last executing test programs: 1m30.045415699s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m29.948460925s ago: executing program 3: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680)={0xffffffffffffffff}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100001040000ebe75b0b669986690000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800070002000000"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x18) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000480)={r7, 0x6}, 0x8) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @void, @val={0xc, 0x99, {0xffffffff, 0x7}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x60004040}, 0x4000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x0, 0x0, @prog_id}, 0x20) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r13 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r13, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r13, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00004df0db2c00"/48, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 1m29.879416491s ago: executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x3}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40081) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40e00, 0x0, '\x00', r4, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001500), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0xfffffffffffffff1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 1m11.408888053s ago: executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x3}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40081) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40e00, 0x0, '\x00', r4, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001500), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0xfffffffffffffff1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 58.905482489s ago: executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x3}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40081) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40e00, 0x0, '\x00', r4, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001500), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0xfffffffffffffff1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 42.570575101s ago: executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x3}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40081) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40e00, 0x0, '\x00', r4, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001500), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0xfffffffffffffff1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000002c0), 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 34.655475154s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = epoll_create(0x1f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00002dc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbbffb, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200000c1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20]) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/46, 0x2e}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040), 0x4) 33.503379215s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00002b0000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800028008000180ffffffff0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/136], 0x88}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x1a68, r9, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x68, 0x5, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff801}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xce4, 0x5, 0x0, 0x1, [{0x59c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x59e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb008}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc5d7d64961c0d940}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffe0}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x44}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x99}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x57}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x251f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x267}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xefb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2d8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x33}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x92}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3216}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcf6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x31}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x999e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x85}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x274, 0x5, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbcde}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0xa94, 0x5, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x268}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x534, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x227}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd8ce}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x93}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xeed3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x67}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x4}, {0x90, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}]}, {0x480, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1dc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x63}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}]}, 0x1a68}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 32.196872451s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0x2, 0x2, 0x1) sendto$rose(r1, &(0x7f0000000180)="ef3ba4c48e6b838b", 0x8, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x32) epoll_create(0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000400), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x48}}, 0x0) getsockopt$inet6_mtu(r5, 0x29, 0x4e, 0x0, &(0x7f0000000900)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000f80)=ANY=[@ANYBLOB="5ade300cd11394f315287318b98b30bd6dc9b85407cf4340a7bcef9c363b952aa09eeabb05725d179b3b689afc9db1ebb1858655a2f8570d965c47fa99b9f44fe0425d693afa02acb100e9d8462d76ab918a96f607417a15350e12cab082289cfc3c7ff6c1801b7fc6", @ANYBLOB="71767d4de34712a95a7192a5fc49755af5d2420cf58f6cc1a4b98ec4cb53ad52d5dd5060f7656a6b246de9dd0cb62f584a959a642383cce0f0cc7bd369fc0d91a9d843a5e7f732a87f6065ba245f437dc7453d15d4c4ef0911d4755ff0b885d419977ee76efe8986ff6ac63940eb750e75f7d0ff398634da9ad9ca5b57741ee7be4d68d2952ede9431cdd704c53b202964097c6174fda3f8960e7f74d951a29f78dc5e93c04e8206485252fe72a549", @ANYRES16=r4, @ANYRESHEX=r2, @ANYBLOB="845641f767fb2614649b0f69aa89ee8f0f3e318c6789f8324aeec4c9f04f0c3b95df03ee12dd50eb8ca0093d6d48d83a57097242e03cc8d5f799fda3c5b469631978ee4c585d6fa34805f6a32b2f79859739ba5d73c9122b30995456bd8edbc9dae75cd77f300b0a4289555a8d73fab2091c0ddb8512be64496c6e6243826da77e9fcaf6d67b6affda0734cf9fc12ada144f1d8f76fabd5133ad", @ANYRES16=r2], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f00000001c0)=0xc, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r11, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000008000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000008010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480340001800b00010065787468647200002400028008000340f40000000800014000000012080004400000002205000200000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd4}}, 0x20000810) 32.061084323s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x28000600) r2 = socket(0x23, 0x5, 0x0) connect$rxrpc(r2, &(0x7f0000002000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket(0xa, 0xa, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "30f089d0407dd4a2"}}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "64a4c4f6afee410b"}}}]}, 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='_', 0x1}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='_', 0x1}], 0x1) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000005c0)={0x0, "c65a4018ea3d6211b728f262abc20214"}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac1414bb000000000000000000000000fe80000000000000003fcf190481a5e13de9e260aa91d514758436412d464ee7826d416af19318eed7d629544d42ad831e62ce1598427bd09c68ae5738a7790e3cc6eb755e6b741a9ea1bda5fffbaaf6d7"], 0x38}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac1414bb000000000000000000000000fe80000000000000003fcf190481a5e13de9e260aa91d514758436412d464ee7826d416af19318eed7d629544d42ad831e62ce1598427bd09c68ae5738a7790e3cc6eb755e6b741a9ea1bda5fffbaaf6d7"], 0x38}}, 0x0) setsockopt$inet_msfilter(r3, 0x10d, 0x2, &(0x7f0000000000)={@multicast1, @broadcast}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRESHEX=r1, @ANYBLOB="73ea75fb8fdfdbf21b502760b76ea18ba7b427f651f0cfdb851c42c365", @ANYRES32=0x0, @ANYRES8=r5], 0x1c}}, 0x4000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRESHEX=r1, @ANYBLOB="73ea75fb8fdfdbf21b502760b76ea18ba7b427f651f0cfdb851c42c365", @ANYRES32=0x0, @ANYRES8=r5], 0x1c}}, 0x4000) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) 31.854832224s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c000240000000000000000114000000110001000000000000000000000a0000"], 0x80}}, 0x0) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0xa8c}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x5, 0xe, 0x3, 0x10, r2, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xe}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x9, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0}, 0x90) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000400)={{r4}, 0x1, 0x2, 0x80000001}) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x8917, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="a60dfa94a6946bf9a2abed878888c44a88f7", 0x12}], 0x1) 31.845850088s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = epoll_create(0x1f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00002dc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbbffb, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200000c1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20]) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/46, 0x2e}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040), 0x4) 31.669916589s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000720134000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1d, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000240)=@req={0x2, 0x8001, 0x4, 0x3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e3d6bff305f2eab91b3134f42453", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="f5", 0x0}, 0x50) 31.580984435s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x6414, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x93d, 0x58b0, 0x100, 0x0, 0x0, "c34583ecddd0330e98599f8d4b6de0b86b64c332f9507a4946fea8849be89d5c50b4e67c7998d1883cd3896776cd62f43e79f228c9d1cb0520b858f3d2759155"}}}, {{@ipv6={@loopback, @mcast1, [0xffffffff, 0xff, 0xffffffff], [0x3a40f845e227158c, 0xffffff00, 0xff000000, 0xff], 'syzkaller0\x00', 'veth1_vlan\x00', {}, {}, 0x3b, 0x5b, 0x0, 0x1a}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x10001, 0x4, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x93d, 0x58b0, 0x100, 0x0, 0x0, "c34583ecddd0330e98599f8d4b6de0b86b64c332f9507a4946fea8849be89d5c50b4e67c7998d1883cd3896776cd62f43e79f228c9d1cb0520b858f3d2759155"}}}, {{@ipv6={@loopback, @mcast1, [0xffffffff, 0xff, 0xffffffff], [0x3a40f845e227158c, 0xffffff00, 0xff000000, 0xff], 'syzkaller0\x00', 'veth1_vlan\x00', {}, {}, 0x3b, 0x5b, 0x0, 0x1a}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x10001, 0x4, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) socket$pptp(0x18, 0x1, 0x2) 31.454339276s ago: executing program 2: r0 = socket$inet(0x2, 0x3, 0x7f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a00ff0200000000000000000000cca6207afb8720b424f1267ac200000001ac1414bb000000000000000000000000000000e3"], 0x38}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES64=r0], 0x3c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300031000000000000000000000000100090000000000030006000000000000000000178737b1d13958a041b1000002000100000000000000000000000000030005000000000002000000ac141dd9000000000000000005000300000000000a00"/129], 0x80}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x30) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r9, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)="dc", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x3e}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x43, 0xac, "09d0187e388acbcfc2e319b22c635b451b1758b3f2f0b249a14a8f1a0d8725e94c24fc3844b1f57d43b58f948622006197f4e8a560070ddce6cc8766aa71bc"}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 31.40180159s ago: executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x1}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000000000000100100000b0000931b80000000000000000000a3218c141c5186846ab517b7e8bac2df7970281c78c82923c3b439c4ec8fe91d6ceca5cd4581a84e3dce90d97944db78f27643ce7731e5a6b3871d3839e8468ed822cf04f6a36566b91a73c1566e54facc8addfcf231c3e6583020765619c5328bd0b6c835651758994997de8e16905e32aa256a4e25278800"/163], 0x20}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x40, 0x8, 0x1, 0x0, 0x1}, 0x48) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r8}, 0x20) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000080)='x', &(0x7f0000000180)=@udp=r9}, 0x20) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 31.164021628s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "dfa27021fe106750"}, 0x38) writev(r0, &(0x7f0000002fc0)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="0000000000000000300012800800010067726500240002800600020006"], 0x90}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000ff0300060000000014000100fc0100"/45], 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=""/18}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 31.024141445s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x100, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x100}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x200}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.718210539s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="cd", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x40286608, &(0x7f0000000400)="38c290fe67f1928e629f781d956be8f4b42f9c22eb5965208d340ebf5a0ccd7258830846c5fa7926f1471379a8593f0c0c479907bfb3938790c71e857f63b7dabb80cf4ac202136c0a13387c93d3e52b661453813293a011df98e98a4ee2169e23e424686dd2a136bb8e3573aa9f53454a0b7b151611be9dc0c3e1ff076d180529302c9c93a3f959e1dff2ab951058184b1d54e6290ebcec052a386481d307d2e2d4fba0935a67bb773ebeb02f63e95ed15e4336a5b46831ae91eb670a424c6ee6e7680117fec6cd77bbde182ccf778e98ca177fb40b606caf631fef0bc2d41844c70c3ef4e3d471a0f874a1b87a426b4c48d90b3bcf70d38a0a0e59e942bed0") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x90) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a09b6a1d", @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000014005e800800070000000000080006000000000014005e800800070000000000080002"], 