last executing test programs:

4.726685927s ago: executing program 4 (id=6414):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, 0x0, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r6, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0)
close(0x3)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r10=>r8, 0x2f, 0x1b, 0x81, 0x7, 0x1a, @local, @local, 0x7, 0x40, 0x0, 0xa}})
sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@mpls_getroute={0x10c, 0x1a, 0x200, 0x70bd28, 0x25dfdbfb, {0x1c, 0x20, 0x10, 0x9, 0xfe, 0x3, 0xfd, 0x4, 0x1a00}, [@RTA_NEWDST={0x84, 0x13, [{}, {0x2, 0x0, 0x1}, {0x3ff}, {0x5, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0x10, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xdd5, 0x0, 0x1}, {0x80}, {0x5}, {0x6, 0x0, 0x1}, {0x400}, {0x3}, {0x2c2}, {0x1000, 0x0, 0x1}, {0x8001}, {0xc}, {0x630f, 0x0, 0x1}, {0x6}, {0x8b1}, {0x5}, {0x1000}, {0xe7, 0x0, 0x1}, {0x10, 0x0, 0x1}, {}, {0xcb}, {0xffff5, 0x0, 0x1}, {0xffff9}, {0x7}, {0x2}]}, @RTA_VIA={0x14, 0x12, {0x2b, "cdbba05c9cf453c0e9884328761b"}}, @RTA_VIA={0x14, 0x12, {0x1d, "e7be238342315e2f96b6369e956e"}}, @RTA_OIF={0x8, 0x4, r8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x80}, @RTA_VIA={0x14, 0x12, {0xa, "48437ab6307b29c384ccdcca3510"}}, @RTA_VIA={0x14, 0x12, {0x27, "f983631226bfbfa84c48b33b625d"}}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x10, 0x5, r10}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8012}, 0x5708e6ab573cffbe)
r11 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}], @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x4, 0x1}, {0x7f}, {0xb, 0x1}, {0x2, 0x1}, {0x12}, {0x4, 0x1}, {0x36, 0x1}, {0x1d, 0x1}, {0x1b}, {0x16}, {0x36, 0x1}, {0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffff}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x6, 0x1}, {0x6}]}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x80}}, 0x880)
ioctl$sock_qrtr_SIOCGIFADDR(r11, 0x8915, &(0x7f0000002400)={'veth0_virt_wifi\x00'})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c006807130005002cbd7000000000000100000086fcbd24ef4acbbbae1b1d0e3e50b240ac5ca9bd06b075912cc75021ef4a78b1077fb8840869a0f108610c4e8f782ee7821eaee5a0202ed461ca12026f8e1001f2d0690fe8f0f43afd56c95dbaaeba46a1b18a321f2d2f7edc04061df9886d18", @ANYRES32=r8, @ANYBLOB="12030000000800000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

4.722994718s ago: executing program 3 (id=6416):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @empty, 0x28000}, 0x1c)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x4b, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x12)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020057", 0x4}], 0x3)

4.597605834s ago: executing program 0 (id=6418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x4048043}, 0x2000800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x48, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffbb20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040048}, 0x4000000)
sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
ioctl$SIOCGSTAMPNS(r10, 0x8907, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x409c8c0, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
recvmmsg(r10, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0xffffa0e0}], 0x1, 0x10003, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r14)
sendmsg$DEVLINK_CMD_RATE_SET(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r15, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r15, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x440d4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r13, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r12], 0x88}, 0x1, 0x0, 0x0, 0x805}, 0x40084)

4.326507315s ago: executing program 0 (id=6421):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6a, 0x1b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000001}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf255300000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf255300000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24010015}, 0x4040844)
bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x4}, 0x10) (async)
bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0x9}}) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0x9}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

4.217094474s ago: executing program 2 (id=6423):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0xb5)
syz_emit_ethernet(0x117, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe1, 0x3a, 0xff, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ni={0x8c, 0x0, 0x0, 0x7, 0x2, 0x9, "7334cbebb0abe59f5a9094f28320f84a233d9ac11a7ee1dcd1a3a0ad1090858f4f359d21b2d4ca777dbe0f0ef7df12cab95ac2444e48159bc0a3e8fa3a328041ae1ed4554173ad9538fce101ca1999b9dad7d4f85d35aaa0e821719fbd836e649c53e1a142b7b7fdc9578a365a088d89dc0d3c2f3ab80b0ff810a9788e9d0b0c5cdf9b097f0d5864a87476599fd8bcf8583f1cea339356ab43f01fc03a7197b2614211b1925e568a8d9d642b38c9e580a8b0ac6f7840c0bcd82f10672aae56acf373008472d743b72f3fe469fabe14021c"}}}}}}, 0x0)

4.142031125s ago: executing program 1 (id=6424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x20000000}, 0x74, 0x6, 0x1, 0x99ed, 0x21, 'syz1\x00', "2054d491860377fec35f215b58f6f803825e1d9497f37bf066f94671629657dd", "64f8654c509cfd6a2a4cb4f9e7e4c1504fa4642acc4004a25461dc8759866531", [{0x0, 0x9c9d, {0x3, 0x8}}, {0x2, 0x1, {0x2, 0x3}}, {0x6, 0x481a, {0x1, 0x44f32a19}}, {0xff, 0x4, {0x0, 0x10}}, {0xec6, 0x2, {0x3, 0xfffffff9}}, {0x1, 0x3217, {0x1, 0xfff}}, {0x0, 0x100, {0x1, 0x8}}, {0x1000, 0x6, {0x3, 0x8000}}, {0xfffc, 0x1b12, {0x0, 0xff}}, {0x5, 0x3, {0x1, 0x6}}, {0x0, 0x1, {0x1, 0x10000}}, {0xe, 0x54a8, {0x2, 0x6}}, {0x1, 0x1, {0x3, 0x8}}, {0x7fff, 0x1ff, {0x1, 0x6}}, {0x8, 0xf1, {0x3, 0xf2cf}}, {0x5, 0x1, {0x3, 0x3}}, {0x7, 0xb1, {0x1, 0x3}}, {0x5, 0x7, {0x2, 0x2b}}, {0x101, 0x9, {0x0, 0x7}}, {0x100, 0x4, {0x1}}, {0x4, 0x2, {0x0, 0x10}}, {0x3, 0x7, {0x2, 0x77a7}}, {0x8, 0x7, {0x2, 0x9}}, {0x200, 0x6, {0x0, 0x10}}, {0x856, 0x8cb6, {0x2, 0x101}}, {0xcd, 0x7fff, {0x1, 0x6}}, {0x5, 0x9, {0x2, 0x3}}, {0x3, 0x6, {0x1, 0xfffffff6}}, {0x9, 0xc3b, {0x2, 0xffffffff}}, {0x2, 0x8f, {0x2, 0x4}}, {0x4, 0x7, {0x3, 0x5}}, {0x5, 0xace, {0x0, 0x9}}, {0x0, 0x6, {0x2, 0x400}}, {0x7f, 0x6, {0x3, 0x3}}, {0x0, 0xbc9f, {0x3, 0x4}}, {0x2, 0x101, {0x1, 0xa}}, {0x0, 0x7, {0x1, 0x7}}, {0x9, 0x7, {0x2, 0x3ff}}, {0x0, 0x9, {0x3, 0x8}}, {0x101, 0x7, {0x3, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4.050990231s ago: executing program 2 (id=6425):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4f23, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x118, 0x0, 0x0, 0x118, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'vlan0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x118, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@ttl={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x80}}}}, {{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xffffff00, 0x0, 'pim6reg\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x6, 0x2, 0x61}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x9, 0x7, 'pptp\x00', 'syz0\x00', {0xb9a}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8)

3.990155917s ago: executing program 1 (id=6426):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.831028525s ago: executing program 4 (id=6427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x44, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x80000001, 0x0, 0xce03d4}, 0x9c)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00', 0x2000}) (async, rerun: 32)
r4 = getgid() (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) (async)
ioctl$TUNSETGROUP(r1, 0x400454ce, r4)

3.767493914s ago: executing program 1 (id=6428):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101, 0x420}, [@IFLA_GROUP={0x8}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101, 0x420}, [@IFLA_GROUP={0x8}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x30}}, 0x0) (async)

3.636990034s ago: executing program 4 (id=6429):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xee}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc02}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3.633084216s ago: executing program 3 (id=6430):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1404, 0x314489fa7ab5b9f2, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x80}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000844)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140)="f76978a6a35722086c37497dd5c1c712f98749b39169ab9caf8bf627df56bb86ce5e8bd3698b46bc7c6f12fbc4f7c166c36b11ca7cfad21f50ac931cdb11e4bc59838dbcbb9d33711a2e6d494dbda61a9ec7f606c03bdae0763ade9ad23f2cff02076e331e7d7a6029f8ad9b5caaff14130ad10940b30a050a2bd90dc8f5e4865cdf33e86b42d8d4169c35778437d3890e6e29384f3c62", &(0x7f0000000200)=@tcp, 0x1}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7e6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe943ceb}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x20040040)
r4 = socket$inet6_sctp(0xa, 0x2, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x200, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x7f, @mcast2, 0x1}, 0x1c)
sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0xb4, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xa9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x70, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9b32}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x204}}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/mnt\x00')
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xc0c0, 0x80}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff8, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf645, 0x73}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x6f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r5)
sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x11c, r9, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4a88ba4e46a2459b}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000b80), 0x80180, 0x0)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r5)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r11, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x2000}}, ["", ""]}, 0x24}}, 0x8880)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000d80)={0xf3}, 0x1)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000ec0))
sendmsg$can_j1939(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)="b0c21eca3137608da68510b4eab852f62790b457e3aa9e914c45645fb9665e8249ae07bcbcbbb1fb31a2c1258af4e2bb1c8d7a4171c86343c93531da74bcd3b16ea8ce3b8ef3eec6f1368e02657eb2a2e295fc8a25842e1ea186787e76d86278a69add7f182ce2fa3c5543c27e4f2d7bd77a69d6cdbc3be700a31675c6fafd21098416c190a603067d396f5fc76b71e52437065447ba88", 0x97}, 0x1, 0x0, 0x0, 0x1}, 0x20004819)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001040), 0x8)
sendmsg$nl_route_sched(r12, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)=@gettaction={0x108, 0x32, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x101}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x953}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x52a}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc40}, 0x20000080)

3.405825108s ago: executing program 4 (id=6431):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d710026e30811a5c79fbb1e9355386753cf4a24d39cfa743175"], 0x7)
socket(0x5, 0x2, 0x2)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x3473fe3d81f9323b, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}}, 0x8000)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007"], 0xd0}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r9, &(0x7f0000000040), 0x0}, 0x20)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8, 0x8000, 0x5, 0x10000, {{0x19, 0x4, 0x2, 0x0, 0x64, 0x68, 0x0, 0x4e, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, {[@timestamp={0x44, 0x10, 0x36, 0x0, 0xf, [0xb92, 0xfffffff8, 0x8]}, @rr={0x7, 0x17, 0xef, [@local, @multicast1, @loopback, @multicast1, @private=0xa010102]}, @lsrr={0x83, 0x27, 0xa7, [@loopback, @multicast2, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', <r11=>0x0, 0x29, 0x6, 0x5, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x7, 0x7fff, 0xe}})
socket$alg(0x26, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_procs(r12, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r13, &(0x7f0000000c40), 0x12)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r15 = openat$cgroup_ro(r14, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_pid(r15, &(0x7f0000000340), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', r11, @fallback=0x36, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

3.311145485s ago: executing program 2 (id=6432):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0x0], 0x44}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1cb}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)={0xffffffff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x9, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x510)

3.307458114s ago: executing program 1 (id=6433):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88002000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r4], 0x88}, 0x1, 0x0, 0x0, 0x805}, 0x40084)

3.234347562s ago: executing program 3 (id=6434):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0x9, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg(r4, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0x9, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
sendmmsg(r4, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0) (async)

3.066836662s ago: executing program 2 (id=6435):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0)
write(r1, &(0x7f00000002c0)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c90", 0x28)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x6}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x6}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={<r8=>0x0, 0x7}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={r8, @in={{0x2, 0x4e20, @loopback}}, 0xfcda, 0x2}, 0x90)

2.929540616s ago: executing program 3 (id=6436):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$kcm(0x21, 0x2, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0})
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), r4)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001480)={0x58, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000}, 0x2000c810)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xf001, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="41000200010006", 0x7)

2.50014062s ago: executing program 0 (id=6437):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[], 0x314}], 0x1, 0x0, 0x0, 0x20040000}, 0x800)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[], 0x314}], 0x1, 0x0, 0x0, 0x20040000}, 0x800) (async)

