode [ 496.447706][T18658] hsr_slave_1: entered promiscuous mode [ 496.496864][T18658] debugfs: 'hsr0' already exists in 'hsr' [ 496.521408][T18658] Cannot create hsr debugfs directory [ 496.832930][ T5627] Bluetooth: hci0: command tx timeout [ 496.960266][ T5707] IPVS: starting estimator thread 0... [ 497.072178][T18820] IPVS: using max 37 ests per chain, 88800 per kthread [ 498.918247][ T5627] Bluetooth: hci0: command tx timeout [ 499.035167][ T6806] net_ratelimit: 205 callbacks suppressed [ 499.035186][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.124542][ T6831] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.172382][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.200271][T18874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3283'. [ 499.240284][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.268606][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.303263][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.333906][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.371867][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.406047][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.444017][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.475043][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'. [ 500.686860][T18844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.235507][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.621235][T18897] netlink: 'syz.0.3288': attribute type 49 has an invalid length. [ 502.141528][T18912] nbd: must specify at least one socket [ 502.785656][T18933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.371171][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 503.644037][T18964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.681680][T18658] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 503.865969][T18658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.946230][T18658] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.023804][T18658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.050973][ T169] net_ratelimit: 195 callbacks suppressed [ 504.050992][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.138591][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.160014][T18658] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.176604][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.211993][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.218853][T18658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.243819][T18984] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 504.260084][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.274160][T18658] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 504.292303][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.325143][T18658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.333964][T18567] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.367158][T18985] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3309'. [ 504.383337][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.395240][T18988] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3310'. [ 504.419333][T18981] syzkaller1: entered promiscuous mode [ 504.425465][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.434481][T18981] syzkaller1: entered allmulticast mode [ 504.477358][T18989] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3310'. [ 504.928165][T18658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.027775][T18658] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.097278][T18570] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.105540][T18570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.146916][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.155138][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.938829][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3317'. [ 506.067938][T19030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 506.095294][T19030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3318'. [ 506.200550][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'. [ 506.275253][T19034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3318'. [ 506.361294][T19038] sctp: [Deprecated]: syz.4.3322 (pid 19038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.361294][T19038] Use struct sctp_sack_info instead [ 506.388420][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3321'. [ 506.439426][T19043] netlink: 'syz.4.3322': attribute type 21 has an invalid length. [ 506.588630][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 506.819909][T18570] dvmrp0: left allmulticast mode [ 507.078308][T18570] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 507.134475][T18570] bond13 (unregistering): (slave gretap4): Releasing active interface [ 507.228725][T18570] bond11 (unregistering): (slave geneve3): Releasing active interface [ 507.403075][T18570] bond0 (unregistering): Released all slaves [ 507.419968][T18570] bond1 (unregistering): (slave veth5): Releasing active interface [ 507.442141][T18570] bond1 (unregistering): Released all slaves [ 507.461294][T18570] bond2 (unregistering): Released all slaves [ 507.483941][T18570] bond3 (unregistering): Released all slaves [ 507.537428][T18570] bond4 (unregistering): Released all slaves [ 507.578024][T18570] bond5 (unregistering): (slave bond6): Releasing backup interface [ 507.589025][T18570] bond5 (unregistering): Released all slaves [ 507.618950][T18570] bond6 (unregistering): Released all slaves [ 507.649044][T18570] bond7 (unregistering): Released all slaves [ 507.669901][T18570] bond8 (unregistering): Released all slaves [ 507.694594][T18570] bond9 (unregistering): Released all slaves [ 507.729406][T18570] bond10 (unregistering): Released all slaves [ 507.754640][T18570] bond11 (unregistering): Released all slaves [ 507.788758][T18570] bond12 (unregistering): Released all slaves [ 507.810606][T18570] bond13 (unregistering): Released all slaves [ 507.836043][T18570] bond14 (unregistering): Released all slaves [ 508.181721][T19059] netlink: 'syz.4.3326': attribute type 2 has an invalid length. [ 508.197030][T18570] tipc: Left network mode [ 508.829158][T19081] syzkaller0: entered promiscuous mode [ 508.863922][T19081] syzkaller0: entered allmulticast mode [ 509.078323][T18658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.081404][ T6806] net_ratelimit: 157 callbacks suppressed [ 509.081455][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.162306][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.223189][T18565] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.282673][T18567] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.334338][T18567] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.385698][T18567] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.423247][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.448019][T19108] __nla_validate_parse: 4 callbacks suppressed [ 509.448058][T19108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'. [ 509.463903][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.485946][T18567] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.521942][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.678849][T19108] team0: Port device team_slave_0 removed [ 509.884744][T19112] sctp: [Deprecated]: syz.0.3336 (pid 19112) Use of int in maxseg socket option. [ 509.884744][T19112] Use struct sctp_assoc_value instead [ 509.998982][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 510.555174][T18658] veth0_vlan: entered promiscuous mode [ 510.632128][T18658] veth1_vlan: entered promiscuous mode [ 510.799390][T19132] Cannot find del_set index 0 as target [ 510.835941][T18658] veth0_macvtap: entered promiscuous mode [ 510.865598][T19132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3342'. [ 510.913407][T18658] veth1_macvtap: entered promiscuous mode [ 510.972886][T19140] Cannot find del_set index 0 as target [ 511.001627][T18658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.059726][T18658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.165674][ T169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.200405][ T169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.239097][ T169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.309126][ T169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.449641][T18570] hsr_slave_0: left promiscuous mode [ 511.469494][T18570] hsr_slave_1: left promiscuous mode [ 511.518946][T18570] veth0_vlan: left promiscuous mode [ 511.963722][T19162] netlink: 'syz.1.3349': attribute type 10 has an invalid length. [ 512.725944][T19162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.772870][T19162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.829460][T19162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.874607][T19162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.914136][T19162] batman_adv: batadv0: Removing interface: gretap1 [ 513.529228][T19189] Bluetooth: MGMT ver 1.23 [ 513.559963][T18565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.645693][T18565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.790961][ T6805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.809876][ T6805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.041087][T18570] IPVS: stop unused estimator thread 0... [ 514.148134][ T6805] net_ratelimit: 175 callbacks suppressed [ 514.148153][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.217527][ T6805] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.347446][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3235'. [ 514.359638][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 514.389440][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.420631][T18569] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.542092][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.563627][T18570] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.693411][T18565] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.701235][T18565] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.826189][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.848933][ T6805] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.252223][ T6833] net_ratelimit: 79 callbacks suppressed [ 