0x48}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r7}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 30.629434241s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) 30.480830493s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.413056553s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000720134000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r2 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1d, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r7, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000240)=@req={0x2, 0x8001, 0x4, 0x3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e3d6bff305f2eab91b3134f42453", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="f5", 0x0}, 0x50) 30.406646569s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r1, 0x0, r6, 0x0, 0x80, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r6, 0x0, 0x4) write(r3, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f00000004c0), 0x12) 30.277117192s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @random="ba07f25d5054", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @generic={0xfe, 0x2}]}}}}}}}}, 0x0) 30.117438574s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014003500626f6e645f736c6176655f300000000008000a00", @ANYRES32=r3, @ANYBLOB="5f161d965491cc9cb64e3f1d4656b6c1ca3ac159f3e53f4e683ec6b813e9b9c3fe97eb3b9a0df4159dd83f7b0b72ed444ddd5ceddc20acd788e32688eec609c5c7fe4b230d476d6043bbd91d8ba2780811f542e15132928d30b78d903449c91bd714ae726be325"], 0x3c}}, 0x0) 30.026445837s ago: executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="4500000091238fdfb840a8bdaae12361d7391e618b5a", @ANYRES16=r4, @ANYBLOB="01000000000000000000080000000c0099000100000000000000"], 0x20}}, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) sendmmsg(r7, &(0x7f0000002c00)=[{{&(0x7f0000000480)=@l2tp6={0xa, 0x500, 0x0, @mcast1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$unix(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=','], 0x30, 0x40040811}, 0x40000c4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188003ac0f000300", 0x33fe0}], 0x1}, 0x0) 999.025917ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "dfa27021fe106750"}, 0x38) writev(r0, &(0x7f0000002fc0)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="0000000000000000300012800800010067726500240002800600020006"], 0x90}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000ff0300060000000014000100fc0100"/45], 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=""/18}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 607.16921ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00'}) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000801) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x40000) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x21929d4f39348bcd}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r6, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x122}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x5dad41e630043531}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2040000bbbbbbbbbbbb08004500003000000000000192780a010101ac1414e859228b884a942d000000000000000067000001e63b84a61b31212afca687505046e8fd347a8f2f7bb6bf407c9327ae4997b7"], 0x0) 88.345962ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 0s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', '', [{0x20, '&}--&&]#%]'}, {0x20, '}\\:\x9f]^{'}, {0x20, '*'}, {0x20, '#'}, {0x20, '-]!'}, {0x20, '#! '}], 0xa, "db677dca16a5476263d3834ed8ae4f171c796cd3a68ff4b85124cda155a87e0b94c3abf5a8dd1995cc6560fe55ae50f85b7dc45fabfc5e61d954fad1f9143809f65af92ae1b5b49f658fe66f1a965df3f75cd2c6651fb602963422"}, 0x7e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x10) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x47, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095", @ANYRESOCT=0x0, @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0x20}, 0x90) kernel console output (not intermixed with test programs): 07.138454][T11400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.229313][T11400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.291450][T11407] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 207.311336][T11407] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 207.320683][T11409] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 207.968306][T11440] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 207.992872][T11440] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 208.026829][T11443] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 208.077155][T11440] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 208.102729][T11440] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 208.159111][T11448] __nla_validate_parse: 5 callbacks suppressed [ 208.159132][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.223964][T11452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.231267][T11452] IPv6: NLM_F_CREATE should be set when creating new route [ 208.238611][T11452] IPv6: NLM_F_CREATE should be set when creating new route [ 208.815302][T11488] sctp: [Deprecated]: syz-executor.2 (pid 11488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.815302][T11488] Use struct sctp_sack_info instead [ 209.285888][T11518] validate_nla: 1 callbacks suppressed [ 209.285907][T11518] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 209.337737][T11520] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 209.509227][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.536711][T11533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.743102][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.112001][T11559] lo speed is unknown, defaulting to 1000 [ 211.013682][T11614] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 211.062693][T11616] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 211.217688][T11592] lo speed is unknown, defaulting to 1000 [ 211.433859][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.472163][T11625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.640483][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.706543][T11667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.016483][T11674] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 213.677205][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.792974][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.888765][T11699] bond3: entered promiscuous mode [ 213.975617][T11705] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 214.000253][T11705] ip6gretap2: entered promiscuous mode [ 214.016552][T11705] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 214.035370][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.065865][T11708] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 214.083096][T11708] ip6gretap2: left promiscuous mode [ 214.107777][T11708] bond3 (unregistering): Released all slaves [ 214.128985][T11707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.136333][T11707] IPv6: NLM_F_CREATE should be set when creating new route [ 214.143663][T11707] IPv6: NLM_F_CREATE should be set when creating new route [ 214.347985][T11727] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 214.878596][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.915574][T11756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.037136][ T9377] bridge_slave_1: left allmulticast mode [ 215.047058][ T9377] bridge_slave_1: left promiscuous mode [ 215.068704][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.127908][ T9377] bridge_slave_0: left allmulticast mode [ 215.135903][ T9377] bridge_slave_0: left promiscuous mode [ 215.169878][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.255928][T11785] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 215.854566][ T9377] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 216.221791][ T9377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.253851][ T9377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.267257][ T9377] bond0 (unregistering): Released all slaves [ 216.291281][T11798] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 216.608475][T11823] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.634305][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.770306][T11825] veth1_macvtap: left promiscuous mode [ 216.791908][T11826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 216.965158][T11840] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.070270][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.096287][T11840] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.356414][T11863] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.565199][T11868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.834588][ T9377] hsr_slave_0: left promiscuous mode [ 217.870537][ T9377] hsr_slave_1: left promiscuous mode [ 217.885197][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.902517][ T9377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.950640][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.960802][ T9377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.044524][ T9377] veth1_macvtap: left promiscuous mode [ 218.058435][ T9377] veth0_macvtap: left promiscuous mode [ 218.065688][ T9377] veth1_vlan: left promiscuous mode [ 218.072258][ T9377] veth0_vlan: left promiscuous mode [ 218.829602][ T9377] team0 (unregistering): Port device team_slave_1 removed [ 218.880444][ T9377] team0 (unregistering): Port device team_slave_0 removed [ 219.344783][T11884] __nla_validate_parse: 2 callbacks suppressed [ 219.344805][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.369553][T11893] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.607329][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.772927][T11928] netlink: 308 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.812364][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.012607][T11940] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.175958][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.249651][T11955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.309015][T11961] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 220.341119][T11949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.468123][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.480183][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.648175][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.868252][ T30] audit: type=1800 audit(1718534619.919:16): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 220.903201][T11990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.925995][ T30] audit: type=1804 audit(1718534619.919:17): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 221.039050][T12000] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 221.057428][ T30] audit: type=1804 audit(1718534619.929:18): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 221.114922][T12000] File: /root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events PID: 12000 Comm: syz-executor.3 [ 221.148415][ T30] audit: type=1804 audit(1718534619.929:19): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 221.233661][ T30] audit: type=1804 audit(1718534619.949:20): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 221.267800][ T30] audit: type=1804 audit(1718534619.949:21): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 221.297018][ T30] audit: type=1804 audit(1718534620.229:22): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 221.302239][T12009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.356872][ T30] audit: type=1804 audit(1718534620.229:23): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir330315309/syzkaller.PfryF0/456/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 221.554204][T12009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.668835][T12009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.847091][T12009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.898915][T12026] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.907954][T12026] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.916291][T12026] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.925069][T12026] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.952094][T12026] vxlan0: entered promiscuous mode [ 221.962203][T12026] vxlan0: entered allmulticast mode [ 221.983700][T12026] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.992500][T12026] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.001193][T12026] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.010100][T12026] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.211010][T12009] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.249693][T12009] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.301330][T12009] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.348526][T12009] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.558423][T12066] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 222.597842][T12066] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 222.605979][T12066] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 222.811403][T12070] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 223.019577][T12104] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 223.047129][T12104] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 223.064936][T12104] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 223.420453][ T30] audit: type=1800 audit(1718534622.469:24): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 223.478212][ T30] audit: type=1804 audit(1718534622.499:25): pid=12127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2156822213/syzkaller.VEcz5D/285/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 224.346203][T12175] __nla_validate_parse: 16 callbacks suppressed [ 224.346226][T12175] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.396498][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.410994][ T784] IPVS: starting estimator thread 0... [ 224.516216][T12183] IPVS: using max 18 ests per chain, 43200 per kthread [ 224.615189][T12193] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.656927][T12196] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.107842][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.339996][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.626483][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.212371][T12303] wireguard0: entered promiscuous mode [ 226.252019][T12303] wireguard0: entered allmulticast