2.425962098s ago: executing program 0 (id=6438):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)={0x524, r0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x482, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @initial, @broadcast, @device_a, {0x7, 0xb}, "", @value={0x4, 0x0, 0x0, 0x0, 0x4}}, @a_msdu=[{@broadcast, @device_a, 0xb0, "00ee74bbbc8630670f48361d28ff696cb1432f7126326550658ab8827d6797c8a28307d17aaa2f65c0d70df9ddb76b4023a88b708b8638b5890e3495a550e2adf6e10f73fc1b901159245d220128cf6d2725e7bd5e48b809a507850b88af436e5b0c1b5f5315efa367f0a953815243a1eceec37a43d7cb25975958497c4cf0a8d5e05452c95a530e1c4774a35c0f8648dcb5f9cc20705e0aed81032b931109e73dcfdc80a49fb3e92c345e6dc5599147"}, {@broadcast, @broadcast, 0xd5, "35f20fa3be6c3711113e6ba89d75ca97427c0d7c3a6eff93f7e414c3b6f8430ffad6abc0260376a92fa14fdbb9968b6bca3baa71d0f34ceb40a586ede64abbe1932e3c7cd7d9893365ceaa470769f01795245acff98e97c2a9c71f98f630c2dbbc3aadb4bf2f278e6388b0139ba4c3560594016f19401e4841b7f9e0a7b67bf1c8361a503725ed9cd61e1e834e8ea542eaf8f406ee4f21ae5bca239cd150df85ba5fddc4d57025362ba08d3b000f3dfdb4f7a20d1d585e12368fffcfa5162847949551f211d4ed94c6fc46d7a2c6502ea5d7115e96"}, {@device_b, @device_a, 0x48, "bfb13a7878a20a126c4c2e27dafe9bc358f23bd965d23ee630f629a5faef1e51f51e59c1bb3e2015fb088c189082debe41a3ed95bc69942a61dec2f430f987f282d227a47a4193e0"}, {@broadcast, @device_a, 0x5d, "aae114d1e30d3ea84436def35a02041e576581080c5acc2d40ebe31bdd289fb4ba261d28a7d12828f3e5e3e6e9f94f5c0eaaa0068b8ecebfae9f531279e3201a829d5c3f32a0297ecd76888f2bd4ebd3c542364206c4d0d1c4b2dcbbf9"}, {@device_b, @broadcast, 0x57, "b8391a69b0a9012a2664a8098eb65b3bc6f20b471aedb904f76815740810c18d5e5bb898588dd610eccaa813e1fe6f8ea3dce4bcac2742a24d1a815a8f9abff6dad81206a11fc158ac556c5eebef8c58d4eaa4d2482e4d"}, {@device_b, @device_b, 0xe6, "46f43bf758493fa1c1ad7494331b6b91a9512803cd08ea7dd9f837ae8b488c387c352ea9328dac0139b815d02dc37cecb1df9ae3c67faa2f6768d89434b9c1ba370b707ce930c76227796ed494a1fd251859a06d3029f086dcda5e19a341cc745e2d9730604dbed7e8db70cdf4d50f503c95650d4b6e82a6d78f75fe28d8f389a865876d1fe90bae29049957f01b618eb4511fad79827103e9986c8ec84c344f51d7627cf5e3861dbf5b5c3c8eed872cc939a141bbfd3e2601b46b8a955863e07fe218eac10a713a12b10a044e2851380f039fd26a557df3afc91a69934a997f6743088dd217"}, {@device_a, @broadcast, 0x6f, "7d48364e899b9baee201add4b9babc1d118a8ec7a5a384d98b6277f36df260ee713780d836d59516e952236ddb72118df94f92f9306719775f2e6d95257ee935356382ea9955d49340e0c18c7ba650e05c65c2146efe86cd2ea9c2c682d22eb806390cca2050de820cc5a8e202db9f"}, {@device_b, @device_a, 0x1, "ed"}, {@device_b}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x34, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_b, @initial, {0x6, 0x40}, @value=@ver_80211n={0x0, 0xf68, 0x1, 0x3, 0x0, 0x2}}, 0x2c, @val={0x8c, 0x10, {0x1ac, "9b4820aacaaf", @short="5fe3a5104f2aa750"}}}}, @NL80211_ATTR_FRAME={0x27, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1}, {0x2e20}, @device_b, @device_b, @from_mac=@device_b, {0xe, 0x800}}, @sp_mp_open={0xf, 0x1, {0x88, {0x1, 0x5, [{0xc}, {0x1, 0x1}, {0x36}, {0xb}, {0x48, 0x1}]}, @void, @void}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x524}, 0x1, 0x0, 0x0, 0x44010}, 0x2000840)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000001a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x18840000}, 0xc, &(0x7f00000019c0)={&(0x7f00000007c0)={0x11c4, r0, 0xd10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x448, 0x111, 0x0, 0x1, {0x444, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x178, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5187}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x91}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x52}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x21}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfffffff9}, @NL80211_ATTR_PEER_MEASUREMENTS={0x69c, 0x111, 0x0, 0x1, {0x698, 0x5, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x83}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x50000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8f}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x33f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x65}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xfef5d84168586de7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1c0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x6b8, 0x111, 0x0, 0x1, {0x6b4, 0x5, 0x0, 0x1, [{0x274, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x23c}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}]}]}, {0x43c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x274, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x59}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4cc5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x79}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x11c4}, 0x1, 0x0, 0x0, 0x1}, 0x4000001)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r4, &(0x7f0000001cc0)=[{{&(0x7f0000001a40)=@alg, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001ac0)=""/77, 0x4d}, {&(0x7f0000001b40)=""/65, 0x41}, {&(0x7f0000001bc0)=""/45, 0x2d}], 0x3, &(0x7f0000001c40)=""/120, 0x78}, 0x80}], 0x1, 0x100, &(0x7f0000001d00)={0x77359400})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d80), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x40, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000002740)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002700)={&(0x7f0000001f00)={0x7f8, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3ff, 0x10}}}}, [@NL80211_ATTR_FRAME={0x376, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @broadcast, @random="33bf954766e1", {0x4, 0x6}}, 0xf, @random=0x2, 0x280, @val={0x0, 0x17, @random="f03293bc70a56385ca7807628a11f672d3fe06ab07582d"}, @void, @void, @val={0x4, 0x6, {0x1, 0x9d, 0x8}}, @val={0x6, 0x2, 0x9f}, @val={0x2d, 0x1a, {0x800, 0x0, 0x2, 0x0, {0x8, 0x1, 0x0, 0x3c5, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x6, 0x43, 0xf}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xf, 0x20}}, [{0xdd, 0xb6, "2ea5677938355fcd5cc4e010e9e75c6cd7960226540278367da80557e276af8a0598942cef76bbafb06127241515eb0e0b8a8ca46ad591bee11cd11b2e800a437b46393d6ab56ee00fe36c5cbe31613628bdfa5d3fbec3f432c45d4647f8604d1a365ea917d0b7a79dbbe2f63fdecb517839b87120af9c296d81bc05a47523363c189dbf0d8656d06e5f7c051463adad5ad85adcfeb6711b8255cf42d9ede487ae90c9abbf5635c8708c7e604b68797e6d461d052048"}, {0xdd, 0xc, "f8e08cf9b98165db54bd7734"}, {0xdd, 0xce, "ecf150b075070e5bb5af5e4a63f293230b9d0cd9b5732a7146d78e854df2656894ff01f2a7bf88e9498b772795386158cdb18ed3d192fb0ca83a38dc06a242e84b1b14456d082bbbbd78a9eaef60f7a57f0e271197d9f9c1d0f6b5766f1a513aca28ecb86e3f2a66b599a98f01e6c4efd3875b5ca09cb957c4a84cff4b2dcf243a357113ac65427199167cc7df5f1f9bf26e0672586a4a258dd62f58fc4cd134982f30175e26752210c3e7981d5302eb67320248d7d8b5b719bde8934680f6021adcfcfc6b775606fb78dc3cea17"}, {0xdd, 0x21, "771d4cebdb01230ba8dd2ab2dcc4e40bb4e88cb27f516a5126972c36d14da79c6e"}, {0xdd, 0x28, "a396bf41656773a22907b46ff85b3845022b2acb21fe7cc97c4949127a20cf4402b4c5000ad184c1"}, {0xdd, 0xb4, "8ee6bb97837c19b4ff8973eba9ae22f67790e5a3ccbbec61124b4556b48be14bfc4515ce2aab9ffc547901a9f634acd19cf4fd3bea0fe525d6a844235944a39e99ed64af86bc55fae622dc2b8a452e6e60bbdb1e0cfce1444e72590cf0ff19718a4d3ee208bf4a7030a1a021734ac1b3631212e4a08a4d7016008fb5fc3f2d7c5fd37ff05ab5d621bb8ffc835a74834fdd9e87128e0db07abba5efd60ed802b34c8f56175ec3e6c141a5615268d83ed71febf82b"}, {0xdd, 0x61, "d14d35b647f158f73be38dd4dc7e4c122ae005051de976d0f6a969fb308413cc6ba1b0cfaefced79ea627e65d10833f50ef8fad787223f5275352cfdffad6939674368e00c021f4cb7a88f803433f2af0e9e5ae7d03a333016be5e2895856803c7"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xafb}, @NL80211_ATTR_FRAME={0x450, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_a, @device_a, @initial, {0x2, 0x1}, @value=@ver_80211n={0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4c00, 0x28, @default, @val={0x1, 0x2, [{0x48, 0x1}, {0x48, 0x1}]}, @val={0x2d, 0x1a, {0x400, 0x0, 0x5, 0x0, {0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x6}}, [{0xdd, 0xc1, "6a8da5ac7f38fd780d90ffa490bfe754e7cafd96a711f3eaaaea002c46c8719f01105e026abbaa6925d9805956fa35dd2f8848ec01ffd9e01d64c63caabeea0fcce18d1e0719426c5232286877036f35e020a5ca232e206d2ec6db6b103415bab77b8599adfe173ccba6eadb14d6d255eedbf56b048f861201142059d5a2057cbf0fa3f48fa6e738b79f151711b4d5dd9b4f8ebbb2d7a5fb13e3bbe974f6be6ba5a6b9b5bcaa56f695f73d4a963d652e26456152d741e5265252067b3fcaf6f876"}, {0xdd, 0x46, "79259d542d38e74bbc1300206dab1174dc7187ce01ccb2418fd2f11db32ce344c3b9927d99ee366cd31f4e5dcaf49c90b2cb1a100953e863f233fcc2d86c7025f0d745512379"}, {0xdd, 0x26, "fe884b4d0baf18f641ec608b2074a02edd2ffe55777ff9d5d48d53be2ada5ae21de92d2ffd93"}, {0xdd, 0xfb, "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"}, {0xdd, 0xe7, "eeba8018d9a441a4ad59c4019e356a3165263b82525ea33fc7db6d8856b7101c2b8ddaedcd5b6b313d1b3deaba59dab32ff3bffef157eeee65c586bc87672e0ea8170615eefb2fe82129c260061ebe032abae71a9a26202d6924be72fc4faa8cf1325d974d57a391e877da7dde04b49edf764e6e508d1d16c7f081fd38eb467fc0fb6cbe1566ff2823f0debcd84b2524f200298cbb3f9aa09a85f0f386ecc67c33b760d67c3d9d59b4c6f6e2aeccbb0b616a7a9c8147175a23ccab29a1c11a937876c01d2d768fb3ecf866126c0c5c90a38821fec661aa9f97822fe26534c5f4fd6687e1da7933"}, {0xdd, 0xef, "d2d5e1a6c2d4da149eeca151904512f8a35fdec63f8fe555f74f878a242f335d929c44a185ba4e813819070f1014c3fbb78ef53bc51dfd803744d63ac19672c49e46f4c7dc01f370dffe665850212fc6668af56971d1f41b544a1e66f71dcb94c4db33076104e2366ac43fc95612060b56f15e9ad835f03442efc887358734dd1641915ba76f90a458cd0bca7ca42268a48faa12fbabe5d0d7a7b8ae33fc499cadec94a0826a9b2bff68c1b8c0b74b83e79e7971b935a2e7c1ce5291ae8982ddf9f6b110de1ff9aea0f03d63662a2565c46d794493efed7d87df51200a97a53fe5f1a5fd53f59207c54bb146656ad6"}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000844)
r8 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000002780), 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000028c0)={<r9=>r8, &(0x7f00000027c0)='wpan1\x00', 0x280c3, &(0x7f0000002800)={@align=0xfffffffffffffff8, {0xb, 0x8}}, 0x2, &(0x7f0000002840), &(0x7f0000002880)=0x3})
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000002a00)={<r10=>r8, &(0x7f0000002900)='($,@[*@\x00', 0x200000, &(0x7f0000002940)={@align=0x9, {0x1, 0x101, 0xb, 0x24000000000}}, 0x4, &(0x7f0000002980)={@_ha_fsid}, &(0x7f00000029c0)=0x7fffffff})
write$cgroup_subtree(r10, &(0x7f0000002a40)={[{0x2d, 'rdma'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2d, 'pids'}, {0x2b, 'io'}, {0x2d, 'blkio'}]}, 0x25)
sendmsg$nl_generic(r3, &(0x7f0000002c80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002c40)={&(0x7f0000002ac0)={0x14c, 0x22, 0x300, 0x70bd29, 0x25dfdbfb, {0x1c}, [@generic="c607f4ac066de32430c291a641a773ce7b245667e99f7a9bd43568414781d7e19537c495f2925fb652eefcc12550f024a2e3ebd2f67c5654789530ff23580230ece6c9be94708dcf0f0139c201e75b33d4a26c43dc69f77e7a972b8026ea48c75a56bb46f3efed2ff7c4682d86ab8c3cb5c79061ec6580b6ba03a7ed37004288956e65183279cae22afaf3f5c482e052edcb2d74aa2551b8c58517b7468e8eb56dd9c8433de4a486a16c806f3612d1be5e55183eef6887927168ba0d4353", @typed={0x8, 0xbc, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x123, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@empty}, @generic, @nested={0x54, 0x74, 0x0, 0x1, [@generic="5dacbe5172f2e626a2dc7d7369e182e99ddc6d9e5f97bc4ac67aaa9342af245246323d45d030c03b165eb98b645c5c49088b1d3f9647a68bb435a5882536b1199de40a9409be59c9a22252f666bda6ac"]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44}, 0x2000c884)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002cc0)=<r11=>0x0)
sendmsg$nfc_llcp(r10, &(0x7f0000003300)={&(0x7f0000002d00)={0x27, r11, 0x1, 0x3, 0x8, 0x2, "c89905d04fc7b48044760aa477137c98796c1205e34b223a2e4fc86b66946d89d7b97fdccc78335348c9f131105f1315e933dd6269b5a87c8fb7ebd3669d60", 0x26}, 0x60, &(0x7f00000031c0)=[{&(0x7f0000002d80)="8822653e62cdaf932d0edf1ecff4221061598c5966febde4ac27117083184c060bda35157ae62bcd923433cc5da066132e8f81a2baa369ed6ec48b56fbefe0d9dd6c049e3af46fcc73d6d18ea741b107d277b517e8262ea0c203cf0d9fa209ab5073fc35b2fd99d058390f1b16be56f3119d6c201c1bdf6ac3aa629dfd616eb3b3c6f71dcf068fd6be96c0811d3d0483ce5022d5286a3043907cd66f9bf31c7c6cca2d699ac4d87c700784479754be92c9fc5d14f11d925f025e96d637e2e95e7cb76450243703a402fd4ec95fe0006a61526cd26937de6d5cff35da0f8a", 0xde}, {&(0x7f0000002e80)="54a81c5bfeebc31fff93877bda4080c934b9a6cd792e1caca74593b09b72533acb2654688e361fd251f3a14cb94ed76c16d8d2182a11ec78d194808a4f6459223318ebaf7e3cad4c33b983d83e268f593278670f24c23243d51d98add33c4333705373c60f5db6805473d345d9955fcceeeb5fe89135a53e216ef3289165ecb74061a0e5cd0d7a0182175efef0ffb669a1e6ee1bd99f764ecca3f19e005c3261b0fd03dc67e1591456ec12c250a7a1f0f89727dd0a1dee9049fa1dde66468fa00ee76a7cb31f66e918a20c21b490018701d4ebc36366fbce676e42ed4404da3f231185475673599e6f99679ea9ed3c871e62147811561fcab0e523", 0xfb}, {&(0x7f0000002f80)="7aaba143126cba35fc8d78ab2c3567a642bdc30a8123e1f19cf4ed01b746ea4b3badf13f0e7a980bffe473ddee", 0x2d}, {&(0x7f0000002fc0)="ce84b54df11431273cf02119a8219130587ce42a546b929723f15b1cb7bbb89f2cc489c885758738bc8a19abedd62107", 0x30}, {&(0x7f0000003000)="918c7df9579f95ad8bc6153c8b27179a0eb3363bbb5df15c1c156ad5b71d82322c4d2d972563b41d3f3de84ba1c746449ac79ea3b2b9a112f29b774af60a919fb760d547a732aa8298019204138bc2e253b8a74554501ea0ade801a229850df597d11b4cd790c461d8a2", 0x6a}, {&(0x7f0000003080)="18075626cf90aa54e16ab82642ae2b5fe075833686e95d33bf35de83850043371677ac432ea026c03604000c97c80c5ca0027f3b311b08e715b68b310361901efccbce776b7d9dfec57863e8461f52e3130dea2ca445fb5d62a37935990c057c15370b06312b0df70d5e7b4a15d1", 0x6e}, {&(0x7f0000003100)="85e806712918d62a3a3eeb798822fb92aae9b6938b49fff32227352c42246c9b806da62383604b57bc1da026c717a2d14b7a115f05ab160447db413b618790c5f33dee77416d5b8dafe4fe69cfb8ad24345a0545783f839d34489ec98d4ca4c3fb5e2f4a46db50feec5b95cbd99dd9503d0a06c7849779ea08c81a46d4ce4847fb155619c704fbd4a59173f2c19602f673f9557f6351f216b132550033c47c265968f60b9d9e25556382162433", 0xad}], 0x7, &(0x7f0000003240)={0xa0, 0x0, 0x5, "d8d021855d7698c775b020958280d58cf113cfe770ae4d999aa6193c38f6785fb1a80f6aa720bf0ab238f31f9c03e7de1b7009fbb0536a14e2d6f007acf72bc911bb22dd10dfbc3949904d879f67957df7e2e8bebfe1f3cbe7fc7e828037a0da20617714b69da733edfb234ec0468c6cce536b93e967295e8beec90475fd3f45bdd4e71013534fc38b888bf8"}, 0xa0}, 0x4000811)
accept4(0xffffffffffffffff, &(0x7f0000003340)=@hci, &(0x7f00000033c0)=0x80, 0x0)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003440), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000003480)={'wpan1\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000003540)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000000)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000003580)={0x0, 0xd2e}, 0x8)
r14 = accept(r4, &(0x7f00000035c0)=@tipc, &(0x7f0000003640)=0x80)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r14, &(0x7f0000003dc0)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003d80)={&(0x7f00000036c0)={0x6a4, r0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x5, 0x7, 0x6348, 0xffff, 0x4, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x7}, {0x6, 0x8}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x7}, {0x3}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x7}, {0x1}, {0x5, 0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x6}, {}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x7, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7b20, 0x40, 0x6, 0x6c73, 0x401, 0x3, 0xa3, 0x1c0]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1b, 0x24, 0x16, 0x6, 0xc, 0x1, 0x48, 0x49, 0x74, 0x1, 0x18, 0x12, 0x5, 0x49, 0x24, 0x18, 0x4, 0x17, 0x4, 0x36, 0x18]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x564c, 0x10, 0x1, 0x3, 0x3, 0x7, 0x4, 0x100]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x36, 0xb, 0x12]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1e, 0x2, 0x6c, 0x9, 0x1]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0xa}, {0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x8}, {0x6, 0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x0, 0x1}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x1, 0x6c, 0x5, 0x6, 0x12, 0x2, 0x16, 0xb, 0x6, 0x14, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff1, 0x1, 0x6, 0x2, 0x3, 0x8, 0xf3e, 0xe7b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x8, 0x6, 0x9, 0x100, 0x7fff, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x224, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x43, 0x6, 0x7f, 0x5, 0x5, 0x1, 0x1ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x18, 0x24, 0x21, 0xb, 0x6c, 0x2, 0x6, 0x30, 0x9, 0xc, 0x3d, 0x36, 0x6, 0x18, 0x12, 0xc, 0x4, 0x18, 0x16, 0x60, 0x5, 0x6, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xb8, 0x7, 0x1ff, 0x0, 0xd927, 0xb7f2, 0x200]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x1b, 0xc, 0x3]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x6c, 0x24, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xeb13, 0x3, 0x1000, 0x80, 0xfffd, 0x4, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x24, 0x7e]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8, 0xfd, 0x200, 0x7ff, 0xebe4, 0x2]}}]}, @NL80211_BAND_5GHZ={0xe4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x6}, {0x7, 0x9}, {0x5, 0x6}, {0x0, 0x6}, {0x6, 0x2}, {0x4, 0x8}, {0x3, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x5}, {0x3}, {0x7, 0x8}, {0x3, 0x3}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0x9}, {0x3}, {0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x8}, {0x5, 0x9}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0x2}, {0x7}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x4}, {0x7, 0x6}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0xa}, {0x7, 0x7}, {0x2, 0x7}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0x7}, {0x1, 0xa}, {0x5}, {0x4, 0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x6}, {0x2}, {0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x5, 0x6}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x6}, {0x7, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x8}, {0x7, 0x3}, {0x6, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x7}, {0x3}, {0x6, 0x1}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0xc, 0x9, 0x4, 0x5, 0xb, 0x9, 0x5, 0x16, 0x30, 0x6, 0xb, 0x12, 0x60, 0x61, 0x1b, 0x9, 0xc, 0x1b, 0x18, 0x18]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x1}, {0x2}, {0x3, 0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x9}, {0x1}, {0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x6, 0x8001, 0x64, 0x3b93, 0x200, 0x0, 0xfffb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x4, 0x5, 0x24, 0x6e, 0x36, 0x48, 0x30, 0x24, 0x48, 0x2, 0x24, 0x2, 0x30]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x49cb, 0xfffd, 0x3dba, 0x46, 0x6, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6d26, 0x1, 0x1, 0x0, 0x9, 0x6, 0xe8c0]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7fff, 0x5, 0x0, 0x7fff, 0x1, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9b40, 0x6, 0x7, 0x2d, 0x101, 0x1ad4, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x5, 0x8, 0x40, 0x10, 0x4b4, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x3, 0x3, 0x6, 0x24, 0x9, 0x48, 0x5, 0x1, 0x48, 0xc, 0x16, 0x48, 0x9, 0x18, 0x5, 0x60, 0x30, 0x18, 0x4, 0x1b, 0xb, 0x12, 0x36, 0xc]}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x3, 0x60, 0xb, 0x4, 0x1, 0x4, 0x6c, 0x4, 0x12, 0x6c, 0x2, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xbc8, 0x2, 0x8, 0x7f65, 0x1000, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xaf5, 0x9, 0xfff8, 0x2, 0x6, 0x1b4, 0x3]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x6, 0x3, 0x7, 0x81, 0xf6, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0xb, 0x12, 0x6c, 0x12, 0x24, 0x12, 0x60, 0x2, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4, 0x5, 0x6, 0x9, 0x6, 0x7, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x1}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x2}, {0x5, 0x1}, {0x7, 0x5}, {0x3, 0x7}, {0x7, 0xa}, {0x6, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x7, 0x6}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x7}, {0x4, 0x3}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {0x6}, {0x6, 0x9}, {0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x6}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x5}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x7, 0x4}, {0x6}, {0x5, 0x6}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0x3}, {0x6}, {0x6, 0x5}, {0x1}, {0x1, 0x9}, {0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0xa}, {0x4}, {0x1, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x3c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xde8b, 0x9, 0x6000, 0x3ff, 0x81, 0x2, 0x5, 0x8000]}}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x16, 0xb, 0x4, 0x4, 0x4, 0x3, 0x24, 0x36, 0xc, 0x16, 0x12, 0x5, 0x36]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x4, 0x16, 0x48, 0x40, 0x36, 0x36, 0x60, 0x2, 0x6c, 0x60, 0x24, 0xb, 0x12, 0x30, 0x30, 0x3, 0x5]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x48, 0x12, 0x2f, 0x4, 0x30, 0x4, 0x0, 0x2, 0x16, 0x1, 0x48, 0x48, 0x16, 0xc, 0x36, 0x1b, 0x3, 0x36, 0xc, 0x5, 0x9, 0x36, 0x1b, 0x24, 0x18, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x85}, 0xc000)
write$tcp_mem(r10, &(0x7f0000003e00)={0x0, 0x20, 0x39f, 0x20, 0x8}, 0x48)
openat$cgroup_ro(r9, &(0x7f0000003e80)='cpuacct.usage_user\x00', 0x0, 0x0)

276.707172ms ago: executing program 1 (id=6439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000847}, 0x4894)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010064676500001c0002800c002100090000040000008c177322ca9f4699728044174b0770aa"], 0x4c}}, 0x0)

269.63997ms ago: executing program 2 (id=6440):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x50, 0x6}, [@initr0]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

223.513405ms ago: executing program 3 (id=6441):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700090025bd7000fddbdf2505"], 0x14}}, 0x4000080)