519.252244][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.266007][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.372299][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.380148][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.492136][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.500572][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.611930][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.622036][ T169] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 519.731934][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.739840][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 524.282059][ T6805] net_ratelimit: 82 callbacks suppressed [ 524.282108][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.298002][ T6805] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 524.413734][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.421589][ T6805] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 524.532692][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.542597][T18569] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 524.652497][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.660924][T18569] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 524.772432][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.783686][T18570] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.302248][T18569] net_ratelimit: 87 callbacks suppressed [ 529.302271][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.318035][T18569] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.421963][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.429754][T18570] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.554345][T18570] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.564150][T18570] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.681976][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.689816][ T6805] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.802502][T18565] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.811055][T18565] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.332800][ T12] net_ratelimit: 82 callbacks suppressed [ 534.332824][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.346369][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.453483][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.464653][ T169] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.581876][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.589712][ T6805] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.701905][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.709732][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.822162][T18565] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.836335][T18565] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 537.350868][T19260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3358'. [ 537.793993][T19268] macvlan2: entered promiscuous mode [ 537.830767][T19268] macvlan2: entered allmulticast mode [ 537.871278][T19268] gretap0: entered promiscuous mode [ 537.925886][T19268] gretap0: entered allmulticast mode [ 537.965200][T19276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 537.978134][T19276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 537.989284][T19276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 538.001226][T19276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 538.018509][T19276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 538.031327][T19268] team0: Port device macvlan2 added [ 539.131273][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3368'. [ 539.196582][T19300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.340767][T19300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.349820][T18569] net_ratelimit: 93 callbacks suppressed [ 539.349837][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.412480][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.460349][T19303] netlink: 'syz.0.3369': attribute type 5 has an invalid length. [ 539.473222][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.542142][T18571] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.594345][ T6833] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.653621][T19306] netlink: 'syz.0.3369': attribute type 5 has an invalid length. [ 539.660460][ T6833] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.832310][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.872905][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.933858][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.971975][T18569] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 540.112145][T19276] Bluetooth: hci4: command tx timeout [ 540.132961][T19319] syzkaller0: entered promiscuous mode [ 540.186045][T19319] syzkaller0: entered allmulticast mode [ 540.551341][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 540.623282][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 542.193080][T19276] Bluetooth: hci4: command tx timeout [ 542.973896][T19341] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 543.351826][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'. [ 543.394322][T19363] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3381'. [ 543.453837][T19275] lo speed is unknown, defaulting