mode [ 226.531999][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.546313][T12321] batadv_slave_1: entered allmulticast mode [ 226.547992][T11542] IPVS: starting estimator thread 0... [ 226.573529][T12321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.608348][T12321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.667300][T12321] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 226.684478][T12323] IPVS: using max 18 ests per chain, 43200 per kthread [ 226.839147][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.871178][T12343] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.741648][T12391] vlan2: entered promiscuous mode [ 227.807403][T12396] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 227.991940][T12415] C: renamed from lo (while UP) [ 228.015144][T12415] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.760487][T12520] __nla_validate_parse: 6 callbacks suppressed [ 229.760508][T12520] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.161172][T12549] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.455812][T12562] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.539307][T12562] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.646679][T12562] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.748899][T12562] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.958178][T12562] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.000029][T12562] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.038435][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 231.064358][T12562] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.125055][T12562] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.465746][T12611] xt_TCPMSS: Only works on TCP SYN packets [ 231.868778][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 231.868797][ T30] audit: type=1800 audit(1718534630.909:30): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 231.904048][ T8750] syz_tun (unregistering): left allmulticast mode [ 231.937106][ T8750] syz_tun (unregistering): left promiscuous mode [ 231.960007][ T8750] bridge0: port 3(syz_tun) entered disabled state [ 231.976273][ T30] audit: type=1800 audit(1718534630.909:31): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.018976][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.035977][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.045347][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.057575][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.072186][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.080808][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.113219][ T30] audit: type=1800 audit(1718534630.909:32): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.138425][T12632] lo speed is unknown, defaulting to 1000 [ 232.237531][ T30] audit: type=1800 audit(1718534630.909:33): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.326528][ T30] audit: type=1800 audit(1718534630.909:34): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.416269][ T30] audit: type=1800 audit(1718534630.909:35): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.479896][T12639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.499088][ T30] audit: type=1800 audit(1718534630.909:36): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.530023][ T30] audit: type=1800 audit(1718534630.949:37): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.667024][ T30] audit: type=1800 audit(1718534630.949:38): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.694918][T12639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.715184][ T30] audit: type=1800 audit(1718534630.949:39): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 232.900089][T12639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.058201][T12639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.257973][T12639] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.278828][T12639] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.327823][T12639] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.348773][T12639] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.571037][T12632] chnl_net:caif_netlink_parms(): no params data found [ 233.639573][T12689] ip6erspan0: entered promiscuous mode [ 234.031857][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.046578][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.053840][T12632] bridge_slave_0: entered allmulticast mode [ 234.073150][T12632] bridge_slave_0: entered promiscuous mode [ 234.090078][T12632] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.109604][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.121530][T12632] bridge_slave_1: entered allmulticast mode [ 234.137167][T12632] bridge_slave_1: entered promiscuous mode [ 234.166831][ T5115] Bluetooth: hci4: command tx timeout [ 234.241695][T12720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.320636][T12632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.402723][T12720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.430713][T12632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.545556][T12720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.653128][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.734819][T12720] batman_adv: batadv2: Removing interface: netdevsim0 [ 234.755088][T12720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.787296][T12632] team0: Port device team_slave_0 added [ 234.825306][T12632] team0: Port device team_slave_1 added [ 234.943093][T12632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.966270][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.014704][T12632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.069711][T12720] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.079610][T12632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.090341][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.124682][T12632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.177969][T12720] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.227718][T12720] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.330875][T12720] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.349429][T12632] hsr_slave_0: entered promiscuous mode [ 235.375784][T12632] hsr_slave_1: entered promiscuous mode [ 235.389802][T12632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.416719][T12632] Cannot create hsr debugfs directory [ 235.462198][T12771] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.472475][T12771] openvswitch: netlink: Multiple metadata blocks provided [ 235.510198][T12769] tipc: Enabled bearer , priority 0 [ 235.680478][T12769] tipc: Resetting bearer [ 235.788734][T12778] tipc: Resetting bearer [ 235.896685][T12788] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.247148][ T5113] Bluetooth: hci4: command tx timeout [ 237.514963][T12778] tipc: Disabling bearer [ 237.537411][ T5113] Bluetooth: hci3: command 0x0406 tx timeout [ 237.730891][T12632] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.820438][T12805] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.851963][T12632] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.909674][T12805] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.953448][T12632] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.009352][T12805] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.087630][T12632] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.128372][T12805] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.300163][T12805] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.326160][ T5115] Bluetooth: hci4: command tx timeout [ 238.346788][T12805] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.391924][T12805] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.453042][T12805] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.475432][T12632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.504943][T12632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.524233][T12632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.554694][T12632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.692471][T12841] xt_ecn: cannot match TCP bits for non-tcp packets [ 238.768908][T12632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.801290][T12632] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.831886][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.839130][T11541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.879778][T11540] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.887023][T11540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.964740][T12632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.210286][T12632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.603678][T12632] veth0_vlan: entered promiscuous mode [ 239.649188][T12632] veth1_vlan: entered promiscuous mode [ 239.739655][T12632] veth0_macvtap: entered promiscuous mode [ 239.752651][T12632] veth1_macvtap: entered promiscuous mode [ 239.782915][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.795324][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.805925][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.821582][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.833070][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.843762][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.855159][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.871523][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.892989][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.904814][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.915082][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.925550][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.945327][T12632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.029149][T12891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.064927][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.097634][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.110176][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.121133][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.132733][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.143482][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.153846][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.164591][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.175247][T12632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.186564][T12632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.198388][T12632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.223481][T12632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.246047][T12632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.266255][T12632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.275029][T12632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.371605][T12906] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 240.406532][ T5115] Bluetooth: hci4: command tx timeout [ 240.420768][T12891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.549118][T12891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.617337][T12911] syz_tun: entered promiscuous mode [ 240.625368][T12911] syz_tun: left promiscuous mode [ 240.731317][T12891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.748445][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.756925][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.806616][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.814447][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.945743][T12891] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.995237][T12891] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.041416][T12891] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.091309][T12891] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.104860][T12932] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 241.113500][T12932] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.259146][T12941] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.319027][T12945] dccp_invalid_packet: P.Data Offset(172) too large [ 241.327964][T12940] tipc: Enabled bearer , priority 0 [ 242.581773][T13020] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.629006][T13020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.742814][T13069] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 243.762539][T13069] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.972533][T13072] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 244.022629][T13072] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.430956][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.607883][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.653209][T13116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.819668][T13126] tun0: tun_chr_ioctl cmd 1074025677 [ 244.825186][T13126] tun0: linktype set to 768 [ 245.346538][T13159] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.389465][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 245.389483][ T30] audit: type=1804 audit(1718534644.439:74): pid=13159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2156822213/syzkaller.VEcz5D/363/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 245.452425][ T30] audit: type=1804 audit(1718534644.439:75): pid=13159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2156822213/syzkaller.VEcz5D/363/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 245.500768][ T30] audit: type=1804 audit(1718534644.469:76): pid=13159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2156822213/syzkaller.VEcz5D/363/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 245.675945][T13173] xt_HMARK: spi-set and port-set can't be combined [ 245.889223][T13185] pim6reg1: entered promiscuous mode [ 245.899506][T13185] pim6reg1: entered allmulticast mode [ 246.178237][T13202] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.321481][T13202] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.437145][T13202] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.501592][T13217] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 246.525986][T13202] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.538311][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.586677][T13220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.732199][T13202] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.760728][T13202] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.770174][T13226] pim6reg1: entered promiscuous mode [ 246.777347][T13226] pim6reg1: entered allmulticast mode [ 246.802805][T13202] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.820953][T13202] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.208653][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.295576][T13258] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.388426][T13262] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 