221.7797ms ago: executing program 4 (id=6442):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001e000100fdffffff0000000002000000010000070000000014000900766c616e300000000000000000000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x24046852}, 0x20000001)

213.849922ms ago: executing program 0 (id=6443):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r3, 0x400448e6, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

110.872535ms ago: executing program 2 (id=6444):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x20000018}, 0x80, &(0x7f00000043c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000008000240000000000c00048006000100a84000000cfd0280050001008d0000000900010073797a30000000000900020073797a3200002967d7d500001100010000000000000000000000000a"], 0x94}}, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) (async)
close(r2) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x20000018}, 0x80, &(0x7f00000043c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000008000240000000000c00048006000100a84000000cfd0280050001008d0000000900010073797a30000000000900020073797a3200002967d7d500001100010000000000000000000000000a"], 0x94}}, 0x0) (async)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) (async)

55.443142ms ago: executing program 4 (id=6445):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000007700)=@bpf_tracing={0x1a, 0x23, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd55f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
socket(0x2, 0xa, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x9, 0x7}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x20008000) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'macvlan1\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, &(0x7f00000001c0))

54.924698ms ago: executing program 3 (id=6446):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000140a0300000000000000000002000000140000001100010000000000000000000000000adb991cac26b999fa48da0619af7aa46959570472f8f3c8a4"], 0x78}}, 0x0)
unshare(0x20020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x9)
r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r5, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={<r8=>0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r9, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r13 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r12, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000380)={0x8, {{0x2, 0x4e21, @remote}}}, 0x88)

24.06037ms ago: executing program 1 (id=6447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r4, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x55, "238c9663a42bfb75f1158f0fc931df1c80a72f04a6d6da9921e5caade386557b41ccec3cff50c38ec863abb29913c204ef92f5e444fc77e167843642cd860377cf94cd14cfdf4393812146079a7ee9e2464722c985"}, &(0x7f0000000180)=0x5d)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

0s ago: executing program 0 (id=6448):
r0 = socket$kcm(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'macvlan1\x00', {0x2, 0x4e20, @remote}})
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x2, 0x5, 0x84) (async)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'macvlan1\x00', {0x2, 0x4e20, @remote}}) (async)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)

kernel console output (not intermixed with test programs):

3'.
[  471.048452][T22594] netlink: 'syz.4.4494': attribute type 1 has an invalid length.
[  471.190368][T22600] sctp: [Deprecated]: syz.4.4495 (pid 22600) Use of struct sctp_assoc_value in delayed_ack socket option.
[  471.190368][T22600] Use struct sctp_sack_info instead
[  473.572370][T22565] tipc: Disabling bearer <eth:syzkaller0>
[  473.614240][ T5742] tipc: Node number set to 1917583511
[  473.689786][T22606] hsr_slave_1 (unregistering): left promiscuous mode
[  473.819239][T22611] ip6tnl2: entered allmulticast mode
[  473.845570][T22615] netlink: 'syz.2.4499': attribute type 11 has an invalid length.
[  473.918519][   T29] audit: type=1804 audit(1784579029.850:12): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4500" name="/newroot/246/cgroup.controllers" dev="tmpfs" ino=1278 res=1 errno=0
[  473.946278][   T29] audit: type=1800 audit(1784579029.880:13): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4500" name="cgroup.controllers" dev="tmpfs" ino=1278 res=0 errno=0
[  474.002793][T22627] __nla_validate_parse: 2 callbacks suppressed
[  474.002811][T22627] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4503'.
[  474.134452][T22633] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000
[  474.163440][T22639] netlink: 'syz.1.4506': attribute type 22 has an invalid length.
[  474.188375][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4506'.
[  474.344966][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4509'.
[  474.425303][T22656] netlink: 'syz.3.4512': attribute type 21 has an invalid length.
[  474.450949][T22656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4512'.
[  474.724999][T22662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4514'.
[  474.765445][T22662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4514'.
[  474.884239][T22662] bridge5: entered promiscuous mode
[  474.904833][T22662] bridge5: entered allmulticast mode
[  474.939532][T22690] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  475.039671][T22662] xt_l2tp: v2 doesn't support IP mode
[  475.115409][T22694] 8021q: VLANs not supported on ip_vti0
[  475.119170][T22699] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4524'.
[  475.136331][T22696] netlink: 476 bytes leftover after parsing attributes in process `syz.0.4523'.
[  475.232124][ T1614] block nbd4: Possible stuck request ffff888027d40000: control (read@0,1024B). Runtime 150 seconds
[  475.243211][ T1614] block nbd4: Possible stuck request ffff888027d401c0: control (read@1024,3072B). Runtime 150 seconds
[  475.379560][T22708] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4526'.
[  475.404960][T22708] openvswitch: netlink: Message has 512 unknown bytes.
[  475.687470][T22721] bond3: option lp_interval: invalid value (0)
[  475.726538][T22721] bond3: option lp_interval: allowed values 1 - 2147483647
[  475.800360][T22721] bond3 (unregistering): Released all slaves
[  476.255414][T22748] xt_CT: No such helper "snmp"
[  476.887617][T22795] netlink: 'syz.3.4550': attribute type 1 has an invalid length.
[  476.899983][T22795] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4550'.
[  477.036249][T22800] netlink: 'syz.0.4551': attribute type 6 has an invalid length.
[  477.106155][T22806] netlink: 'syz.0.4551': attribute type 4 has an invalid length.
[  477.469054][T22825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  477.476467][T22825] IPv6: NLM_F_CREATE should be set when creating new route
[  477.483784][T22825] IPv6: NLM_F_CREATE should be set when creating new route
[  477.656922][T22833] erspan0: entered promiscuous mode
[  477.678140][T22833] erspan0: entered allmulticast mode
[  478.296240][T22858] syzkaller0: entered promiscuous mode
[  478.319716][T22858] syzkaller0: entered allmulticast mode
[  478.816047][T22891] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) !
[  479.244491][T22922] policy can only be matched on NF_INET_PRE_ROUTING
[  479.244512][T22922] unable to load match
[  479.328928][T22932] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  479.345258][T22934] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  479.525597][T22942] xt_hashlimit: size too large, truncated to 1048576
[  479.646752][T22953] __nla_validate_parse: 2 callbacks suppressed
[  479.646771][T22953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4594'.
[  479.663061][T22941] xt_hashlimit: size too large, truncated to 1048576
[  479.800171][T22962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4596'.
[  479.894101][T22966] syzkaller0: entered promiscuous mode
[  479.905576][T22966] syzkaller0: entered allmulticast mode
[  479.977855][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4600'.
[  480.059683][T22977] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4601'.
[  480.071015][T22977] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4601'.
[  480.180035][T22981] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4603'.
[  480.232019][T22981] vlan3: entered allmulticast mode
[  480.238723][T22985] IPv6: NLM_F_CREATE should be specified when creating new route
[  480.255657][T22987] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4606'.
[  480.280563][T22984] Unsupported ieee802154 address type: 0
[  480.357931][T22990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4607'.
[  480.507726][T23000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4611'.
[  480.625816][T23008] veth0: entered promiscuous mode
[  480.646316][T23008] veth0: left promiscuous mode
[  480.755898][T23013] syzkaller1: entered promiscuous mode
[  480.770069][T23013] syzkaller1: entered allmulticast mode
[  480.864555][T23024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4617'.
[  481.501929][T23060] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  482.144094][T23087] 8021q: adding VLAN 0 to HW filter on device bond6
[  482.165217][T23089] macvlan5: entered promiscuous mode
[  482.170594][T23089] macvlan5: entered allmulticast mode
[  482.177959][T23089] bond6: entered promiscuous mode
[  482.184930][T23089] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  482.207147][T23089] bond6: left promiscuous mode
[  482.286005][T23097] netlink: 'syz.1.4641': attribute type 13 has an invalid length.
[  482.325108][T12397] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  482.325191][T23097] netlink: 'syz.1.4641': attribute type 13 has an invalid length.
[  482.363317][T12397] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  482.379906][T23100] team0: entered promiscuous mode
[  482.402994][T12397] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  482.412539][T12397] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  482.486501][T23102] netlink: 'syz.4.4642': attribute type 1 has an invalid length.
[  482.577463][T23102] 8021q: adding VLAN 0 to HW filter on device bond7
[  482.740111][T23106] bond7: (slave veth11): Enslaving as an active interface with a down link
[  482.761218][T23108] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  482.813681][T23102] 8021q: adding VLAN 0 to HW filter on device batadv1
[  482.843799][T23102] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  482.927542][T23115] pimreg8: entered allmulticast mode
[  482.938423][T23126] macvlan0: entered promiscuous mode
[  483.154536][T23137] netlink: 'syz.4.4653': attribute type 32 has an invalid length.
[  483.238623][T23137] bond8: Setting coupled_control to off (0)
[  483.327289][T23146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.824467][T23169] bond2: Unable to set peer notification delay as MII monitoring is disabled
[  483.847576][T23169] bond2 (unregistering): Released all slaves
[  484.145202][T23198] gtp0: entered promiscuous mode
[  484.150364][T23198] gtp0: entered allmulticast mode
[  484.874271][T23246] __nla_validate_parse: 18 callbacks suppressed
[  484.874292][T23246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4681'.
[  484.973660][T23246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4681'.
[  485.017863][T23247] netlink: 'syz.0.4681': attribute type 3 has an invalid length.
[  485.075490][T23247] netlink: 'syz.0.4681': attribute type 3 has an invalid length.
[  485.122366][T23247] netlink: 'syz.0.4681': attribute type 3 has an invalid length.
[  485.156594][T23247] netlink: 'syz.0.4681': attribute type 3 has an invalid length.
[  485.200223][T23247] netlink: 'syz.0.4681': attribute type 3 has an invalid length.
[  485.227867][T23247] netlink: 'syz.0.4681': attribute type 3 has an invalid length.
[  485.437961][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4689'.
[  485.617334][ T5286] veth0_vlan: left promiscuous mode
[  485.717558][ T5817] veth0_vlan: entered promiscuous mode
[  485.839701][T23289] bridge9: entered promiscuous mode
[  485.852896][T23289] bridge9: entered allmulticast mode
[  486.042677][T23311] bridge4: entered promiscuous mode
[  486.097964][T23311] bridge4: entered allmulticast mode
[  486.111725][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  486.430001][T23327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4696'.
[  486.979756][T23350] bond9 (unregistering): Released all slaves
[  487.198602][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4705'.
[  487.328805][T23363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4705'.
[  487.427444][T23363] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  487.565152][T23399] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  487.818568][T23409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4713'.
[  488.001872][T23417] sctp: [Deprecated]: syz.2.4715 (pid 23417) Use of int in maxseg socket option.
[  488.001872][T23417] Use struct sctp_assoc_value instead
[  488.076610][T23419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4716'.
[  488.119712][T23424] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 !
[  488.198154][ T4941] Bluetooth: hci2: command 0x0406 tx timeout
[  488.287744][T23431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.302220][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4723'.
[  488.311716][T23431] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.355967][T23431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.374830][T23431] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.378598][T23449] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  488.378598][T23449] Please contact the netfilter-devel mailing list or update your nftables rules.
[  488.418696][T23431] batman_adv: batadv0: Removing interface: gretap1
[  488.530787][T23455] syzkaller0: entered promiscuous mode
[  488.544767][T23455] syzkaller0: entered allmulticast mode
[  488.695573][T23462] validate_nla: 59 callbacks suppressed
[  488.695591][T23462] netlink: 'syz.0.4726': attribute type 17 has an invalid length.
[  488.910902][T23471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.971082][T23463] 8021q: adding VLAN 0 to HW filter on device 

