last executing test programs: 3.15727024s ago: executing program 2 (id=2309): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}, 0x2e670ec3}, {{0x0, 0x0, 0x0}, 0x9f}], 0x2, 0x40000000, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRESDEC=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r10, 0x0, 0x13) 2.262889163s ago: executing program 1 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, &(0x7f0000001080)) r7 = socket(0x10, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000280)='cgroup.max.descendants\x00', 0x2, 0x0) r10 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x8005) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xb}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 2.175030126s ago: executing program 2 (id=2323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xbfffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0xe}, {0xa, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x40030080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0xcbe7b1f001613ed, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x50}}, 0x400c040) 2.174418786s ago: executing program 4 (id=2324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x80, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}, 0x1, 0x0, 0x0, 0x20}, 0x44041) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x6}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000500)={r1, 0x6, 0x9, 0xfff7, 0x2, 0xac, 0x0, 0x4b, {r2, @in6={{0xa, 0x4e21, 0x9d88, @private1, 0x7fffffff}}, 0xc52, 0x4, 0x0, 0x1, 0x9}}, &(0x7f00000005c0)=0xb0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000640)={r2, 0x5, 0x35, 0x2, 0x3, 0x6}, &(0x7f0000000680)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xf989}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) bind$isdn(r5, &(0x7f0000000840)={0x22, 0x9c, 0x7, 0xff, 0x9}, 0x6) connect$pppoe(r5, &(0x7f0000000880)={0x18, 0x0, {0x1, @random="cd3f739b24f3", 'ip_vti0\x00'}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000008c0)=0x1, 0x4) r7 = accept$phonet_pipe(r5, 0x0, &(0x7f0000000900)) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) sendto$packet(r5, &(0x7f00000009c0)="59dd130088ee9290de5632285d2beafe9532a934b56fbd67ad58bd990a885ce3da41ed24635359dfe71509a71171bac84c9f370c509d0e6cc0f58b47b58de802a416bf9390db0582e001570c57a1c8b359c5ada86d63727b1d1cc50335f60c470ef167558e77b52140e538830e8b13ada7dc78c7f65b936c8223297e427cf498bf7e41aadc3eabe6df15e5df1366a13ffa9132188153ff3027174f3e174368392a047edd3a2f3c706ca19a5c72dbf1439eaa98470b52afc9443c8560a2b0c36658e2096bc3d16c29c326b055ef9dddbaf320e1a4b7eb42ef837a92524d0ee9963aa905af132f4d41bb07d5539075", 0xee, 0x4081, &(0x7f0000000ac0)={0x11, 0x1b, r8, 0x1, 0x3}, 0x14) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r10, 0x8980, &(0x7f0000000b00)={'ip6_vti0\x00', 0x8eee}) socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x204101, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r9, 0xc0805841, &(0x7f0000000c00)={0x8, 0x1ff, 0x10, 0x4, 0x5}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x8000) 2.101439955s ago: executing program 4 (id=2326): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'veth1_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) close(r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf8b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x18005}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmmsg$sock(r3, &(0x7f0000005780)=[{{&(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast1, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)="611d744e8a83230237da41737e4bc361b2b3e07fdec74607810b16cf1279dda1da441201bc9627fdec3b48a5b27134ea1131c5f15b5578cd26191ad1f4b97484a9c5526d807e41f52248c23f958c3f0705b327b053d8ffc799e554318a2eed0f10165d31d14b8bfa32bdbaeaea4ffdf442eedb", 0x73}, {&(0x7f0000000440)}, {&(0x7f0000000480)="e988b4fcfc4d6e8d17605a873278f819ecbec7cc6fecb1be4f027fc5c4eeea6fab12fa8bdaea3941229d1dbfcc1de8188b9179b3275451eb48de93aa2d48", 0x3e}, {&(0x7f00000004c0)="ff1acc365ea6b1c87b6edbe9f4bef9819310ebb1c49e62424517874d7866062abc5faad6cefc7f0b20414421faae7aa0", 0x30}, {&(0x7f0000000500)="c95b4b4768e2a639620b3494f9ef3c1d236c1639457b4151fd93267bdaa27f3f2ccf082fca81677323c47b78543fbf20bd8da05059490c00d4f67924da3a67e5cdf1dcc33d4695aa69d7d00f397da455ab03d65e32cd9aa03383461ceb152d2554be881e7f4fbb4f611f10c7bd591df3c2959726b472085931ee30643bf157b2489a68054b4a720ed5226fe8364eec71106a3066e93433a72d", 0x99}], 0x5, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000000000}}], 0x60}}, {{&(0x7f00000006c0)=@nl=@unspec, 0x80, &(0x7f0000002940), 0x0, &(0x7f00000029c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xe826}}], 0xc0}}, {{&(0x7f0000002a80)=@phonet={0x23, 0x9, 0x8, 0xb6}, 0x80, &(0x7f0000005000)=[{&(0x7f0000002b00)="f656a3eef2b879558b722ac4caf80b5d28020567e433589be430b0aa0eff1c7652407c24e9f32698cd3532a9d4571f997e9ee364413218a83d2ed50127636c98cf046f1f65d6c20b2973e13a1a685a3a8cb11af93266b1320eb74cf81d1ab74657ffa4c2d912b3f87197775f9772e5e7ef460b46552e3ff02c61081e89cbea1665d85c0c2aa5dc12eed8fc99562b49638dea92685a77b15758472176553617c9ced8bb33dce10435c65bfe0bee48a26da79152e6ea59967a36f579ba6568e8856794b520edbb5dc3ebf2ede7e3c9c2b5b014583c9ac9b8091c7e87efcdf0ec95e2b2", 0xe2}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)="e6376c3336daabbe057969e227fd1c78935b5e7efa40e8f57cbdf1c84337e2c4116eaef0c514b048f5013822708e69d4c82c4d89ba41c212a999a813deab596766c2072c0c39f83f307c8638761e363823c4cdee84964dfc8d7951609f998df0b3ece9e5dc1094a300dfa7ce8ff43948c4ef403cf5c64485244ef94c6a069f9f117d79016d49368dfa3b225c86e23772042a7a434f7fae934de8e5c2a6067ac2e7f106c36d665cb0ebb331e7f1e032d6357ce3360a1af82df4c2a986b206fe4d11ff69ba", 0xc4}, {&(0x7f0000003d40)="fcec0dff01248179e20633463f9a8de41809a6e7fdcb7fd63e0f251f7a5bc299611cc68a2f4d5c0047bb62da445defb7cc73cf67616b3c057434091807bdbc5c164bce13a60fc5ba8f0c0e62f03bd41b37a0440d036d826ca1527066bd8570e7a2fa6d91d8a4e9cc4f6fc11060effca0d1cfcd37da2260fcf5621763b43159717d99323e42282fd8d19b58fb12274c2466b0373398ba4c5a4e037969beddc54caabc8c3959", 0xa5}, {&(0x7f0000003e00)="f681d7b52996ce22aa7b270f0dd36b446123134af631004609ebc5a09411d3b3529be5dbcc6b77734c1d65ae48300bbc93e7ca1ac465f943b3782ba2f74901d9aba072223cf5ed04958b0d62650b62d3", 0x50}, {&(0x7f0000003e80)="9788776d24f30e3e71288fbb8543b81ca4c5abb91e40e547ab47d9bc18d71b989a9762991068b9793539ac7360df8138b8e7bcacff0be3ca0d7f6b3a0837520316b6c28075cabb805414ee61d5e2ee095464dd0f27117de55bb9c7343717d9d7bd08418095183a4441c3530e2a48103197308c8662bab9288f50", 0x7a}, {&(0x7f0000003f00)="3a3da4e31bc6c8e1e31d33bbd99ef49e609fa503a25646ce84e16ee53e4ec3f4be09078b31edd30b29df1a1a5b95d7c4eeaa61f864fec5bac868ad557d917c59626530c87a3d471717abb4497f9c3c3f0c8d709c0437f313efa294d87f406a3a1a15a212e80664b6a3c8a49e24676643e057b5b99f5ab2f5d02dca8b4291d7f28c978a57ff4d8a90047433dbf25a44aa98b854b68d4fbcf24841088bdc2e2e5b96c1321e110fe247197b07a4312a112e1d0196dbe917112c5e519f", 0xbb}, {&(0x7f0000003fc0)="263648d188fc264e195debbe14b1fe609e103db3363a20d0baad698d6406071aedaee6e258c45a2d820b141f7ce6803b40173e4a1f16589625989fbf22420d", 0x3f}, {&(0x7f0000004000)="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", 0x1000}], 0xa, &(0x7f00000050c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x48}}, {{&(0x7f0000005140)=@ax25={{0x3, @default, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000056c0)=[{&(0x7f00000051c0)="23e4cdf9c1de10269d48834613d7693e2db90563a7e49e4a7bf0b64a943f9a6345e5955cc6568e026740da91cccf74c8ed81a1f04bcea898780ff0adde998e2e3170e021c4ac602fda2d0914baca49166d7a8eabef8a55135545df2ab7887e3f7da42d56b39e7c270da1511887a07803a91f912a51203fc7d006359a69", 0x7d}, {&(0x7f0000005240)="3d96e1da86a2ccddb45cf2f675a23301d0058fba78d007052c5e995f1f726c57b478f7e29ec7f988292bd1c4d951162f7b2032db93cd6e83ce4e490cfd198055a20178e11a1df93a3b6ab0125d812aed02e7ae49db42c0ca9efdc681f3d5626b4b784ac993b847dd8398f4cc7afaf7033ec4a3cd658a", 0x76}, {&(0x7f00000052c0)="2ebfffabfe89948990a1d0b1abf44c7bee6829ed6b3a7e6691aabb5522cbd20b90adc73104cf61d0d0775507e9c0c60aa3f650206ab47c6a4b0919dd1bc26628bf9582a80670618b1924c9d0546e69c11effa63c168120b9391e59bbf1bfb989efcf5127076c850dc8372d2ec6e6d425d5d6bed728978ff199e2fdfb51890837735cb74fb0ec7492824c29f714b11ceccd8cc7aa27b82a3a84b4ba70084b9e08ea1959b29302962eb7d1ace33a042d219c537d402348f8aaea2ce40f8558", 0xbe}, {&(0x7f0000005380)="e54712fdec8a1004593a229c1ba10ee04afc57bb408c739ee8cfc40a300fab1775c75bdcc93f35ec325155d62bb31295dedced98c9d97be9eb7d84a5f1601d936bc778f249aecd5be76ab91b4a15af2f2780f84166ff402e62b2d66e4975519a2b2947762f579fe65d793fe50d269135134805e5fe67468fa31b2a5c3373c6314ad59d564d61fcd9a53ae26004c21e06e208227e5757f385bdc42c1c8fe279d6a914", 0xa2}, {&(0x7f0000000740)="a5048733df37cc175c020d36e22991459a3e132cdf12cc1061c5db1f6bfd728bdd7586f6a8538a54f14811042987c379daf5347397f7a0ad292cdc7a6a603956ea9a1ba67866d03825cb12fed324fba96f11bc62c137384d5a7301c70a05be63c69cd740df828bac6515f8bb6de78a0095a9a12eaa5b6163eca8447ab4b21a327d2254786f7190e8e56c9e0eea6a8fdd9945c4a7", 0x94}, {&(0x7f0000005500)="db5811abf4fe4e59f0c4ce00377b38279f1963f8e29f83b1960901b9f97cd0cfa984df01ad88aa7264313e4e3039bc00a60ed2938ffb465a4b4f91c9962314ebb0aca357b6071e685149df905937d3723ab608bafec4d095598b269fa6", 0x5d}, {&(0x7f0000005580)="15c2f1dd058e06ac12e1e895566e6f21680bd0e2ff96800fb9fa36ae438802039e23edafd467e7f8f2166ab66933c8d2931a05bc2b40d5b2eff5287ea0d3c416f07db1dd94ad30f72504f41afd43ec66096e482b83b681e2590f24b874616a258ac1149b6326db9180b73848ea91871d0d722f49c09e329d4e555f7ed53c310b94e4d872b00a1dd4ff9318f5cb26bf0c7e50b9340b25db6b446d02d70ee877bc2ef1cf85f7c07e6c250c5016718ae5268afdf46429342197519b687d57db0f9cf3d5", 0xc2}, {&(0x7f0000005680)="6942061931c9273b591753c9aefaaef593e0da0509a7ea88d38701df559b54c9086474b29a1e709f850fe7b3c2410234a4a0e841cd", 0x35}], 0x8, &(0x7f0000005740)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}], 0x18}}], 0x4, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000460900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400f0ff0f000100ffffffff0b010100000000000000000a0000060900020073797a31000000000901010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a00"/104], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x90000001}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb0, r9, 0x400, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x396d01f4}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x30004440) 1.852768475s ago: executing program 4 (id=2328): getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r2, @ANYBLOB="fd55a41c62528fdbc59d45ef56a099c4aca1444cf2ee3fa7c52b9db31c28d04dac05a5d74ef1ac5ea23951e9e0544bd645547f35784fb1998a1ca8c763eb19d2836b3110d5a6cdd9cf650a60c148e89a99c5c103620c9fa0c8d979fa7e9e9b001d4ec6468cc4eecd2055079c8a6ebf8921d211f9d798b265f27acd993a3e4888beab19e007e499855c36c1b50193fdcaa5d6ef0de5873ce28b616b280ff4ec82e82acddf7bd5615eb024c5272b3a70b01d74f934e7229e5582261d241a36ca149eab1ca95244dbb2a047cbdaa987e8b2b48a29d6735b72f025e9f5b35fe64ff1da26fae762320467c39c1e640d5b954d98ede2df08"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', r0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000000000ad000000000000009500000000000000d513b3beb75012470e82234884b26c33a7a5caba42aa686d558ca38fc508420d5c67c534aeeb4a61a44fb0dfd210e34471127887e17d711995b24bfc29fcc8839b2d8595c464b306aa5944bb1c8c61a4f44aaa2467420f6069b280370e9d2e932e5e3232918ba31efb8969b8feb89c8b74"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r4) 1.779578501s ago: executing program 2 (id=2330): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)="f4", 0x1, 0x14, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @private0, 0x10000}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x80, 0x8000, 0xc56, 0x5, {{0x2a, 0x4, 0x0, 0x39, 0xa8, 0x64, 0x0, 0x7e, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp={0x44, 0x24, 0x1d, 0x0, 0x7, [0x8000, 0x220, 0x7, 0x80000001, 0x1, 0x1, 0x2, 0x6]}, @generic={0x89, 0x2}, @ssrr={0x89, 0xb, 0x5e, [@multicast2, @dev={0xac, 0x14, 0x14, 0x38}]}, @cipso={0x86, 0x14, 0x1, [{0x0, 0xe, "5e1c4c4ed5dcfddcc13660a6"}]}, @end, @cipso={0x86, 0x2b, 0x3, [{0x1, 0xa, "50ed6c3ad9359b74"}, {0x2, 0xa, "874fa31851b975a0"}, {0x7, 0xb, "1c3748c4d9be941b88"}, {0x2, 0x6, "19b4ef0c"}]}, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x4}]}, @generic={0x86, 0xc, "4114340fa41ae92c815a"}]}}}}}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x52, 0x1, 0x100, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000800000091115b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) (async) listen(r7, 0x0) bind$llc(r6, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="186000000a00000000000000050000001800000008000000000000000000000018110000b239cf476b2fbcb5f4dd877fecddded2c7dbb87d098f0af615e31fc938adcc616bfacb695934b57c498353a4a7f0cf302c289f369ec67d9bad737d4d5d422d33f071089dacd415", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000050000008500000082000000186200000600000000000000090000008a242000f0ffffff"], &(0x7f0000000600)='GPL\x00', 0x2000000, 0x17, &(0x7f0000000640)=""/23, 0x41000, 0x18, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x4, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="040000000900000000ffffff0600007637110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000001f4000000000000ffffff7f8500000013000000184900000000000000000000000000001f984000100000002513000010000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x3ff, 0xee, &(0x7f0000000280)=""/238, 0x41000, 0x50, '\x00', r3, @fallback=0x15, r4, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x0, 0x3d5d, 0x745214}, 0x10, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.758690802s ago: executing program 1 (id=2331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)="f3d34c328eb9fb9244ebdcdf956468ce26b69ae785f6c17430d58cded19b380965a2ad0ab7089071b11b9dfb66cae0895fa8b21930489a9961f4ad4a82be40a89a9e84aea1e75fe0ec5c857c38595519c45f517be4a51ebad720e9aa33c9962a5b112b8e70dee09aa758a9b3d8c7eafd2f42e868a98f7353badf", &(0x7f0000000040), 0x1006, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, &(0x7f00000000c0), &(0x7f0000000080)=""/17}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) 1.690956161s ago: executing program 4 (id=2333): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="6186ff036f", 0x5}], 0x1, &(0x7f0000000ac0)=ANY=[], 0x110}, 0x20000000) sendfile(r1, r2, 0x0, 0xffffffff000) syz_genetlink_get_family_id$nl80211(0x0, r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r3, 0x0, 0xffffffffffffff2b, 0x0, &(0x7f0000000180)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000380)='syz1\x00', 0x1ff) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) 1.648642746s ago: executing program 1 (id=2334): r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}}, 0x44094) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000800)={0xa0000006}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) close(0x3) (async) close(0x3) 1.549554533s ago: executing program 2 (id=2336): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a000307180000000000000004"], 0x14}}, 0x4008800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x50, 0x5, 0x3, 0x3a, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7800, 0x10, 0x1b, 0xc}}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x12c, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x11}, 0x4000045) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609093a14000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1.378751005s ago: executing program 1 (id=2339): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) unshare(0x20000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4109, 0x100d}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, &(0x7f00000000c0)=0x8800001, 0x7fffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x0) vmsplice(r9, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) write(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) 1.141678858s ago: executing program 2 (id=2341): r0 = socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'veth0_to_bond\x00', @random="0131013000"}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x1, 0x21dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x4040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb474e02000000", 0x3e}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a", 0x44}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000002740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002700)={&(0x7f0000001300)={0x13d4, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x113c, 0x111, 0x0, 0x1, {0x1138, 0x5, 0x0, 0x1, [{0x480, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x250, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8656}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x284}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x4d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbb96}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xace}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x63}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x71}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1e2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x39c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xeb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf0}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x68e83c5a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe645}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x100}, @NL80211_ATTR_PEER_MEASUREMENTS={0x25c, 0x111, 0x0, 0x1, {0x258, 0x5, 0x0, 0x1, [{0x180, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa896}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x361}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}]}}]}, 0x13d4}}, 0x4020) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) unshare(0x20000400) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4606090020a404001c0012800b00010062726964676500000c0002800500261bfe000000"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.14078979s ago: executing program 0 (id=2342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x58b82, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00', 0x1000}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c9d008000000000000000000000000000aaff0200000000000000000000000000013a00000000000000030090780800000060aabc2b00028401fe80000000000000000000000000c50f696a223d00aafc020000000000000000000000000000f852f78b98227469175851088768453dc954"], 0xfdef) 958.234785ms ago: executing