to 1000 [ 543.557604][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3382'. [ 544.010642][T19373] netlink: 'syz.3.3384': attribute type 21 has an invalid length. [ 544.020824][T19373] netlink: 'syz.3.3384': attribute type 22 has an invalid length. [ 544.023583][T18565] bridge_slave_1: left allmulticast mode [ 544.069622][T18565] bridge_slave_1: left promiscuous mode [ 544.089529][T19373] netlink: 'syz.3.3384': attribute type 23 has an invalid length. [ 544.103096][T18565] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.135014][T19373] netlink: 'syz.3.3384': attribute type 25 has an invalid length. [ 544.145906][T18565] bridge_slave_0: left allmulticast mode [ 544.156487][T18565] bridge_slave_0: left promiscuous mode [ 544.163192][T19373] netlink: 'syz.3.3384': attribute type 26 has an invalid length. [ 544.185701][T18565] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.206596][T19373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3384'. [ 544.272114][T19276] Bluetooth: hci4: command tx timeout [ 544.295562][T18565] pimreg: left allmulticast mode [ 544.353412][ T6805] net_ratelimit: 201 callbacks suppressed [ 544.353430][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.436774][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.462135][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.492195][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.532065][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.582308][ T6805] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.642264][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.673406][T18571] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.702179][T18571] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.723580][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 545.097104][T18565] batman_adv: batadv0: Removing interface: gretap1 [ 545.255281][T18565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.269601][T18565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.286848][T18565] bond0 (unregistering): Released all slaves [ 545.303528][T18565] bond1 (unregistering): Released all slaves [ 545.320790][T18565] bond2 (unregistering): Released all slaves [ 545.345009][T18565] bond3 (unregistering): Released all slaves [ 545.361414][T18565] bond4 (unregistering): Released all slaves [ 545.389729][T18565] bond5 (unregistering): (slave lo): Releasing backup interface [ 545.400699][T18565] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 545.415972][T18565] bond5 (unregistering): Released all slaves [ 545.441432][T18565] bond6 (unregistering): Released all slaves [ 545.464914][T18565] bond7 (unregistering): (slave ): Releasing active interface [ 545.477695][T18565] bond7 (unregistering): Released all slaves [ 545.499352][T18565] bond8 (unregistering): Released all slaves [ 545.785320][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.793014][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.950090][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'. [ 546.017350][T19379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.031484][T19379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.357985][T19276] Bluetooth: hci4: command tx timeout [ 546.486738][T18565] tipc: Left network mode [ 546.548208][ T6805] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.605447][ T6805] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.693967][ T6805] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.710350][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3389'. [ 546.764726][ T6805] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.797482][T19409] x_tables: duplicate underflow at hook 2 [ 547.114951][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 547.137104][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 547.326275][T19428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3393'. [ 547.926763][T19445] syzkaller0: entered promiscuous mode [ 547.969162][T19445] syzkaller0: entered allmulticast mode [ 548.049576][T19456] netlink: 'syz.2.3395': attribute type 1 has an invalid length. [ 549.211937][T19486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3402'. [ 549.361928][ T169] net_ratelimit: 204 callbacks suppressed [ 549.361949][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.392485][T19494] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 549.453337][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.485631][T18565] hsr_slave_0: left promiscuous mode [ 549.502623][ T6806] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.519280][T18565] hsr_slave_1: left promiscuous mode [ 549.534654][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.547339][T18565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.593433][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.635123][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.678216][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 549.701913][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.724789][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.783748][ T169] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.812955][T19504] netlink: 