[  489.007778][T23463] 8021q: adding VLAN 0 to HW filter on device team0
[  489.050459][T23463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.092046][T23463] wireguard: wg0: Could not create IPv4 socket
[  489.112460][T23463] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  489.280499][T23486] netlink: 'syz.0.4733': attribute type 1 has an invalid length.
[  489.308993][T23486] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4733'.
[  489.342992][T23486] netlink: 'syz.0.4733': attribute type 1 has an invalid length.
[  489.498568][T12398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  489.524933][ T5817] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  489.533639][T12398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  489.782543][T23506] geneve2: entered promiscuous mode
[  489.861609][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  489.937341][T23523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.065340][T23533] netlink: 'syz.2.4746': attribute type 22 has an invalid length.
[  490.089242][T23533] __nla_validate_parse: 1 callbacks suppressed
[  490.089259][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'.
[  490.110876][T23533] netlink: 'syz.2.4746': attribute type 22 has an invalid length.
[  490.129336][T23544] netlink: 'syz.4.4749': attribute type 1 has an invalid length.
[  490.151374][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'.
[  490.174535][T23547] netlink: 'syz.3.4750': attribute type 4 has an invalid length.
[  490.184764][T23547] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4750'.
[  490.185698][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4749'.
[  490.204091][T23544] bond9: entered promiscuous mode
[  490.204471][T23544] 8021q: adding VLAN 0 to HW filter on device bond9
[  490.206090][T23541] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4748'.
[  490.224280][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4749'.
[  490.424539][T23544] bond9: (slave bridge7): making interface the new active one
[  490.432686][T23544] bridge7: entered promiscuous mode
[  490.439836][T23544] bond9: (slave bridge7): Enslaving as an active interface with an up link
[  490.469754][T23554] bond9: (slave bridge8): Enslaving as a backup interface with an up link
[  490.497914][T23563] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  490.508670][T12400] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  490.513079][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  490.535452][T23568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4752'.
[  490.593792][T23571] Cannot find add_set index 4 as target
[  490.627904][T23562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  490.646512][T23574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.316027][T23618] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4768'.
[  491.586659][T23631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4772'.
[  491.866692][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4775'.
[  492.138122][T23652] macvtap1: entered promiscuous mode
[  492.144648][T23652] vlan0: entered promiscuous mode
[  492.150491][T23652] macvtap1: entered allmulticast mode
[  492.178845][T23652] vlan0: entered allmulticast mode
[  492.192939][T23652] veth0_vlan: entered allmulticast mode
[  492.376113][T23681] IPv6: sit1: Disabled Multicast RS
[  492.385633][T23681] sit1: entered allmulticast mode
[  492.386360][T23688] netlink: 'syz.2.4786': attribute type 23 has an invalid length.
[  492.988470][T23721] netlink: 'syz.2.4796': attribute type 1 has an invalid length.
[  493.311407][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  493.353966][T23747] netlink: 'syz.0.4805': attribute type 5 has an invalid length.
[  493.643604][T23761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.674781][T23761] x_tables: duplicate underflow at hook 1
[  493.697217][T23765] bridge4: entered promiscuous mode
[  493.707811][T23765] bridge4: entered allmulticast mode
[  494.190419][T23797] netlink: 'syz.4.4819': attribute type 3 has an invalid length.
[  494.238914][T23802] syzkaller0: entered promiscuous mode
[  494.254370][T23802] syzkaller0: entered allmulticast mode
[  494.356683][T23807] bond0: mtu less than device minimum
[  494.365798][T23807] siw: device registration error -23
[  494.855860][T23838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.997056][T23846] veth1_macvtap: left promiscuous mode
[  495.116824][T23852] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  495.131619][T23851] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  495.229927][T23861] __nla_validate_parse: 10 callbacks suppressed
[  495.229946][T23861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4838'.
[  495.640925][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4843'.
[  495.678251][T23883] bridge: RTM_NEWNEIGH with invalid state 0x20
[  495.678700][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4843'.
[  495.740354][T23881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4843'.
[  495.763247][T23887] netlink: 'syz.4.4844': attribute type 10 has an invalid length.
[  495.811060][T23887] 8021q: adding VLAN 0 to HW filter on device team0
[  495.856451][T23887] 
: (slave team0): Enslaving as an active interface with an up link
[  495.895510][T23893] sctp: [Deprecated]: syz.2.4848 (pid 23893) Use of int in max_burst socket option.
[  495.895510][T23893] Use struct sctp_assoc_value instead
[  495.898620][T23891] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4847'.
[  495.934259][T23897] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4849'.
[  496.215131][T23905] bond3: entered promiscuous mode
[  496.221979][T23913] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4853'.
[  496.240482][T23905] bond3: entered allmulticast mode
[  496.256862][T23905] 8021q: adding VLAN 0 to HW filter on device bond3
[  496.745441][T23951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4861'.
[  497.029272][T23968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'.
[  497.055060][T23971] netlink: 'syz.1.4866': attribute type 12 has an invalid length.
[  497.255073][T23979] siw: device registration error -23
[  497.376360][T23980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4867'.
[  497.728342][T24011] netlink: 'syz.3.4875': attribute type 5 has an invalid length.
[  497.856286][T24017] netlink: 'syz.0.4877': attribute type 21 has an invalid length.
[  498.003659][ T5286] veth1_vlan: left promiscuous mode
[  498.408459][T24046] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  498.440340][ T5632] Bluetooth: hci1: command 0x0406 tx timeout
[  498.545185][T24044] can: request_module (can-proto-0) failed.
[  498.669934][T24065] netlink: 'syz.0.4891': attribute type 2 has an invalid length.
[  498.746507][T24071] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component
[  499.533609][T24076] openvswitch: netlink: Message has 512 unknown bytes.
[  499.544172][T24113] macvlan6: entered promiscuous mode
[  499.592250][T24113] macvlan6: entered allmulticast mode
[  499.612064][T24076] syzkaller1: entered promiscuous mode
[  499.627445][T24076] syzkaller1: entered allmulticast mode
[  499.675930][T24124] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20003
[  499.862984][T24132] netlink: 'syz.3.4905': attribute type 1 has an invalid length.
[  499.882009][T24130] netlink: 'syz.0.4904': attribute type 11 has an invalid length.
[  500.217063][T24147] bond4: (slave 
2
6±ÿª¨ú
rBº“): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  500.264898][T24147] bond4: (slave 
2
6±ÿª¨ú
rBº“): Enslaving as an active interface with an up link
[  500.295579][T24147] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  500.475850][T24158] netlink: 'syz.1.4912': attribute type 2 has an invalid length.
[  500.510168][T24158] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[  500.587563][T24167] __nla_validate_parse: 12 callbacks suppressed
[  500.587586][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4914'.
[  500.798229][T24176] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode
[  501.064115][T24190] netlink: 'syz.2.4922': attribute type 1 has an invalid length.
[  501.106400][T24190] netlink: 'syz.2.4922': attribute type 2 has an invalid length.
[  501.116001][T24192] netlink: 'syz.2.4922': attribute type 1 has an invalid length.
[  501.155253][T24192] netlink: 'syz.2.4922': attribute type 2 has an invalid length.
[  501.366424][T24211] syzkaller0: entered promiscuous mode
[  501.387708][T24211] syzkaller0: entered allmulticast mode
[  501.474418][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  501.492910][T24214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  501.506358][T24214] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  501.518188][T24224] netlink: 'syz.3.4929': attribute type 25 has an invalid length.
[  501.527864][T24214] gretap2: entered promiscuous mode
[  501.535246][T24224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4929'.
[  501.545783][T24214] gretap2: entered allmulticast mode
[  501.625549][T24229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4932'.
[  501.775812][T24237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'.
[  501.798213][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4934'.
[  501.905077][T24237] pimreg3: entered allmulticast mode
[  502.110937][T24254] netlink: 'syz.1.4940': attribute type 1 has an invalid length.
[  502.266007][T24265] Bluetooth: MGMT ver 1.23
[  502.469339][T24257] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  502.490156][T24257] bond5 (unregistering): Released all slaves
[  502.621380][T24268] bridge6: entered promiscuous mode
[  502.780799][T24287] netlink: 'syz.0.4950': attribute type 11 has an invalid length.
[  502.804136][T24287] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4950'.
[  502.878171][T24301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4954'.
[  503.049698][T24311] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4955'.
[  503.085833][T24311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4955'.
[  503.096925][T24315] 
: (slave team0): Releasing backup interface
[  503.134319][T24315] bridge_slave_0: left allmulticast mode
[  503.156297][T24315] bridge_slave_0: left promiscuous mode
[  503.180045][T24315] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.203123][T24315] bridge_slave_1: left allmulticast mode
[  503.217676][T24315] bridge_slave_1: left promiscuous mode
[  503.229362][T24315] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.246220][T24315] 
: (slave bond_slave_0): Releasing backup interface
[  503.262830][T24315] 
: (slave bond_slave_1): Releasing backup interface
[  503.276938][T24315] team0: Port device team_slave_0 removed
[  503.286059][T24315] team0: Port device team_slave_1 removed
[  503.295683][T24315] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.309503][T24315] 
: (slave netdevsim1): Releasing backup interface
[  503.321728][T24315] batman_adv: batadv0: Removing interface: wlan0
[  503.332030][T24315] bond0: (slave veth3): Releasing backup interface
[  503.347820][T24315] bond5: (slave bridge5): Releasing active interface
[  503.374642][T24315] bond7: (slave veth11): Releasing active interface
[  503.398304][T24315] bond9: (slave bridge7): Releasing backup interface
[  503.406725][T24315] bond9: (slave bridge7): the permanent HWaddr of slave - 9a:7d:1b:43:59:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  503.424542][T24315] bridge7: left promiscuous mode
[  503.428937][T24326] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4959'.
[  503.430139][T24315] bond9: (slave bridge8): making interface the new active one
[  503.447746][T24315] bridge8: entered promiscuous mode
[  503.476726][T24315] bond9: (slave bridge8): Releasing backup interface
[  503.488039][T24315] bridge8: left promiscuous mode
[  503.582927][T24328] geneve3: entered promiscuous mode
[  503.605788][T24328] geneve3: entered allmulticast mode
[  503.625727][ T1112] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  503.638709][ T1112] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  503.689339][ T1112] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  503.719206][ T1112] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  503.888277][T24340] gtp2: entered allmulticast mode
[  503.908626][T24340] team0: Device gtp2 is of different type
[  504.177759][T24363] A link change request failed with some changes committed already. Interface 
2
6±ÿª¨ú
rBº“ may have been left with an inconsistent configuration, please check.
[  504.616484][T24382] veth0: entered promiscuous mode
[  504.669919][T24381] veth0: left promiscuous mode
[  504.732730][T24398] netlink: 'syz.0.4981': attribute type 1 has an invalid length.
[  504.883512][T24402] netlink: 'syz.3.4982': attribute type 1 has an invalid length.
[  505.316958][ T1614] block nbd4: Possible stuck request ffff888027d40000: control (read@0,1024B). Runtime 180 seconds
[  505.328492][ T1614] block nbd4: Possible stuck request ffff888027d401c0: control (read@1024,3072B). Runtime 180 seconds
[  505.485727][T24440] sctp: [Deprecated]: syz.2.4995 (pid 24440) Use of struct sctp_assoc_value in delayed_ack socket option.
[  505.485727][T24440] Use struct sctp_sack_info instead
[  505.815421][T24458] __nla_validate_parse: 16 callbacks suppressed
[  505.815440][T24458] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4996'.
[  505.845239][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4996'.
[  505.869888][T24448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4996'.
[  505.895131][T24448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4996'.
[  506.149381][T24470] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5001'.
[  506.576853][T24485] sctp: [Deprecated]: syz.4.5006 (pid 24485) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.576853][T24485] Use struct sctp_sack_info instead
[  506.671064][T24489] IPVS: Unknown mcast interface: vcan0
[  506.858963][T24501] netlink: 49 bytes leftover after parsing attributes in process `syz.3.5012'.
[  506.914460][T24503] sock: sock_timestamping_bind_phc: sock not bind to device
[  506.924131][T24505] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  507.142940][T24514] syzkaller0: entered promiscuous mode
[  507.149554][T24514] syzkaller0: entered allmulticast mode
[  507.220816][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5021'.
[  507.243350][T24525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5021'.
[  507.579608][T24538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5027'.
[  507.924128][T24555] netlink: 'syz.3.5034': attribute type 1 has an invalid length.
[  508.086493][T24555] 8021q: adding VLAN 0 to HW filter on device bond4
[  508.134783][T24571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5036'.
[  508.141108][T24562] syzkaller0: entered promiscuous mode
[  508.177266][T24562] syzkaller0: entered allmulticast mode
[  508.232666][T24561] 8021q: adding VLAN 0 to HW filter on device batadv2
[  508.247498][T24561] bond4: (slave batadv2): making interface the new active one
[  508.258684][T24561] bond4: (slave batadv2): Enslaving as an active interface with an up link
[  508.508863][T24589] netlink: 'syz.4.5041': attribute type 1 has an invalid length.
[  508.654363][T24589] 8021q: adding VLAN 0 to HW filter on device bond10
[  508.827456][T24585] bond10: (slave geneve2): making interface the new active one
[  508.846703][T24585] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  508.852821][T24612] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  508.864159][T11708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.899503][T11708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.927114][T12395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.238735][T24636] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  509.643130][T24668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  510.147614][T24701] netlink: 'syz.1.5074': attribute type 1 has an invalid length.
[  510.191566][T24701] netlink: 'syz.1.5074': attribute type 3 has an invalid length.
[  510.212991][T24701] NCSI netlink: No device for ifindex 813332851
[  510.264169][T24711] netlink: 'syz.4.5076': attribute type 10 has an invalid length.
[  510.319816][T24711] geneve3: entered promiscuous mode
[  510.335710][T24711] geneve3: entered allmulticast mode
[  510.629507][T24736] netlink: 'syz.2.5081': attribute type 2 has an invalid length.
[  510.864327][T24745] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  510.898496][T24745] bridge0: port 3(
31ªî{X¹¦) entered blocking state
[  510.936372][T24745] bridge0: port 3(
31ªî{X¹¦) entered disabled state
[  510.964787][T24745] 1ªî{X¹¦: entered promiscuous mode
[  510.970810][T24745] bridge0: port 3(
31ªî{X¹¦) entered blocking state
[  510.977672][T24745] bridge0: port 3(
31ªî{X¹¦) entered forwarding state
[  511.124676][T24763] __nla_validate_parse: 8 callbacks suppressed
[  511.124695][T24763] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5091'.
[  511.195835][T24766] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode
[  511.209984][T24769] netlink: 'syz.3.5093': attribute type 1 has an invalid length.
[  511.217360][T24766] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode
[  511.232668][T24769] netlink: 'syz.3.5093': attribute type 2 has an invalid length.
[  511.324922][T24766] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  511.533929][T24793] netlink: 'syz.3.5096': attribute type 34 has an invalid length.
[  511.585837][T24793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5096'.
[  511.698461][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5096'.
[  512.307155][T24836] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5109'.
[  512.347867][T24836] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5109'.
[  512.393786][T24838] erspan0: entered promiscuous mode
[  512.848540][T12395] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69
[  512.909546][T24874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  513.180903][T24891] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5119'.
[  513.369663][T24899] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  513.388201][T24899] syzkaller0 speed is unknown, defaulting to 1000
[  513.454422][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5123'.
[  513.495291][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5123'.
[  513.600822][T24915] bridge8: entered promiscuous mode
[  513.619059][T24915] bridge8: entered allmulticast mode
[  513.669197][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5128'.
[  513.680018][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5128'.
[  513.689884][T24919] netlink: 'syz.4.5128': attribute type 3 has an invalid length.
[  514.111129][T24938] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  515.209407][T24997] IPVS: Scheduler module ip_vs_sip not found
[  515.216053][T25006] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1, syncid = 0, id = 0
[  515.690863][T25030] netlink: 'syz.2.5154': attribute type 1 has an invalid length.
[  515.973846][T25054] xt_l2tp: v2 doesn't support IP mode
[  516.056765][T25059] block nbd2: Unsupported socket: should be TCP or UNIX.
[  516.216835][T25068] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  516.292811][T25076] __nla_validate_parse: 11 callbacks suppressed
[  516.292853][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5163'.
[  516.430028][T25084] netlink: 408 bytes leftover after parsing attributes in process `syz.2.5165'.
[  516.889442][T25113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5171'.
[  516.889442][T25114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5171'.
[  516.889475][T25113] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  516.987933][T25114] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  517.472028][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  517.504854][T25147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5180'.
[  518.055498][T25167] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5185'.
[  518.078050][T25176] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5185'.
[  518.155996][T25174] mac80211_hwsim hwsim33 wlan0: left promiscuous mode
[  518.172663][T25174] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode
[  518.360978][T25191] netlink: 524 bytes leftover after parsing attributes in process `syz.3.5190'.
[  518.401860][T25192] netlink: 524 bytes leftover after parsing attributes in process `syz.3.5190'.
[  518.634818][T25211] ip6t_REJECT: ECHOREPLY is not supported
[  518.810683][T25223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.972863][T25232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.996177][T25234] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5206'.
[  519.247603][T25253] 0ªî{X¹¦: left allmulticast mode
[  519.479825][T25253] 0·: left allmulticast mode
[  519.490384][T25253] hsr_slave_0: left allmulticast mode
[  519.504503][T25253] hsr_slave_1: left allmulticast mode
[  519.553687][T25253] macvlan0: left promiscuous mode
[  519.660927][T25253] ipvlan2: left promiscuous mode
[  519.686048][T25253] bond0: left promiscuous mode
[  519.694100][T25253] bridge5: left promiscuous mode
[  519.699238][T25253] bridge5: left allmulticast mode
[  519.707851][T25253] gtp0: left promiscuous mode
[  519.713282][T25253] gtp0: left allmulticast mode
[  519.747423][T25253] vlan0: left allmulticast mode
[  519.753388][T25253] veth0_vlan: left allmulticast mode
[  519.758875][T25253] vlan0: left promiscuous mode
[  519.765033][T25253] macvtap1: left promiscuous mode
[  519.770228][T25253] macvtap1: left allmulticast mode
[  519.786885][T25253] gretap2: left promiscuous mode
[  519.795405][T25253] gretap2: left allmulticast mode
[  519.809427][T25253] bridge8: left promiscuous mode
[  519.819655][T25253] bridge8: left allmulticast mode
[  519.843471][ T1112] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.863591][ T1112] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.896718][ T1112] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  519.924479][ T1112] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.968717][T25328] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  521.047332][T25331] openvswitch: netlink: IP tunnel dst address not specified
[  521.314224][T25345] bond2: entered allmulticast mode
[  521.319878][T25345] ip6gre1: entered allmulticast mode
[  521.347879][T25345] __nla_validate_parse: 5 callbacks suppressed
[  521.347898][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5234'.
[  521.411007][T25344] bond2: left allmulticast mode
[  521.437519][T25344] ip6gre1: left allmulticast mode
[  521.549298][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5238'.
[  522.112947][T25394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.131686][T25394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.158127][T25394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.212745][T25394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.485364][T25424] bond0: entered promiscuous mode
[  522.498628][T25425] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000
[  522.517185][T25424] batadv0: entered promiscuous mode
[  522.536139][T25424] bond0: entered allmulticast mode
[  522.554116][T25424] batadv0: entered allmulticast mode
[  522.610206][T25424] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.758969][T25435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5258'.
[  522.817667][T25435] netlink: 'syz.3.5258': attribute type 58 has an invalid length.
[  522.857772][T25435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5258'.
[  522.961019][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5262'.
[  523.434233][T25474] syzkaller0: entered promiscuous mode
[  523.448606][T25474] syzkaller0: entered allmulticast mode
[  523.504221][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5270'.
[  523.542948][T25477] netlink: 'syz.3.5270': attribute type 5 has an invalid length.
[  526.274443][T25498] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  526.478247][T25529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5279'.
[  526.481004][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5281'.
[  526.509413][T25534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5283'.