247.465597][T13265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.499272][T13265] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.693018][T13278] pim6reg1: entered promiscuous mode [ 247.700041][T13278] pim6reg1: entered allmulticast mode [ 247.929151][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.357188][T13316] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.389908][T13317] pim6reg1: entered promiscuous mode [ 248.395281][T13317] pim6reg1: entered allmulticast mode [ 248.410874][T13316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.713963][T13339] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.724852][T13339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.751272][T13337] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.769697][T13341] lo speed is unknown, defaulting to 1000 [ 248.941997][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.666821][T13397] ip6t_srh: unknown srh invflags 7863 [ 249.814814][T13404] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 249.846559][T13404] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.436853][T13449] xt_TCPMSS: Only works on TCP SYN packets [ 250.772505][T13449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.804086][T13449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.859471][T13449] bond0 (unregistering): Released all slaves [ 250.966369][ T5115] Bluetooth: hci0: command 0x0c20 tx timeout [ 251.388454][T13485] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 251.397742][T13485] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 251.605075][T13492] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 251.879857][T13516] IPVS: set_ctl: invalid protocol: 33 172.20.20.16:20004 [ 251.912473][T13516] x_tables: duplicate underflow at hook 1 [ 252.855656][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 252.862910][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 253.091474][T13548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.320256][ T9375] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.451206][ T9375] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.571569][ T9375] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.595622][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.605674][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.619466][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d0fc400: rx timeout, send abort [ 253.629716][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.645792][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.649199][T13570] __nla_validate_parse: 5 callbacks suppressed [ 253.649218][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.686494][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 253.693939][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.759061][ T9375] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.879345][T13568] lo speed is unknown, defaulting to 1000 [ 253.902743][T13582] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.099176][ T9375] geneve1: left allmulticast mode [ 254.116286][ T9375] geneve1: left promiscuous mode [ 254.127221][ T9375] bridge0: port 3(geneve1) entered disabled state [ 254.128625][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d0fc400: abort rx timeout. Force session deactivation [ 254.181787][ T9375] bridge_slave_1: left allmulticast mode [ 254.206208][ T9375] bridge_slave_1: left promiscuous mode [ 254.219900][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.270651][ T9375] bridge_slave_0: left allmulticast mode [ 254.297012][ T9375] bridge_slave_0: left promiscuous mode [ 254.317210][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.365805][ T9375] tipc: Resetting bearer [ 254.515494][ T9375] ip6gretap0 (unregistering): left promiscuous mode [ 255.009888][ T9375] tipc: Disabling bearer [ 255.331342][ T9375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.344581][ T9375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.355688][ T9375] bond0 (unregistering): Released all slaves [ 255.370001][ T9375] bond1 (unregistering): Released all slaves [ 255.383622][ T9375] bond2 (unregistering): Released all slaves [ 255.400505][ T9375] bond3 (unregistering): Released all slaves [ 255.417242][ T9375] bond4 (unregistering): Released all slaves [ 255.446209][T13605] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.573789][T13613] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.618876][ T9375] Êüä^q: left promiscuous mode [ 255.766275][ T5115] Bluetooth: hci2: command tx timeout [ 255.863612][ T9375] tipc: Left network mode [ 255.930258][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.936844][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.113546][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.364080][T13646] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.403350][T13568] chnl_net:caif_netlink_parms(): no params data found [ 256.477235][T13646] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.567862][T13646] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.578835][ T1108] tipc: Subscription rejected, illegal request [ 256.700445][T13646] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.923236][T13686] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 257.112890][T13568] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.130495][T13568] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.146287][T13568] bridge_slave_0: entered allmulticast mode [ 257.168451][T13568] bridge_slave_0: entered promiscuous mode [ 257.212003][T13568] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.246425][T13568] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.255072][T13568] bridge_slave_1: entered allmulticast mode [ 257.296008][T13568] bridge_slave_1: entered promiscuous mode [ 257.338628][T13646] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.435973][ T9375] batadv_slave_0: left promiscuous mode [ 257.455277][ T9375] hsr_slave_0: left promiscuous mode [ 257.476805][ T9375] hsr_slave_1: left promiscuous mode [ 257.494505][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.506417][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.525010][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.542298][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.567848][ T9375] veth1_macvtap: left promiscuous mode [ 257.573427][ T9375] veth0_macvtap: left promiscuous mode [ 257.579309][ T9375] veth0_vlan: left promiscuous mode [ 257.853029][ T5115] Bluetooth: hci2: command tx timeout [ 257.933257][T13709] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 258.266531][ T9375] team0 (unregistering): Port device team_slave_1 removed [ 258.653260][T13646] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.676585][T13568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.696382][T13704] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 258.716764][T13704] infiniband syz0: set active [ 258.723188][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.763736][T13709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.781773][T13709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.194020][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.213923][T13646] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.279578][T13646] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.280643][T13724] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.337931][T13568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.437602][ T5165] lo speed is unknown, defaulting to 1000 [ 259.443751][T13716] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.529169][ T5165] lo speed is unknown, defaulting to 1000 [ 259.535140][T13568] team0: Port device team_slave_0 added [ 259.569878][T13568] team0: Port device team_slave_1 added [ 259.712985][T13568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.726242][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.776290][T13743] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 259.794505][T13568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.815472][T13568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.822603][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.863379][T13568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.902120][ T29] tipc: Subscription rejected, illegal request [ 259.929353][ T5115] Bluetooth: hci2: command tx timeout [ 260.101277][T13568] hsr_slave_0: entered promiscuous mode [ 260.126762][T13568] hsr_slave_1: entered promiscuous mode [ 260.280551][T13754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.306433][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.339021][ T9375] IPVS: stop unused estimator thread 0... [ 260.410701][T13754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.521764][T13754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.598011][T13767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.658429][T13754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.692943][T13769] netlink: 864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.702787][T13769] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.743950][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.871424][T13754] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.948027][T13754] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.008723][T13754] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.043560][T13754] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.065055][T13783] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.266700][T13797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.345038][T13568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.375585][T13568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.457391][T13568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.502097][T13568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.539398][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.843908][T13812] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 261.925371][T13568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.964519][T13568] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.979858][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.987096][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.008627][ T5115] Bluetooth: hci2: command tx timeout [ 262.018813][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.025961][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.203652][T13820] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.297805][T13820] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.419789][T13820] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.511209][T13820] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.551796][T13568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.662329][T13568] veth0_vlan: entered promiscuous mode [ 262.689263][T13568] veth1_vlan: entered promiscuous mode [ 262.783747][T13568] veth0_macvtap: entered promiscuous mode [ 262.791934][T13833] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.823376][T13568] veth1_macvtap: entered promiscuous mode [ 262.864247][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.888249][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.906796][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.926187][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.936486][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.947146][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.957090][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.976868][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.989186][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.000197][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.012609][T13568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.036621][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.048285][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.059858][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.070586][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.081072][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.092502][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.102507][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.113375][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.123973][T13568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.135155][T13568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.151646][T13568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.181560][T13568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.190636][T13568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.200855][T13568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.210795][T13568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.348090][ T9375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.377647][ T9375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.444841][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.476938][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.614983][T13855] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 263.644347][T13857] xt_TCPMSS: Only works on TCP SYN packets [ 263.662756][T13857] bridge_slave_1: left allmulticast mode [ 263.669340][T13857] bridge_slave_1: left promiscuous mode [ 263.675330][T13857] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.686456][T13857] bridge_slave_0: left allmulticast mode [ 263.692274][T13857] bridge_slave_0: left promiscuous mode [ 263.700236][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.355032][T13850] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 264.689321][ T5111] syz_tun (unregistering): left allmulticast mode [ 264.695813][ T5111] syz_tun (unregistering): left promiscuous mode [ 264.709006][ T5111] bridge0: port 3(syz_tun) entered disabled state [ 264.774396][T13865] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 264.958895][ T9375] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.060246][ T9375] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.160546][ T9375] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.232792][ T9375] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.506895][ T9375] veth1: left allmulticast mode [ 265.511823][ T9375] veth1: left promiscuous mode [ 265.528505][ T9375] bridge0: port 5(veth1) entered disabled state [ 265.577418][ T9375] team0: left allmulticast mode [ 265.582341][ T9375] team_slave_0: left allmulticast mode [ 265.596493][ T9375] team_slave_1: left allmulticast mode [ 265.602019][ T9375] team0: left promiscuous mode [ 265.617012][ T9375] team_slave_0: left promiscuous mode [ 265.623478][ T9375] team_slave_1: left promiscuous mode [ 265.656634][ T9375] bridge0: port 4(team0) entered disabled state [ 265.668382][ T9375] bridge_slave_1: left allmulticast mode [ 265.674083][ T9375] bridge_slave_1: left promiscuous mode [ 265.702906][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.735343][ T9375] bridge_slave_0: left allmulticast mode [ 265.746177][ T9375] bridge_slave_0: left promiscuous mode [ 265.753050][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.923939][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.935252][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.944087][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.954076][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.978059][ T5113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.985494][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 266.293488][T13905] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 266.770187][T13889] lo speed is unknown, defaulting to 1000 [ 266.799549][T13820] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.888017][T13820] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.948195][T13820] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.002382][T13820] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.088061][ T30] audit: type=1804 audit(1718534666.139:77): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2156822213/syzkaller.VEcz5D/423/memory.events" dev="sda1" ino=1937 res=1 errno=0 [ 267.129887][T13923] __nla_validate_parse: 1 callbacks suppressed [ 267.129909][T13923] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.178376][ T30] audit: type=1804 audit(1718534666.209:78): pid=13917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2156822213/syzkaller.VEcz5D/423/memory.events" dev="sda1" ino=1937 res=1 errno=0 [ 267.250699][ T30] audit: type=1800 audit(1718534666.209:79): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1937 res=0 errno=0 [ 267.731594][T13937] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 267.887258][T13946] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.087746][ T5113] Bluetooth: hci1: command tx timeout [ 268.123423][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.176584][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.196991][T13954] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 268.659582][T13969] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.715021][ T30] audit: type=1804 audit(1718534667.759:80): pid=13975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/9/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 268.807827][ T30] audit: type=1804 audit(1718534667.809:81): pid=13976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/9/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 268.843720][ T30] audit: type=1800 audit(1718534667.849:82): pid=13975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1943 res=0 errno=0 [ 268.901596][T13969] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.005105][ T9375] hsr_slave_0: left promiscuous mode [ 269.045969][ T9375] hsr_slave_1: left promiscuous mode [ 269.059653][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.068371][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.107616][ T9375] veth1_macvtap: left promiscuous mode [ 269.113500][ T9375] veth0_macvtap: left promiscuous mode [ 269.119504][ T9375] veth1_vlan: left promiscuous mode [ 269.125341][ T9375] veth0_vlan: left promiscuous mode [ 269.191758][T13989] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 269.294550][ T9375] infiniband syz2: set down [ 269.427492][ T9375] infiniband syz0: set down [ 270.169167][ T5113] Bluetooth: hci1: command tx timeout [ 270.492375][ T9375] team0 (unregistering): Port device team_slave_1 removed [ 270.513565][ T9377] smc: removing ib device syz2 [ 270.554489][ T9375] team0 (unregistering): Port device team_slave_0 removed [ 270.758201][ T30] audit: type=1804 audit(1718534669.809:83): pid=14031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/20/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 270.832480][ T30] audit: type=1804 audit(1718534669.879:84): pid=14031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/20/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 270.970646][ T29] smc: removing ib device syz0 [ 270.983495][T13969] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.026899][T13997] C: entered allmulticast mode [ 271.032219][T13996] C: left allmulticast mode [ 271.041452][ T25] lo speed is unknown, defaulting to 1000 [ 271.049865][T14010] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 271.216239][T13969] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.626846][T13889] chnl_net:caif_netlink_parms(): no params data found [ 271.853888][T14038] ªªªªª»: renamed from veth0_vlan (while UP) [ 272.002454][T14046] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.230928][T14049] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 272.246367][ T5115] Bluetooth: hci1: command tx timeout [ 272.286111][T14049] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.310428][T14049] bridge_slave_0: entered allmulticast mode [ 272.640402][T13969] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.862745][T14061] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 272.955702][T14061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.002738][T14061] batadv0: entered promiscuous mode [ 273.010318][T14061] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 273.019409][T14067] netem: change failed [ 273.065826][T13969] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.131332][T13969] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.226096][ T30] audit: type=1804 audit(1718534672.269:85): pid=14076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1923207918/syzkaller.OAaVOm/93/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 273.336535][ T30] audit: type=1804 audit(1718534672.329:86): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1923207918/syzkaller.OAaVOm/93/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 273.383620][ T5115] Bluetooth: hci0: command 0x0c20 tx timeout [ 273.413347][ T30] audit: type=1800 audit(1718534672.349:87): pid=14076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 273.544468][T13889] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.558414][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.573447][T13889] bridge_slave_0: entered allmulticast mode [ 273.644707][T13889] bridge_slave_0: entered promiscuous mode [ 273.719503][T13969] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.776405][T13889] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.806362][T13889] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.813634][T13889] bridge_slave_1: entered allmulticast mode [ 273.885734][T13889] bridge_slave_1: entered promiscuous mode [ 274.287352][T14094] ªªªªª»: renamed from veth0_vlan (while UP) [ 274.335302][ T5113] Bluetooth: hci1: command tx timeout [ 274.557003][T13889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.566945][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.649568][T13889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.856356][T14128] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.222832][T13889] team0: Port device team_slave_0 added [ 275.261094][T14132] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.306544][T14132] ip6gretap0: entered promiscuous mode [ 275.331842][T14143] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 275.478907][T13889] team0: Port device team_slave_1 added [ 275.769465][T13889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.836271][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.946149][T13889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.977987][T13889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.006357][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.072558][T13889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.185328][T13889] hsr_slave_0: entered promiscuous mode [ 276.208593][T13889] hsr_slave_1: entered promiscuous mode [ 276.231472][T14185] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20003 [ 276.240185][T13889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.256096][T13889] Cannot create hsr debugfs directory [ 276.271209][ T30] audit: type=1804 audit(1718534675.319:88): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/38/cgroup.controllers" dev="sda1" ino=1935 res=1 errno=0 [ 276.292329][T14192] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.599608][T14197] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.687088][ T9375] IPVS: stop unused estimator thread 0... [ 277.066587][T14225] ªªªªª»: renamed from veth0_vlan (while UP) [ 277.318592][T13889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.350122][T13889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.404267][T13889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.439531][T13889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.735686][T13889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.782657][T13889] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.819670][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.827065][ T5224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.863179][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.870443][ T5224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.994892][T13889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.040742][T13889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.350631][T14267] ªªªªª»: renamed from veth0_vlan (while UP) [ 278.438548][T14270] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.530963][T13889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.580785][T14270] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.656728][T14270] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.700358][T14280] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.730020][T14280] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.746935][T14280] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 278.791209][T14270] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.881215][T13889] veth0_vlan: entered promiscuous mode [ 278.914800][T13889] veth1_vlan: entered promiscuous mode [ 278.974054][T14270] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.001744][T14270] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.025505][T14270] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.079713][T14270] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.095597][T14299] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.217808][T13889] veth0_macvtap: entered promiscuous mode [ 279.224806][T14305] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.238693][T14305] ip6gretap0: entered promiscuous mode [ 279.273204][T14305] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.308513][T13889] veth1_macvtap: entered promiscuous mode [ 279.359243][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.384202][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.394357][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.416071][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.426551][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.447088][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.449685][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.476329][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.516556][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.544029][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.563550][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.576795][T13889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.621266][T14313] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 279.630680][T14313] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 279.639349][T14313] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 279.666304][T14313] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.695040][T14313] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 279.794688][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.812501][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.837884][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.857198][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.868816][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.879603][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.890573][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.901448][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.912732][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.946346][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.966089][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.000704][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.024129][T13889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.049730][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.112235][T14326] bond1: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.125993][T14326] bond1: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 280.138588][T14326] bond1: (slave ipvlan1): Error -95 calling set_mac_address [ 280.151638][T13889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.160910][T13889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.170307][T13889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.180170][T13889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.550453][ T2460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.567765][ T2460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.629456][ T2460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.641089][ T2460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.738667][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 280.916695][T14362] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.558653][T14403] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 282.861372][T14503] af_packet: tpacket_rcv: packet too big, clamped from 32854 to 3966. macoff=82 [ 282.933998][T14506] geneve2: entered promiscuous mode [ 282.945086][T14506] geneve2: entered allmulticast mode [ 283.140586][ T9376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.855634][ T9376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.045979][ T9376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.069151][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.081523][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.092061][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.108290][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.119930][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.136547][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.147954][T14552] __nla_validate_parse: 5 callbacks suppressed [ 284.147976][T14552] netlink: 30 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.502619][ T9376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.520792][T14566] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 