program 3 (id=2343): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="0100"], 0x3c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500ad84862b3937fddca92d564d2df59a40ab59b52332931462f511d98635ce0204855e1ceed9bbfccf1a1736d7e1a597cf3d7b40425afa957a9845a03657f1e7d72da6fb533f80f4c0644e71ff898bf8844275679320df15d11ab5827f46a5c04456058338eeb233dd4a2e4297d658ac0afa76b0117ef9f7991d7deb349395c96f7fa7edf30605edf6b7e570076908d41e8266ac560bb15689a2b9ddf2891b19b1a5843afd1220f1d8ea478774bb8c0c84f09cf71adf9af930a834", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x4c}}, 0x884) 906.501565ms ago: executing program 4 (id=2344): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000700)={{r0, &(0x7f0000000100)='\x00', 0x515860, &(0x7f0000000340)={@align=0x4, {0x1, 0x5, 0x0, 0x1200000000000000}}, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x319}, {[0x776, 0x400, 0x5, 0x40]}, 0x7fff, 0xd3, &(0x7f0000000500)=""/211}) write$tun(r1, &(0x7f0000000780)={@val={0x0, 0x6003}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="9474c128f3ae", @void, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}, {0xffc00, 0x0, 0x1}, {0x401}, {0x9, 0x0, 0x1}, {0x11, 0x0, 0x1}], @ipv6=@dccp_packet={0xc, 0x6, "fbf5b2", 0x34d, 0x21, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x20}, {[@dstopts={0x2b, 0x22, '\x00', [@pad1, @generic={0x6, 0x4d, "10b6b7b8f915d43900c1dfe458bf6f27f41fccef5f5285c238a4690636e6077ba9fcbb29c53022ae28ea42e568e8e381d0bd5cb86fa136c4892727612f50fa1478cf5a2ce2acc5ef56972acc01"}, @enc_lim, @generic={0x0, 0xb9, "7b10c9ae0bd97b81c20843bb371e2144bea6ae36015bb634e3134d1b36203359faf52c111b0dfb095f61d6d6c9a38f6ccfc007395d907650bbc0adb778e0455cf84c04ff03977ba0030b9a7c85241e3c4e208cf98cf8be3e73d560d0b020ae5c0e07b1fb9cb9d21cdf628d9ce5bc72e4aeabbe2e5aaa95eea2c866e8946b84694eab9a2b2f742641c3cdb86d7cff9ebecd8a4ba20e8fa5297b6875c171f1b7bdc4b509a2c90371a81286d9ae18ce6f5bd0e61d7e413b85a804"}]}, @fragment={0x67, 0x0, 0x3, 0x1, 0x0, 0x1b, 0x64}, @dstopts={0x0, 0x1e, '\x00', [@ra={0x5, 0x2, 0xe7c7}, @jumbo={0xc2, 0x4, 0xd}, @generic={0x0, 0x5a, "786b97ee9cca331ddf909143de99421fbe29161442e04b40fcc51b3ba51199103493981eef778abbc732dd75517d57d8dd9f73c7d2a2fa67751eccc3ecd4eaf6b536e093ecd0685ae931712943642388c5803510d5691606dd0d"}, @generic={0xd4, 0x89, "9ccd04cb0deb71cf2eb1035ecc46ceb9ac4471b0529bd23e959c60b4fb0b01e122d7850e2883d6ab6c0e95c1eb510752e76e93b89c2a6264f159960f409a5465081ab9a7515687dda94a239c414a231d8a1a9344cf5ddb86aa5ebde59be3df012386990e5a83e0a9269ea404559a6f218f3f2c025f4b4bafce4106e77a27485f72791ffd447ce41e6e"}]}, @srh={0x2c, 0x8, 0x4, 0x4, 0x3, 0x0, 0x1, [@local, @local, @private2, @empty]}, @srh={0x2c, 0x14, 0x4, 0xa, 0x2, 0x0, 0x7f, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, @local, @private0, @remote]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x3, 0x7, "4d37a7", 0xfb, "d92ad9"}, "7638a8a67f4ccff4b58a66cf25a38aec7df0ad9f27e436ae2059ccbc940df6002ef33de4811788e5ad8135b125"}}}}}}}}, 0x3a3) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0xc5, &(0x7f0000000400)={@local, @local, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@llc={0x4, {@llc={0x1, 0xf8, "97", "1c0ac0229690a0e1e59421e110f2c82b39f54fed97e0233619e8a617ee2826db5563a891681c0d7326aa8c29cd07331daec66d38b2e863db90be2e3cdbd78851550645f67cf92781aaddb087e72c7f02c43c4bc38b513c5bdc5667eb01dabfe76e161591d42267dd0246bf0df32d86b52d647356cffde139a3d6c5a27595d20cabddfa7506b25cd8496afa42275af3cfe255d752025089e810153d802874d3e8221c2e4ccdea1d70bf19b5ccb614a286"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 707.370488ms ago: executing program 0 (id=2345): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x0, 0x24}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x6, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 702.011603ms ago: executing program 3 (id=2346): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810400"/20, @ANYRES32=0x0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000800000005000a"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x2001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x40}}, 0x4040) 671.248344ms ago: executing program 0 (id=2347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)}, 0x4}], 0x2, 0x60, 0x0) recvmsg$qrtr(r1, &(0x7f0000001e80)={&(0x7f0000000340), 0xc, &(0x7f0000001c80)=[{&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/91, 0x5b}, {&(0x7f0000001c00)=""/103, 0x67}], 0x6, &(0x7f0000001d00)=[{0x28, 0x0, 0x0, ""/24}, {0x100, 0x0, 0x0, ""/233}, {0x38, 0x0, 0x0, ""/37}], 0x160, 0x2020}, 0x38, 0x2002) 555.360967ms ago: executing program 0 (id=2348): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9400000dae6a26716028d087d05a000002cefb9fc507cfc0000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) unshare(0x2c020400) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f00000000c0)='fou\x00', 0x240, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x5]}, {0x45, 0x3c56, 0x8000, 0xf4a9}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1000}) accept4$tipc(r3, &(0x7f00000002c0)=@id, &(0x7f0000000300)=0x10, 0x800) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 483.338899ms ago: executing program 2 (id=2349): syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd60003a0400047300f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$inet(0x2, 0x805, 0x6) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0xa, [0x4, 0x100, 0x25ed, 0x80, 0x1, 0x4, 0x7, 0xfffd, 0x101, 0x8001]}, 0x18) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000180)="9d33000002b7", 0x6}, {&(0x7f00000005c0)="1805f704fa", 0x5}], 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x101, 0x30, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 482.204784ms ago: executing program 3 (id=2350): unshare(0x22020600) unshare(0x14000000) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00000001c0), 0x4) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) 370.928509ms ago: executing program 3 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) (async) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'rose0\x00', &(0x7f0000000040)=@ethtool_cmd={0x18, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x87, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000043, [0x2, 0x89ff]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r6, &(0x7f0000000440)={0x1d, r3, 0x3, {0x1, 0xf0, 0x2}}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) (async) accept4$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10, 0x80800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r1, &(0x7f00000001c0)='\xaa\xaa\xaa\xaa\xaa', 0x430040, &(0x7f0000000200)={@_ha_fsid={[0xfffffffb, 0xdd9]}, {0x8, 0xfffc, 0xffffff94, 0x4}}, 0x0, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x5}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f0000000380), 0x8, 0xe6, 0x8, 0x7, &(0x7f0000000500)}}, 0x10) sendto$packet(r9, &(0x7f0000000340)="16a025", 0x3, 0x4000, &(0x7f0000000680)={0x11, 0x2, r10}, 0x14) 311.248747ms ago: executing program 1 (id=2352): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x19b, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3c86dd6ba13cd901650601ff010000000000000000000000000001fc020000000000000000000000000001330404020d180c0000000000000000000000ffff64010102fe8000000000000000000000000000288903000000000000c20400000008c204007200050103000000000100c204000000090000000000000004001000000000fc02000000000000000000000000000000000000000000000000ffffe00000010604040210400300ff010000000000000000000000000001ff0200000000000000000000000000018811000000000000050207ff0502287a074800000003100c0400010000000000000008000000000000000100000000000000050000000000000023bf0000000000000000000000000000a3000000000000000900000000000000c910fc000000000000000000000000000001c204000000010502020007180000000304ea01000900000000000000010000000100000004010500000000000000000000000000000000000000000200004e2300004e20000000020000000100000000000000020000000000"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) socket(0x14, 0x2, 0x4) (async) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x618f, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20050800) (async) r3 = socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000100e03f020000ce6012e198d6a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b795a31b8b51c364a614b8e4c12138a77d4bd62ca783"], 0x80}, 0x1, 0x0, 0x0, 0x48485}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000f7ffffff18110000", @ANYRES32=r7, @ANYBLOB="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"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x40, 0x300, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0x80d1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x800084, r7}, 0x38) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x3, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 183.347523ms ago: executing program 0 (id=2353): socket(0x400000000010, 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) syz_init_net_socket$ax25(0x3, 0x3, 0x3f02733b71be6a8b) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) write(r1, &(0x7f0000000000)="1c00000018012551075c0180fbffff5cf81c38ff4ef2bd28954834d0006d865490f778ebb83edcc194a9809dca1fac025c83d9a9eec3f5cb92cdfc67a0bb797aeda26e87c22d19a0464253b4f9bd297e3ffe2e9607fc4d192c9648ac27e87d9f1d3f36ebfd27b0aab7b554e485ae8c1ac4308334389ad37c6b80c42a3d3b0bba31f721fb4c7d", 0xffffffffffffff45) 135.534006ms ago: executing program 3 (id=2354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d1000/0xb000)=nil, 0xb000, 0x0, 0x11, r2, 0x12e61000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x5431000) 99.931498ms ago: executing program 4 (id=2355): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x30, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x35, 0x0, 0x200}, [@RTA_VIA={0x14, 0x12, {0x27, "c01d9cb53748f67be3167fd987a4"}}]}, 0x30}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x8}) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x1328, 0x0, 0xffffffff, 0xffffffff, 0x1140, 0xffffffff, 0x1258, 0xffffffff, 0xffffffff, 0x1258, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0xff, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xff000000], 'batadv_slave_1\x00', 'pim6reg0\x00', {}, {0xff}, 0x11, 0x8, 0x2, 0xcc}, 0x0, 0x10d8, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0xfffffff7, {0x9}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xa, 0x1, 0x7, 'snmp\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], 'ipvlan0\x00', 'ipvlan1\x00', {}, {0xff}, 0x4, 0x5, 0x2, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {'9P', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x6, 0xe, 'snmp_trap\x00', {0x1fe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1388) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000080)=[@in={0x2, 0x4e26, @remote}]}, &(0x7f0000000100)=0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000005c0)="82643694fe8ce52a0304000e0580a7b6077b38a078e8fc0d63", 0x19) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800452d0070006600000501907864010101ac140e000304907800080000451e00090067ff0106330007e0000002ffffffff831399ac1414ffac1e0101ac1414bb000000004420207000000003000000100000080000000005800000000000000100004408f150000000809404010000"], 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12122, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x8, 0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) read(r7, &(0x7f0000000180)=""/50, 0x32) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r10}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44984}, 0x8005) 31.082374ms ago: executing program 1 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES32=r0], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000012008188e6b42aa73772cc9f1b2f8b48430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0x2, 0x70bd2a, 0x25dfdbfd, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 30.580422ms ago: executing program 3 (id=2357): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040890}, 0x8800) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x38) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003baf523aa7000000000000000094000100ffff5cf9e5ffff950000a062f9943a7c40f962841ea0"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xa}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4044040) 0s ago: executing program 0 (id=2358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x4}], 0x2, 0x60, 0x0) recvmsg$qrtr(r1, &(0x7f0000001e80)={&(0x7f0000000340), 0xc, &(0x7f0000001c80)=[{&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/121, 0x79}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/91, 0x5b}, {&(0x7f0000001c00)=""/103, 0x67}], 0x6, &(0x7f0000001d00)=[{0x28, 0x0, 0x0, ""/24}, {0x100, 0x0, 0x0, ""/233}, {0x38, 0x0, 0x0, ""/37}], 0x160, 0x2020}, 0x38, 0x2002) kernel console output (not intermixed with test programs): 0, 0] type 1 family 0 port 8472 - 0 [ 119.959997][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.997576][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.039486][ T7801] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 120.156508][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.175422][ T7792] lec:lec_atm_close: lec0: Shut down! [ 120.833790][ T7850] __nla_validate_parse: 160 callbacks suppressed [ 120.833843][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 120.875501][ T7850] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 120.990378][ T7850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.030250][ T7854] syz_tun: entered promiscuous mode [ 121.046127][ T7854] macvtap1: entered promiscuous mode [ 121.080792][ T7854] syz_tun: left promiscuous mode [ 121.190052][ T7856] bond1: (slave geneve2): making interface the new active one [ 121.214593][ T7856] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 121.254792][ T3003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.274896][ T3003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.339196][ T3003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.369349][ T3003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.490944][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 121.507614][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 121.521473][ T7884] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 121.531372][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 121.551598][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 121.598478][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 121.642593][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 121.739433][ T7262] lec:lec_start_xmit: lec0:No lecd attached [ 121.826320][ T7902] netlink: 156 bytes leftover after parsing attributes in process `syz.1.477'. [ 122.782173][ T7942] netlink: 'syz.2.483': attribute type 4 has an invalid length. [ 123.022265][ T7967] netlink: 'syz.3.488': attribute type 3 has an invalid length. [ 123.119537][ T7969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.487'. [ 123.195027][ T7969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.487'. [ 123.823401][ T8004] tipc: Enabled bearer , priority 0 [ 123.887242][ T8016] netlink: zone id is out of range [ 123.927289][ T8004] tipc: Disabling bearer [ 123.936166][ T8016] netlink: zone id is out of range [ 123.949677][ T8016] netlink: zone id is out of range [ 123.962081][ T8016] netlink: zone id is out of range [ 123.983663][ T8016] netlink: zone id is out of range [ 123.995710][ T8016] netlink: zone id is out of range [ 124.005611][ T8016] netlink: zone id is out of range [ 124.011552][ T8016] netlink: zone id is out of range [ 124.016826][ T8016] netlink: zone id is out of range [ 124.022412][ T8016] netlink: zone id is out of range [ 124.138006][ T8028] netlink: 'syz.2.503': attribute type 13 has an invalid length. [ 124.606187][ T8054] syz.2.510 (8054) used greatest stack depth: 17472 bytes left [ 124.723417][ T8063] netlink: 'syz.4.514': attribute type 2 has an invalid length. [ 124.768831][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.777821][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.826635][ T2995] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.855618][ T8070] ip6tnl2: entered promiscuous mode [ 124.903410][ T2995] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.644997][ T8111] x_tables: ip_tables: ah match: only valid for protocol 51 [ 125.978714][ T8124] block nbd0: server does not support multiple connections per device. [ 125.993459][ T8124] block nbd0: shutting down sockets [ 126.067228][ T8139] __nla_validate_parse: 13 callbacks suppressed [ 126.067245][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 126.100511][ T8127] block nbd0: server does not support multiple connections per device. [ 126.120974][ T8127] block nbd0: shutting down sockets [ 126.387474][ T8149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.549313][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 126.683665][ T8149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.743057][ T8168] syzkaller0: entered promiscuous mode [ 126.748827][ T8168] syzkaller0: entered allmulticast mode [ 126.758333][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 126.766695][ C1] lec:lec_tx_timeout: lec0 [ 126.772313][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 126.816008][ T8149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.904793][ T8149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.024331][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.045373][ T2995] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.065551][ T2995] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.085370][ T2995] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.368014][ T8182] syzkaller0: entered promiscuous mode [ 127.373750][ T8182] syzkaller0: entered allmulticast mode [ 127.461757][ T8188] netlink: 'syz.2.541': attribute type 9 has an invalid length. [ 127.469862][ T8189] netlink: 'syz.2.541': attribute type 9 has an invalid length. [ 127.477680][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 127.486741][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 127.846412][ T8207] syzkaller0: entered promiscuous mode [ 127.852103][ T8207] syzkaller0: entered allmulticast mode [ 129.368943][ T8153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.548641][ T8245] syz_tun: entered allmulticast mode [ 129.597310][ T8245] dvmrp6: entered allmulticast mode [ 129.638150][ T8244] syz_tun: left