[  526.522046][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5281'.
[  526.539261][T25535] netlink: 'syz.3.5281': attribute type 15 has an invalid length.
[  526.557616][T25537] bridge0: port 1(veth1_to_bridge) entered blocking state
[  526.574154][T25537] bridge0: port 1(veth1_to_bridge) entered disabled state
[  526.588811][T25537] veth1_to_bridge: entered allmulticast mode
[  526.599346][T25537] veth1_to_bridge: entered promiscuous mode
[  526.615451][T12402] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[  526.617325][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5281'.
[  526.636802][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5281'.
[  526.637046][T25541] veth0: entered promiscuous mode
[  526.646202][T25535] netlink: 'syz.3.5281': attribute type 15 has an invalid length.
[  526.662666][T12402] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  526.663262][T25543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5284'.
[  526.673575][T12402] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  526.698794][T25534] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.720003][T25540] veth0: left promiscuous mode
[  526.736831][T12402] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  526.865433][T25548] netlink: 'syz.0.5286': attribute type 9 has an invalid length.
[  527.465939][T25583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5296'.
[  527.666040][T25593] ip6gre1: entered allmulticast mode
[  527.691670][ T1112] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  528.244970][T25620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5309'.
[  528.377914][T25623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5309'.
[  528.471090][T25625] IPv6: NLM_F_REPLACE set, but no existing node found!
[  528.485580][T25625] netlink: 'syz.3.5310': attribute type 1 has an invalid length.
[  528.520656][T25625] 8021q: adding VLAN 0 to HW filter on device bond6
[  528.873856][T25611] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  529.803774][T25686] veth0_macvtap: entered allmulticast mode
[  529.826694][T25686] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  529.858300][T25691] netlink: 'syz.4.5324': attribute type 10 has an invalid length.
[  529.941016][T25698] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[  530.111885][ T4941] Bluetooth: hci0: command 0x080f tx timeout
[  530.527840][T25724] netlink: 'syz.2.5329': attribute type 1 has an invalid length.
[  530.539193][T25724] netlink: 'syz.2.5329': attribute type 2 has an invalid length.
[  530.594495][T25724] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  531.551824][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  531.705464][T25776] __nla_validate_parse: 6 callbacks suppressed
[  531.705482][T25776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5344'.
[  531.807771][T25784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5344'.
[  532.107995][T25796] IPv6: sit1: Disabled Multicast RS
[  532.115149][T25796] sit1: entered allmulticast mode
[  532.132205][T25798] netlink: 'syz.4.5352': attribute type 2 has an invalid length.
[  532.157283][T25798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5352'.
[  532.188995][T25798] ip6gre3: entered promiscuous mode
[  532.207068][T25798] ip6gre3: entered allmulticast mode
[  532.410351][T25807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5354'.
[  532.696156][T25818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5359'.
[  532.793457][T25823] lo: entered allmulticast mode
[  532.799166][T25823] tunl0: entered allmulticast mode
[  532.806451][T25823] gre0: entered allmulticast mode
[  532.816821][T25823] gretap0: entered allmulticast mode
[  532.823317][T25823] erspan0: left promiscuous mode
[  532.828888][T25823] ip_vti0: entered allmulticast mode
[  532.836321][T25823] ip6_vti0: entered allmulticast mode
[  532.843315][T25823] sit0: entered allmulticast mode
[  532.862199][T25823] ip6tnl0: entered allmulticast mode
[  532.880506][T25823] ip6gre0: entered allmulticast mode
[  532.907836][T25823] syz_tun: entered allmulticast mode
[  533.272445][T25844] netlink: 'syz.1.5367': attribute type 29 has an invalid length.
[  533.770344][T25870] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5374'.
[  533.808705][T25870] gretap0: entered promiscuous mode
[  533.824321][T25872] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5374'.
[  533.859912][T25872] 0ªî{X¹¦: renamed from gretap0
[  533.877084][T25872] 0ªî{X¹¦: left promiscuous mode
[  533.884454][T25872] 0ªî{X¹¦: entered allmulticast mode
[  533.900592][T25872] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  533.931933][T25874] syzkaller0: entered promiscuous mode
[  533.943615][T25874] syzkaller0: entered allmulticast mode
[  533.988999][T25874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5375'.
[  533.989016][T25876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5376'.
[  534.013560][T25874] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5375'.
[  534.281826][T25890] SET target dimension over the limit!
[  534.360210][T25893] netlink: 'syz.0.5380': attribute type 1 has an invalid length.
[  534.562460][T25893] 8021q: adding VLAN 0 to HW filter on device bond7
[  534.579496][T25880] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  534.673114][T25914] syzkaller1: entered promiscuous mode
[  534.678725][T25914] syzkaller1: entered allmulticast mode
[  535.392346][ T1614] block nbd4: Possible stuck request ffff888027d40000: control (read@0,1024B). Runtime 210 seconds
[  535.403269][ T1614] block nbd4: Possible stuck request ffff888027d401c0: control (read@1024,3072B). Runtime 210 seconds
[  537.324475][T25898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  537.550187][T25932] veth0: entered promiscuous mode
[  537.667570][T25932] veth0: left promiscuous mode
[  537.680011][T25940] __nla_validate_parse: 3 callbacks suppressed
[  537.680029][T25940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5396'.
[  537.853023][T25949] syzkaller0: entered promiscuous mode
[  537.870604][T25949] syzkaller0: entered allmulticast mode
[  537.927553][T25943] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  538.029152][T25943] syzkaller0 speed is unknown, defaulting to 1000
[  538.042232][T25958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5400'.
[  538.125730][T25958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5400'.
[  538.228423][T25969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5402'.
[  538.699064][T25996] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5408'.
[  539.096006][T26027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5413'.
[  539.135081][T26029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5410'.
[  539.272291][T26032] xt_hashlimit: size too large, truncated to 1048576
[  539.827558][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5418'.
[  539.871341][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  540.013879][T26056] syzkaller1: entered promiscuous mode
[  540.040111][T26056] syzkaller1: entered allmulticast mode
[  540.297988][T26068] ip6_vti0: mtu less than device minimum
[  540.345874][T26073] nbd: nbd1 already in use
[  540.540925][T26086] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5429'.
[  540.593939][T26086] bridge0: port 3(team_slave_0) entered disabled state
[  540.607116][T26086] team_slave_0 (unregistering): left allmulticast mode
[  540.620219][T26086] team_slave_0 (unregistering): left promiscuous mode
[  540.627566][T26086] bridge0: port 3(team_slave_0) entered disabled state
[  540.970239][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5438'.
[  541.123791][T26117] netlink: 'syz.2.5439': attribute type 1 has an invalid length.
[  541.156737][T26120] IPv6: Can't replace route, no match found
[  541.163807][T26120] IPv6: Can't replace route, no match found
[  541.357591][T26129] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  541.387928][T26129] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  541.733860][T26148] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  542.282411][T26183] syzkaller0: entered promiscuous mode
[  542.299877][T26183] syzkaller0: entered allmulticast mode
[  542.325426][T26190] "syz.1.5461" (26190) uses obsolete ecb(arc4) skcipher
[  543.121085][T26233] netlink: 'syz.2.5471': attribute type 4 has an invalid length.
[  543.749677][T26221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  543.897200][T26256] netlink: 'syz.0.5474': attribute type 10 has an invalid length.
[  543.921427][T26257] netlink: 'syz.0.5474': attribute type 10 has an invalid length.
[  543.939498][T26256] __nla_validate_parse: 10 callbacks suppressed
[  543.939516][T26256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5474'.
[  543.968432][T26257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5474'.
[  544.015069][T26257] team0: Port device geneve1 added
[  544.135711][T26252] netlink: 'syz.1.5473': attribute type 4 has an invalid length.
[  544.346275][T26279] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5479'.
[  544.674847][T26292] bond5: invalid ARP target 0.0.0.0 specified for addition
[  544.683657][T26292] bond5: option arp_ip_target: invalid value (0)
[  544.693288][T26292] bond5 (unregistering): Released all slaves
[  544.839103][T26303] xt_hashlimit: size too large, truncated to 1048576
[  544.856787][T26306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5489'.
[  545.055403][T26314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.250175][T26318] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5494'.
[  545.318875][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5495'.
[  545.371603][T26330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5497'.
[  545.376787][T26332] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  545.386313][T26323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5495'.
[  545.435517][T26329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5497'.
[  546.057719][T26371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.163714][T26376] netlink: 'syz.3.5512': attribute type 4 has an invalid length.
[  546.181483][T26376] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5512'.
[  546.210596][T26380] IPVS: set_ctl: invalid protocol: 0 172.20.20.9:20003
[  546.325777][T26381] ipvlan2: entered promiscuous mode
[  546.425768][T26385] syzkaller0: entered promiscuous mode
[  546.450373][T26385] syzkaller0: entered allmulticast mode
[  546.664976][T26403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.756721][T26407] xt_hashlimit: size too large, truncated to 1048576
[  547.115041][T26418] syzkaller0: entered promiscuous mode
[  547.132618][T26418] syzkaller0: entered allmulticast mode
[  547.875181][T26468] netlink: 'syz.4.5541': attribute type 1 has an invalid length.
[  548.374162][T26505] netlink: 'syz.1.5552': attribute type 11 has an invalid length.
[  548.376969][T26506] veth1_to_bond: entered allmulticast mode
[  548.411666][T26505] netlink: 'syz.1.5552': attribute type 4 has an invalid length.
[  548.419005][T26506] veth1_to_bond: entered promiscuous mode
[  548.460781][T26506] veth1_to_bond (unregistering): left allmulticast mode
[  548.478199][T26506] veth1_to_bond (unregistering): left promiscuous mode
[  548.515064][T26515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.539739][T26506] bond0: (slave bond_slave_1): Releasing backup interface
[  548.615196][T26523] vlan4: entered promiscuous mode
[  548.695687][T26526] netlink: 'syz.1.5560': attribute type 39 has an invalid length.
[  548.712161][T26526] hsr_slave_0: left promiscuous mode
[  548.830809][T12398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.831702][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  548.847157][T12398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.038678][T26548] netlink: 'syz.0.5566': attribute type 1 has an invalid length.
[  549.193107][T26548] bond8: entered promiscuous mode
[  549.222810][T26548] 8021q: adding VLAN 0 to HW filter on device bond8
[  549.426167][T26569] __nla_validate_parse: 14 callbacks suppressed
[  549.426187][T26569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5573'.
[  549.458438][T26569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5573'.
[  549.563612][T26569] bond11: entered promiscuous mode
[  549.586706][T26569] 8021q: adding VLAN 0 to HW filter on device bond11
[  549.598177][T26580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5575'.
[  549.643996][T26580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5575'.
[  549.695861][T26579] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  549.708754][T26579] bond2 (unregistering): Released all slaves
[  549.780546][T26595] netlink: 'syz.1.5577': attribute type 1 has an invalid length.
[  549.786935][T26569] 8021q: adding VLAN 0 to HW filter on device bond11
[  549.798226][T26569] bond11: (slave ip6gre4): The slave device specified does not support setting the MAC address
[  549.811039][T26569] bond11: (slave ip6gre4): Error -95 calling set_mac_address
[  549.955023][T26598] openvswitch: netlink: Key type 252 is out of range max 32
[  550.089401][T26607] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5582'.
[  550.145937][T26610] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  550.271991][ T5720] page_pool_release_retry() stalled pool shutdown: id 146, 1 inflight 60 sec
[  550.278240][T26626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5586'.
[  550.327750][T26626] netlink: 'syz.1.5586': attribute type 7 has an invalid length.
[  550.356236][T26626] netlink: 'syz.1.5586': attribute type 8 has an invalid length.
[  550.375528][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5586'.
[  550.461390][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5588'.
[  550.500067][T26635] block nbd2: Unsupported socket: should be TCP or UNIX.
[  550.525160][T26638] erspan0: entered allmulticast mode
[  550.586691][T26640] netlink: 'syz.4.5591': attribute type 2 has an invalid length.
[  550.642051][T26640] : entered promiscuous mode
[  550.719569][T26653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5594'.
[  550.770592][T26657] IPv6: NLM_F_CREATE should be specified when creating new route
[  550.780567][T26655] netlink: 'syz.0.5595': attribute type 1 has an invalid length.
[  550.790381][T26655] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5595'.
[  550.889577][T26665] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2
[  550.919024][T26665] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ
[  551.510853][T26686] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  551.766561][T26703] validate_nla: 1 callbacks suppressed
[  551.766578][T26703] netlink: 'syz.4.5603': attribute type 1 has an invalid length.
[  551.893877][T12398] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4
[  551.906011][T26717] atomic_op ffff88807fb81198 conn xmit_atomic 0000000000000000
[  551.924663][ T5742] hid-generic 0005:07C0:8000.0002: item fetching failed at offset 0/1
[  551.933946][ T5742] hid-generic 0005:07C0:8000.0002: probe with driver hid-generic failed with error -22
[  551.949637][T26717] netlink: 'syz.1.5606': attribute type 142 has an invalid length.
[  552.419447][T26745] ipip0: entered promiscuous mode
[  552.442044][T26745] ipip0: entered allmulticast mode
[  552.578612][T26753] bridge_slave_0: left allmulticast mode
[  552.596897][T26753] bridge_slave_0: left promiscuous mode
[  552.610768][T26753] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.633611][T26753] bridge_slave_1: left allmulticast mode
[  552.652066][T26753] bridge_slave_1: left promiscuous mode
[  552.669623][T26753] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.724591][T26753] team0: Port device team_slave_0 removed
[  552.747436][T26753] team0: Port device team_slave_1 removed
[  552.761838][T26753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  552.815495][T26756] vlan4: entered allmulticast mode
[  552.833296][T26756] veth1_virt_wifi: entered allmulticast mode
[  553.032625][T26784] netlink: 'syz.2.5623': attribute type 1 has an invalid length.
[  553.078259][T26784] 8021q: adding VLAN 0 to HW filter on device bond2
[  553.408534][T26807] netlink: 'syz.1.5628': attribute type 17 has an invalid length.
[  553.439676][T26807] gretap0: entered promiscuous mode
[  553.454863][T26807] gretap0: left promiscuous mode
[  553.645418][T26825] macsec0: entered promiscuous mode
[  553.650965][T26825] macsec0: entered allmulticast mode
[  553.661940][T26825] veth1_macvtap: entered allmulticast mode
[  553.668406][T26825] macsec0: left promiscuous mode
[  553.677243][T26825] macsec0: left allmulticast mode
[  553.684279][T26825] veth1_macvtap: left allmulticast mode
[  553.830736][ T6860] syzkaller0 speed is unknown, defaulting to 1000
[  553.845941][ T6860] syz2: Port: 1 Link ACTIVE
[  553.851510][  T808] syzkaller0 speed is unknown, defaulting to 1000
[  553.901498][T26836] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  553.909049][T26836] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  554.291067][T26860] ipvlan0: entered allmulticast mode
[  554.296671][T26860] veth0_vlan: entered allmulticast mode
[  554.310133][T26858] ipvlan0: left allmulticast mode
[  554.330724][T26858] veth0_vlan: left allmulticast mode
[  554.450794][T26870] netlink: 'syz.4.5652': attribute type 9 has an invalid length.
[  554.457712][T26866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.460466][T26870] netlink: 'syz.4.5652': attribute type 6 has an invalid length.
[  554.482972][T26864] vlan3: entered allmulticast mode
[  554.488168][T26864] bridge6: entered allmulticast mode
[  554.505841][T26870] __nla_validate_parse: 21 callbacks suppressed
[  554.505860][T26870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5652'.
[  554.568778][T26866] syzkaller0: entered promiscuous mode
[  554.574871][T26866] syzkaller0: entered allmulticast mode
[  554.582151][T26866] tipc: Resetting bearer <eth:syzkaller0>
[  554.589317][T26864] erspan0: left allmulticast mode
[  554.595476][T26864] bridge2: port 1(erspan0) entered disabled state
[  554.605988][T26864] bridge6: port 1(erspan0) entered blocking state
[  554.612992][T26864] bridge6: port 1(erspan0) entered disabled state
[  554.619602][T26864] erspan0: entered allmulticast mode
[  554.628156][T26864] bridge6: port 1(erspan0) entered blocking state
[  554.634720][T26864] bridge6: port 1(erspan0) entered forwarding state
[  554.650052][T26865] tipc: Resetting bearer <eth:syzkaller0>
[  554.787828][T26882] Cannot find del_set index 4 as target
[  554.953368][T26892] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5659'.
[  555.204324][T26907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5663'.
[  556.520627][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  557.603950][T26865] tipc: Disabling bearer <eth:syzkaller0>
[  557.904957][T26937] netlink: 'syz.3.5670': attribute type 1 has an invalid length.
[  557.921438][T26937] netlink: 'syz.3.5670': attribute type 3 has an invalid length.
[  557.946395][T26937] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5670'.
[  558.106115][T26956] netlink: 'syz.4.5674': attribute type 2 has an invalid length.
[  558.124385][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5672'.
[  558.270568][T26966] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5675'.
[  558.338232][T26968] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  558.339010][T26972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5675'.
[  558.367883][T26968] bond7 (unregistering): Released all slaves
[  558.403849][T26966] gretap0: entered promiscuous mode
[  558.573974][T26974] 8021q: adding VLAN 0 to HW filter on device bond9
[  558.586655][T26974] bond0: (slave bond9): Enslaving as an active interface with an up link
[  558.620531][T26984] macvtap0: entered promiscuous mode
[  558.663112][T26984] macvtap0: entered allmulticast mode
[  558.684194][T26984] veth1_vlan: entered allmulticast mode
[  558.702353][T26992] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5684'.
[  558.757482][T26994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5685'.
[  559.054975][T27014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5691'.
[  559.557911][T27048] FAULT_INJECTION: forcing a failure.
[  559.557911][T27048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  559.598674][T27048] CPU: 0 UID: 0 PID: 27048 Comm: syz.4.5702 Not tainted syzkaller #0 PREEMPT(full) 
[  559.598700][T27048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  559.598711][T27048] Call Trace:
[  559.598719][T27048]  <TASK>
[  559.598726][T27048]  dump_stack_lvl+0xe8/0x150
[  559.598762][T27048]  should_fail_ex+0x40c/0x560
[  559.598791][T27048]  _copy_from_iter+0x1d3/0x1660
[  559.598892][T27048]  ? kmem_cache_alloc_node_noprof+0x1d1/0x610
[  559.598918][T27048]  ? rcu_is_watching+0x15/0xb0
[  559.598969][T27048]  ? trace_kmem_cache_alloc+0x29/0xe0
[  559.598992][T27048]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  559.599014][T27048]  ? __pfx__copy_from_iter+0x10/0x10
[  559.599038][T27048]  ? __alloc_skb+0x276/0x7a0
[  559.599096][T27048]  ? __alloc_skb+0x276/0x7a0
[  559.599127][T27048]  ? netlink_sendmsg+0x650/0xb40
[  559.599199][T27048]  ? skb_put+0x112/0x210
[  559.599229][T27048]  netlink_sendmsg+0x6c0/0xb40
[  559.599258][T27048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  559.599281][T27048]  ? aa_sock_msg_perm+0xf1/0x1b0
[  559.599315][T27048]  ? __pfx_netlink_sendmsg+0x10/0x10
[  559.599333][T27048]  sock_sendmsg_nosec+0x13a/0x180
[  559.599361][T27048]  ____sys_sendmsg+0x54e/0x850
[  559.599385][T27048]  ? __pfx_____sys_sendmsg+0x10/0x10
[  559.599412][T27048]  ? import_iovec+0x73/0xa0
[  559.599442][T27048]  ___sys_sendmsg+0x2a5/0x360
[  559.599459][T27048]  ? __lock_acquire+0x683/0x2cf0
[  559.599494][T27048]  ? __pfx____sys_sendmsg+0x10/0x10
[  559.599547][T27048]  ? __fget_files+0x2a/0x420
[  559.599570][T27048]  ? __fget_files+0x3a2/0x420
[  559.599604][T27048]  __x64_sys_sendmsg+0x1b1/0x290
[  559.599625][T27048]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  559.599661][T27048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.599682][T27048]  do_syscall_64+0x174/0x580
[  559.599701][T27048]  ? trace_irq_disable+0x3b/0x140
[  559.599725][T27048]  ? clear_bhb_loop+0x40/0x90
[  559.599748][T27048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.599768][T27048] RIP: 0033:0x7f971199de99
[  559.599785][T27048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.599805][T27048] RSP: 002b:00007f97127ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  559.599825][T27048] RAX: ffffffffffffffda RBX: 00007f9711c25fa0 RCX: 00007f971199de99
[  559.599839][T27048] RDX: 00000000000000c4 RSI: 0000200000000140 RDI: 0000000000000003
[  559.599850][T27048] RBP: 00007f97127ab090 R08: 0000000000000000 R09: 0000000000000000
[  559.599862][T27048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.599874][T27048] R13: 00007f9711c26038 R14: 00007f9711c25fa0 R15: 00007ffff2bacd98
[  559.599903][T27048]  </TASK>
[  559.884400][T27054] A link change request failed with some changes committed already. Interface 
2
6±ÿª¨ú
rBº“ may have been left with an inconsistent configuration, please check.
[  560.068505][T27062] x_tables: duplicate underflow at hook 4
[  560.180576][T27063] bridge0: port 3(
31ªî{X¹¦) entered disabled state
[  560.271105][T27063] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.283198][T27063] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.417357][T27063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  560.434868][T27063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  560.558687][ T1112] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.580568][ T1112] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[  560.615416][ T1112] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.628664][ T1112] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[  560.640352][T27081] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  560.652069][ T1112] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.662346][ T1112] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  560.684080][ T1112] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.695441][ T1112] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  560.751801][T27084] macsec1: entered promiscuous mode