284.705996][T14590] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.099607][ T9376] bridge_slave_1: left allmulticast mode [ 285.119192][ T9376] bridge_slave_1: left promiscuous mode [ 285.131711][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.157025][ T9376] bridge_slave_0: left allmulticast mode [ 285.169625][ T9376] bridge_slave_0: left promiscuous mode [ 285.181447][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.700546][ T9376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.712411][ T9376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.725049][ T9376] bond0 (unregistering): Released all slaves [ 285.862761][T14626] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.874207][T14626] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.948928][T14626] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 286.247464][ T5113] Bluetooth: hci1: command tx timeout [ 286.259460][T14555] chnl_net:caif_netlink_parms(): no params data found [ 286.588004][ T9376] hsr_slave_0: left promiscuous mode [ 286.608800][ T9376] hsr_slave_1: left promiscuous mode [ 286.617250][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.634645][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.643725][ T9376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.658671][ T9376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.691087][ T9376] veth1_macvtap: left promiscuous mode [ 286.696883][ T9376] veth0_macvtap: left promiscuous mode [ 286.702742][ T9376] veth1_vlan: left promiscuous mode [ 286.708291][ T9376] veth0_vlan: left promiscuous mode [ 287.394512][ T9376] team0 (unregistering): Port device team_slave_1 removed [ 287.440232][ T9376] team0 (unregistering): Port device team_slave_0 removed [ 288.236509][T14555] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.265785][T14555] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.296755][T14555] bridge_slave_0: entered allmulticast mode [ 288.325655][T14555] bridge_slave_0: entered promiscuous mode [ 288.332277][ T5113] Bluetooth: hci1: command tx timeout [ 288.368439][T14555] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.375642][T14555] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.396411][T14555] bridge_slave_1: entered allmulticast mode [ 288.412178][T14555] bridge_slave_1: entered promiscuous mode [ 288.560281][T14555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.609859][T14555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.767620][T14555] team0: Port device team_slave_0 added [ 288.820884][T14555] team0: Port device team_slave_1 added [ 288.966987][T14555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.986164][T14555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.027078][T14555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.053817][T14555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.071073][T14555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.106157][T14555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.348136][T14555] hsr_slave_0: entered promiscuous mode [ 289.361639][T14753] sctp: [Deprecated]: syz-executor.4 (pid 14753) Use of int in max_burst socket option deprecated. [ 289.361639][T14753] Use struct sctp_assoc_value instead [ 289.393491][T14555] hsr_slave_1: entered promiscuous mode [ 289.403674][T14555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.426481][T14555] Cannot create hsr debugfs directory [ 289.781523][T14776] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 289.824309][T14776] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.406718][ T5113] Bluetooth: hci1: command tx timeout [ 290.615864][T14818] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.659853][T14818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.687849][T14555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.708070][T14555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.730498][T14818] tipc: Started in network mode [ 290.735428][T14818] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 290.756798][T14818] tipc: Enabled bearer , priority 10 [ 290.769263][T14555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.776818][T14818] Bluetooth: hci3: invalid len left 7, exp >= 55 [ 290.789768][T14555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.817795][T14822] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 290.826159][T14822] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.878544][T14824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.196542][T14555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.279714][T14555] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.309228][T11540] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.316553][T11540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.342378][T14851] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.409309][T11540] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.416537][T11540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.521529][T14555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.816366][T14870] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 291.844917][T14870] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.879422][ T50] tipc: Node number set to 15444650 [ 292.044866][T14555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.112942][T14882] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.207316][T14555] veth0_vlan: entered promiscuous mode [ 292.244525][T14555] veth1_vlan: entered promiscuous mode [ 292.329749][T14555] veth0_macvtap: entered promiscuous mode [ 292.356689][T14555] veth1_macvtap: entered promiscuous mode [ 292.413837][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.435897][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.466334][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.493025][ T5113] Bluetooth: hci1: command tx timeout [ 292.507622][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.539661][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.585285][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.636177][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.662807][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.685128][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.699036][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.747816][T14555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.771503][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.783841][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.798301][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.809368][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.819288][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.850757][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.896879][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.917741][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.956191][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.985182][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.016067][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.048035][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.080422][T14555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.124319][T14555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.143052][T14555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.160105][T14555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.176868][T14555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.408534][ T9379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.441221][ T9379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.545657][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.564173][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.143595][T14949] syzkaller1: entered promiscuous mode [ 294.149780][T14949] syzkaller1: entered allmulticast mode [ 294.488603][T14966] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.684610][T14976] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.706343][T14975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.726853][T14974] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.857783][T14980] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.407450][T14995] bond0: entered promiscuous mode [ 295.424601][T14995] bond_slave_0: entered promiscuous mode [ 295.437078][T14995] bond_slave_1: entered promiscuous mode [ 295.476122][T14998] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.510960][T14997] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.924509][ T9379] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.252722][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.338673][T15034] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.721530][ T9379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.797717][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.811136][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.826350][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.853862][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.863259][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.892327][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.023877][ T9379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.056328][T15060] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.329283][ T9379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.694579][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.885780][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.173351][ T9379] bridge_slave_1: left allmulticast mode [ 298.191636][ T9379] bridge_slave_1: left promiscuous mode [ 298.201971][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.220104][ T9379] bridge_slave_0: left allmulticast mode [ 298.230506][ T9379] bridge_slave_0: left promiscuous mode [ 298.242060][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.966806][ T5113] Bluetooth: hci1: command tx timeout [ 299.112672][ T9379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.132742][ T9379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.151626][ T9379] bond0 (unregistering): Released all slaves [ 299.233498][T15050] chnl_net:caif_netlink_parms(): no params data found [ 299.476214][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 299.597527][T15050] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.624870][T15050] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.636642][T15050] bridge_slave_0: entered allmulticast mode [ 299.654474][T15050] bridge_slave_0: entered promiscuous mode [ 299.715487][T15050] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.726798][T15050] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.741155][T15050] bridge_slave_1: entered allmulticast mode [ 299.759434][T15050] bridge_slave_1: entered promiscuous mode [ 299.894088][ T9379] hsr_slave_0: left promiscuous mode [ 299.900088][T15146] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 299.909312][T15146] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.920117][ T9379] hsr_slave_1: left promiscuous mode [ 299.947706][ T9379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.966627][ T9379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.997283][ T9379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.004753][ T9379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.058878][ T9379] veth1_macvtap: left promiscuous mode [ 300.064498][ T9379] veth0_macvtap: left promiscuous mode [ 300.088886][ T9379] veth1_vlan: left promiscuous mode [ 300.102836][ T9379] veth0_vlan: left promiscuous mode [ 300.836367][T15159] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 300.852458][T15159] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.048002][ T5113] Bluetooth: hci1: command tx timeout [ 301.305163][ T9379] team0 (unregistering): Port device team_slave_1 removed [ 301.350774][ T9379] team0 (unregistering): Port device team_slave_0 removed [ 301.834702][T15050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.932953][T15050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.117371][T15050] team0: Port device team_slave_0 added [ 302.133199][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.165434][T15050] team0: Port device team_slave_1 added [ 302.217639][T15187] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.317828][T15050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.350959][T15050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.427051][T15050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.470235][T15050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.489850][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.491028][T15050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.539283][T15050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.804183][T15050] hsr_slave_0: entered promiscuous mode [ 302.823360][T15050] hsr_slave_1: entered promiscuous mode [ 302.836392][T15050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.850308][T15050] Cannot create hsr debugfs directory [ 302.948656][T15210] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 303.126471][ T5113] Bluetooth: hci1: command tx timeout [ 303.387249][T15221] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 303.460122][T15226] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 303.896965][T15242] tipc: Can't bind to reserved service type 0 [ 304.059855][T15050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.095782][T15050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.114233][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.124165][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.136476][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.139372][T15050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.162197][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.177094][ T5115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.188439][T15050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.199093][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.809586][T15260] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.820287][T15260] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 304.828598][T15260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.856475][T15248] chnl_net:caif_netlink_parms(): no params data found [ 304.895676][T15050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.103081][ T30] audit: type=1804 audit(1718534704.149:89): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/148/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 305.107068][T15050] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.188587][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.195803][T11541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.206482][ T5113] Bluetooth: hci1: command tx timeout [ 305.226472][ T30] audit: type=1804 audit(1718534704.189:90): pid=15278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/148/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 305.284068][T15248] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.312411][T15248] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.337839][ T30] audit: type=1804 audit(1718534704.189:91): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/148/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 305.364423][T15248] bridge_slave_0: entered allmulticast mode [ 305.391147][T15248] bridge_slave_0: entered promiscuous mode [ 305.413366][T11540] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.420629][T11540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.455253][T15287] vlan2: entered allmulticast mode [ 305.470246][T15287] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 305.507112][T15287] mac80211_hwsim hwsim30 wlan1: left allmulticast mode [ 305.554444][T15248] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.566392][T15248] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.573636][T15248] bridge_slave_1: entered allmulticast mode [ 305.589250][T15248] bridge_slave_1: entered promiscuous mode [ 305.760236][T15248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.816920][T15248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.919207][T15309] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 305.929813][T15309] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.939805][T15309] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 305.980877][T15248] team0: Port device team_slave_0 added [ 306.012222][T15248] team0: Port device team_slave_1 added [ 306.146331][T15248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.166640][T15248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.206273][T15248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.235002][T15248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.247438][ T5113] Bluetooth: hci0: command tx timeout [ 306.251266][T15248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.326829][T15248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.503495][T15050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.594975][T15248] hsr_slave_0: entered promiscuous mode [ 306.629394][T15248] hsr_slave_1: entered promiscuous mode [ 306.655874][T15248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.663895][T15248] Cannot create hsr debugfs directory [ 306.848553][T15331] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.876766][T15331] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 306.898789][T15331] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.926173][T15334] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 307.363066][T15248] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.480687][T15050] veth0_vlan: entered promiscuous mode [ 307.497886][T15350] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.543454][T15050] veth1_vlan: entered promiscuous mode [ 307.588072][T15248] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.694174][T15248] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.710382][T15360] No such timeout policy "syz0" [ 307.792714][T15248] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.824331][T15050] veth0_macvtap: entered promiscuous mode [ 307.851966][T15050] veth1_macvtap: entered promiscuous mode [ 307.884568][T15366] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.904932][T15366] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 307.923796][T15366] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.330356][ T5113] Bluetooth: hci0: command tx timeout [ 309.956243][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.996150][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.015414][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.027143][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.037238][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.051632][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.063452][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.074833][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.084853][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.096936][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.110374][T15050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.121870][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.132602][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.144880][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.155485][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.165702][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.177717][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.188150][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.199069][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.208966][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.219734][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.229658][T15050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.240320][T15050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.252410][T15050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.276620][T15385] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 310.284899][T15385] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.352209][T15050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.367423][T15050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.376917][T15050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.385687][T15050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.416483][ T5113] Bluetooth: hci0: command tx timeout [ 310.631541][T15248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.739593][T15248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.780960][T15248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.813289][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.834690][T15248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.927385][ T9376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.972221][ T9376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.152567][T15409] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.188766][T15409] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 311.241320][T15409] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.315112][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.325226][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.670201][T15248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.704647][T15248] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.772159][T11540] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.779362][T11540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.803678][T15434] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 311.818726][T11540] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.825949][T11540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.969374][T15440] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 312.020084][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.184481][T15443] ip6gretap0: entered promiscuous mode [ 312.210295][T15443] batadv_slave_0: entered promiscuous mode [ 312.256711][T15443] ip6gretap0: left promiscuous mode [ 312.264040][T15443] batadv_slave_0: left promiscuous mode [ 312.304635][T15456] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.323009][T15456] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 312.366054][T15456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.418729][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.497906][ T5113] Bluetooth: hci0: command tx timeout [ 312.670649][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.810640][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.922433][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.932128][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.941055][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.959757][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.969035][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 312.985232][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.215165][T15479] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.278237][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.306499][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.376599][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.556491][T15490] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 313.569425][ T30] audit: type=1804 audit(1718534712.619:92): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1923207918/syzkaller.OAaVOm/224/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 313.606483][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.662699][T15248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.685076][ T63] bridge_slave_1: left allmulticast mode [ 313.691666][ T63] bridge_slave_1: left promiscuous mode [ 313.701985][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.717811][ T63] bridge_slave_0: left allmulticast mode [ 313.727781][ T63] bridge_slave_0: left promiscuous mode [ 313.734408][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.393908][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.408741][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.422828][ T63] bond0 (unregistering): Released all slaves [ 314.492606][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.543035][T15506] vlan2: entered allmulticast mode [ 314.840398][T15517] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 314.929983][T15248] veth0_vlan: entered promiscuous mode [ 315.010911][T15469] chnl_net:caif_netlink_parms(): no params data found [ 315.056817][ T5113] Bluetooth: hci1: command tx timeout [ 315.082511][ T63] hsr_slave_0: left promiscuous mode [ 315.114598][ T63] hsr_slave_1: left promiscuous mode [ 315.128794][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.161201][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.190950][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.202985][T15532] xt_TCPMSS: Only works on TCP SYN packets [ 315.211972][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.264926][ T63] veth1_macvtap: left promiscuous mode [ 315.270876][ T63] veth0_macvtap: left promiscuous mode [ 315.279071][ T63] veth1_vlan: left promiscuous mode [ 315.284680][ T63] veth0_vlan: left promiscuous mode [ 315.939642][ T63] team0 (unregistering): Port device team_slave_1 removed [ 315.991362][ T63] team0 (unregistering): Port device team_slave_0 removed [ 316.526235][T15533] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.557450][T15528] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.598386][T15248] veth1_vlan: entered promiscuous mode [ 316.664116][T15541] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 316.863178][T15552] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 316.915694][T15469] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.946336][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.954140][T15469] bridge_slave_0: entered allmulticast mode [ 316.975394][T15469] bridge_slave_0: entered promiscuous mode [ 317.003303][T15469] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.022929][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.041120][T15469] bridge_slave_1: entered allmulticast mode [ 317.066291][T15469] bridge_slave_1: entered promiscuous mode [ 317.126290][ T5113] Bluetooth: hci1: command tx timeout [ 317.162370][T15248] veth0_macvtap: entered promiscuous mode [ 317.240619][T15469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.270407][T15248] veth1_macvtap: entered promiscuous mode [ 317.302608][T15469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.372913][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.379467][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.383854][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.439322][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.460127][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.501744][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.527542][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.548684][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.569185][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.589926][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.606307][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.626106][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.643176][T15248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.683666][T15574] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.713091][ T30] audit: type=1804 audit(1718534716.759:93): pid=15558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/181/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 317.812411][T15574] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.884032][T15469] team0: Port device team_slave_0 added [ 317.909481][T15469] team0: Port device team_slave_1 added [ 317.948271][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.960201][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.970615][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.981886][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.992048][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.004265][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.015433][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.026091][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.035913][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.046593][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.061745][T15248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.080674][T15248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.112464][T15248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.141411][T15574] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.192449][T15579] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.221457][T15248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.242420][T15248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.254463][T15248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.263814][T15248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.278164][T15469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.300209][T15469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.351079][T15469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.365431][T15574] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.427854][T15469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.457500][T15469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.483661][T15469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.574761][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.583791][ T63] bridge_slave_1: left allmulticast mode [ 318.597051][ T63] bridge_slave_1: left promiscuous mode [ 318.602957][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.604123][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.621722][ T63] bridge_slave_0: left allmulticast mode [ 318.628832][ T63] bridge_slave_0: left promiscuous mode [ 318.634615][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.139588][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.152023][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.163535][ T63] bond0 (unregistering): Released all slaves [ 319.211973][ T5113] Bluetooth: hci1: command tx timeout [ 319.325758][T15469] hsr_slave_0: entered promiscuous mode [ 319.333250][T15469] hsr_slave_1: entered promiscuous mode [ 319.340724][T15469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.348528][T15469] Cannot create hsr debugfs directory [ 319.419416][ T9376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.447866][T15574] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.460207][ T9376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.657893][T15574] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.675472][T15598] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 319.696179][T15598] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.706507][T15598] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 319.798315][T15574] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.844231][T15615] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 319.966300][T15618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.011587][T15574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.081013][ T63] hsr_slave_0: left promiscuous mode [ 320.131192][ T63] hsr_slave_1: left promiscuous mode [ 320.140043][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.156839][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.200495][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.207971][ T30] audit: type=1804 audit(1718534719.249:94): pid=15620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/186/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 320.276847][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.344138][ T63] dummy0: left allmulticast mode [ 320.357368][ T63] dummy0: left promiscuous mode [ 320.374131][ T63] veth1_macvtap: left promiscuous mode [ 320.386263][ T63] veth0_macvtap: left promiscuous mode [ 320.396473][ T63] veth1_vlan: left promiscuous mode [ 320.404011][ T63] veth0_vlan: left promiscuous mode [ 321.089999][ T30] audit: type=1804 audit(1718534720.139:95): pid=15654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/187/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 321.197807][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.306138][ T5113] Bluetooth: hci1: command tx timeout [ 321.525788][ T63] team0 (unregistering): Port device team_slave_1 removed [ 321.580860][ T63] team0 (unregistering): Port device team_slave_0 removed [ 322.130451][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 322.600941][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.734974][T15693] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 322.879129][T15703] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 322.881277][T15704] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 322.907168][T15704] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.916056][T15703] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.051210][ T63] IPVS: stop unused estimator thread 0... [ 323.153975][ T30] audit: type=1804 audit(1718534722.199:96): pid=15707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2363845650/syzkaller.dMm7jX/189/cgroup.controllers" dev="sda1" ino=1934 res=1 errno=0 [ 323.319276][T15469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.334386][T15469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.363028][T15469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.441959][T15469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.668381][T15727] xt_limit: Overflow, try lower: 262144/524288 [ 323.812034][T15729] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 324.226501][T15742] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 324.617491][T15751] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.910895][ T5125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.927396][ T5125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.935272][ T5125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.943626][ T5125] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.952230][ T5125] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 353.959640][ T5125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.216671][ T5125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.232933][ T5125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.241069][ T5125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.257071][ T5125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.264832][ T5125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 354.272445][ T5125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.790861][ T5125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.800688][ T5125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.808796][ T5125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.817196][ T5125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.824955][ T5125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 354.832513][ T5125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 354.943475][ T5113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 354.965244][ T5113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 354.975424][ T5113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 354.985800][ T5113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 355.016642][ T5113] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 355.024047][ T5113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 355.286187][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 356.006562][ T5115] Bluetooth: hci5: command tx timeout [ 356.326190][ T5115] Bluetooth: hci6: command tx timeout [ 356.886273][ T5115] Bluetooth: hci7: command tx timeout [ 357.046467][ T5115] Bluetooth: hci8: command tx timeout [ 358.086521][ T5115] Bluetooth: hci5: command tx timeout [ 358.406419][ T5115] Bluetooth: hci6: command tx timeout [ 358.966676][ T5115] Bluetooth: hci7: command tx timeout [ 359.127448][ T5115] Bluetooth: hci8: command tx timeout [ 360.167843][ T5115] Bluetooth: hci5: command tx timeout [ 360.486315][ T5115] Bluetooth: hci6: command tx timeout [ 361.046230][ T5115] Bluetooth: hci7: command tx timeout [ 361.206121][ T5115] Bluetooth: hci8: command tx timeout [ 362.246541][ T5115] Bluetooth: hci5: command tx timeout [ 362.566336][ T5115] Bluetooth: hci6: command tx timeout [ 363.126251][ T5115] Bluetooth: hci7: command tx timeout [ 363.286295][ T5115] Bluetooth: hci8: command tx timeout [ 377.711623][ T5113] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 377.720188][ T5113] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 377.744564][ T5113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 377.753577][ T5113] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 377.767522][ T5113] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 377.779365][ T5113] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 378.822719][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.829130][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.846412][ T5115] Bluetooth: hci9: command tx timeout [ 380.888891][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 381.927421][ T5113] Bluetooth: hci9: command tx timeout [ 384.006352][ T5113] Bluetooth: hci9: command tx timeout [ 386.086475][ T5113] Bluetooth: hci9: command tx timeout [ 418.837053][ T5115] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 418.847261][ T5115] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 418.855501][ T5115] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 418.864405][ T5115] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 418.882177][ T5115] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 418.889710][ T5115] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 419.346974][ T5113] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 419.369367][ T5113] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 419.378854][ T5113] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 419.396248][ T5113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 419.403981][ T5113] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 419.417283][ T5113] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 419.956778][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 419.986540][ T5113] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 419.997375][ T5113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 420.008050][ T5113] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 420.036157][ T5113] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 420.043600][ T5113] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 420.122594][ T5113] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 420.136541][ T5113] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 420.144992][ T5113] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 420.153652][ T5113] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 420.162433][ T5113] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 420.169997][ T5113] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 420.976233][ T5113] Bluetooth: hci10: command tx timeout [ 421.456086][ T5113] Bluetooth: hci11: command tx timeout [ 422.086351][ T5113] Bluetooth: hci12: command tx timeout [ 422.246246][ T5113] Bluetooth: hci13: command tx timeout [ 423.056318][ T5113] Bluetooth: hci10: command tx timeout [ 423.526080][ T5113] Bluetooth: hci11: command tx timeout [ 424.166232][ T5113] Bluetooth: hci12: command tx timeout [ 424.336292][ T5113] Bluetooth: hci13: command tx timeout [ 425.126413][ T5115] Bluetooth: hci10: command tx timeout [ 425.606235][ T5115] Bluetooth: hci11: command tx timeout [ 426.246247][ T5115] Bluetooth: hci12: command tx timeout [ 426.406217][ T5115] Bluetooth: hci13: command tx timeout [ 426.970566][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 427.206321][ T5113] Bluetooth: hci10: command tx timeout [ 427.686313][ T5113] Bluetooth: hci11: command tx timeout [ 428.326572][ T5113] Bluetooth: hci12: command tx timeout [ 428.486350][ T5113] Bluetooth: hci13: command tx timeout [ 437.213027][ T5115] Bluetooth: hci1: command 0x0406 tx timeout [ 440.253005][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.265747][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.870231][ T5113] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 442.879670][ T5113] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 442.888383][ T5113] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 442.926163][ T5113] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 442.935181][ T5113] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 442.943680][ T5113] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 444.966134][ T5115] Bluetooth: hci14: command tx timeout [ 447.056203][ T5115] Bluetooth: hci14: command tx timeout [ 449.126371][ T5115] Bluetooth: hci14: command tx timeout [ 451.206538][ T5115] Bluetooth: hci14: command tx timeout [ 476.726285][ T31] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 476.733962][ T31] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 476.755507][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.764325][ T31] task:kworker/u8:0 state:D stack:21168 pid:11 tgid:11 ppid:2 flags:0x00004000 2024/06/16 10:47:55 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 476.786028][ T31] Workqueue: netns cleanup_net [ 476.790874][ T31] Call Trace: [ 476.794166][ T31] [ 476.846109][ T31] __schedule+0x17e8/0x4a20 [ 476.850708][ T31] ? __pfx___schedule+0x10/0x10 [ 476.855592][ T31] ? __pfx_lock_release+0x10/0x10 [ 476.873750][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 476.879561][ T31] ? kthread_data+0x52/0xd0 [ 476.884088][ T31] ? schedule+0x90/0x320 [ 476.898970][ T31] ? wq_worker_sleeping+0x66/0x240 [ 476.904624][ T31] ? schedule+0x90/0x320 [ 476.915105][ T31] schedule+0x14b/0x320 [ 476.922509][ T31] schedule_preempt_disabled+0x13/0x30 [ 476.928405][ T31] __mutex_lock+0x6a4/0xd70 [ 476.932951][ T31] ? __mutex_lock+0x527/0xd70 [ 476.946121][ T31] ? wg_netns_pre_exit+0x1f/0x1e0 [ 476.951196][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 476.968812][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 476.974233][ T31] ? cleanup_net+0x427/0xcc0 [ 476.979217][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 476.984967][ T31] wg_netns_pre_exit+0x1f/0x1e0 [ 477.001314][ T31] cleanup_net+0x615/0xcc0 [ 477.011885][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 477.021954][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 477.027718][ T31] ? process_scheduled_works+0x945/0x1830 [ 477.033482][ T31] process_scheduled_works+0xa2c/0x1830 [ 477.049515][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.055560][ T31] ? assign_work+0x364/0x3d0 [ 477.072726][ T31] worker_thread+0x86d/0xd70 [ 477.078712][ T31] ? __kthread_parkme+0x169/0x1d0 [ 477.083784][ T31] ? __pfx_worker_thread+0x10/0x10 [ 477.099052][ T31] kthread+0x2f0/0x390 [ 477.103169][ T31] ? __pfx_worker_thread+0x10/0x10 [ 477.120292][ T31] ? __pfx_kthread+0x10/0x10 [ 477.124935][ T31] ret_from_fork+0x4b/0x80 [ 477.129716][ T31] ? __pfx_kthread+0x10/0x10 [ 477.134329][ T31] ret_from_fork_asm+0x1a/0x30 [ 477.146148][ T31] [ 477.153914][ T31] INFO: task kworker/u8:9:9376 blocked for more than 143 seconds. [ 477.161962][ T31] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 477.176757][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.185450][ T31] task:kworker/u8:9 state:D stack:22992 pid:9376 tgid:9376 ppid:2 flags:0x00004000 [ 477.210289][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 477.224813][ T31] Call Trace: [ 477.228308][ T31] [ 477.231268][ T31] __schedule+0x17e8/0x4a20 [ 477.235834][ T31] ? __pfx___schedule+0x10/0x10 [ 477.251130][ T31] ? __pfx_lock_release+0x10/0x10 [ 477.261640][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 477.267408][ T31] ? kthread_data+0x52/0xd0 [ 477.271940][ T31] ? schedule+0x90/0x320 [ 477.286124][ T31] ? wq_worker_sleeping+0x66/0x240 [ 477.291272][ T31] ? schedule+0x90/0x320 [ 477.295527][ T31] schedule+0x14b/0x320 [ 477.310433][ T31] schedule_preempt_disabled+0x13/0x30 [ 477.325567][ T31] __mutex_lock+0x6a4/0xd70 [ 477.330478][ T31] ? mark_lock+0x9a/0x350 [ 477.334844][ T31] ? __mutex_lock+0x527/0xd70 [ 477.346052][ T31] ? addrconf_dad_work+0xd0/0x16f0 [ 477.351222][ T31] ? __pfx___mutex_lock+0x10/0x10 [