allmulticast mode [ 129.744304][ T8253] macvlan2: entered promiscuous mode [ 129.753791][ T8253] bond_slave_0: entered promiscuous mode [ 129.759704][ T8253] bond_slave_1: entered promiscuous mode [ 129.766668][ T8253] bond0: entered promiscuous mode [ 129.773720][ T8253] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.783496][ T8253] team0: Port device macvlan2 added [ 130.155287][ T8279] netlink: 312 bytes leftover after parsing attributes in process `syz.0.560'. [ 130.180155][ T8279] net_ratelimit: 350 callbacks suppressed [ 130.180170][ T8279] veth1_vlan: mtu less than device minimum [ 130.639432][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.565'. [ 130.656529][ T2995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.687020][ T2995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.707027][ T2995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.728884][ T2995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.905000][ T8310] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 130.993547][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 131.007452][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 131.087668][ T8323] netlink: 44 bytes leftover after parsing attributes in process `syz.4.571'. [ 131.101282][ T8324] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 131.115083][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 131.195548][ T8329] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 131.232587][ T8329] bond1: entered promiscuous mode [ 131.238937][ T8329] bond1: entered allmulticast mode [ 131.247013][ T8329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.279685][ T8329] bridge2: entered promiscuous mode [ 131.285310][ T8329] bridge2: entered allmulticast mode [ 131.294269][ T8329] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 131.327191][ T8329] bridge3: entered promiscuous mode [ 131.334065][ T8329] bridge3: entered allmulticast mode [ 131.343326][ T8329] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 131.350354][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 131.488802][ T2995] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 131.522829][ T8344] syzkaller0: entered promiscuous mode [ 131.528540][ T8344] syzkaller0: entered allmulticast mode [ 132.518337][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 132.526446][ C1] lec:lec_tx_timeout: lec0 [ 132.531319][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 132.531854][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 132.540865][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.618894][ T8301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 134.025100][ T8397] syzkaller0: entered promiscuous mode [ 134.033351][ T8397] syzkaller0: entered allmulticast mode [ 134.119637][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 134.132012][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'. [ 134.150228][ T8404] ipvlan1: entered promiscuous mode [ 134.157035][ T8404] ipvlan1: left promiscuous mode [ 134.212532][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 134.277783][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 134.397393][ T8421] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 134.845886][ T8454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.092037][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.192967][ T8473] macvlan3: entered promiscuous mode [ 135.221645][ T8473] vlan0: entered promiscuous mode [ 135.271562][ T8473] team0: Port device macvlan3 added [ 135.420049][ T796] IPVS: starting estimator thread 0... [ 135.445067][ T8488] netlink: 'syz.0.609': attribute type 49 has an invalid length. [ 135.531723][ T8496] netlink: 64 bytes leftover after parsing attributes in process `syz.3.608'. [ 135.548522][ T8495] IPVS: using max 30 ests per chain, 72000 per kthread [ 135.656282][ T8496] block nbd0: not configured, cannot reconfigure [ 135.747258][ T8514] trusted_key: syz.2.615 sent an empty control message without MSG_MORE. [ 136.352416][ T8546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.671495][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.700737][ T8568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.710866][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.729742][ T8568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.793189][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'. [ 136.820324][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'. [ 136.831093][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'. [ 136.840710][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.630'. [ 137.252771][ T8599] netlink: 'syz.1.639': attribute type 21 has an invalid length. [ 137.260846][ T8599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.639'. [ 137.342791][ T8606] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 137.553796][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.643'. [ 137.568582][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 137.576659][ C1] lec:lec_tx_timeout: lec0 [ 137.581707][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 137.764487][ T8610] syzkaller1: entered promiscuous mode [ 137.779956][ T8610] syzkaller1: entered allmulticast mode [ 137.850619][ T8629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.645'. [ 137.938174][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 138.316686][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 138.464808][ T8660] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 138.727011][ T8676] tc_dump_action: action bad kind [ 138.884678][ T8677] tipc: Enabled bearer , priority 0 [ 139.131618][ T8688] syzkaller0: entered promiscuous mode [ 139.137224][ T8688] syzkaller0: entered allmulticast mode [ 139.165984][ T8704] netlink: 2 bytes leftover after parsing attributes in process `syz.2.661'. [ 139.166948][ T8688] tipc: Resetting bearer [ 139.259624][ T7516] tipc: Resetting bearer [ 139.292270][ T8674] tipc: Resetting bearer [ 140.317248][ T8674] tipc: Disabling bearer [ 140.343360][ T5936] tipc: Node number set to 2258059219 [ 140.373501][ T8726] bridge0: entered promiscuous mode [ 140.507908][ T8732] : renamed from bond_slave_0 (while UP) [ 141.205554][ T8770] sctp: [Deprecated]: syz.3.678 (pid 8770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.205554][ T8770] Use struct sctp_sack_info instead [ 141.649571][ T8792] bridge_slave_0: left allmulticast mode [ 141.655271][ T8792] bridge_slave_0: left promiscuous mode [ 141.684829][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.745061][ T8792] bridge_slave_1: left allmulticast mode [ 141.783841][ T8792] bridge_slave_1: left promiscuous mode [ 141.814372][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.850494][ T8792] bond0: (slave bond_slave_0): Releasing backup interface [ 141.874289][ T8792] bond_slave_0: left promiscuous mode [ 141.902503][ T8792] bond0: (slave bond_slave_1): Releasing backup interface [ 141.930128][ T8792] bond_slave_1: left promiscuous mode [ 141.986024][ T8792] team0: Port device team_slave_0 removed [ 142.019905][ T8792] team0: Port device team_slave_1 removed [ 142.026673][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.037472][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.053278][ T8792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.069659][ T8792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.079892][ T8792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.116857][ T8826] __nla_validate_parse: 6 callbacks suppressed [ 142.116871][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.687'. [ 142.169275][ T8826] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 142.396274][ T8837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.588335][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 142.596441][ C1] lec:lec_tx_timeout: lec0 [ 142.601722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 142.643479][ T8843] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.689634][ T8843] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 143.225977][ T8871] macvtap1: entered promiscuous mode [ 143.238625][ T8871] syz_tun: entered promiscuous mode [ 143.244033][ T8871] macvtap1: entered allmulticast mode [ 143.268437][ T8871] syz_tun: entered allmulticast mode [ 143.281340][ T8871] syz_tun: left allmulticast mode [ 143.286403][ T8871] syz_tun: left promiscuous mode [ 144.007407][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 144.207730][ T8929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.970520][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 144.980331][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.706'. [ 145.126363][ T8944] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.709'. [ 145.604555][ T8975] wg1: entered allmulticast mode [ 145.680271][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.726959][ T8971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.735301][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 145.751256][ T8971] team0: Port device bond2 added [ 145.758769][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 145.767903][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 145.795296][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 145.832916][ T8986] netlink: 'syz.4.715': attribute type 15 has an invalid length. [ 145.883131][ T8982] netlink: 'syz.4.715': attribute type 15 has an invalid length. [ 145.914306][ T8982] netlink: 'syz.4.715': attribute type 18 has an invalid length. [ 145.946773][ T8986] netlink: 'syz.4.715': attribute type 18 has an invalid length. [ 145.989010][ T8995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.086744][ T8998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.718'. [ 146.147546][ T8998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 146.320766][ T5936] IPVS: starting estimator thread 0... [ 146.376742][ T9016] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 146.428413][ T9012] IPVS: using max 28 ests per chain, 67200 per kthread [ 146.435653][ T9015] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 146.533333][ T9015] bond1: (slave dummy0): Releasing backup interface [ 146.622090][ T9015] team0: Port device dummy0 added [ 146.646780][ T30] audit: type=1804 audit(1775976954.297:3): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.719" name="/newroot/143/cgroup.controllers" dev="tmpfs" ino=754 res=1 errno=0 [ 146.677192][ T30] audit: type=1800 audit(1775976954.297:4): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.719" name="cgroup.controllers" dev="tmpfs" ino=754 res=0 errno=0 [ 147.230203][ T9042] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 147.608361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 147.616515][ C1] lec:lec_tx_timeout: lec0 [ 147.621135][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 147.670252][ T9078] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 148.350010][ T9115] __nla_validate_parse: 3 callbacks suppressed [ 148.350028][ T9115] netlink: 56 bytes leftover after parsing attributes in process `syz.0.746'. [ 148.705400][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'. [ 149.120317][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.756'. [ 149.249289][ T9159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 149.317421][ T9163] netlink: 'syz.2.758': attribute type 13 has an invalid length. [ 149.490779][ T9169] delete_channel: no stack [ 149.531031][ T9164] gre0 speed is unknown, defaulting to 1000 [ 149.560908][ T12] bond1: (slave bridge2): link status up again after 0 ms [ 149.578492][ T12] bond1: (slave bridge2): link status up again after 0 ms [ 149.586217][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 149.644260][ T9170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.799639][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 149.802163][ T9164] gre0 speed is unknown, defaulting to 1000 [ 149.820330][ T9164] gre0 speed is unknown, defaulting to 1000 [ 149.909812][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 150.048418][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 150.148856][ T9184] macvtap0: entered promiscuous mode [ 150.154226][ T9184] syz_tun: entered promiscuous mode [ 150.190433][ T9184] syz_tun: left promiscuous mode [ 150.196217][ T9164] infiniband syz1: set active [ 150.203750][ T9164] infiniband syz1: added gre0 [ 150.251276][ T7254] gre0 speed is unknown, defaulting to 1000 [ 150.268553][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 150.309009][ T9164] RDS/IB: syz1: added [ 150.339812][ T9164] smc: adding ib device syz1 with port count 1 [ 150.360659][ T9164] smc: ib device syz1 port 1 has no pnetid [ 150.378499][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 150.387533][ T7260] gre0 speed is unknown, defaulting to 1000 [ 150.404728][ T9164] gre0 speed is unknown, defaulting to 1000 [ 150.480420][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.769'. [ 150.508782][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 150.613504][ T9208] tipc: Enabling of bearer rejected, failed to enable media [ 150.664610][ T9208] syzkaller0: entered promiscuous mode [ 150.673717][ T9208] syzkaller0: entered allmulticast mode [ 150.734578][ T9208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.770'. [ 150.881553][ T7513] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.891716][ T7513] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.907464][ T9164] gre0 speed is unknown, defaulting to 1000 [ 150.908641][ T7513] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.953192][ T7513] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.099745][ T9217] bridge_slave_0 (unregistering): left allmulticast mode [ 151.108266][ T9217] bridge_slave_0 (unregistering): left promiscuous mode [ 151.117020][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.156222][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 151.165462][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 151.177592][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 151.186878][ T9229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 151.392754][ T9242] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 151.451122][ T9242] bond2: entered promiscuous mode [ 151.456507][ T9242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.498781][ T9164] gre0 speed is unknown, defaulting to 1000 [ 151.529567][ T9248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.532474][ T9242] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 151.537226][ T9248] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 151.555032][ T9248] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 151.576727][ T9248] bond2: (slave wireguard0): making interface the new active one [ 151.585743][ T9248] wireguard0: entered promiscuous mode [ 151.593050][ T9248] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 151.794929][ T796] IPVS: starting estimator thread 0... [ 151.909990][ T9268] IPVS: using max 39 ests per chain, 93600 per kthread [ 151.967234][ T9276] tipc: Started in network mode [ 151.976050][ T9276] tipc: Node identity 52bce882817a, cluster identity 4711 [ 151.992316][ T9276] tipc: Enabled bearer , priority 0 [ 152.011339][ T9276] syzkaller0: entered promiscuous mode [ 152.016834][ T9276] syzkaller0: entered allmulticast mode [ 152.050179][ T9276] tipc: Resetting bearer [ 152.068151][ T9272] tipc: Resetting bearer [ 152.081059][ T9272] tipc: Disabling bearer [ 152.101471][ T9164] gre0 speed is unknown, defaulting to 1000 [ 152.275771][ T9289] netlink: 'syz.0.789': attribute type 83 has an invalid length. [ 152.342658][ T9289] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 152.596874][ T9290] gre0 speed is unknown, defaulting to 1000 [ 152.628331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 152.636437][ C1] lec:lec_tx_timeout: lec0 [ 152.641105][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 152.858511][ T9307] netlink: 'syz.3.794': attribute type 6 has an invalid length. [ 152.866454][ T9307] netlink: 'syz.3.794': attribute type 7 has an invalid length. [ 152.884597][ T9307] netlink: 'syz.3.794': attribute type 8 has an invalid length. [ 152.978952][ T9164] gre0 speed is unknown, defaulting to 1000 [ 153.391044][ T9323] __nla_validate_parse: 5 callbacks suppressed [ 153.391060][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 153.471233][ T9326] netlink: 104 bytes leftover after parsing attributes in process `syz.0.797'. [ 153.475783][ T9322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.500537][ T9323] bond4 (unregistering): Released all slaves [ 153.569411][ T9314] gre0 speed is unknown, defaulting to 1000 [ 153.856024][ T9335] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 153.977400][ T9335] bond3: entered promiscuous mode [ 153.982941][ T9335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.017264][ T9344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.803'. [ 154.055634][ T9339] team_slave_0: entered promiscuous mode [ 154.061585][ T9339] team_slave_1: entered promiscuous mode [ 154.067616][ T9339] vlan2: entered promiscuous mode [ 154.099111][ T9339] team0: entered promiscuous mode [ 154.104555][ T9339] dummy0: entered promiscuous mode [ 154.287494][ T9344] 8021q: VLANs not supported on sit0 [ 154.321252][ T9338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.328682][ T9338] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 154.346948][ T9338] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 154.412004][ T9338] bond3: (slave wireguard0): making interface the new active one [ 154.420002][ T9338] wireguard0: entered promiscuous mode [ 154.427091][ T9338] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 154.436631][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.801'. [ 154.448184][ T9355] netlink: 220 bytes leftover after parsing attributes in process `syz.2.806'. [ 154.489115][ T9355] netlink: 'syz.2.806': attribute type 2 has an invalid length. [ 154.498379][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 154.563795][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.808'. [ 154.588605][ T2995] net_ratelimit: 23 callbacks suppressed [ 154.588621][ T2995] bond1: (slave bridge2): failed to get link speed/duplex [ 154.629888][ T9360] syz_tun: entered allmulticast mode [ 154.640308][ T9359] netlink: 'syz.1.807': attribute type 2 has an invalid length. [ 154.675567][ T9359] hmac(sha224): entered promiscuous mode [ 