[  560.847546][T27091] __nla_validate_parse: 2 callbacks suppressed
[  560.847569][T27091] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5715'.
[  561.077448][T27110] netlink: 'syz.4.5719': attribute type 1 has an invalid length.
[  561.156372][T27110] 8021q: adding VLAN 0 to HW filter on device bond12
[  561.179032][T27118] macvlan5: entered promiscuous mode
[  561.188226][T27118] macvlan5: entered allmulticast mode
[  561.199764][T27118] bond12: entered promiscuous mode
[  561.205886][T27118] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  561.218354][T27126] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5722'.
[  561.242195][T27118] bond12: left promiscuous mode
[  561.260836][T27128] netlink: 'syz.2.5724': attribute type 10 has an invalid length.
[  561.488964][T27145] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  561.502443][T27139] veth1_to_hsr: entered allmulticast mode
[  561.850457][T27174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  562.050189][T27189] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  562.067991][T27190] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  562.070686][T27189] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  562.098190][T27190] syzkaller0: entered promiscuous mode
[  562.112359][T27190] syzkaller0: entered allmulticast mode
[  562.373921][T27206] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5746'.
[  562.427239][T27211] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5747'.
[  562.629174][T27229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5753'.
[  562.784697][T27235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'.
[  562.793886][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5755'.
[  562.805269][T27235] netlink: 'syz.2.5755': attribute type 15 has an invalid length.
[  562.819954][T11702] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  562.820037][T27235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5755'.
[  562.830472][T11702] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  562.838045][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5755'.
[  562.850581][T11702] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  562.859729][T27235] netlink: 'syz.2.5755': attribute type 15 has an invalid length.
[  562.868940][T11702] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  563.238717][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5762'.
[  563.448243][T27278] netlink: 'syz.4.5766': attribute type 1 has an invalid length.
[  563.769909][T27304] syzkaller0: entered promiscuous mode
[  563.794641][T27304] syzkaller0: entered allmulticast mode
[  563.986380][T27316] netlink: 'syz.3.5775': attribute type 4 has an invalid length.
[  564.180028][T27326] netlink: 'syz.3.5781': attribute type 58 has an invalid length.
[  564.509718][T27346] netlink: 'syz.1.5787': attribute type 1 has an invalid length.
[  564.600914][T27353] netlink: 'syz.2.5789': attribute type 4 has an invalid length.
[  564.614711][T27353] netlink: 'syz.2.5789': attribute type 4 has an invalid length.
[  564.750472][T27367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.765276][T27367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.055963][T27394] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x12
[  565.255970][T27403] netlink: 'syz.1.5802': attribute type 2 has an invalid length.
[  565.455975][T27409] netlink: 'syz.0.5804': attribute type 11 has an invalid length.
[  565.473647][ T1614] block nbd4: Possible stuck request ffff888027d40000: control (read@0,1024B). Runtime 240 seconds
[  565.485713][ T1614] block nbd4: Possible stuck request ffff888027d401c0: control (read@1024,3072B). Runtime 240 seconds
[  565.862223][T27438] __nla_validate_parse: 13 callbacks suppressed
[  565.862243][T27438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5815'.
[  565.936183][T27445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5818'.
[  565.994108][T27449] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5820'.
[  566.013775][T27451] siw: device registration error -23
[  566.037092][T27449] 1·: renamed from 
c0·
[  566.064726][T27449] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  566.093115][T27449] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  566.104251][T27449] 1·: entered allmulticast mode
[  566.109433][T27449] hsr_slave_0: entered allmulticast mode
[  566.117667][T27449] hsr_slave_1: entered allmulticast mode
[  566.133224][T27449] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  566.203479][T27458] bond0: left promiscuous mode
[  566.203610][   T48] bond0: (slave batadv0): interface is now down
[  566.244021][T27458] batadv0: left promiscuous mode
[  566.266825][T27458] bond0: left allmulticast mode
[  566.316361][T27458] batadv0: left allmulticast mode
[  566.402243][T27478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5825'.
[  566.806593][T27495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5828'.
[  567.134954][T27508] bond11: entered allmulticast mode
[  567.163861][T27508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5830'.
[  567.295365][T27510] bond11: left allmulticast mode
[  567.381761][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5833'.
[  567.506796][T27530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5836'.
[  567.641268][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.651442][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.659829][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.668223][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.676597][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.684988][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.693357][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.701733][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.710077][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.718473][T27537] tc action pedit unable to extract header offset for header type (0x4)
[  567.726863][T27537] 0: reclassify loop, rule prio 0, protocol 800
[  568.523055][T27607] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5857'.
[  568.665727][T27607] bond3 (unregistering): Released all slaves
[  568.703255][T27616] netlink: 'syz.1.5860': attribute type 21 has an invalid length.
[  568.709380][T27620] xt_ipcomp: unknown flags 1D
[  568.775232][T12398] bond0: (slave batadv0): interface is now down
[  568.785895][T27622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5861'.
[  568.854052][T12398] bond0: now running without any active interface!
[  569.249571][T27647] bond0: entered promiscuous mode
[  569.269875][T27647] batadv0: entered promiscuous mode
[  569.322392][T27647] gretap0: entered promiscuous mode
[  569.344404][T27647] debugfs: 'hsr0' already exists in 'hsr'
[  569.363886][T27647] Cannot create hsr debugfs directory
[  569.386660][T27647] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  569.397391][T27647] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  569.419517][T27647] hsr0: entered promiscuous mode
[  569.757968][T27690] vlan5: entered allmulticast mode
[  569.765970][T27690] bond0: entered allmulticast mode
[  569.782816][T27692] vlan4: entered promiscuous mode
[  572.088253][T27643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.298556][T27721] __nla_validate_parse: 3 callbacks suppressed
[  572.298573][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5892'.
[  572.335592][T27724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5891'.
[  572.475766][T27734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5894'.
[  572.502627][T27736] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  572.536975][T27734] xfrm1: entered promiscuous mode
[  572.553841][T27734] xfrm1: entered allmulticast mode
[  572.570263][T27740] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  572.677053][T27743] syzkaller0: entered promiscuous mode
[  572.707757][T27743] syzkaller0: entered allmulticast mode
[  572.755167][T27749] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5899'.
[  572.839402][T27754] xt_hashlimit: size too large, truncated to 1048576
[  572.950002][T27737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.167399][T27771] netlink: 'syz.2.5905': attribute type 28 has an invalid length.
[  573.176660][T27771] netlink: 'syz.2.5905': attribute type 3 has an invalid length.
[  573.187861][T27771] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5905'.
[  573.268794][T27775] syzkaller0: entered promiscuous mode
[  573.275375][T27775] syzkaller0: entered allmulticast mode
[  573.319979][T27779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5908'.
[  573.877605][T27797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5915'.
[  574.090567][T27814] bond0: Error: Cannot enslave bond to itself.
[  574.165324][T27819] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  574.413258][T27824] netlink: 'syz.2.5923': attribute type 27 has an invalid length.
[  574.954895][T27838] ipt_REJECT: ECHOREPLY no longer supported.
[  574.994593][T27842] IPv6: NLM_F_CREATE should be specified when creating new route
[  575.223018][T27854] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5930'.
[  575.239912][T27854] A link change request failed with some changes committed already. Interface 
2
6±ÿª¨ú
rBº“ may have been left with an inconsistent configuration, please check.
[  575.492536][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5935'.
[  575.655086][T27884] netlink: 'syz.2.5938': attribute type 1 has an invalid length.
[  575.732615][T27884] 8021q: adding VLAN 0 to HW filter on device bond3
[  575.940453][T27867] bond10: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  575.976538][T27867] bond10 (unregistering): Released all slaves
[  576.376764][T27908] netlink: 'syz.1.5943': attribute type 4 has an invalid length.
[  576.444129][T27908] netlink: 'syz.1.5943': attribute type 4 has an invalid length.
[  576.568393][T27917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  576.588391][T27917] syzkaller0: entered promiscuous mode
[  576.609567][T27917] syzkaller0: entered allmulticast mode
[  576.680090][T27917] tipc: Resetting bearer <eth:syzkaller0>
[  576.719052][T27916] tipc: Resetting bearer <eth:syzkaller0>
[  576.769399][T17861] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  576.790991][T27916] tipc: Disabling bearer <eth:syzkaller0>
[  576.852852][T17861] CPU: 1 UID: 0 PID: 17861 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  576.852878][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  576.852887][T17861] Call Trace:
[  576.852895][T17861]  <TASK>
[  576.852904][T17861]  dump_stack_lvl+0xe8/0x150
[  576.852936][T17861]  dump_header+0xd3/0x4b0
[  576.852990][T17861]  oom_kill_process+0x3ab/0x970
[  576.853022][T17861]  out_of_memory+0x1064/0x1480
[  576.853040][T17861]  ? try_charge_memcg+0xbca/0x1590
[  576.853078][T17861]  ? __pfx_out_of_memory+0x10/0x10
[  576.853093][T17861]  ? do_raw_spin_unlock+0xf5/0x210
[  576.853126][T17861]  try_charge_memcg+0xc74/0x1590
[  576.853168][T17861]  ? __pfx_try_charge_memcg+0x10/0x10
[  576.853192][T17861]  ? percpu_ref_tryget+0x15/0x180
[  576.853241][T17861]  ? charge_memcg+0x20/0x2b0
[  576.853270][T17861]  charge_memcg+0x19c/0x2b0
[  576.853297][T17861]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  576.853323][T17861]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  576.853353][T17861]  swap_cache_alloc_folio+0x4de/0x990
[  576.853392][T17861]  swap_cache_read_folio+0x44/0x120
[  576.853417][T17861]  swap_cluster_readahead+0x3a0/0x640
[  576.853447][T17861]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  576.853483][T17861]  ? get_vma_policy+0x27b/0x3c0
[  576.853560][T17861]  swapin_readahead+0x19a/0xc10
[  576.853585][T17861]  ? swap_table_get+0x1e/0x260
[  576.853604][T17861]  ? swap_table_get+0x1e/0x260
[  576.853624][T17861]  ? __pfx_swapin_readahead+0x10/0x10
[  576.853647][T17861]  ? swap_table_get+0x1e/0x260
[  576.853665][T17861]  ? swap_table_get+0x1e/0x260
[  576.853681][T17861]  ? swap_table_get+0x1e/0x260
[  576.853700][T17861]  ? swap_table_get+0x216/0x260
[  576.853721][T17861]  ? swap_cache_get_folio+0x2e7/0x2f0
[  576.853747][T17861]  do_swap_page+0x455/0x5060
[  576.853791][T17861]  ? __pte_offset_map+0x29/0x240
[  576.853818][T17861]  ? __lock_acquire+0x683/0x2cf0
[  576.853842][T17861]  ? do_swap_page+0x124/0x5060
[  576.853872][T17861]  ? __pfx_do_swap_page+0x10/0x10
[  576.853898][T17861]  ? __pte_offset_map+0x1ae/0x240
[  576.853922][T17861]  ? pte_offset_map_rw_nolock+0xea/0x160
[  576.853946][T17861]  handle_mm_fault+0x124c/0x3080
[  576.853981][T17861]  ? handle_mm_fault+0xec/0x3080
[  576.854011][T17861]  ? __pfx_handle_mm_fault+0x10/0x10
[  576.854029][T17861]  ? lock_vma_under_rcu+0x45a/0x500
[  576.854065][T17861]  ? _raw_spin_unlock_irq+0x23/0x50
[  576.854171][T17861]  do_user_addr_fault+0xa4d/0x1340
[  576.854226][T17861]  ? trace_page_fault_user+0x84/0x1e0
[  576.854256][T17861]  exc_page_fault+0x6a/0xc0
[  576.854312][T17861]  asm_exc_page_fault+0x26/0x30
[  576.854330][T17861] RIP: 0033:0x7f971186be77
[  576.854349][T17861] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 99 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 98 ee 00 48 01 d1 39 7c 24
[  576.854365][T17861] RSP: 002b:00007ffff2bad100 EFLAGS: 00010206
[  576.854382][T17861] RAX: 0000001b30024000 RBX: 0000000000000617 RCX: 000000000008ca00
[  576.854395][T17861] RDX: 0000000003e3cdc2 RSI: 00007ffff2bad190 RDI: 0000000000000019
[  576.854408][T17861] RBP: 00007ffff2bad13c R08: 000000000ed6b09a R09: 3fffffffffffffff
[  576.854421][T17861] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  576.854434][T17861] R13: 00000000000927c0 R14: 000000000008c81f R15: 00007ffff2bad190
[  576.854465][T17861]  </TASK>
[  576.854510][T17861] memory: usage 307200kB, limit 307200kB, failcnt 3445
[  576.954721][T27926] openvswitch: netlink: Missing key (keys=40, expected=100)
[  576.984858][T17861] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0
[  577.070363][T27928] netlink: 'syz.1.5950': attribute type 4 has an invalid length.
[  577.079086][T17861] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  577.316690][T27934] netlink: 'syz.0.5951': attribute type 1 has an invalid length.
[  577.356883][T27934] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5951'.
[  577.736268][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5956'.
[  577.764645][T17861] Memory cgroup stats for /syz4:
[  577.764915][T17861] cache 0
[  577.800698][T17861] rss 0
[  577.803996][T17861] rss_huge 0
[  577.807450][T17861] shmem 0
[  577.819062][T17861] mapped_file 0
[  577.826751][T17861] dirty 0
[  577.834804][T17861] writeback 0
[  577.842979][T17861] workingset_refault_anon 22
[  577.844175][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5956'.
[  577.858681][T27954] netlink: 'syz.3.5957': attribute type 27 has an invalid length.
[  577.870369][T17861] workingset_refault_file 132
[  577.882463][T27954] netlink: 'syz.3.5957': attribute type 4 has an invalid length.
[  577.892141][T17861] swap 69632
[  577.899252][T17861] swapcached 307200
[  577.908203][T27954] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5957'.
[  577.919332][T17861] pgpgin 112915
[  577.925715][T17861] pgpgout 112913
[  577.943573][T17861] pgfault 189907
[  577.953931][T27950] netlink: 'syz.3.5957': attribute type 27 has an invalid length.
[  577.965236][T17861] pgmajfault 21
[  577.979577][T17861] inactive_anon 0
[  577.993987][T17861] active_anon 8192
[  578.008301][T27950] netlink: 'syz.3.5957': attribute type 4 has an invalid length.
[  578.021511][T17861] inactive_file 0
[  578.026768][T17861] active_file 0
[  578.030929][T27950] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5957'.
[  578.042502][T17861] unevictable 0
[  578.046781][T17861] hierarchical_memory_limit 314572800
[  578.059750][T17861] hierarchical_memsw_limit 9223372036854771712
[  578.077131][T17861] total_cache 0
[  578.081577][T27958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5959'.
[  578.092202][T17861] total_rss 0
[  578.100784][T17861] total_rss_huge 0
[  578.110882][T17861] total_shmem 0
[  578.123915][T17861] total_mapped_file 0
[  578.136623][T17861] total_dirty 0
[  578.149229][T17861] total_writeback 0
[  578.164482][T17861] total_workingset_refault_anon 22
[  578.180888][T17861] total_workingset_refault_file 132
[  578.208895][T17861] total_swap 69632
[  578.225109][T17861] total_swapcached 307200
[  578.239611][T17861] total_pgpgin 112915
[  578.250711][T17861] total_pgpgout 112913
[  578.262680][T17861] total_pgfault 189907
[  578.270278][T17861] total_pgmajfault 21
[  578.284596][T17861] total_inactive_anon 0
[  578.299265][T17861] total_active_anon 8192
[  578.315023][T17861] total_inactive_file 0
[  578.327534][T17861] total_active_file 0
[  578.342215][T17861] total_unevictable 0
[  578.354807][T17861] anon_cost 0
[  578.366169][T17861] file_cost 0
[  578.381483][T17861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5912,pid=27788,uid=0
[  578.444319][T17861] Memory cgroup out of memory: OOM victim 27788 (syz.4.5912) is already exiting. Skip killing the task
[  578.651966][T27977] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  578.942688][T27986] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  578.963932][T12400] nci: nci_rsp_packet: unknown rsp opcode 0x8
[  579.013519][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  579.025950][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  579.035253][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  579.043879][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  579.055250][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  579.506520][T27987] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  579.516302][T27987] syzkaller0 speed is unknown, defaulting to 1000
[  579.777238][T28018] syzkaller0: entered promiscuous mode
[  579.794742][T28018] syzkaller0: entered allmulticast mode
[  579.814127][T28018] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  579.925998][T27987] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.934595][T27987] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.942387][T27987] bridge_slave_0: entered allmulticast mode
[  579.951704][T27987] bridge_slave_0: entered promiscuous mode
[  579.962575][T27987] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.970056][T27987] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.977973][T27987] bridge_slave_1: entered allmulticast mode
[  579.987653][T27987] bridge_slave_1: entered promiscuous mode
[  580.034461][T27987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.048556][T27987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.095970][T27987] team0: Port device team_slave_0 added
[  580.117319][T27987] team0: Port device team_slave_1 added
[  580.159021][T27987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  580.166387][T27987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.194174][T27987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  580.209871][T27987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  580.217400][T27987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  580.244883][T27987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  580.286813][T27987] hsr_slave_0: entered promiscuous mode
[  580.293408][T27987] hsr_slave_1: entered promiscuous mode
[  580.299798][T27987] debugfs: 'hsr0' already exists in 'hsr'
[  580.306048][T27987] Cannot create hsr debugfs directory
[  581.151934][ T4941] Bluetooth: hci3: command tx timeout
[  581.795392][T27981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  581.836403][T27987] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  581.876161][T27987] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  581.920743][T27987] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  581.965823][T27987] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  581.975879][T28028] xt_nfacct: accounting object `syz1' does not exist
[  581.992896][T27987] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  582.018210][T27987] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  582.044868][T27987] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  582.089450][T27987] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  582.139376][T28043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5979'.
[  582.162187][T28043] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5979'.
[  582.185683][T28043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5979'.
[  582.309905][T27987] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.347120][T27987] 8021q: adding VLAN 0 to HW filter on device team0
[  582.355351][T28060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5982'.
[  582.370914][T12395] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.378135][T12395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.412503][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5984'.
[  582.428701][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.435925][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  582.662485][T28062] netlink: 'syz.4.5984': attribute type 83 has an invalid length.
[  582.969287][T28093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5991'.
[  583.002405][T28094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5990'.
[  583.126794][T28100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5992'.
[  583.166953][T28100] bond0: entered promiscuous mode
[  583.172381][T28104] netlink: 'syz.3.5993': attribute type 10 has an invalid length.
[  583.182565][T28100] gretap0: entered promiscuous mode
[  583.193915][T28104] netlink: 'syz.3.5993': attribute type 10 has an invalid length.
[  583.206275][T28100] debugfs: 'hsr0' already exists in 'hsr'
[  583.217106][T28100] Cannot create hsr debugfs directory
[  583.226492][T28100] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  583.238287][ T4941] Bluetooth: hci3: command tx timeout
[  583.248316][T28100] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  583.260444][T28100] hsr0: entered promiscuous mode
[  583.438435][T28121] netlink: 'syz.2.5995': attribute type 11 has an invalid length.
[  583.547331][T27987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.750094][T27987] veth0_vlan: entered promiscuous mode
[  583.800151][T27987] veth1_vlan: entered promiscuous mode
[  583.841119][T28143] netlink: 516 bytes leftover after parsing attributes in process `syz.3.6000'.
[  583.860656][T28143] netlink: 'syz.3.6000': attribute type 12 has an invalid length.
[  583.873249][T27987] veth0_macvtap: entered promiscuous mode
[  583.886969][T27987] veth1_macvtap: entered promiscuous mode
[  583.922537][T27987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.975618][T27987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.029750][ T1112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.059536][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.108868][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.145537][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.297582][T28159] syzkaller0: entered promiscuous mode
[  584.306864][T28159] syzkaller0: entered allmulticast mode
[  584.338171][T12398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.358492][T12398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.423315][T28159] TC_ACT_REPEAT abuse ?
[  584.464707][T28172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6009'.
[  584.537637][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.574052][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.629567][T28179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6010'.
[  584.664721][T28179] tc_dump_action: action bad kind
[  584.927207][T28196] netlink: 'syz.2.6016': attribute type 9 has an invalid length.
[  585.054550][T28201] netlink: 'syz.4.6017': attribute type 1 has an invalid length.
[  585.196606][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  585.210189][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  585.227957][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  585.238754][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  585.248184][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  585.311995][ T5632] Bluetooth: hci3: command tx timeout