'syz.3.3406': attribute type 8 has an invalid length. [ 549.839248][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 549.849183][ T6807] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.019185][ T6805] smc: removing ib device syz0 [ 550.476193][T19275] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.485038][T19275] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.497854][T19275] bridge_slave_0: entered allmulticast mode [ 550.513857][T19275] bridge_slave_0: entered promiscuous mode [ 550.556477][T19275] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.565528][T19275] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.575955][T19275] bridge_slave_1: entered allmulticast mode [ 550.587450][T19275] bridge_slave_1: entered promiscuous mode [ 550.639683][ T24] ================================================================== [ 550.647800][ T24] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 550.656833][ T24] Read of size 1 at addr ffff88803512ae09 by task kworker/1:0/24 [ 550.664573][ T24] [ 550.666920][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 550.666946][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.666960][ T24] Workqueue: events smc_ib_port_event_work [ 550.667095][ T24] Call Trace: [ 550.667104][ T24] [ 550.667113][ T24] dump_stack_lvl+0xe8/0x150 [ 550.667214][ T24] print_address_description+0x55/0x1e0 [ 550.667266][ T24] ? __ethtool_get_link_ksettings+0x230/0x250 [ 550.667291][ T24] print_report+0x58/0x70 [ 550.667316][ T24] kasan_report+0x117/0x150 [ 550.667376][ T24] ? __ethtool_get_link_ksettings+0x230/0x250 [ 550.667404][ T24] __ethtool_get_link_ksettings+0x230/0x250 [ 550.667429][ T24] __ethtool_get_link_ksettings+0x11f/0x250 [ 550.667459][ T24] ib_get_eth_speed+0x180/0x7f0 [ 550.667549][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 550.667583][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 550.667626][ T24] ? rxe_query_port+0x6b/0x3d0 [ 550.667716][ T24] rxe_query_port+0x93/0x3d0 [ 550.667746][ T24] ib_query_port+0x16e/0x830 [ 550.667791][ T24] smc_ib_port_event_work+0x147/0x920 [ 550.667819][ T24] ? rcu_is_watching+0x15/0xb0 [ 550.667860][ T24] ? process_scheduled_works+0xa20/0x14e0 [ 550.667893][ T24] process_scheduled_works+0xa8e/0x14e0 [ 550.667927][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.667953][ T24] ? assign_work+0x3cf/0x5d0 [ 550.667974][ T24] worker_thread+0xa47/0xfb0 [ 550.668010][ T24] kthread+0x388/0x470 [ 550.668036][ T24] ? __pfx_worker_thread+0x10/0x10 [ 550.668058][ T24] ? __pfx_kthread+0x10/0x10 [ 550.668086][ T24] ret_from_fork+0x514/0xb70 [ 550.668129][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 550.668156][ T24] ? __switch_to+0xc89/0x1420 [ 550.668182][ T24] ? __pfx_kthread+0x10/0x10 [ 550.668208][ T24] ret_from_fork_asm+0x1a/0x30 [ 550.668233][ T24] [ 550.668248][ T24] [ 550.850985][ T24] Allocated by task 5622: [ 550.855332][ T24] kasan_save_track+0x3e/0x80 [ 550.860025][ T24] __kasan_kmalloc+0x93/0xb0 [ 550.864653][ T24] __kvmalloc_node_noprof+0x53f/0x860 [ 550.870052][ T24] alloc_netdev_mqs+0xa9/0x12b0 [ 550.874985][ T24] rtnl_create_link+0x321/0xd70 [ 550.879908][ T24] rtnl_newlink_create+0x25f/0xb00 [ 550.885059][ T24] rtnl_newlink+0x167f/0x1bd0 [ 550.889751][ T24] rtnetlink_rcv_msg+0x802/0xc00 [ 550.894711][ T24] netlink_rcv_skb+0x226/0x4a0 [ 550.899537][ T24] netlink_unicast+0x7bb/0x940 [ 550.904310][ T24] netlink_sendmsg+0x813/0xb40 [ 550.909093][ T24] sock_sendmsg_nosec+0x13a/0x180 [ 550.914179][ T24] __sys_sendto+0x408/0x5a0 [ 550.918734][ T24] __x64_sys_sendto+0xde/0x100 [ 550.923512][ T24] do_syscall_64+0x174/0x580 [ 550.928182][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.934096][ T24] [ 550.936428][ T24] Freed by task 18565: [ 550.940497][ T24] kasan_save_track+0x3e/0x80 [ 550.945177][ T24] kasan_save_free_info+0x40/0x50 [ 550.950206][ T24] __kasan_slab_free+0x5c/0x80 [ 550.954991][ T24] kfree+0x1c5/0x640 [ 550.958921][ T24] device_release+0xc4/0x1f0 [ 550.963646][ T24] kobject_put+0x222/0x550 [ 550.968141][ T24] netdev_run_todo+0xf56/0x10d0 [ 550.973002][ T24] default_device_exit_batch+0x966/0x9e0 [ 550.978649][ T24] ops_undo_list+0x4b4/0x8d0 [ 550.983289][ T24] cleanup_net+0x572/0x810 [ 550.987730][ T24] process_scheduled_works+0xa8e/0x14e0 [ 550.993284][ T24] worker_thread+0xa47/0xfb0 [ 550.997895][ T24] kthread+0x388/0x470 [ 551.001975][ T24] ret_from_fork+0x514/0xb70 [ 551.006585][ T24] ret_from_fork_asm+0x1a/0x30 [ 551.011355][ T24] [ 551.013689][ T24] The buggy address belongs to the object at ffff88803512a000 [ 551.013689][ T24] which belongs to the cache kmalloc-cg-4k of size 4096 [ 551.028009][ T24] The buggy address is located 3593 bytes inside of [ 551.028009][ T24] freed 4096-byte region [ffff88803512a000, ffff88803512b000) [ 551.041980][ T24] [ 551.044317][ T24] The buggy address belongs to the physical page: [ 551.050807][ T24] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803512e000 pfn:0x35128 [ 551.060889][ T24] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 551.069401][ T24] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 551.077914][ T24] page_type: f5(slab) [ 551.081911][ T24] raw: 00fff00000000240 