154.728532][ T7513] bond1: (slave bridge2): failed to get link speed/duplex [ 154.749181][ T9366] netlink: 224 bytes leftover after parsing attributes in process `syz.0.810'. [ 154.789912][ T9356] syz_tun: left allmulticast mode [ 154.860085][ T9369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.810'. [ 154.912146][ T9362] tipc: Enabling of bearer rejected, failed to enable media [ 154.935390][ T9365] gre0 speed is unknown, defaulting to 1000 [ 154.948403][ T7513] bond1: (slave bridge2): failed to get link speed/duplex [ 155.000302][ T9372] syzkaller1: entered promiscuous mode [ 155.005959][ T9372] syzkaller1: entered allmulticast mode [ 155.060047][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 155.071710][ T9378] 8021q: VLANs not supported on lo [ 155.169312][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 155.403365][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 155.468783][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 155.676830][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 155.753131][ T9409] xt_bpf: check failed: parse error [ 155.788591][ T2995] bond1: (slave bridge2): failed to get link speed/duplex [ 155.902685][ T9411] dvmrp1: entered allmulticast mode [ 155.909765][ T2995] bond1: (slave bridge2): failed to get link speed/duplex [ 155.927740][ T9413] dvmrp1: left allmulticast mode [ 155.941260][ T9413] dvmrp6: left allmulticast mode [ 156.048704][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 156.247534][ T7516] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.258124][ T7516] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.276725][ T7516] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.287831][ T7516] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.521224][ T9440] validate_nla: 1 callbacks suppressed [ 156.521240][ T9440] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 156.609035][ T9440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.648758][ T9441] ipvlan2: entered allmulticast mode [ 156.654097][ T9441] bond2: entered allmulticast mode [ 156.768088][ T9440] bond2: (slave bridge1): making interface the new active one [ 156.793668][ T9440] bridge1: entered allmulticast mode [ 156.809171][ T9440] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 156.842190][ T9444] gre0 speed is unknown, defaulting to 1000 [ 156.853049][ T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.872387][ T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.575314][ T9490] x_tables: duplicate underflow at hook 1 [ 157.658320][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 157.666525][ C1] lec:lec_tx_timeout: lec0 [ 157.671140][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 157.823624][ T9470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.967474][ T9503] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.053114][ T9509] netlink: 'syz.2.846': attribute type 298 has an invalid length. [ 158.096337][ T9510] syz_tun: entered promiscuous mode [ 158.112410][ T9510] syz_tun: left promiscuous mode [ 158.306660][ T9525] syzkaller0: entered promiscuous mode [ 158.312419][ T9525] syzkaller0: entered allmulticast mode [ 158.620910][ T5143] Bluetooth: hci4: link tx timeout [ 158.626667][ T5143] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 158.635457][ T5143] Bluetooth: hci4: link tx timeout [ 158.641192][ T5143] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.016788][ T9573] __nla_validate_parse: 11 callbacks suppressed [ 159.016808][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 159.036220][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 159.056230][ T9575] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 159.070440][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 159.184375][ T9587] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.866'. [ 159.585620][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 159.606922][ T9621] net_ratelimit: 28 callbacks suppressed [ 159.606938][ T9621] openvswitch: netlink: Flow key attr not present in new flow. [ 159.618614][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 159.738466][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 159.848414][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 159.958555][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 160.068393][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 160.188558][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 160.298567][ T174] bond1: (slave bridge2): failed to get link speed/duplex [ 160.407782][ T9635] netlink: 32396 bytes leftover after parsing attributes in process `syz.3.875'. [ 160.428367][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 160.491583][ T9637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.541824][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 160.678486][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 161.983226][ T9573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.008441][ T9633] netlink: 644 bytes leftover after parsing attributes in process `syz.3.875'. [ 162.205220][ T9664] netlink: 'syz.4.886': attribute type 5 has an invalid length. [ 162.678611][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 162.686654][ C1] lec:lec_tx_timeout: lec0 [ 162.691260][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 162.754140][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.893'. [ 162.766490][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 163.119290][ T9710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.897'. [ 163.136544][ T9706] syzkaller0: entered promiscuous mode [ 163.142605][ T9706] syzkaller0: entered allmulticast mode [ 163.387486][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 163.571847][ T9727] netlink: 'syz.4.903': attribute type 11 has an invalid length. [ 163.582466][ T9727] netlink: 'syz.4.903': attribute type 23 has an invalid length. [ 164.480720][ T9714] bridge0: entered promiscuous mode [ 164.486160][ T9714] macsec1: entered promiscuous mode [ 164.498797][ T9728] tunl0: Caught tx_queue_len zero misconfig [ 164.648740][ T2995] net_ratelimit: 22 callbacks suppressed [ 164.648761][ T2995] bond1: (slave bridge2): failed to get link speed/duplex [ 164.784022][ T9747] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 164.792433][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 165.039463][ T8331] bond1: (slave bridge2): failed to get link speed/duplex [ 165.148521][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 165.292868][ T143] bond1: (slave bridge2): failed to get link speed/duplex [ 165.439497][ T7511] bond1: (slave bridge2): failed to get link speed/duplex [ 165.590281][ T7514] bond1: (slave bridge2): failed to get link speed/duplex [ 165.698825][ T7511] bond1: (slave bridge2): failed to get link speed/duplex [ 165.706721][ T9812] __nla_validate_parse: 3 callbacks suppressed [ 165.706735][ T9812] netlink: 76 bytes leftover after parsing attributes in process `syz.2.918'. [ 165.727606][ T9816] syzkaller0: entered promiscuous mode [ 165.738019][ T9816] syzkaller0: entered allmulticast mode [ 165.745288][ T9817] netlink: 72 bytes leftover after parsing attributes in process `syz.4.920'. [ 165.757629][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 165.766864][ T9817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.920'. [ 165.777974][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.920'. [ 165.797502][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.921'. [ 165.806802][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.921'. [ 165.824987][ T9816] tipc: Started in network mode [ 165.831000][ T9816] tipc: Node identity 3e9857de5358, cluster identity 4711 [ 165.838806][ T9816] tipc: Enabled bearer , priority 0 [ 165.850196][ T9816] tipc: Resetting bearer [ 165.868969][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 165.998574][ T7514] bond1: (slave bridge2): failed to get link speed/duplex [ 166.082565][ T9832] tipc: Can't bind to reserved service type 0 [ 166.101716][ T9831] : entered promiscuous mode [ 166.289347][ T9842] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 166.487186][ T9815] tipc: Resetting bearer [ 166.583573][ T9815] tipc: Disabling bearer [ 166.855494][ T9875] netlink: 88 bytes leftover after parsing attributes in process `syz.1.937'. [ 166.892618][ T9879] netlink: 'syz.3.939': attribute type 4 has an invalid length. [ 166.900374][ T9879] netlink: 17 bytes leftover after parsing attributes in process `syz.3.939'. [ 167.032953][ T9890] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 167.146124][ T9890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.522030][ T9918] syzkaller0: entered promiscuous mode [ 167.527558][ T9918] syzkaller0: entered allmulticast mode [ 167.698336][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 167.706444][ C1] lec:lec_tx_timeout: lec0 [ 167.712027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 167.899016][ T9938] syzkaller0: entered promiscuous mode [ 167.905352][ T9938] syzkaller0: entered allmulticast mode [ 167.918647][ T9949] tipc: Enabling of bearer rejected, failed to enable media [ 168.071622][ T9962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.962'. [ 168.085998][ T9962] Bluetooth: MGMT ver 1.23 [ 168.787136][ T9980] nbd: socks must be embedded in a SOCK_ITEM attr [ 169.779137][ T7516] net_ratelimit: 16 callbacks suppressed [ 169.779158][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 169.886662][ T9998] IPVS: set_ctl: invalid protocol: 71 172.20.20.187:20000 [ 169.907918][ T9997] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 169.916790][T10001] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 169.925250][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 169.949926][ T9997] xt_hashlimit: size too large, truncated to 1048576 [ 170.079331][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 170.103049][T10014] netlink: 'syz.0.977': attribute type 3 has an invalid length. [ 170.289371][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 170.376322][T10019] gre0 speed is unknown, defaulting to 1000 [ 170.408978][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 170.489921][T10031] pim6reg: entered allmulticast mode [ 170.501627][T10031] pim6reg: left allmulticast mode [ 170.600614][ T7511] bond1: (slave bridge2): failed to get link speed/duplex [ 170.733997][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 170.799762][T10047] tc_dump_action: action bad kind [ 170.846409][T10047] __nla_validate_parse: 3 callbacks suppressed [ 170.846425][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.985'. [ 170.862115][ T7511] bond1: (slave bridge2): failed to get link speed/duplex [ 170.933490][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 170.998589][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 171.067292][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 171.109658][ T7511] bond1: (slave bridge2): failed to get link speed/duplex [ 171.112612][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.990'. [ 171.297910][T10071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.992'. [ 171.484791][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 171.786471][T10092] netlink: 'syz.0.995': attribute type 10 has an invalid length. [ 171.802410][T10092] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.815805][T10092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.995'. [ 172.092783][T10107] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 172.139901][T10108] sit1: entered allmulticast mode [ 172.244286][T10121] delete_channel: no stack [ 172.718338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 172.726375][ C1] lec:lec_tx_timeout: lec0 [ 172.731006][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 174.848784][ T7513] net_ratelimit: 31 callbacks suppressed [ 174.848802][ T7513] bond1: (slave bridge2): failed to get link speed/duplex [ 174.968525][ T7513] bond1: (slave bridge2): failed to get link speed/duplex [ 175.080628][ T49] bond1: (slave bridge2): failed to get link speed/duplex [ 175.108826][T10111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.199117][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 175.234052][T10135] delete_channel: no stack [ 175.359039][ T7513] bond1: (slave bridge2): failed to get link speed/duplex [ 175.434126][T10154] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 175.445324][T10154] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 175.489057][ T7516] bond1: (slave bridge2): failed to get link speed/duplex [ 175.614859][T10154] bond4: entered promiscuous mode [ 175.623480][T10154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.663195][T10168] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.696399][T10168] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 175.745941][T10180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1017'. [ 175.770016][T10168] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 175.822270][T10168] bond4: (slave wireguard0): making interface the new active one [ 175.836465][T10168] wireguard0: entered promiscuous mode [ 175.855183][T10168] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 175.910352][ T7514] bond1: (slave bridge2): failed to get link speed/duplex [ 175.960814][T10184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.986591][T10188] gre0 speed is unknown, defaulting to 1000 [ 176.019996][ T7513] bond1: (slave bridge2): failed to get link speed/duplex [ 176.128609][ T7511] bond1: (slave bridge2): failed to get link speed/duplex [ 176.715434][T10213] veth0_macvtap: left allmulticast mode [ 176.760665][T10213] bond0: left promiscuous mode [ 176.773617][T10213] vlan0: left promiscuous mode [ 176.808962][ T7261] gre0 speed is unknown, defaulting to 1000 [ 176.822456][ T7261] syz1: Port: 1 Link DOWN [ 176.846515][T10226] tipc: Enabled bearer , priority 0 [ 176.860670][ T7516] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.878932][ T7516] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.890048][ T7516] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.899288][ T7516] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.909606][ T7516] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.920464][ T7516] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 176.932100][T10215] syzkaller0: entered promiscuous mode [ 176.937607][T10215] syzkaller0: entered allmulticast mode [ 176.970549][ T7261] gre0 speed is unknown, defaulting to 1000 [ 176.981687][ T7516] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.990825][ T7516] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.000712][ T7516] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.010295][ T7516] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.021432][ T7516] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.030639][ T7516] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 177.048789][T10223] tipc: Resetting bearer [ 177.086038][T10214] tipc: Resetting bearer [ 177.107174][T10214] tipc: Disabling bearer [ 177.267364][T10240] syzkaller0: entered promiscuous mode [ 177.289786][T10240] syzkaller0: entered allmulticast mode [ 177.353744][T10240] netlink: 'syz.0.1030': attribute type 4 has an invalid length. [ 177.738349][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 177.746395][ C1] lec:lec_tx_timeout: lec0 [ 177.751095][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 178.001792][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 178.218520][T10280] gre0 speed is unknown, defaulting to 1000 [ 178.293706][T10284] Bluetooth: MGMT ver 1.23 [ 178.362488][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 178.722895][T10301] netlink: 64134 bytes leftover after parsing attributes in process `syz.4.1050'. [ 178.737158][T10303] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 178.751157][T10303] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 178.772763][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 178.938435][T10300] hsr_slave_1 (unregistering): left promiscuous mode [ 179.074949][T10318] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 179.084552][T10318] CPU: 1 UID: 0 PID: 10318 Comm: syz.0.1054 Not tainted syzkaller #0 PREEMPT(full) [ 179.084577][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.084595][T10318] Call Trace: [ 179.084603][T10318] [ 179.084612][T10318] dump_stack_lvl+0xe8/0x150 [ 179.084655][T10318] sysfs_warn_dup+0x8e/0xa0 [ 179.084685][T10318] sysfs_do_create_link_sd+0xc0/0x110 [ 179.084717][T10318] device_add_class_symlinks+0x1cf/0x240 [ 179.084749][T10318] device_add+0x475/0xb70 [ 179.084780][T10318] wiphy_register+0x1dc5/0x2dc0 [ 179.084819][T10318] ? __pfx_wiphy_register+0x10/0x10 [ 179.084839][T10318] ? __pfx_netdev_run_todo+0x10/0x10 [ 179.084859][T10318] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 179.084890][T10318] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 179.084927][T10318] ieee80211_register_hw+0x3cb7/0x4980 [ 179.084948][T10318] ? __lock_acquire+0x6b5/0x2cf0 [ 179.084988][T10318] ? ieee80211_register_hw+0x1841/0x4980 [ 179.085036][T10318] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 179.085065][T10318] ? __hrtimer_setup+0x181/0x200 [ 179.085093][T10318] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 179.085116][T10318] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 179.085177][T10318] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 179.085204][T10318] ? kstrndup+0xbf/0x160 [ 179.085241][T10318] hwsim_new_radio_nl+0xf6a/0x1c00 [ 179.085294][T10318] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.085333][T10318] ? rcu_is_watching+0x15/0xb0 [ 179.085361][T10318] ? trace_kmalloc+0x2a/0x110 [ 179.085390][T10318] ? __nla_parse+0x40/0x60 [ 179.085417][T10318] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 179.085438][T10318] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 179.085476][T10318] genl_family_rcv_msg_doit+0x22a/0x330 [ 179.085507][T10318] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 179.085544][T10318] ? bpf_lsm_capable+0x9/0x20 [ 179.085570][T10318] ? security_capable+0x7e/0x2c0 [ 179.085603][T10318] genl_rcv_msg+0x61c/0x7a0 [ 179.085629][T10318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.085647][T10318] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.085674][T10318] ? __lock_acquire+0x6b5/0x2cf0 [ 179.085709][T10318] netlink_rcv_skb+0x232/0x4b0 [ 