[  585.383115][T28214] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  585.664706][T28226] netlink: 33 bytes leftover after parsing attributes in process `syz.4.6023'.
[  585.699932][T28226] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6023'.
[  585.727636][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6024'.
[  586.059506][T28210] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  586.100380][T28210] syzkaller0 speed is unknown, defaulting to 1000
[  586.301229][T28252] bond13: entered promiscuous mode
[  586.330068][T28251] bond14: entered promiscuous mode
[  586.450979][T28270] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  586.814171][T28295] netlink: 'syz.3.6040': attribute type 1 has an invalid length.
[  587.139169][T28210] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.160002][T28210] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.167898][T28210] bridge_slave_0: entered allmulticast mode
[  587.183491][T28210] bridge_slave_0: entered promiscuous mode
[  587.192836][T28210] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.200281][T28210] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.209343][T28210] bridge_slave_1: entered allmulticast mode
[  587.217698][T28210] bridge_slave_1: entered promiscuous mode
[  587.312371][ T5632] Bluetooth: hci5: command tx timeout
[  587.391953][ T5632] Bluetooth: hci3: command tx timeout
[  587.412392][T28210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  587.430255][T28210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  587.442566][T28331] netlink: 'syz.3.6049': attribute type 11 has an invalid length.
[  587.466992][T28334] netlink: 'syz.3.6049': attribute type 11 has an invalid length.
[  587.475907][T28210] team0: Port device team_slave_0 added
[  587.478847][T28210] team0: Port device team_slave_1 added
[  587.495444][T28337] __nla_validate_parse: 5 callbacks suppressed
[  587.495460][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'.
[  587.525107][T28210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  587.532623][T28210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.580093][T28210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.628442][T28210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.645789][T28210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.699368][T28210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.807358][T28210] hsr_slave_0: entered promiscuous mode
[  587.814616][T28210] hsr_slave_1: entered promiscuous mode
[  587.825464][T28210] debugfs: 'hsr0' already exists in 'hsr'
[  587.851835][T28210] Cannot create hsr debugfs directory
[  587.892916][T28353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6054'.
[  587.946857][T28355] netlink: 'syz.4.6055': attribute type 64 has an invalid length.
[  587.984940][T28352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  588.003926][T28358] netlink: 'syz.4.6055': attribute type 64 has an invalid length.
[  588.047342][T28357] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  588.225824][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6057'.
[  588.249963][T28365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6059'.
[  588.488419][T28380] netlink: 'syz.0.6063': attribute type 15 has an invalid length.
[  588.548574][T28210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  588.562010][T28210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.653709][T28388] tunl0: entered promiscuous mode
[  588.685570][T28388] netlink: 'syz.4.6064': attribute type 4 has an invalid length.
[  588.694538][T28388] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6064'.
[  588.805519][T28210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  588.836355][T28210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.152817][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  589.190462][T28210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  589.201634][T28210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.223513][T28423] netlink: 'syz.0.6072': attribute type 4 has an invalid length.
[  589.240766][T28428] netlink: 'syz.2.6073': attribute type 11 has an invalid length.
[  589.341040][T28210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  589.362323][T28210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.392861][ T5632] Bluetooth: hci5: command tx timeout
[  589.718765][T28454] IPv6: NLM_F_CREATE should be specified when creating new route
[  589.766305][T28458] netlink: 'syz.0.6077': attribute type 1 has an invalid length.
[  589.905160][T28446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6077'.
[  590.139920][T28210] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  590.168163][T28210] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  590.197226][T28210] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  590.222195][T28210] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  590.243403][T28210] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  590.277625][T28210] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  590.297669][T28210] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  590.335208][T28210] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  590.384817][T28470] bridge1: the hash_elasticity option has been deprecated and is always 16
[  590.698849][T28210] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.728134][T28210] 8021q: adding VLAN 0 to HW filter on device team0
[  590.756840][T12397] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.764098][T12397] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.789952][T12397] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.797199][T12397] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.241554][T28484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  591.473191][ T5632] Bluetooth: hci5: command tx timeout
[  591.525564][T28210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.598854][T28210] veth0_vlan: entered promiscuous mode
[  591.643364][T28210] veth1_vlan: entered promiscuous mode
[  591.749054][T28515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'.
[  591.749446][T28210] veth0_macvtap: entered promiscuous mode
[  591.809090][T28210] veth1_macvtap: entered promiscuous mode
[  591.820129][T28520] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6091'.
[  591.862597][T28210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.866450][T28520] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6091'.
[  591.896464][T28210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.933993][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.956569][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.005072][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.028346][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.192925][T28533] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6093'.
[  592.260901][T12398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.280293][T12398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.334705][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.344033][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.429487][T28539] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2)
[  592.459833][T28539] bond1 (unregistering): Released all slaves
[  592.629141][T28547] __nla_validate_parse: 2 callbacks suppressed
[  592.629157][T28547] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6014'.
[  592.652739][T28547] netlink: 'syz.1.6014': attribute type 21 has an invalid length.
[  592.916437][T28573] netlink: 'syz.1.6104': attribute type 1 has an invalid length.
[  592.971590][T28579] syzkaller0: entered promiscuous mode
[  592.989307][T28579] syzkaller0: entered allmulticast mode
[  593.127562][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6106'.
[  593.327784][T28600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6111'.
[  593.551661][ T5632] Bluetooth: hci5: command tx timeout
[  593.559504][T28626] netlink: 'syz.4.6115': attribute type 3 has an invalid length.
[  593.584996][T28625] syzkaller0: entered promiscuous mode
[  593.591571][T28625] syzkaller0: entered allmulticast mode
[  595.555597][ T1614] block nbd4: Possible stuck request ffff888027d40000: control (read@0,1024B). Runtime 270 seconds
[  595.566672][ T1614] block nbd4: Possible stuck request ffff888027d401c0: control (read@1024,3072B). Runtime 270 seconds
[  596.247710][T28595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  596.447985][T28642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6125'.
[  596.459005][T28647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6122'.
[  596.514139][T28654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6123'.
[  596.649003][T28667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6127'.
[  596.663054][T28667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6127'.
[  596.675102][T28667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6127'.
[  596.685221][T28667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6127'.
[  596.732503][T28669] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  597.132117][T28694] tipc: New replicast peer: 255.255.255.255
[  597.180736][T28694] tipc: Enabled bearer <udp:syz2>, priority 10
[  597.646339][T28722] x_tables: duplicate underflow at hook 2
[  597.858600][T28734] netlink: 'syz.2.6141': attribute type 1 has an invalid length.
[  597.920424][T28738] __nla_validate_parse: 33 callbacks suppressed
[  597.920442][T28738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6143'.
[  597.987645][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6145'.
[  597.988077][T28734] bond0: (slave wireguard0): refused to change device type
[  598.069493][T28747] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  598.075906][T28755] netlink: 'syz.3.6146': attribute type 11 has an invalid length.
[  598.090272][T28747] bond1 (unregistering): Released all slaves
[  598.517403][T28776] syzkaller1: entered promiscuous mode
[  598.523467][T28776] syzkaller1: entered allmulticast mode
[  598.533262][T28776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6151'.
[  598.544105][T28779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6152'.
[  598.553824][T28776] ÿÿÿÿÿÿ: renamed from virt_wifi0
[  598.629331][T28787] syzkaller0: entered promiscuous mode
[  598.651763][T28787] syzkaller0: entered allmulticast mode
[  598.670557][T28790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6155'.
[  598.684949][T28779] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  599.080922][T28810] syzkaller0: entered promiscuous mode
[  599.101249][T28810] syzkaller0: entered allmulticast mode
[  599.220802][T28820] syzkaller0: entered promiscuous mode
[  599.230064][T28823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6166'.
[  599.232770][T28820] syzkaller0: entered allmulticast mode
[  599.519878][T28839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6171'.
[  599.545680][T28839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6171'.
[  599.559958][T28841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.571987][T28839] openvswitch: netlink: Message has 8 unknown bytes.
[  599.995131][T28839] veth0: entered promiscuous mode
[  600.144867][T28839] veth0: left promiscuous mode
[  600.374785][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6179'.
[  600.695829][T28895] netlink: 'syz.3.6182': attribute type 10 has an invalid length.
[  600.711099][ T5817] IPVS: starting estimator thread 0...
[  600.811516][T28900] IPVS: using max 27 ests per chain, 64800 per kthread
[  600.905867][T28909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6188'.
[  601.094046][T28921] netlink: 'syz.1.6193': attribute type 1 has an invalid length.
[  601.417111][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.432427][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.452497][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.483798][T28942] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  601.526777][T28946] ip6t_srh: unknown srh invflags 4000
[  601.540074][T28942] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  601.615914][T28942] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  601.679414][T28942] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  601.805724][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.840016][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.867660][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.899626][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.925894][T28942] wlan1 speed is unknown, defaulting to 1000
[  601.966675][T28942] wlan1 speed is unknown, defaulting to 1000
[  602.011053][T28942] wlan1 speed is unknown, defaulting to 1000
[  602.060370][T28942] wlan1 speed is unknown, defaulting to 1000
[  602.087654][T28942] wlan1 speed is unknown, defaulting to 1000
[  602.103921][T28967] syzkaller0: entered promiscuous mode
[  602.120032][T28967] syzkaller0: entered allmulticast mode
[  602.128883][T28942] wlan1 speed is unknown, defaulting to 1000
[  602.764368][T29000] FAULT_INJECTION: forcing a failure.
[  602.764368][T29000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  602.805516][T29000] CPU: 1 UID: 0 PID: 29000 Comm: syz.2.6217 Not tainted syzkaller #0 PREEMPT(full) 
[  602.805543][T29000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  602.805555][T29000] Call Trace:
[  602.805562][T29000]  <TASK>
[  602.805570][T29000]  dump_stack_lvl+0xe8/0x150
[  602.805604][T29000]  should_fail_ex+0x40c/0x560
[  602.805631][T29000]  _copy_from_user+0x2d/0xb0
[  602.805659][T29000]  ___sys_sendmsg+0x1c6/0x360
[  602.805677][T29000]  ? __lock_acquire+0x683/0x2cf0
[  602.805706][T29000]  ? __pfx____sys_sendmsg+0x10/0x10
[  602.805759][T29000]  ? __fget_files+0x2a/0x420
[  602.805782][T29000]  ? __fget_files+0x3a2/0x420
[  602.805859][T29000]  __x64_sys_sendmsg+0x1b1/0x290
[  602.805881][T29000]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  602.805916][T29000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.805936][T29000]  do_syscall_64+0x174/0x580
[  602.805952][T29000]  ? trace_irq_disable+0x3b/0x140
[  602.805973][T29000]  ? clear_bhb_loop+0x40/0x90
[  602.805994][T29000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.806012][T29000] RIP: 0033:0x7fa23099de99
[  602.806030][T29000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.806045][T29000] RSP: 002b:00007fa231890028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  602.806065][T29000] RAX: ffffffffffffffda RBX: 00007fa230c25fa0 RCX: 00007fa23099de99
[  602.806079][T29000] RDX: 0000000000040084 RSI: 0000200000000080 RDI: 0000000000000005
[  602.806091][T29000] RBP: 00007fa231890090 R08: 0000000000000000 R09: 0000000000000000
[  602.806103][T29000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.806114][T29000] R13: 00007fa230c26038 R14: 00007fa230c25fa0 R15: 00007ffe81590898
[  602.806144][T29000]  </TASK>
[  603.362234][T29024] __nla_validate_parse: 5 callbacks suppressed
[  603.362252][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6224'.
[  603.462362][T29034] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6227'.
[  603.728004][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6230'.
[  603.742967][T29049] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6232'.
[  604.060025][T29066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6237'.
[  604.369121][T29079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6239'.
[  604.382450][T29079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6239'.
[  604.477127][T29082] netlink: 'syz.3.6243': attribute type 2 has an invalid length.
[  604.704475][T29092] netlink: 'syz.2.6248': attribute type 9 has an invalid length.
[  604.853516][T29105] netlink: 'syz.0.6249': attribute type 1 has an invalid length.
[  604.890160][T29108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  604.979031][T29105] 8021q: adding VLAN 0 to HW filter on device bond2
[  605.078047][T29122] bond2: (slave geneve2): making interface the new active one
[  605.139677][T29122] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  605.197182][T12395] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  605.245751][T12395] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  605.276683][T12395] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  605.308315][ T4941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  605.333661][ T4941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  605.345505][ T4941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  605.354466][T12395] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  605.367317][ T4941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  605.375215][ T4941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  605.446297][T29141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6258'.
[  605.606669][T29141] bond3 (unregistering): Released all slaves
[  605.949031][T29165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6264'.
[  606.069775][T29175] nbd: nbd1 already in use
[  606.089336][T29175] block nbd1: NBD_DISCONNECT
[  606.119483][ T5634] block nbd1: Wrong magic (0x25609513)
[  606.160317][   T50] block nbd1: Disconnected due to user request.
[  606.170457][T29175] block nbd1: Send disconnect failed -32
[  606.219089][T29181] syzkaller1: tun_chr_ioctl cmd 1074025677
[  606.251473][T29181] syzkaller1: linktype set to 823
[  606.337958][T29132] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  606.379926][T29132] syzkaller0 speed is unknown, defaulting to 1000
[  606.400734][T29191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6270'.
[  606.411060][T29132] wlan1 speed is unknown, defaulting to 1000
[  606.419426][T29191] ip6gre1: entered promiscuous mode
[  606.428499][T29191] ip6gre1: entered allmulticast mode
[  606.545496][T29202] ip6gre1: entered promiscuous mode
[  606.550741][T29202] ip6gre1: entered allmulticast mode
[  606.565017][T29202] syzkaller0: entered promiscuous mode
[  606.570748][T29202] syzkaller0: entered allmulticast mode
[  606.815737][T29132] bridge0: port 1(bridge_slave_0) entered blocking state
[  606.823064][T29132] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.830306][T29132] bridge_slave_0: entered allmulticast mode
[  606.839781][T29132] bridge_slave_0: entered promiscuous mode
[  606.849564][T29132] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.857004][T29132] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.864750][T29132] bridge_slave_1: entered allmulticast mode
[  606.872159][T29132] bridge_slave_1: entered promiscuous mode
[  606.906689][T29132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.920743][T29132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.951078][T29132] team0: Port device team_slave_0 added
[  606.959703][T29132] team0: Port device team_slave_1 added
[  606.985767][T29132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  606.992885][T29132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.019931][T29132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  607.032603][T29132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  607.039565][T29132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.066504][T29132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  607.113899][T29132] hsr_slave_0: entered promiscuous mode
[  607.120391][T29132] hsr_slave_1: entered promiscuous mode
[  607.127019][T29132] debugfs: 'hsr0' already exists in 'hsr'
[  607.133374][T29132] Cannot create hsr debugfs directory
[  607.257174][T29132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  607.344112][T29132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  607.420761][T29132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  607.474639][T29132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  607.485388][   T50] Bluetooth: hci0: command tx timeout
[  609.319008][T29186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  609.339273][T29132] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  609.386333][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  609.416022][T29132] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  609.479828][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  609.499374][T29220] __nla_validate_parse: 1 callbacks suppressed
[  609.499392][T29220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6275'.
[  609.522557][T29132] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  609.544478][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  609.552544][   T50] Bluetooth: hci0: command tx timeout
[  609.554508][T29132] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  609.569069][T29132] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  609.603905][T29224] syzkaller0: entered promiscuous mode
[  609.610169][T29224] syzkaller0: entered allmulticast mode
[  609.630201][T29224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6274'.
[  609.654028][T29224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6274'.
[  609.667163][T29239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'.
[  609.896675][T29132] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.948381][T29132] 8021q: adding VLAN 0 to HW filter on device team0
[  609.966308][T12397] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.973688][T12397] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.004456][T12397] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.011678][T12397] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.014163][T29250] openvswitch: netlink: Flow actions attr not present in new flow.
[  610.282130][T29267] netlink: 'syz.1.6286': attribute type 28 has an invalid length.
[  610.293879][T29267] netlink: 'syz.1.6286': attribute type 3 has an invalid length.
[  610.302907][T29267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6286'.
[  610.494867][T29274] ±ÿª¨ú
rBº“ speed is unknown, defaulting to 1000
[  610.507397][T29274] syzkaller0 speed is unknown, defaulting to 1000
[  610.523268][T29274] wlan1 speed is unknown, defaulting to 1000
[  610.610796][T29132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.736589][T29282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6288'.
[  610.787150][T29132] veth0_vlan: entered promiscuous mode
[  610.807548][T29132] veth1_vlan: entered promiscuous mode
[  610.908596][T29132] veth0_macvtap: entered promiscuous mode
[  610.920908][T29132] veth1_macvtap: entered promiscuous mode
[  610.942844][T29132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.962586][T29132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.978239][ T1112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.987308][T29257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  611.013162][ T1112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.082613][ T1112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.112955][ T1112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.126766][T29288] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  611.202610][T29290] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6290'.
[  611.378456][T29299] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  611.408779][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.440754][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.449434][T29302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6296'.
[  611.504044][T29305] netlink: 'syz.0.6297': attribute type 4 has an invalid length.
[  611.569664][T12397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.598486][T29314] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6300'.
[  611.608938][T12397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.625229][T29312] geneve2: entered promiscuous mode
[  611.632039][   T50] Bluetooth: hci0: command tx timeout
[  611.639393][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6299'.
[  611.675129][T29315] syzkaller1: entered promiscuous mode
[  611.702419][T29315] syzkaller1: entered allmulticast mode
[  611.895458][T29329] openvswitch: netlink: Message has 512 unknown bytes.
[  612.068082][T29344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  612.116557][T29321] syzkaller0: entered promiscuous mode
[  612.118213][T29337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  612.122784][T29321] syzkaller0: entered allmulticast mode