ffff88801b01b500 ffffea0000d81e10 ffffea0000d6dc10 [ 551.090510][ T24] raw: ffff88803512e000 0000000800040002 00000000f5000000 0000000000000000 [ 551.099096][ T24] head: 00fff00000000240 ffff88801b01b500 ffffea0000d81e10 ffffea0000d6dc10 [ 551.107784][ T24] head: ffff88803512e000 0000000800040002 00000000f5000000 0000000000000000 [ 551.116469][ T24] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 551.125150][ T24] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 551.133830][ T24] page dumped because: kasan: bad access detected [ 551.140255][ T24] page_owner tracks the page as allocated [ 551.145980][ T24] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 84196911247, free_ts 66977904170 [ 551.169089][ T24] post_alloc_hook+0x1f9/0x250 [ 551.173893][ T24] get_page_from_freelist+0x21fa/0x2270 [ 551.179461][ T24] __alloc_frozen_pages_noprof+0x18d/0x380 [ 551.185274][ T24] allocate_slab+0x79/0x5e0 [ 551.189795][ T24] refill_objects+0x2d5/0x350 [ 551.194481][ T24] __pcs_replace_empty_main+0x2bf/0x6b0 [ 551.200048][ T24] __kvmalloc_node_noprof+0x66b/0x860 [ 551.205438][ T24] alloc_netdev_mqs+0xa9/0x12b0 [ 551.210296][ T24] rtnl_create_link+0x321/0xd70 [ 551.215150][ T24] veth_newlink+0x246/0xb70 [ 551.219776][ T24] rtnl_newlink_create+0x310/0xb00 [ 551.224896][ T24] rtnl_newlink+0x167f/0x1bd0 [ 551.229672][ T24] rtnetlink_rcv_msg+0x802/0xc00 [ 551.234628][ T24] netlink_rcv_skb+0x226/0x4a0 [ 551.239408][ T24] netlink_unicast+0x7bb/0x940 [ 551.244195][ T24] netlink_sendmsg+0x813/0xb40 [ 551.248973][ T24] page last free pid 5575 tgid 5575 stack trace: [ 551.255303][ T24] __free_frozen_pages+0xc1e/0xd10 [ 551.260423][ T24] __slab_free+0x274/0x2c0 [ 551.264871][ T24] qlist_free_all+0x99/0x100 [ 551.269509][ T24] kasan_quarantine_reduce+0x148/0x160 [ 551.274999][ T24] __kasan_slab_alloc+0x22/0x80 [ 551.279877][ T24] __kmalloc_noprof+0x311/0x720 [ 551.284744][ T24] tomoyo_realpath_from_path+0xef/0x640 [ 551.290405][ T24] tomoyo_path_perm+0x283/0x560 [ 551.295309][ T24] security_inode_getattr+0x12b/0x310 [ 551.300774][ T24] __x64_sys_newfstat+0x133/0x270 [ 551.305831][ T24] do_syscall_64+0x174/0x580 [ 551.310437][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.316342][ T24] [ 551.318679][ T24] Memory state around the buggy address: [ 551.324315][ T24] ffff88803512ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 551.332392][ T24] ffff88803512ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 551.340468][ T24] >ffff88803512ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 551.348542][ T24] ^ [ 551.352874][ T24] ffff88803512ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 551.360943][ T24] ffff88803512af00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 551.369012][ T24] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 552.201560][ T24] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 552.208815][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 552.218035][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.228121][ T24] Workqueue: events smc_ib_port_event_work [ 552.233978][ T24] Call Trace: [ 552.237275][ T24] [ 552.240226][ T24] vpanic+0x56c/0xa60 [ 552.244269][ T24] ? __pfx_vpanic+0x10/0x10 [ 552.248827][ T24] panic+0xc5/0xd0 [ 552.252579][ T24] ? __pfx_panic+0x10/0x10 [ 552.257044][ T24] ? preempt_schedule_thunk+0x16/0x40 [ 552.262455][ T24] ? __ethtool_get_link_ksettings+0x230/0x250 [ 552.268569][ T24] ? preempt_schedule_thunk+0x16/0x40 [ 552.273976][ T24] ? __ethtool_get_link_ksettings+0x230/0x250 [ 552.280076][ T24] check_panic_on_warn+0x89/0xb0 [ 552.285062][ T24] ? __ethtool_get_link_ksettings+0x230/0x250 [ 552.291157][ T24] end_report+0x73/0x170 [ 552.295460][ T24] ? __ethtool_get_link_ksettings+0x230/0x250 [ 552.301563][ T24] kasan_report+0x128/0x150 [ 552.306120][ T24] ? __ethtool_get_link_ksettings+0x230/0x250 [ 552.312232][ T24] __ethtool_get_link_ksettings+0x230/0x250 [ 552.318155][ T24] __ethtool_get_link_ksettings+0x11f/0x250 [ 552.324077][ T24] ib_get_eth_speed+0x180/0x7f0 [ 552.328962][ T24] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 552.334364][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 552.339499][ T24] ? rxe_query_port+0x6b/0x3d0 [ 552.344306][ T24] rxe_query_port+0x93/0x3d0 [ 552.348934][ T24] ib_query_port+0x16e/0x830 [ 552.353548][ T24] smc_ib_port_event_work+0x147/0x920 [ 552.358951][ T24] ? rcu_is_watching+0x15/0xb0 [ 552.363741][ T24] ? process_scheduled_works+0xa20/0x14e0 [ 552.369490][ T24] process_scheduled_works+0xa8e/0x14e0 [ 552.375065][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.381063][ T24] ? assign_work+0x3cf/0x5d0 [ 552.385675][ T24] worker_thread+0xa47/0xfb0 [ 552.390284][ T24] kthread+0x388/0x470 [ 552.394399][ T24] ? __pfx_worker_thread+0x10/0x10 [ 552.399527][ T24] ? __pfx_kthread+0x10/0x10 [ 552.404129][ T24] ret_from_fork+0x514/0xb70 [ 552.408738][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 552.413885][ T24] ? __switch_to+0xc89/0x1420 [ 552.418587][ T24] ? __pfx_kthread+0x10/0x10 [ 552.423209][ T24] ret_from_fork_asm+0x1a/0x30 [ 552.427992][ T24] [ 552.431640][ T24] Kernel Offset: disabled [ 552.435981][ T24] Rebooting in 86400 seconds..