179.085735][T10318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.085756][T10318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.085798][T10318] ? down_read+0x272/0x2e0 [ 179.085817][T10318] ? genl_rcv+0xd/0x40 [ 179.085836][T10318] genl_rcv+0x28/0x40 [ 179.085852][T10318] netlink_unicast+0x80f/0x9b0 [ 179.085883][T10318] ? __pfx_netlink_unicast+0x10/0x10 [ 179.085908][T10318] ? netlink_sendmsg+0x650/0xb40 [ 179.085931][T10318] ? skb_put+0x11b/0x210 [ 179.085960][T10318] netlink_sendmsg+0x813/0xb40 [ 179.085995][T10318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.086024][T10318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 179.086044][T10318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.086069][T10318] ____sys_sendmsg+0x972/0x9f0 [ 179.086106][T10318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.086143][T10318] ? import_iovec+0x73/0xa0 [ 179.086170][T10318] ___sys_sendmsg+0x2a5/0x360 [ 179.086204][T10318] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.086268][T10318] ? __fget_files+0x2a/0x420 [ 179.086285][T10318] ? __fget_files+0x3a0/0x420 [ 179.086312][T10318] __x64_sys_sendmsg+0x1bd/0x2a0 [ 179.086343][T10318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.086369][T10318] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 179.086425][T10318] ? do_user_addr_fault+0xc6f/0x1340 [ 179.086463][T10318] do_syscall_64+0x14d/0xf80 [ 179.086482][T10318] ? trace_irq_disable+0x3b/0x150 [ 179.086504][T10318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.086524][T10318] ? clear_bhb_loop+0x40/0x90 [ 179.086549][T10318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.086569][T10318] RIP: 0033:0x7f026539c819 [ 179.086593][T10318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.086609][T10318] RSP: 002b:00007f02635b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.086636][T10318] RAX: ffffffffffffffda RBX: 00007f0265616180 RCX: 00007f026539c819 [ 179.086650][T10318] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 179.086662][T10318] RBP: 00007f0265432c91 R08: 0000000000000000 R09: 0000000000000000 [ 179.086674][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.086684][T10318] R13: 00007f0265616218 R14: 00007f0265616180 R15: 00007ffd415f0288 [ 179.086718][T10318] [ 179.523856][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 179.553729][T10325] netlink: 'syz.3.1056': attribute type 15 has an invalid length. [ 179.562902][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 180.105093][T10349] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1063'. [ 180.351353][T10371] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1064'. [ 180.393704][T10368] gre0 speed is unknown, defaulting to 1000 [ 180.514995][T10378] x_tables: unsorted underflow at hook 4 [ 180.797080][T10386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.817267][T10386] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.861768][T10386] net_ratelimit: 5 callbacks suppressed [ 180.861778][T10386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.932146][T10401] netlink: 'syz.1.1072': attribute type 13 has an invalid length. [ 180.969823][T10401] netlink: 'syz.1.1072': attribute type 17 has an invalid length. [ 181.006184][T10401] netlink: 'syz.1.1072': attribute type 27 has an invalid length. [ 182.290709][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 182.354744][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 182.714346][T10463] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 182.885256][T10465] gre0 speed is unknown, defaulting to 1000 [ 183.080130][T10480] Cannot find del_set index 4 as target [ 183.718306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5970 ms [ 183.726372][ C1] lec:lec_tx_timeout: lec0 [ 183.731039][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 183.975529][T10513] bridge2: entered promiscuous mode [ 184.062996][T10472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.102514][T10477] gre0 speed is unknown, defaulting to 1000 [ 184.171918][T10516] ÿÿwüZÙ: renamed from bond_slave_0 [ 184.693938][T10552] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 185.259232][T10573] __nla_validate_parse: 1 callbacks suppressed [ 185.259250][T10573] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1103'. [ 185.292394][T10572] openvswitch: netlink: IPv4 tun info is not correct [ 185.308108][T10573] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1103'. [ 185.322037][T10573] netlink: 'syz.4.1103': attribute type 6 has an invalid length. [ 185.353430][T10572] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1104'. [ 185.378652][T10573] netlink: 'syz.4.1103': attribute type 6 has an invalid length. [ 185.583989][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 186.004286][T10615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1113'. [ 186.370333][T10633] gre0 speed is unknown, defaulting to 1000 [ 186.827907][T10664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 186.857062][T10664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 187.051600][T10668] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 187.067233][T10668] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 187.078009][T10678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1131'. [ 187.261306][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 187.482547][T10700] netlink: 'syz.2.1137': attribute type 2 has an invalid length. [ 187.580757][T10705] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 187.620196][T10697] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 187.899565][T10720] syzkaller1: entered promiscuous mode [ 187.910314][T10720] syzkaller1: entered allmulticast mode [ 187.934480][T10722] netlink: 'syz.0.1141': attribute type 1 has an invalid length. [ 188.009318][T10722] bond5: (slave bridge3): making interface the new active one [ 188.020218][T10722] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 188.266996][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 188.407175][T10745] ipvlan3: entered promiscuous mode [ 188.435363][T10745] team0: Device ipvlan3 failed to register rx_handler [ 188.649277][T10765] tipc: Enabling of bearer rejected, failed to enable media [ 188.738329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 188.746386][ C1] lec:lec_tx_timeout: lec0 [ 188.751709][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 189.039472][T10785] veth7: entered promiscuous mode [ 189.207074][T10791] xt_hashlimit: max too large, truncated to 1048576 [ 189.229159][T10791] xt_bpf: check failed: parse error [ 189.370880][T10803] netlink: 'syz.1.1164': attribute type 13 has an invalid length. [ 189.382252][T10803] netlink: 'syz.1.1164': attribute type 17 has an invalid length. [ 189.402226][T10803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.615953][T10812] gre0 speed is unknown, defaulting to 1000 [ 190.342575][T10856] FAULT_INJECTION: forcing a failure. [ 190.342575][T10856] name failslab, interval 1, probability 0, space 0, times 1 [ 190.404648][T10856] CPU: 1 UID: 0 PID: 10856 Comm: syz.0.1179 Not tainted syzkaller #0 PREEMPT(full) [ 190.404673][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.404684][T10856] Call Trace: [ 190.404692][T10856] [ 190.404700][T10856] dump_stack_lvl+0xe8/0x150 [ 190.404731][T10856] should_fail_ex+0x412/0x560 [ 190.404766][T10856] should_failslab+0xa8/0x100 [ 190.404793][T10856] __kmalloc_noprof+0xe8/0x760 [ 190.404815][T10856] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 190.404842][T10856] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 190.404869][T10856] genl_family_rcv_msg_doit+0xd9/0x330 [ 190.404895][T10856] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.404921][T10856] ? apparmor_capable+0x126/0x170 [ 190.404945][T10856] ? bpf_lsm_capable+0x9/0x20 [ 190.404971][T10856] ? security_capable+0x7e/0x2c0 [ 190.405004][T10856] genl_rcv_msg+0x61c/0x7a0 [ 190.405028][T10856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.405046][T10856] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 190.405068][T10856] ? __lock_acquire+0x6b5/0x2cf0 [ 190.405103][T10856] netlink_rcv_skb+0x232/0x4b0 [ 190.405127][T10856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.405147][T10856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.405188][T10856] ? down_read+0x272/0x2e0 [ 190.405207][T10856] ? genl_rcv+0xd/0x40 [ 190.405226][T10856] genl_rcv+0x28/0x40 [ 190.405242][T10856] netlink_unicast+0x80f/0x9b0 [ 190.405272][T10856] ? __pfx_netlink_unicast+0x10/0x10 [ 190.405296][T10856] ? netlink_sendmsg+0x650/0xb40 [ 190.405320][T10856] ? skb_put+0x11b/0x210 [ 190.405349][T10856] netlink_sendmsg+0x813/0xb40 [ 190.405391][T10856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.405420][T10856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 190.405439][T10856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.405465][T10856] ____sys_sendmsg+0x972/0x9f0 [ 190.405525][T10856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.405564][T10856] ? import_iovec+0x73/0xa0 [ 190.405592][T10856] ___sys_sendmsg+0x2a5/0x360 [ 190.405627][T10856] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.405693][T10856] ? __fget_files+0x2a/0x420 [ 190.405711][T10856] ? __fget_files+0x3a0/0x420 [ 190.405740][T10856] __x64_sys_sendmsg+0x1bd/0x2a0 [ 190.405772][T10856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.405812][T10856] ? __pfx_ksys_write+0x10/0x10 [ 190.405847][T10856] do_syscall_64+0x14d/0xf80 [ 190.405866][T10856] ? trace_irq_disable+0x3b/0x150 [ 190.405883][T10856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.405902][T10856] ? clear_bhb_loop+0x40/0x90 [ 190.405927][T10856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.405945][T10856] RIP: 0033:0x7f026539c819 [ 190.405963][T10856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.405989][T10856] RSP: 002b:00007f02635f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.406008][T10856] RAX: ffffffffffffffda RBX: 00007f0265615fa0 RCX: 00007f026539c819 [ 190.406021][T10856] RDX: 0000000000008000 RSI: 0000200000000e80 RDI: 0000000000000005 [ 190.406032][T10856] RBP: 00007f02635f6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.406042][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.406052][T10856] R13: 00007f0265616038 R14: 00007f0265615fa0 R15: 00007ffd415f0288 [ 190.406081][T10856] [ 190.815013][T10860] __nla_validate_parse: 7 callbacks suppressed [ 190.815043][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 191.025904][T10860] team1: entered promiscuous mode [ 191.033358][T10860] team1: entered allmulticast mode [ 191.048255][T10860] 8021q: adding VLAN 0 to HW filter on device team1 [ 191.080235][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1178'. [ 191.092887][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1183'. [ 191.139126][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1178'. [ 191.303727][T10868] syzkaller0: entered promiscuous mode [ 191.360269][T10868] syzkaller0: entered allmulticast mode [ 191.419358][T10891] sctp: [Deprecated]: syz.4.1186 (pid 10891) Use of int in max_burst socket option. [ 191.419358][T10891] Use struct sctp_assoc_value instead [ 192.457882][T10941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1194'. [ 193.043464][T10935] gre0 speed is unknown, defaulting to 1000 [ 193.136225][T10952] ªªªªª: renamed from virt_wifi0 [ 193.176741][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 193.280766][T10944] bond3: invalid ARP target 0.0.0.0 specified for addition [ 193.303861][T10961] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 193.310895][T10944] bond3: option arp_ip_target: invalid value (0) [ 193.322384][T10961] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1199'. [ 193.335423][T10944] bond3 (unregistering): Released all slaves [ 193.355538][T10961] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1199'. [ 193.365843][T10961] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1199'. [ 193.459321][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1199'. [ 193.698642][T10975] xt_TCPMSS: Only works on TCP SYN packets [ 193.745342][T10969] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.832871][T10969] tipc: Enabled bearer , priority 0 [ 193.862273][T10972] syzkaller0: entered promiscuous mode [ 193.869392][T10972] syzkaller0: entered allmulticast mode [ 193.903719][T10966] tipc: Resetting bearer [ 193.943371][T10966] tipc: Disabling bearer [ 193.982648][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 193.994152][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270987][T11003] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 194.462894][T11008] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 194.475919][T11021] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 194.496540][T11008] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 194.587711][T11017] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 194.598301][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 194.606327][ C1] lec:lec_tx_timeout: lec0 [ 194.611306][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.619162][T11003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.695611][T11025] nftables ruleset with unbound chain [ 194.942164][T11045] netlink: 'syz.2.1224': attribute type 30 has an invalid length. [ 194.965169][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.980752][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.990842][ T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.000490][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.033647][T11045] bond6: option arp_missed_max: invalid value (0) [ 195.040314][T11045] bond6: option arp_missed_max: allowed values 1 - 255 [ 195.050876][T11045] bond6 (unregistering): Released all slaves [ 195.075884][ T49] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.084956][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.094776][ T49] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.105921][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.146757][T11048] gre0 speed is unknown, defaulting to 1000 [ 195.353576][T11059] tipc: Enabling of bearer rejected, failed to enable media [ 195.664614][T11080] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 195.773098][T11080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.819722][T11087] __nla_validate_parse: 7 callbacks suppressed [ 195.819737][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 196.057464][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 196.059485][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 196.064482][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 196.167569][T11104] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 196.681007][T11110] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1240'. [ 196.722189][T11110] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1240'. [ 197.304609][T11129] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 197.354148][T11129] bond3 (unregistering): Released all slaves [ 198.078168][T11156] gre0 speed is unknown, defaulting to 1000 [ 198.266200][T11174] bond3: option lacp_rate: invalid value (128) [ 198.282158][T11174] bond3 (unregistering): Released all slaves [ 198.734611][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 198.919219][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 199.618350][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 199.626472][ C1] lec:lec_tx_timeout: lec0 [ 199.631237][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 200.565596][T11200] syzkaller0: entered promiscuous mode [ 200.571943][T11200] syzkaller0: entered allmulticast mode [ 200.579505][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 200.762293][T11230] netlink: 'syz.0.1265': attribute type 10 has an invalid length. [ 200.775176][T11230] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 200.942688][T11240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1267'. [ 200.976949][T11239] gre0 speed is unknown, defaulting to 1000 [ 201.030499][T11242] tun0: tun_chr_ioctl cmd 1074812118 [ 201.038679][T11242] tun0: tun_chr_ioctl cmd 1074033169 [ 201.786115][ T7514] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.798079][ T7514] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.811473][ T9784] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.862705][ T9784] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.953937][T11272] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 201.962058][T11272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1273'. [ 202.012793][T11274] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1274'. [ 202.059745][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 202.093487][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'. [ 202.173926][T11278] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 202.214022][T11280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1276'. [ 202.228621][T11278] netlink: 'syz.4.1277': attribute type 2 has an invalid length. [ 202.236372][T11278] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 202.285824][T11285] netlink: 165876 bytes leftover after parsing attributes in process `syz.4.1277'. [ 202.322989][T11278] netlink: 'syz.4.1277': attribute type 3 has an invalid length. [ 202.334879][T11285] openvswitch: netlink: Key type 30 is not supported [ 202.763378][T11318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1286'. [ 202.773561][T11318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1286'. [ 202.904794][T11326] syzkaller1: entered promiscuous mode [ 202.910422][T11326] syzkaller1: entered allmulticast mode [ 203.199245][T11333] bond4: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 203.260133][ T7261] IPVS: starting estimator thread 0... [ 203.370965][T11340] IPVS: using max 31 ests per chain, 74400 per kthread [ 204.648353][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 204.656443][ C1] lec:lec_tx_timeout: lec0 [ 204.661076][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 204.921837][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 205.029364][T11363] syzkaller0: entered promiscuous mode [ 205.034935][T11363] syzkaller0: entered allmulticast mode [ 205.693300][T11312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.115549][T11386] vlan2: entered promiscuous mode [ 206.133991][T11386] bridge0: entered promiscuous mode [ 206.172376][T11390] syzkaller0: entered promiscuous mode [ 206.177922][T11390] syzkaller0: entered allmulticast mode [ 206.435551][T11410] __nla_validate_parse: 1 callbacks suppressed [ 206.435569][T11410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1308'. [ 206.451887][T11411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1308'. [ 206.488774][T11410] netlink: 16628 bytes leftover after parsing attributes in process `syz.4.1308'. [ 206.508834][T11409] lo speed is unknown, defaulting to 1000 [ 206.516075][T11409] lo speed is unknown, defaulting to 1000 [ 206.537422][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 206.586560][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 206.599263][T11409] lo speed is unknown, defaulting to 1000 [ 206.637885][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 206.657085][T11418] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 207.119735][T11437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1316'. [ 207.373593][T11459] gre0 speed is unknown, defaulting to 1000 [ 207.673596][T11409] infiniband sqz0: set active [ 207.679702][T11409] infiniband sqz0: added lo [ 207.685614][ T7261] lo speed is unknown, defaulting to 1000 [ 207.775338][T11409] RDS/IB: sqz0: added [ 207.790088][T11409] smc: adding ib device sqz0 with port count 1 [ 207.807220][T11409] smc: ib device sqz0 port 1 has no pnetid [ 207.819813][ T29] lo speed is unknown, defaulting to 1000 [ 207.828882][T11409] lo speed is unknown, defaulting to 1000 [ 208.101298][T11468] xt_hashlimit: size too large, truncated to 1048576 [ 208.540484][T11409] lo speed is unknown, defaulting to 1000 [ 208.773507][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 208.821180][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 208.862357][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 209.041230][T11504] netlink: 'syz.0.1330': attribute type 32 has an invalid length. [ 209.196274][T11409] lo speed is unknown, defaulting to 1000 [ 209.481692][T11515] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 209.592138][T11515] bond7: (slave lo): Enslaving as an active interface with an up link [ 209.617892][T11515] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 209.668310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.676387][ C1] lec:lec_tx_timeout: lec0 [ 209.680987][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.705901][T11409] lo speed is unknown, defaulting to 1000 [ 209.834941][T11526] netlink: 'syz.0.1337': attribute type 7 has an invalid length. [ 209.848723][T11526] netlink: 'syz.0.1337': attribute type 8 has an invalid length. [ 209.877674][T11528] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 210.318842][T11557] syzkaller1: entered promiscuous mode [ 210.328734][T11557] syzkaller1: entered allmulticast mode [ 210.349370][T11557] bridge_slave_0: left allmulticast mode [ 210.370118][T11557] bridge_slave_0: left promiscuous mode [ 210.375903][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.418905][T11567] Bluetooth: MGMT ver 1.23 [ 210.457980][T11557] bridge_slave_1: left allmulticast mode [ 210.482791][T11557] bridge_slave_1: left promiscuous mode [ 210.510911][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.537722][T11557] bond0: (slave 30ÿÿwüZÙ): Releasing backup interface [ 210.563656][T11557] bond0: (slave bond_slave_1): Releasing backup interface [ 210.575323][T11557] team0: Failed to send options change via netlink (err -105) [ 210.583339][T11557] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 210.593041][T11557] team0: Port device team_slave_0 removed [ 210.600152][T11557] team0: Failed to send options change via netlink (err -105) [ 210.607745][T11557] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 210.617516][T11557] team0: Port device team_slave_1 removed [ 210.623862][T11557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.640537][T11409] lo speed is unknown, defaulting to 1000 [ 210.640557][T11552] tc_dump_action: action bad kind [ 211.304323][T11409] lo speed is unknown, defaulting to 1000 [ 211.443600][T11627] __nla_validate_parse: 10 callbacks suppressed [ 211.443618][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1362'. [ 211.571803][T11631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.581336][T11638] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1367'. [ 211.600270][T11631] team0: Port device bond3 added [ 211.751848][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1368'. [ 211.956039][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 212.220911][T11681] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1376'. [ 212.306803][T11671] syzkaller0: entered promiscuous mode [ 212.312731][T11671] syzkaller0: entered allmulticast mode [ 212.320286][T11690] siw: device registration error -23 [ 212.345374][T11689] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1377'. [ 213.694578][T11695] syzkaller1: entered promiscuous mode [ 213.700767][T11695] syzkaller1: entered allmulticast mode [ 213.869787][T11715] sctp: [Deprecated]: syz.0.1383 (pid 11715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.869787][T11715] Use struct sctp_sack_info instead [ 213.975777][T11714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1384'. [ 214.069561][T11729] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 214.096646][T11728] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1387'. [ 214.198670][T11732] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 214.321923][T11732] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.337690][T11739] bond5: (slave geneve3): making interface the new active one [ 214.352546][T11739] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 214.384400][T11735] syzkaller1: entered promiscuous mode [ 214.394004][T11735] syzkaller1: entered allmulticast mode [ 214.492164][T11747] x_tables: duplicate underflow at hook 1 [ 214.531514][T11747] bond6 (unregistering): Released all slaves [ 214.556657][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 214.597359][T11751] syzkaller0: entered promiscuous mode [ 214.603722][T11751] syzkaller0: entered allmulticast mode [ 214.688301][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.696375][ C1] lec:lec_tx_timeout: lec0 [ 214.701293][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.967185][T11768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.245402][T11785] netlink: 'syz.2.1410': attribute type 1 has an invalid length. [ 215.409522][T11789] gretap1: entered allmulticast mode [ 215.420386][T11789] bond6: (slave gretap1): making interface the new active one [ 215.432253][T11789] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 215.865388][T11806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1417'. [ 216.002890][T11812] gre0 speed is unknown, defaulting to 1000 [ 216.806813][T11838] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 216.839732][T11839] __nla_validate_parse: 3 callbacks suppressed [ 216.839749][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 216.909185][T11839] vlan2: entered allmulticast mode [ 216.914517][T11839] bridge2: entered allmulticast mode [ 216.925628][T11812] lo speed is unknown, defaulting to 1000 [ 217.018232][T11842] bridge2: port 1(bond4) entered blocking state [ 217.024797][T11842] bridge2: port 1(bond4) entered disabled state [ 217.032377][T11842] bond4: entered allmulticast mode [ 217.040637][T11842] bond4: entered promiscuous mode [ 217.191137][T11850] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1430'. [ 217.201196][T11850] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 217.410503][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1433'. [ 218.563791][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 218.937356][T11909] netlink: 'syz.4.1450': attribute type 9 has an invalid length. [ 218.959190][T11909] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1450'. [ 219.182299][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 219.200413][T11920] block nbd0: server does not support multiple connections per device. [ 219.215076][T11920] block nbd0: shutting down sockets [ 219.222332][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 219.233818][T11928] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 219.246654][T11928] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1454'. [ 219.335175][T11931] netlink: 'syz.4.1454': attribute type 1 has an invalid length. [ 219.352922][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'. [ 219.379899][T11931] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1454'. [ 219.427571][T11932] netlink: 'syz.3.1456': attribute type 2 has an invalid length. [ 219.622585][T11937] ip6gre3: entered promiscuous mode [ 219.692787][T11944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.718462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 219.726501][ C1] lec:lec_tx_timeout: lec0 [ 219.731185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 219.754802][T11944] team0: No ports can be present during mode change [ 219.931420][T11959] netlink: 'syz.4.1464': attribute type 58 has an invalid length. [ 219.954954][T11960] netlink: 'syz.3.1463': attribute type 10 has an invalid length. [ 219.963986][T11960] bond0: (slave wlan1): Opening slave failed [ 220.390616][T11983] No such timeout policy "syz1" [ 220.404319][T11989] netlink: 'syz.3.1473': attribute type 1 has an invalid length. [ 220.695454][T12006] gre0 speed is unknown, defaulting to 1000 [ 220.710308][T12005] syzkaller0: entered promiscuous mode [ 220.715926][T12005] syzkaller0: entered allmulticast mode [ 221.352069][T12039] macvtap0: entered promiscuous mode [ 221.357583][T12039] macvtap0: entered allmulticast mode [ 221.378908][T12039] veth0_macvtap: entered allmulticast mode [ 221.436159][T12006] lo speed is unknown, defaulting to 1000 [ 221.464070][T12045] veth1_macvtap: left promiscuous mode [ 221.646795][T12056] nbd: must specify a device to reconfigure [ 221.841610][ T9784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.854151][ T9784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.188214][T12076] netlink: 'syz.2.1497': attribute type 83 has an invalid length. [ 222.689330][T12095] netlink: 'syz.3.1504': attribute type 11 has an invalid length. [ 222.844158][T12101] __nla_validate_parse: 13 callbacks suppressed [ 222.844175][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 222.860266][T12097] gre0 speed is unknown, defaulting to 1000 [ 223.365722][T12097] lo speed is unknown, defaulting to 1000 [ 223.476272][T12113] gre0 speed is unknown, defaulting to 1000 [ 223.889859][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 223.919073][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 223.940738][T12140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1515'. [ 223.953952][T12143] Unsupported ieee802154 address type: 0 [ 224.279677][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 224.342363][T12157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1517'. [ 224.411201][T12157] vlan2: entered promiscuous mode [ 224.531095][T12166] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1522'. [ 224.587496][T12113] lo speed is unknown, defaulting to 1000 [ 224.738293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.746423][ C1] lec:lec_tx_timeout: lec0 [ 224.758352][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 224.787835][T12174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1526'. [ 225.321755][T12197] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 225.330722][T12196] tipc: Enabled bearer , priority 0 [ 225.349338][T12193] syzkaller0: entered promiscuous mode [ 225.354988][T12193] syzkaller0: entered allmulticast mode [ 225.361354][T12197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1531'. [ 225.393161][T12193] tipc: Resetting bearer [ 225.434363][T12191] tipc: Resetting bearer [ 225.480666][T12191] tipc: Disabling bearer [ 225.765197][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 226.109122][T12128] infiniband syz2: set down [ 226.123101][T12128] infiniband syz2: added syzkaller0 [ 226.269821][T12128] RDS/IB: syz2: added [ 226.274174][T12128] smc: adding ib device syz2 with port count 1 [ 226.294459][T12128] smc: ib device syz2 port 1 has no pnetid [ 226.479742][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.496083][T12232] tipc: Enabled bearer , priority 0 [ 226.588996][T12232] tipc: Disabling bearer [ 226.789956][T12251] syzkaller1: entered promiscuous mode [ 226.795478][T12251] syzkaller1: entered allmulticast mode [ 226.929793][T12257] netlink: 'syz.2.1550': attribute type 7 has an invalid length. [ 227.735939][T12295] can: request_module (can-proto-3) failed. [ 228.125302][T12310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.205365][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.213132][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.291752][T12311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.303353][T12311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.369316][ T29] lo speed is unknown, defaulting to 1000 [ 228.399104][ T29] sqz0: Port: 1 Link DOWN [ 228.435379][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.468197][ T29] lo speed is unknown, defaulting to 1000 [ 228.475172][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.493810][ T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.507672][ T49] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.519341][T12322] __nla_validate_parse: 10 callbacks suppressed [ 228.519358][T12322] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1571'. [ 228.536545][T12322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1571'. [ 228.546419][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 228.556961][T12324] netlink: 'syz.2.1572': attribute type 10 has an invalid length. [ 228.556998][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 228.581860][T12324] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1572'. [ 228.861743][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 228.878689][T12336] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 228.974994][ T7513] smc: removing ib device syz2 [ 229.211869][T12350] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1580'. [ 229.471303][T12360] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 229.595537][T12363] gre0 speed is unknown, defaulting to 1000 [ 229.907846][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 230.322065][T12363] lo speed is unknown, defaulting to 1000 [ 230.647996][T12404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.674021][T12406] netlink: 'syz.4.1598': attribute type 9 has an invalid length. [ 230.701539][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1599'. [ 230.818109][T12404] syzkaller1: entered promiscuous mode [ 230.826806][T12404] syzkaller1: entered allmulticast mode [ 230.956442][T12404] macvlan1: mtu less than device minimum [ 231.088285][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 231.096363][ C1] lec:lec_tx_timeout: lec0 [ 231.101036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.119454][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 231.236039][T12402] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.244263][T12401] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.397618][T12438] netlink: 'syz.1.1606': attribute type 1 has an invalid length. [ 231.511227][T12440] netlink: 'syz.4.1607': attribute type 1 has an invalid length. [ 231.519867][T12440] netlink: 'syz.4.1607': attribute type 1 has an invalid length. [ 231.937370][T12464] syzkaller0: entered promiscuous mode [ 231.943038][T12464] syzkaller0: entered allmulticast mode [ 231.959097][ T30] audit: type=1107 audit(1775977039.587:5): pid=12463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 232.598007][ T7513] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.589043][ T7513] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.601669][ T7513] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.650454][ T7513] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.760092][T12534] macsec2: entered promiscuous mode [ 233.939207][T12544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.158533][T12552] __nla_validate_parse: 7 callbacks suppressed [ 234.158551][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1639'. [ 234.254326][T12552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.337888][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 234.471815][T12572] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1643'. [ 234.514086][T12576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.629881][T12581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1645'. [ 234.700340][T12584] tipc: Enabled bearer , priority 0 [ 234.707754][T12584] syzkaller0: entered promiscuous mode [ 234.713578][T12584] syzkaller0: entered allmulticast mode [ 234.752046][T12584] tipc: Resetting bearer [ 234.769400][T12583] tipc: Resetting bearer [ 234.837683][T12583] tipc: Disabling bearer [ 235.591326][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 235.843532][T12636] sctp: [Deprecated]: syz.1.1661 (pid 12636) Use of int in max_burst socket option. [ 235.843532][T12636] Use struct sctp_assoc_value instead [ 235.917956][T12645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.127776][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 236.196400][T12662] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1666'. [ 236.427961][T12662] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 236.460557][T12662] syzkaller0: entered promiscuous mode [ 236.466158][T12662] syzkaller0: entered allmulticast mode [ 236.679305][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.687893][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.760966][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.799227][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.838350][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 236.846382][ C1] lec:lec_tx_timeout: lec0 [ 236.851409][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 237.040413][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'. [ 237.231295][T12723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 237.530867][T12741] gre0 speed is unknown, defaulting to 1000 [ 237.862848][T12749] gre0 speed is unknown, defaulting to 1000 [ 237.869950][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 237.901014][T12755] netlink: 'syz.2.1693': attribute type 12 has an invalid length. [ 237.920190][T12755] netlink: 