[  613.721303][   T50] Bluetooth: hci0: command tx timeout
[  615.180126][T29365] tipc: Resetting bearer <eth:syzkaller0>
[  615.326556][T22404] syzkaller0 speed is unknown, defaulting to 1000
[  615.336855][T22404] syz2: Port: 1 Link DOWN
[  615.434500][T29382] netlink: 'syz.2.6314': attribute type 20 has an invalid length.
[  615.444994][T29382] __nla_validate_parse: 7 callbacks suppressed
[  615.445011][T29382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6314'.
[  615.495084][T29390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6317'.
[  615.561373][ T5720] wlan1 speed is unknown, defaulting to 1000
[  615.568669][ T5720] syz1: Port: 1 Link DOWN
[  615.588404][T29382] netlink: 'syz.2.6314': attribute type 20 has an invalid length.
[  615.616995][T29382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6314'.
[  615.702646][T12398] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  615.739546][T12398] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  615.778209][T12398] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  615.844439][T12398] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  615.936655][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6322'.
[  616.182731][T29423] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6325'.
[  616.315927][T29431] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6328'.
[  616.378923][T29439] netlink: 'syz.1.6329': attribute type 9 has an invalid length.
[  616.406454][T29442] xt_hashlimit: size too large, truncated to 1048576
[  616.424633][T29439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6329'.
[  616.519703][T12395] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  616.559509][T12395] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  616.575402][T12395] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  616.601484][T12395] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  616.851578][T29464] syzkaller0: entered promiscuous mode
[  616.857374][T29464] syzkaller0: entered allmulticast mode
[  616.960194][T29471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6340'.
[  617.036661][T29475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6342'.
[  617.048864][T29475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6342'.
[  617.099675][T29482] netlink: 'syz.3.6343': attribute type 1 has an invalid length.
[  617.697747][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888070d0bc00: rx timeout, send abort
[  617.707485][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888070d0bc00: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session.
[  617.896074][T29534] block nbd0: reconnected socket
[  617.901506][T29540] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  617.934022][   T50] block nbd0: Receive control failed (result -32)
[  617.970784][T29543] netlink: 'syz.0.6361': attribute type 2 has an invalid length.
[  617.978409][T29540] syzkaller0: entered promiscuous mode
[  617.985241][T29540] syzkaller0: entered allmulticast mode
[  618.082705][T29547] dvmrp0: entered allmulticast mode
[  618.223307][T29555] Bluetooth: MGMT ver 1.23
[  618.514996][T29570] macvlan2: entered promiscuous mode
[  618.528162][T29570] macvlan2: entered allmulticast mode
[  618.567291][T29570] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  618.580999][T29570] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  618.605058][T29570] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  618.644805][T29570] team0: Port device macvlan2 added
[  618.654359][T29586] x_tables: duplicate entry at hook 2
[  618.667944][T29571] macvlan3: entered promiscuous mode
[  618.673789][T29586] netlink: zone id is out of range
[  618.673803][T29586] netlink: zone id is out of range
[  618.673813][T29586] netlink: zone id is out of range
[  618.673821][T29586] netlink: zone id is out of range
[  618.673829][T29586] netlink: zone id is out of range
[  618.673837][T29586] netlink: zone id is out of range
[  618.673845][T29586] netlink: zone id is out of range
[  618.673854][T29586] netlink: zone id is out of range
[  618.673862][T29586] netlink: zone id is out of range
[  618.723429][T29571] macvlan3: entered allmulticast mode
[  618.756968][T29571] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  618.782426][T29571] team0: Port device macvlan3 added
[  619.232458][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  619.285116][T29629] x_tables: duplicate entry at hook 1
[  619.369694][T29633] syzkaller1: entered promiscuous mode
[  619.393552][T29633] syzkaller1: entered allmulticast mode
[  619.995640][T29662] bond1: option min_links: invalid value (18446744073709551614)
[  620.004852][T29662] bond1: option min_links: allowed values 0 - 2147483647
[  620.093913][T29662] bond1 (unregistering): Released all slaves
[  620.124524][T29670] gretap1: entered promiscuous mode
[  620.125147][T29659] netlink: 'syz.3.6401': attribute type 11 has an invalid length.
[  620.130878][T29670] batman_adv: batadv0: Adding interface: gretap1
[  620.153938][T29670] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.180490][T29670] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  620.707310][T29712] __nla_validate_parse: 13 callbacks suppressed
[  620.707329][T29712] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6411'.
[  620.744620][T29712] netlink: 'syz.2.6411': attribute type 10 has an invalid length.
[  620.816002][T29712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.846982][T29712] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  620.956619][T29727] netlink: 'syz.4.6414': attribute type 1 has an invalid length.
[  621.089375][T29737] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  621.109516][T29732] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6418'.
[  621.116605][T29739] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  621.192081][T29742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6420'.
[  621.605710][T29759] xt_CT: You must specify a L4 protocol and not use inversions on it
[  622.336164][T29785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6432'.
[  622.364508][T12398] nci: nci_ntf_packet: unknown ntf opcode 0xd31
[  625.181765][T29779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  625.374450][T29827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6439'.
[  625.528694][T29833] syzkaller0: entered promiscuous mode
[  625.544224][T29833] syzkaller0: entered allmulticast mode
[  625.546917][T29837] 
[  625.552153][T29837] ======================================================
[  625.556094][T29833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6444'.
[  625.559257][T29837] WARNING: possible circular locking dependency detected
[  625.559357][T29837] syzkaller #0 Not tainted
[  625.579607][T29837] ------------------------------------------------------
[  625.586697][T29837] syz.3.6446/29837 is trying to acquire lock:
[  625.592840][T29837] ffff88801c294210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  625.603522][T29837] 
[  625.603522][T29837] but task is already holding lock:
[  625.610879][T29837] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  625.621000][T29837] 
[  625.621000][T29837] which lock already depends on the new lock.
[  625.621000][T29837] 
[  625.631397][T29837] 
[  625.631397][T29837] the existing dependency chain (in reverse order) is:
[  625.640402][T29837] 
[  625.640402][T29837] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  625.648273][T29837]        cpus_read_lock+0x42/0x160
[  625.653397][T29837]        static_key_slow_inc+0x12/0x30
[  625.658853][T29837]        nbd_genl_reconfigure+0x1301/0x1e80
[  625.664857][T29837]        genl_family_rcv_msg_doit+0x233/0x340
[  625.670922][T29837]        genl_rcv_msg+0x614/0x7a0
[  625.675939][T29837]        netlink_rcv_skb+0x226/0x4a0
[  625.681215][T29837]        genl_rcv+0x28/0x40
[  625.685738][T29837]        netlink_unicast+0x7bb/0x940
[  625.691074][T29837]        netlink_sendmsg+0x813/0xb40
[  625.696348][T29837]        sock_sendmsg_nosec+0x13a/0x180
[  625.701890][T29837]        ____sys_sendmsg+0x54e/0x850
[  625.707164][T29837]        ___sys_sendmsg+0x2a5/0x360
[  625.712348][T29837]        __x64_sys_sendmsg+0x1b1/0x290
[  625.717792][T29837]        do_syscall_64+0x174/0x580
[  625.722893][T29837]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.729299][T29837] 
[  625.729299][T29837] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  625.736937][T29837]        __mutex_lock+0x19d/0x1550
[  625.742041][T29837]        nbd_queue_rq+0x373/0x1150
[  625.747147][T29837]        blk_mq_dispatch_rq_list+0x499/0x1990
[  625.753331][T29837]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  625.760290][T29837]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  625.766792][T29837]        blk_mq_run_work_fn+0x16c/0x300
[  625.772330][T29837]        process_scheduled_works+0xa8e/0x14e0
[  625.778415][T29837]        worker_thread+0xa47/0xfb0
[  625.783513][T29837]        kthread+0x388/0x470
[  625.788095][T29837]        ret_from_fork+0x514/0xb70
[  625.793230][T29837]        ret_from_fork_asm+0x1a/0x30
[  625.798503][T29837] 
[  625.798503][T29837] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  625.805713][T29837]        __mutex_lock+0x19d/0x1550
[  625.810817][T29837]        nbd_queue_rq+0xc1/0x1150
[  625.815838][T29837]        blk_mq_dispatch_rq_list+0x499/0x1990
[  625.821900][T29837]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  625.828742][T29837]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  625.835238][T29837]        blk_mq_run_work_fn+0x16c/0x300
[  625.840785][T29837]        process_scheduled_works+0xa8e/0x14e0
[  625.846859][T29837]        worker_thread+0xa47/0xfb0
[  625.851973][T29837]        kthread+0x388/0x470
[  625.856558][T29837]        ret_from_fork+0x514/0xb70
[  625.861666][T29837]        ret_from_fork_asm+0x1a/0x30
[  625.866943][T29837] 
[  625.866943][T29837] -> #4 (set->srcu){.+.+}-{0:0}:
[  625.874060][T29837]        __synchronize_srcu+0xc9/0x2f0
[  625.879513][T29837]        elevator_switch+0x1e8/0x7b0
[  625.884897][T29837]        elevator_change+0x2fa/0x480
[  625.890175][T29837]        elevator_set_default+0x375/0x440
[  625.895884][T29837]        blk_register_queue+0x3f3/0x4e0
[  625.901482][T29837]        __add_disk+0x6cb/0xe30
[  625.906331][T29837]        add_disk_fwnode+0x100/0x3a0
[  625.911606][T29837]        nbd_dev_add+0x733/0xb60
[  625.916541][T29837]        nbd_init+0x15f/0x1e0
[  625.921317][T29837]        do_one_initcall+0x250/0x870
[  625.926596][T29837]        do_initcall_level+0x10a/0x1a0
[  625.932066][T29837]        do_initcalls+0x59/0xa0
[  625.936904][T29837]        kernel_init_freeable+0x29d/0x3e0
[  625.942610][T29837]        kernel_init+0x1d/0x1d0
[  625.947451][T29837]        ret_from_fork+0x514/0xb70
[  625.952558][T29837]        ret_from_fork_asm+0x1a/0x30
[  625.957838][T29837] 
[  625.957838][T29837] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  625.965649][T29837]        __mutex_lock+0x19d/0x1550
[  625.970753][T29837]        elevator_change+0x1af/0x480
[  625.976028][T29837]        elevator_set_none+0xb5/0x140
[  625.981399][T29837]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  625.987719][T29837]        nbd_start_device+0x189/0xb30
[  625.993088][T29837]        nbd_genl_connect+0x1597/0x1c10
[  625.998631][T29837]        genl_family_rcv_msg_doit+0x233/0x340
[  626.004692][T29837]        genl_rcv_msg+0x614/0x7a0
[  626.009705][T29837]        netlink_rcv_skb+0x226/0x4a0
[  626.014973][T29837]        genl_rcv+0x28/0x40
[  626.019463][T29837]        netlink_unicast+0x7bb/0x940
[  626.024742][T29837]        netlink_sendmsg+0x813/0xb40
[  626.030013][T29837]        sock_sendmsg_nosec+0x13a/0x180
[  626.035550][T29837]        ____sys_sendmsg+0x54e/0x850
[  626.040822][T29837]        ___sys_sendmsg+0x2a5/0x360
[  626.046005][T29837]        __x64_sys_sendmsg+0x1b1/0x290
[  626.051454][T29837]        do_syscall_64+0x174/0x580
[  626.056558][T29837]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.062958][T29837] 
[  626.062958][T29837] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  626.071552][T29837]        blk_alloc_queue+0x544/0x690
[  626.076830][T29837]        __blk_mq_alloc_disk+0x194/0x390
[  626.082461][T29837]        nbd_dev_add+0x494/0xb60
[  626.087397][T29837]        nbd_init+0x15f/0x1e0
[  626.092067][T29837]        do_one_initcall+0x250/0x870
[  626.097348][T29837]        do_initcall_level+0x10a/0x1a0
[  626.102796][T29837]        do_initcalls+0x59/0xa0
[  626.107638][T29837]        kernel_init_freeable+0x29d/0x3e0
[  626.113348][T29837]        kernel_init+0x1d/0x1d0
[  626.118195][T29837]        ret_from_fork+0x514/0xb70
[  626.123299][T29837]        ret_from_fork_asm+0x1a/0x30
[  626.128572][T29837] 
[  626.128572][T29837] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  626.135771][T29837]        fs_reclaim_acquire+0x71/0x100
[  626.141229][T29837]        kmem_cache_alloc_noprof+0x64/0x5f0
[  626.147120][T29837]        __kernfs_iattrs+0xdd/0x380
[  626.152309][T29837]        kernfs_iop_setattr+0xe6/0x3f0
[  626.157760][T29837]        notify_change+0xbba/0xea0
[  626.162864][T29837]        do_truncate+0x1c2/0x250
[  626.167797][T29837]        path_openat+0x2fed/0x3830
[  626.172901][T29837]        do_file_open+0x23e/0x4a0
[  626.177921][T29837]        do_sys_openat2+0x115/0x200
[  626.183110][T29837]        __x64_sys_openat+0x138/0x170
[  626.188473][T29837]        do_syscall_64+0x174/0x580
[  626.193576][T29837]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.199983][T29837] 
[  626.199983][T29837] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  626.208490][T29837]        __lock_acquire+0x1520/0x2cf0
[  626.213861][T29837]        lock_acquire+0x106/0x350
[  626.218880][T29837]        down_read+0x4a/0x330
[  626.223550][T29837]        kernfs_iop_permission+0x7f/0x430
[  626.229263][T29837]        inode_permission+0x3de/0x5f0
[  626.234627][T29837]        cgroup_attach_permissions+0x28e/0x9f0
[  626.240770][T29837]        __cgroup_procs_write+0x24b/0x320
[  626.246480][T29837]        cgroup_threads_write+0x24/0x50
[  626.252016][T29837]        cgroup_file_write+0x331/0x8f0
[  626.257460][T29837]        kernfs_fop_write_iter+0x3a4/0x540
[  626.263251][T29837]        vfs_write+0x612/0xba0
[  626.268009][T29837]        ksys_write+0x150/0x270
[  626.272852][T29837]        do_syscall_64+0x174/0x580
[  626.277955][T29837]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.284357][T29837] 
[  626.284357][T29837] other info that might help us debug this:
[  626.284357][T29837] 
[  626.294573][T29837] Chain exists of:
[  626.294573][T29837]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  626.294573][T29837] 
[  626.308559][T29837]  Possible unsafe locking scenario:
[  626.308559][T29837] 
[  626.316082][T29837]        CPU0                    CPU1
[  626.321480][T29837]        ----                    ----
[  626.326838][T29837]   rlock(cpu_hotplug_lock);
[  626.331419][T29837]                                lock(&nsock->tx_lock);
[  626.338344][T29837]                                lock(cpu_hotplug_lock);
[  626.345362][T29837]   rlock(&root->kernfs_iattr_rwsem);
[  626.350723][T29837] 
[  626.350723][T29837]  *** DEADLOCK ***
[  626.350723][T29837] 
[  626.358856][T29837] 4 locks held by syz.3.6446/29837:
[  626.364040][T29837]  #0: ffff888036a6c450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  626.373005][T29837]  #1: ffff888040017480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  626.382741][T29837]  #2: ffffffff8eb99560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  626.392477][T29837]  #3: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  626.402995][T29837] 
[  626.402995][T29837] stack backtrace:
[  626.408879][T29837] CPU: 1 UID: 0 PID: 29837 Comm: syz.3.6446 Not tainted syzkaller #0 PREEMPT(full) 
[  626.408896][T29837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  626.408905][T29837] Call Trace:
[  626.408914][T29837]  <TASK>
[  626.408921][T29837]  dump_stack_lvl+0xe8/0x150
[  626.408945][T29837]  print_circular_bug+0x2e1/0x300
[  626.408962][T29837]  check_noncircular+0x12e/0x150
[  626.408986][T29837]  __lock_acquire+0x1520/0x2cf0
[  626.409008][T29837]  ? __lock_acquire+0x683/0x2cf0
[  626.409031][T29837]  ? kernfs_iop_permission+0x7f/0x430
[  626.409049][T29837]  lock_acquire+0x106/0x350
[  626.409067][T29837]  ? kernfs_iop_permission+0x7f/0x430
[  626.409087][T29837]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  626.409107][T29837]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  626.409125][T29837]  down_read+0x4a/0x330
[  626.409141][T29837]  ? kernfs_iop_permission+0x7f/0x430
[  626.409159][T29837]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  626.409178][T29837]  kernfs_iop_permission+0x7f/0x430
[  626.409197][T29837]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  626.409216][T29837]  inode_permission+0x3de/0x5f0
[  626.409236][T29837]  cgroup_attach_permissions+0x28e/0x9f0
[  626.409259][T29837]  __cgroup_procs_write+0x24b/0x320
[  626.409279][T29837]  cgroup_threads_write+0x24/0x50
[  626.409295][T29837]  ? __pfx_cgroup_threads_write+0x10/0x10
[  626.409310][T29837]  cgroup_file_write+0x331/0x8f0
[  626.409324][T29837]  ? kernfs_fop_write_iter+0x22b/0x540
[  626.409340][T29837]  ? __pfx_cgroup_file_write+0x10/0x10
[  626.409360][T29837]  ? __kmalloc_noprof+0x396/0x720
[  626.409378][T29837]  ? vfs_write+0x22b/0xba0
[  626.409398][T29837]  ? __kmalloc_noprof+0x1ad/0x720
[  626.409418][T29837]  ? __pfx_cgroup_file_write+0x10/0x10
[  626.409431][T29837]  kernfs_fop_write_iter+0x3a4/0x540
[  626.409448][T29837]  vfs_write+0x612/0xba0
[  626.409471][T29837]  ? __pfx_vfs_write+0x10/0x10
[  626.409492][T29837]  ? __pfx_do_futex+0x10/0x10
[  626.409513][T29837]  ? kmem_cache_free+0x182/0x650
[  626.409537][T29837]  ksys_write+0x150/0x270
[  626.409559][T29837]  ? __pfx_ksys_write+0x10/0x10
[  626.409583][T29837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.409599][T29837]  do_syscall_64+0x174/0x580
[  626.409613][T29837]  ? trace_irq_disable+0x3b/0x140
[  626.409631][T29837]  ? clear_bhb_loop+0x40/0x90
[  626.409647][T29837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.409662][T29837] RIP: 0033:0x7fdfa299de99
[  626.409677][T29837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.409691][T29837] RSP: 002b:00007fdfa38dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  626.409706][T29837] RAX: ffffffffffffffda RBX: 00007fdfa2c25fa0 RCX: 00007fdfa299de99
[  626.409717][T29837] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000008
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  626.409727][T29837] RBP: 00007fdfa2a33eaf R08: 0000000000000000 R09: 0000000000000000
[  626.409736][T29837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  626.409745][T29837] R13: 00007fdfa2c26038 R14: 00007fdfa2c25fa0 R15: 00007ffd872c82f8
[  626.409762][T29837]  </TASK>
[  626.711716][ T1614] block nbd4: Possible stuck request ffff888027d40000: control (read@0,1024B). Runtime 300 seconds
[  626.722864][ T1614] block nbd4: Possible stuck request ffff888027d401c0: control (read@1024,3072B). Runtime 300 seconds
[  627.319571][T12398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  627.332991][T12398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.435017][T12398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  627.445591][T12398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.568575][T12398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  627.578987][T12398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.626301][T12398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  627.636954][T12398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  627.708476][T12398] bridge_slave_1: left allmulticast mode
[  627.718033][T12398] bridge_slave_1: left promiscuous mode
[  627.724381][T12398] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.735293][T12398] bridge_slave_0: left allmulticast mode
[  627.740998][T12398] bridge_slave_0: left promiscuous mode
[  627.748529][T12398] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.847945][T12398] batman_adv: batadv0: Removing interface: gretap1
[  627.885278][T12398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.897607][T12398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  627.914026][T12398] bond0 (unregistering): Released all slaves
[  627.994281][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  628.145515][T12398] hsr_slave_0: left promiscuous mode
[  628.151653][T12398] hsr_slave_1: left promiscuous mode
[  628.157492][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  628.169100][T12398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  628.177228][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  628.184925][T12398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  628.197399][T12398] veth1_macvtap: left promiscuous mode
[  628.203211][T12398] veth0_macvtap: left promiscuous mode
[  628.208766][T12398] veth1_vlan: left promiscuous mode
[  628.215123][T12398] veth0_vlan: left promiscuous mode
[  628.356476][T12398] team0 (unregistering): Port device team_slave_1 removed
[  628.366918][T12398] team0 (unregistering): Port device team_slave_0 removed
[  628.406049][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2
[  628.695829][T12398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.706176][T12398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  628.718688][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3
[  628.740634][T12398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.751034][T12398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  628.815087][T12398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.825815][T12398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  628.883980][T12398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.898833][T12398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  628.996029][T12398] bridge_slave_1: left allmulticast mode
[  629.002066][T12398] bridge_slave_1: left promiscuous mode
[  629.007826][T12398] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.018411][T12398] bridge_slave_0: left allmulticast mode
[  629.025226][T12398] bridge_slave_0: left promiscuous mode
[  629.030966][T12398] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.085096][T12398] bond2 (unregistering): (slave geneve2): Releasing active interface
[  629.115276][T12398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  629.128304][T12398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  629.137614][T12398] bond0 (unregistering): Released all slaves
[  629.145331][T12398] bond1 (unregistering): Released all slaves
[  629.158366][T12398] bond2 (unregistering): Released all slaves
[  629.169054][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4
[  629.346131][T12395] smbdirect: ib_dev[syz1] removed
[  629.441545][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5
[  629.500081][T12398] hsr_slave_0: left promiscuous mode
[  629.507116][T12398] hsr_slave_1: left promiscuous mode
[  629.513634][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  629.521079][T12398] batman_adv: batadv0: Removing interface: batadv_slave_0
[  629.532834][T12398] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  629.540281][T12398] batman_adv: batadv0: Removing interface: batadv_slave_1
[  629.553485][T12398] veth1_macvtap: left promiscuous mode
[  629.559041][T12398] veth0_macvtap: left promiscuous mode
[  629.565973][T12398] veth1_vlan: left promiscuous mode
[  629.573037][T12398] veth0_vlan: left promiscuous mode
[  629.720708][T12398] team0 (unregistering): Port device team_slave_1 removed
[  629.737338][T12398] team0 (unregistering): Port device team_slave_0 removed
[  629.798436][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6
[  630.016445][T12398] IPVS: stop unused estimator thread 0...
[  630.126177][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7
[  630.327684][ T5286] 8021q: adding VLAN 0 to HW filter on device eth8
[  633.027924][ T4991] udevd[4991]: worker [10678] /devices/virtual/block/nbd4 timeout; kill it
[  633.036905][ T4991] udevd[4991]: seq 20472 '/devices/virtual/block/nbd4' killed