'syz.2.1693': attribute type 11 has an invalid length. [ 237.931169][T12741] lo speed is unknown, defaulting to 1000 [ 238.172520][T12760] veth1: entered allmulticast mode [ 238.292796][T12762] syzkaller0: entered promiscuous mode [ 238.306420][T12762] syzkaller0: entered allmulticast mode [ 238.418200][T12749] lo speed is unknown, defaulting to 1000 [ 238.710066][T12779] RDS: rds_bind could not find a transport for ::ffff:172.20.20.100, load rds_tcp or rds_rdma? [ 238.889221][T12788] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 238.999711][T12794] TCP: TCP_TX_DELAY enabled [ 239.023561][T12796] netlink: 'syz.3.1706': attribute type 8 has an invalid length. [ 239.290672][T12804] __nla_validate_parse: 4 callbacks suppressed [ 239.290689][T12804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1708'. [ 239.504333][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 239.692706][T12820] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 240.164827][T12820] bond4 (unregistering): Released all slaves [ 240.567679][T12850] gre0 speed is unknown, defaulting to 1000 [ 240.732646][T12858] netlink: 'syz.4.1716': attribute type 2 has an invalid length. [ 240.804770][T12858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1716'. [ 241.006855][T12875] syzkaller1: entered promiscuous mode [ 241.008185][T12878] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.021598][T12875] syzkaller1: entered allmulticast mode [ 241.028525][T12877] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.041454][T12875] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1724'. [ 241.051143][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 241.374003][T12850] lo speed is unknown, defaulting to 1000 [ 241.380578][T12888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1728'. [ 241.393388][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 241.461653][T12890] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1729'. [ 241.586453][T12894] gre0 speed is unknown, defaulting to 1000 [ 241.620877][T12866] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 241.633309][T12899] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 241.913765][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 242.054981][T12919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1737'. [ 242.066337][T12911] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 242.113781][T12911] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 242.181487][T12894] lo speed is unknown, defaulting to 1000 [ 242.598292][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 242.606355][ C1] lec:lec_tx_timeout: lec0 [ 242.611368][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.919740][T12947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.950288][T12944] bond6 (unregistering): Released all slaves [ 243.177566][T12953] syzkaller0: entered promiscuous mode [ 243.191732][T12953] syzkaller0: entered allmulticast mode [ 243.211145][T12953] tipc: Enabled bearer , priority 0 [ 243.228048][T12952] tipc: Resetting bearer [ 243.264930][T12952] tipc: Disabling bearer [ 243.452587][T12966] netlink: 'syz.3.1747': attribute type 30 has an invalid length. [ 243.576803][T12966] bond6: option arp_missed_max: invalid value (0) [ 243.584286][T12966] bond6: option arp_missed_max: allowed values 1 - 255 [ 243.595065][T12966] bond6 (unregistering): Released all slaves [ 243.773308][T12978] gre0 speed is unknown, defaulting to 1000 [ 244.100515][T12978] lo speed is unknown, defaulting to 1000 [ 244.133746][T12993] netlink: 'syz.0.1755': attribute type 4 has an invalid length. [ 244.193124][T12990] gre0 speed is unknown, defaulting to 1000 [ 244.552378][T12990] lo speed is unknown, defaulting to 1000 [ 244.605987][T13007] sctp: [Deprecated]: syz.4.1761 (pid 13007) Use of int in maxseg socket option. [ 244.605987][T13007] Use struct sctp_assoc_value instead [ 244.820788][T13005] gre0 speed is unknown, defaulting to 1000 [ 245.404767][T13024] netlink: 'syz.3.1764': attribute type 10 has an invalid length. [ 245.438947][T13024] __nla_validate_parse: 9 callbacks suppressed [ 245.438965][T13024] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1764'. [ 245.505301][T13027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1767'. [ 245.573925][T13005] lo speed is unknown, defaulting to 1000 [ 245.944022][T13039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.959613][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 245.972597][T13039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.107904][T13049] netlink: 'syz.3.1773': attribute type 13 has an invalid length. [ 246.116613][T13049] netlink: 'syz.3.1773': attribute type 17 has an invalid length. [ 246.176778][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 246.261338][T13052] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 246.310259][T13049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.319971][T13049] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.335466][T13049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.410431][ T7261] lo speed is unknown, defaulting to 1000 [ 246.417459][ T7261] sqz0: Port: 1 Link ACTIVE [ 246.447551][T13052] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 246.492955][ T7262] lo speed is unknown, defaulting to 1000 [ 246.545202][T13062] xt_hashlimit: size too large, truncated to 1048576 [ 246.701887][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1777'. [ 247.239594][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 247.250269][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 247.269051][T13084] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1782'. [ 247.338943][T13090] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 247.338943][T13090] Please contact the netfilter-devel mailing list or update your nftables rules. [ 247.512751][T13099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.628305][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 247.636394][ C1] lec:lec_tx_timeout: lec0 [ 247.641040][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.710551][T13109] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1788'. [ 247.830305][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 247.846407][T13118] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 248.163823][T13136] tipc: Enabled bearer , priority 0 [ 248.182989][T13136] syzkaller0: entered promiscuous mode [ 248.189730][T13136] syzkaller0: entered allmulticast mode [ 248.202012][T13143] RDS: rds_bind could not find a transport for fe80::3d, load rds_tcp or rds_rdma? [ 248.214022][T13136] tipc: Resetting bearer [ 248.234022][T13135] tipc: Resetting bearer [ 248.269669][T13135] tipc: Disabling bearer [ 248.395089][T13151] gre0 speed is unknown, defaulting to 1000 [ 248.484507][T13163] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.835208][T13151] lo speed is unknown, defaulting to 1000 [ 248.965925][T13178] netlink: 'syz.1.1811': attribute type 3 has an invalid length. [ 249.013274][T13176] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 249.450881][T13185] gre0 speed is unknown, defaulting to 1000 [ 249.504695][T13195] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 249.624573][T13195] 8021q: adding VLAN 0 to HW filter on device bond9 [ 249.699288][T13196] bond9: (slave dummy0): making interface the new active one [ 249.739937][T13196] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 249.810251][T13197] gre0 speed is unknown, defaulting to 1000 [ 249.811973][T13185] lo speed is unknown, defaulting to 1000 [ 249.829823][ T9784] bond9: (slave dummy0): link status definitely down, disabling slave [ 249.840165][ T9784] bond9: now running without any active interface! [ 250.388336][T13197] lo speed is unknown, defaulting to 1000 [ 251.014756][T13223] __nla_validate_parse: 9 callbacks suppressed [ 251.014773][T13223] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1822'. [ 251.256728][T13238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.264137][T13238] IPv6: NLM_F_CREATE should be set when creating new route [ 251.271448][T13238] IPv6: NLM_F_CREATE should be set when creating new route [ 251.278800][T13238] IPv6: NLM_F_CREATE should be set when creating new route [ 251.304126][T13238] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1824'. [ 252.273151][T13283] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1839'. [ 252.298381][T13283] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 252.316350][T13283] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1839'. [ 252.348968][T13283] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 252.494753][T13298] gre0 speed is unknown, defaulting to 1000 [ 252.604443][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 252.648352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 252.656418][ C1] lec:lec_tx_timeout: lec0 [ 252.661053][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.755680][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'. [ 252.871945][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 252.970690][T13321] team1: entered promiscuous mode [ 252.975776][T13321] team1: entered allmulticast mode [ 253.008818][T13321] 8021q: adding VLAN 0 to HW filter on device team1 [ 253.119882][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'. [ 253.294505][T13298] lo speed is unknown, defaulting to 1000 [ 253.455708][T13341] sctp: [Deprecated]: syz.2.1857 (pid 13341) Use of int in max_burst socket option deprecated. [ 253.455708][T13341] Use struct sctp_assoc_value instead [ 254.179207][T13360] gre0 speed is unknown, defaulting to 1000 [ 254.557909][T13388] netlink: 'syz.2.1861': attribute type 6 has an invalid length. [ 255.101777][T13404] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 255.137976][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 255.144458][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 255.239447][T13406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.270831][T13408] bond6: entered promiscuous mode [ 255.275900][T13408] bond6: entered allmulticast mode [ 255.282917][T13408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.292572][T13408] team0: Port device bond6 added [ 255.372634][T13408] Cannot find set identified by id 3 to match [ 255.392161][T13406] vxcan3: entered promiscuous mode [ 255.397530][T13406] bond6: (slave vxcan3): refused to change device type [ 255.410055][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 255.428186][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.447273][T13360] lo speed is unknown, defaulting to 1000 [ 255.669243][T13421] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 255.698195][T13426] netlink: 'syz.0.1872': attribute type 1 has an invalid length. [ 255.749695][T13426] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.824037][T13426] bond10: (slave veth19): Enslaving as an active interface with a down link [ 255.889077][T13426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.896217][T13426] bond10: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 255.944800][T13445] netlink: 'syz.3.1876': attribute type 1 has an invalid length. [ 255.980163][T13445] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 256.045581][T13450] sock: sock_timestamping_bind_phc: sock not bind to device [ 256.341684][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 256.487077][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 256.511399][T13474] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1884'. [ 256.838360][T13486] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 256.854535][T13486] bond6 (unregistering): Released all slaves [ 256.901014][T13491] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 256.913123][T13491] bond6 (unregistering): Released all slaves [ 256.960265][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 257.148115][T13501] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1892'. [ 257.235597][T13504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'. [ 257.320318][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1893'. [ 257.329894][T13504] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1893'. [ 257.443562][T13513] netlink: 876 bytes leftover after parsing attributes in process `syz.0.1896'. [ 257.458573][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 257.485850][T13516] TC_ACT_REPEAT abuse ? [ 257.573772][T13522] block nbd0: not configured, cannot reconfigure [ 257.668272][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.676436][ C1] lec:lec_tx_timeout: lec0 [ 257.681128][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.068027][T13540] gre0 speed is unknown, defaulting to 1000 [ 258.330337][T13561] syzkaller0: entered promiscuous mode [ 258.336026][T13561] syzkaller0: entered allmulticast mode [ 258.397142][T13558] geneve4: entered promiscuous mode [ 258.492851][ T7515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.502185][ T7515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.519860][ T7515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.539558][ T7515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.930973][T13598] tipc: New replicast peer: 255.255.255.255 [ 258.955080][T13598] tipc: Enabled bearer , priority 10 [ 259.025266][T13541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.067345][T13599] gre0 speed is unknown, defaulting to 1000 [ 259.170599][T13596] bond7: (slave ip6gretap0): making interface the new active one [ 259.212271][T13596] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 259.235380][T13540] lo speed is unknown, defaulting to 1000 [ 259.508112][T13627] x_tables: duplicate underflow at hook 1 [ 259.839371][T13599] lo speed is unknown, defaulting to 1000 [ 259.948926][ T29] tipc: Node number set to 3553028226 [ 260.769223][T13675] gre0 speed is unknown, defaulting to 1000 [ 260.925670][T13688] ksmbd: Unknown IPC event: 1, ignore. [ 260.934512][T13688] netlink: 'syz.2.1936': attribute type 2 has an invalid length. [ 261.156204][T13695] netlink: 'syz.1.1938': attribute type 5 has an invalid length. [ 261.332713][T13705] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 261.666001][T13719] openvswitch: netlink: IPv4 tun info is not correct [ 261.686963][T13719] netlink: 'syz.1.1943': attribute type 1 has an invalid length. [ 261.752716][T13723] __nla_validate_parse: 7 callbacks suppressed [ 261.752733][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 261.914895][T13728] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.960461][T13728] lo: Caught tx_queue_len zero misconfig [ 261.979181][T13675] lo speed is unknown, defaulting to 1000 [ 262.071274][T13731] IPVS: Error connecting to the multicast addr [ 262.152963][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'. [ 262.292373][T13737] bond8: option min_links: invalid value (18446744073709551612) [ 262.323775][T13737] bond8: option min_links: allowed values 0 - 2147483647 [ 262.355932][T13737] bond8 (unregistering): Released all slaves [ 262.597589][T13756] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 262.654099][T13759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1951'. [ 262.681414][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 262.698286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 262.706329][ C1] lec:lec_tx_timeout: lec0 [ 262.711523][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 262.719877][T13759] netlink: 'syz.3.1951': attribute type 1 has an invalid length. [ 262.835321][T13770] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1953'. [ 262.866930][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 262.934184][T13778] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1955'. [ 262.953191][T13778] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 263.073909][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 263.279745][T13793] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 263.589076][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1962'. [ 263.956756][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 264.132559][T13849] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 264.144104][T13849] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 264.241058][T13850] ipvlan1: entered promiscuous mode [ 264.271798][T13850] ipvlan1: left promiscuous mode [ 264.323744][T13854] IPv6: sit2: Disabled Multicast RS [ 264.534456][ T7514] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.555542][ T7514] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.593210][ T7514] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.623372][ T7514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.115020][T13907] syzkaller0: entered promiscuous mode [ 265.124549][T13907] syzkaller0: entered allmulticast mode [ 265.803783][T13923] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 266.634726][T13923] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 266.721112][T13933] netlink: 'syz.1.1990': attribute type 1 has an invalid length. [ 266.800165][T13935] gretap2: entered allmulticast mode [ 266.813021][T13935] bond7: (slave gretap2): making interface the new active one [ 266.822764][T13935] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 266.928131][T13950] __nla_validate_parse: 7 callbacks suppressed [ 266.928148][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1993'. [ 266.949007][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 266.959092][T13948] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 266.966855][T13948] netlink: 'syz.1.1994': attribute type 2 has an invalid length. [ 266.985611][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 267.023788][T13948] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 267.068749][T13948] netlink: 'syz.1.1994': attribute type 2 has an invalid length. [ 267.233995][T13958] syz_tun: entered allmulticast mode [ 267.351995][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 267.393526][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 267.428717][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 267.497457][T13957] syz_tun: left allmulticast mode [ 267.682575][T13980] netlink: 'syz.0.2002': attribute type 3 has an invalid length. [ 267.718622][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 267.726705][ C1] lec:lec_tx_timeout: lec0 [ 267.731667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.732753][T13980] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2002'. [ 267.771984][T13980] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 267.783887][T13980] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 267.806895][T13980] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 267.831714][T13989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2005'. [ 267.858397][T13992] netlink: 'syz.0.2002': attribute type 13 has an invalid length. [ 267.974383][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2007'. [ 268.084328][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2009'. [ 268.676164][T14048] netlink: 'syz.3.2023': attribute type 1 has an invalid length. [ 268.763627][T14048] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.284357][T14097] netlink: 'syz.4.2040': attribute type 21 has an invalid length. [ 269.294358][T14097] netlink: 'syz.4.2040': attribute type 21 has an invalid length. [ 269.739620][T14106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.899354][ T29] lo speed is unknown, defaulting to 1000 [ 269.905133][ T29] sqz0: Port: 1 Link DOWN [ 269.918629][ T5936] lo speed is unknown, defaulting to 1000 [ 270.613486][T14172] nbd: must specify a size in bytes for the device [ 270.647848][T14174] nbd: must specify a size in bytes for the device [ 270.671341][T14168] gre0 speed is unknown, defaulting to 1000 [ 271.174685][T14190] : entered promiscuous mode [ 271.418950][ T30] audit: type=1800 audit(1775977079.057:6): pid=14211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2068" name=20202020202020203B206672616D65313A2052313D307832303230323030303235373832303230205231303D6670302066702D383D3078323032303230303032353738323032300A31333A2028626629207231203D207231302020202020202020202020202020202020202020203B206672616D65313A2052313D667030205231303D6670300A31343A2028303729207231202B3D202D382020202020202020202020202020202020202020203B206672616D65313A2052313D66702D380A3135 dev="tmpfs" ino=2060 res=0 errno=0 [ 271.701236][T14168] lo speed is unknown, defaulting to 1000 [ 271.927404][T14238] tipc: Enabling of bearer rejected, failed to enable media [ 272.313862][T14256] __nla_validate_parse: 76 callbacks suppressed [ 272.313881][T14256] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2079'. [ 272.709555][T14281] validate_nla: 34 callbacks suppressed [ 272.709573][T14281] netlink: 'syz.0.2086': attribute type 4 has an invalid length. [ 272.738260][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 272.746290][ C1] lec:lec_tx_timeout: lec0 [ 272.751118][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 274.035383][T14319] netlink: 'syz.1.2091': attribute type 24 has an invalid length. [ 274.050928][T14317] netlink: 'syz.0.2092': attribute type 9 has an invalid length. [ 275.676782][T14376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.687002][T14367] gre0 speed is unknown, defaulting to 1000 [ 276.020513][T14378] bond11: option lacp_rate: invalid value (128) [ 276.040722][T14383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2109'. [ 276.058037][T14378] bond11 (unregistering): Released all slaves [ 276.102576][T14367] lo speed is unknown, defaulting to 1000 [ 276.525142][T14406] bond9: Removing last ns target with arp_interval on [ 276.627392][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2119'. [ 276.777053][T14415] syz.3.2119 (14415) used obsolete PPPIOCDETACH ioctl [ 277.282345][T14440] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 277.478163][T14447] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2130'. [ 277.489729][T14447] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2130'. [ 277.597594][T14455] netlink: 'syz.1.2132': attribute type 8 has an invalid length. [ 277.736570][T14458] gre0 speed is unknown, defaulting to 1000 [ 277.778940][T14452] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2131'. [ 277.975544][T14477] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20000 [ 278.070164][T14458] lo speed is unknown, defaulting to 1000 [ 278.130727][T14466] gre0 speed is unknown, defaulting to 1000 [ 278.534546][T14472] gre0 speed is unknown, defaulting to 1000 [ 278.542851][T14466] lo speed is unknown, defaulting to 1000 [ 278.583367][T14495] netlink: 'syz.4.2142': attribute type 13 has an invalid length. [ 278.591694][T14495] netlink: 'syz.4.2142': attribute type 17 has an invalid length. [ 278.751660][T14495] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.770794][T14495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.000935][T14472] lo speed is unknown, defaulting to 1000 [ 279.080976][ T7511] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 279.088340][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 279.097077][ C1] lec:lec_tx_timeout: lec0 [ 279.102291][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.185471][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2143'. [ 279.334415][T14506] syzkaller0: entered promiscuous mode [ 279.340330][T14506] syzkaller0: entered allmulticast mode [ 279.687677][T14511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2145'. [ 279.906071][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 279.918015][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2149'. [ 280.270793][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 280.294625][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 280.498723][T14548] syz_tun: entered promiscuous mode [ 280.546018][T14548] syz_tun: left promiscuous mode [ 280.702729][T14561] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 280.803737][T14563] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 281.192537][T14595] xt_hashlimit: size too large, truncated to 1048576 [ 281.278809][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 281.300488][T14597] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 281.599103][T14608] netlink: 'syz.0.2168': attribute type 21 has an invalid length. [ 281.607209][T14609] netlink: 'syz.3.2169': attribute type 89 has an invalid length. [ 281.643077][T14608] netlink: 'syz.0.2168': attribute type 22 has an invalid length. [ 281.660328][T14608] netlink: 'syz.0.2168': attribute type 23 has an invalid length. [ 281.962818][T14628] netlink: 'syz.4.2174': attribute type 1 has an invalid length. [ 282.013730][T14628] bond4: entered promiscuous mode [ 282.036388][T14628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.060146][T14629] bond4: (slave bridge4): making interface the new active one [ 282.067718][T14629] bridge4: entered promiscuous mode [ 282.074979][T14629] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 282.106753][T14639] bond4: (slave bridge5): Enslaving as a backup interface with an up link [ 282.614764][T14669] __nla_validate_parse: 4 callbacks suppressed [ 282.614784][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2184'. [ 282.674924][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 282.718678][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 282.815418][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 282.970599][T14689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2189'. [ 283.229353][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2195'. [ 283.239826][T14707] x_tables: duplicate underflow at hook 2 [ 283.255826][T14706] openvswitch: netlink: Flow key attr not present in new flow. [ 283.403440][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.480772][T14716] bridge3: entered allmulticast mode [ 283.513846][T14715] bridge3: left allmulticast mode [ 283.673690][T14723] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 283.828418][T14735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2202'. [ 283.847714][T14735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2202'. [ 284.241983][T14744] netlink: 'syz.0.2204': attribute type 10 has an invalid length. [ 284.275852][T14744] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 284.696174][T14773] netlink: 5104 bytes leftover after parsing attributes in process `syz.3.2213'. [ 284.745944][T14773] netlink: 5104 bytes leftover after parsing attributes in process `syz.3.2213'. [ 284.838377][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 284.846458][ C1] lec:lec_tx_timeout: lec0 [ 284.851410][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.412465][T14813] geneve0: entered promiscuous mode [ 285.420303][T14813] geneve0: entered allmulticast mode [ 285.440482][ T7516] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.468284][ T7516] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.496361][ T7516] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.529218][ T7516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.586574][T14818] IPVS: Error connecting to the multicast addr [ 285.972230][T14829] tipc: New replicast peer: 255.255.255.255 [ 285.998878][T14829] tipc: Enabled bearer , priority 10 [ 286.633788][T14862] netlink: 'syz.0.2241': attribute type 15 has an invalid length. [ 286.932539][T14877] tun0: tun_chr_ioctl cmd 2148553947 [ 286.951539][T14878] tun0: tun_chr_ioctl cmd 1074025673 [ 287.008710][ T5936] tipc: Node number set to 1841321950 [ 287.361972][T14900] netlink: 'syz.4.2251': attribute type 10 has an invalid length. [ 287.370278][T14901] netlink: 'syz.4.2251': attribute type 10 has an invalid length. [ 287.412834][T14901] team0: Device vxcan1 is of different type [ 287.454548][T14900] team0: Device vxcan1 is of different type [ 287.694411][ T30] audit: type=1800 audit(1775977095.347:7): pid=14920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2256" name="memory.events" dev="tmpfs" ino=2259 res=0 errno=0 [ 287.739876][T14923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.852550][T14929] __nla_validate_parse: 14 callbacks suppressed [ 287.852569][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 287.984297][T14936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.037679][T14940] Cannot find del_set index 4 as target [ 288.083563][T14941] gre0 speed is unknown, defaulting to 1000 [ 288.296664][T14954] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2266'. [ 288.306340][T14954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 288.328851][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 288.594986][T14941] lo speed is unknown, defaulting to 1000 [ 288.789713][T14973] netlink: 656 bytes leftover after parsing attributes in process `syz.4.2270'. [ 288.945602][T14971] gre0 speed is unknown, defaulting to 1000 [ 288.965611][T14978] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 288.974417][T14978] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2274'. [ 288.986186][T14978] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2274'. [ 289.002331][T14978] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2274'. [ 289.355979][T14971] lo speed is unknown, defaulting to 1000 [ 290.250460][T15007] gre0 speed is unknown, defaulting to 1000 [ 290.460612][T15026] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2285'. [ 290.598256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 290.606412][ C1] lec:lec_tx_timeout: lec0 [ 290.611318][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.706234][T15037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2289'. [ 290.931509][T15055] netlink: 'syz.3.2295': attribute type 2 has an invalid length. [ 290.957580][T15007] lo speed is unknown, defaulting to 1000 [ 291.038891][T15057] syzkaller0: entered allmulticast mode [ 291.139861][T15064] syzkaller0: entered promiscuous mode [ 291.160156][T15064] syzkaller0 (unregistering): left promiscuous mode [ 291.166934][T15064] syzkaller0 (unregistering): left allmulticast mode [ 291.791997][T15098] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 291.850257][T15098] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.878979][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.922401][T15100] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.929741][T15100] bond11: (slave vcan0): The slave device specified does not support setting the MAC address [ 291.940977][T15100] bond11: (slave vcan0): Error -95 calling set_mac_address [ 292.120112][T15107] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 292.127943][T15107] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 292.175245][T15107] netlink: 'syz.3.2308': attribute type 8 has an invalid length. [ 292.715437][T15129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.800050][T15135] macsec2: entered promiscuous mode [ 292.805314][T15135] batadv_slave_1: entered promiscuous mode [ 293.184791][T15146] __nla_validate_parse: 7 callbacks suppressed [ 293.184809][T15146] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2322'. [ 293.232419][T15146] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2322'. [ 293.303898][T15152] vti0: entered promiscuous mode [ 293.382046][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 293.408970][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 293.440758][T15158] netlink: 'syz.2.2323': attribute type 12 has an invalid length. [ 293.477212][T15161] veth0_virt_wifi: entered allmulticast mode [ 293.492933][T15163] bridge6: entered promiscuous mode [ 293.498910][T15163] bridge6: entered allmulticast mode [ 293.507528][T15163] team0: Port device bridge6 added [ 293.875407][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2335'. [ 293.982396][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2336'. [ 294.262396][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 294.297695][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 294.446907][T15228] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 294.551972][T15228] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 294.797337][T15241] macvlan2: left promiscuous mode [ 294.830740][T15241] sit1: left promiscuous mode [ 294.843970][T15241] bond2: left promiscuous mode [ 294.849998][T15241] wireguard0: left promiscuous mode [ 294.862159][T15241] bond4: left promiscuous mode [ 294.867080][T15241] bridge4: left promiscuous mode [ 294.878940][T15241] macsec2: left promiscuous mode [ 294.884050][T15241] batadv_slave_1: left promiscuous mode [ 294.891607][T15241] vti0: left promiscuous mode [ 294.899425][T15241] bridge6: left promiscuous mode [ 295.185285][T15273] xt_nfacct: accounting object `syz0' does not exist [ 295.363416][T15286] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 295.375367][T15286] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 295.383813][T15286] CPU: 0 UID: 0 PID: 15286 Comm: syz.0.2358 Not tainted syzkaller #0 PREEMPT(full) [ 295.393231][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 295.403313][T15286] RIP: 0010:memcpy_sglist+0x420/0x730 [ 295.408926][T15286] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 295.428558][T15286] RSP: 0018:ffffc900044af698 EFLAGS: 00010202 [ 295.434739][T15286] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 295.442731][T15286] RDX: ffffc900057d2000 RSI: 00000000000001e7 RDI: 00000000000001e8 [ 295.450757][T15286] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.458748][T15286] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 295.466728][T15286] R13: ffff88802b78a480 R14: ffff88807adf6880 R15: 0000000000000008 [ 295.474727][T15286] FS: 00007f02635f66c0(0000) GS:ffff88812544e000(0000) knlGS:0000000000000000 [ 295.483669][T15286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.490281][T15286] CR2: 000000110c2e4dd4 CR3: 000000004c8b6000 CR4: 00000000003526f0 [ 295.498265][T15286] Call Trace: [ 295.501555][T15286] [ 295.504581][T15286] aead_recvmsg+0x719/0x1030 [ 295.509195][T15286] ? __pfx_aead_recvmsg+0x10/0x10 [ 295.514252][T15286] ? __pfx_aead_recvmsg+0x10/0x10 [ 295.519289][T15286] sock_recvmsg_nosec+0x10c/0x140 [ 295.524336][T15286] ____sys_recvmsg+0x3e3/0x4a0 [ 295.529171][T15286] ? __pfx_____sys_recvmsg+0x10/0x10 [ 295.534504][T15286] ? import_iovec+0x73/0xa0 [ 295.539022][T15286] ___sys_recvmsg+0x215/0x590 [ 295.543729][T15286] ? __lock_acquire+0x6b5/0x2cf0 [ 295.548771][T15286] ? __pfx____sys_recvmsg+0x10/0x10 [ 295.554009][T15286] ? get_futex_key+0x8cd/0x1690 [ 295.558895][T15286] do_recvmmsg+0x334/0x800 [ 295.563344][T15286] ? __pfx_do_recvmmsg+0x10/0x10 [ 295.568327][T15286] ? __pfx_do_futex+0x10/0x10 [ 295.573049][T15286] __x64_sys_recvmmsg+0x198/0x250 [ 295.578114][T15286] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 295.583682][T15286] do_syscall_64+0x14d/0xf80 [ 295.588280][T15286] ? trace_irq_disable+0x3b/0x150 [ 295.593326][T15286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.599403][T15286] ? clear_bhb_loop+0x40/0x90 [ 295.604097][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.610009][T15286] RIP: 0033:0x7f026539c819 [ 295.614430][T15286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.619162][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 295.634044][T15286] RSP: 002b:00007f02635f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 295.634069][T15286] RAX: ffffffffffffffda RBX: 00007f0265615fa0 RCX: 00007f026539c819 [ 295.642102][ C1] lec:lec_tx_timeout: lec0 [ 295.650449][T15286] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 295.650464][T15286] RBP: 00007f0265432c91 R08: 0000000000000000 R09: 0000000000000000 [ 295.650475][T15286] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 295.650489][T15286] R13: 00007f0265616038 R14: 00007f0265615fa0 R15: 00007ffd415f0288 [ 295.669272][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.670857][T15286] [ 295.703744][T15286] Modules linked in: [ 295.709361][T15286] ---[ end trace 0000000000000000 ]--- [ 295.739582][T15286] RIP: 0010:memcpy_sglist+0x420/0x730 [ 295.745008][T15286] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 295.765448][T15286] RSP: 0018:ffffc900044af698 EFLAGS: 00010202 [ 295.772801][T15286] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 295.781073][T15286] RDX: ffffc900057d2000 RSI: 00000000000001e7 RDI: 00000000000001e8 [ 295.789480][T15286] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.798965][T15286] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 295.807057][T15286] R13: ffff88802b78a480 R14: ffff88807adf6880 R15: 0000000000000008 [ 295.815254][T15286] FS: 00007f02635f66c0(0000) GS:ffff88812554e000(0000) knlGS:0000000000000000 [ 295.824306][T15286] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.831585][T15286] CR2: 00007f02635d5d58 CR3: 000000004c8b6000 CR4: 00000000003526f0 [ 295.839887][T15286] Kernel panic - not syncing: Fatal exception [ 295.846571][T15286] Kernel Offset: disabled [ 295.850897][T15286] Rebooting in 86400 seconds..