last executing test programs: 2.822353322s ago: executing program 3 (id=9868): r0 = socket(0x25, 0x6, 0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8f, 0xa8, @random="37cf4e5a65e1df905c09ad086d6b92a57547a4cc28f2c9f29a3a744fce03425351140c19e103cfc18aaa8e080bfe260731bf94e69312517c260fe98cb52b381b98ee0cc573fa28ca52abe62dca3b51d43499defa0351402af9491659e8515f4fe04192ab7cf71889553a16fb6a78e458b8bc19338261f19cc9447c2ec2a56261eeae4801e453d48177214a"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40080}, 0x488c0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x2c}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdd}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}]}, 0x4c}}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x34}}, 0x4000800) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x308, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xd}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040850}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xe8) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000009c0)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, 0x1405, 0x400, 0x70bd2a, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc010}, 0x20004880) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000b80), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r10, 0x10, 0x200, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x40000) r11 = accept4(0xffffffffffffffff, &(0x7f0000000c80)=@nfc_llcp, &(0x7f0000000d00)=0x80, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) sendmsg$nl_xfrm(r11, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)=@delpolicy={0x100, 0x14, 0x4, 0x70bd29, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x4e24, 0x8, 0x4e23, 0x4, 0x2, 0xa0, 0x20, 0x2b, r3, r9}, 0x6e6bb4, 0x1}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd26, 0x70bd28, 0x70bd29, 0x70bd2c, 0x3, [0x1, 0x8, 0x5, 0x9, 0x3a85]}}, @extra_flags={0x8, 0x18, 0x8000}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010100}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2d, 0x70bd25, 0x70bd2b, 0x70bd28, 0x5, [0xbd80, 0xd, 0x6, 0x1a91, 0x4, 0x101, 0x6c8]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x810}, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f40)) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001b40)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000fc0)={0xb18, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x5b9, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x2, 0x6}, @value=@ver_80211n={0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x43, @void, [{0xdd, 0x5d, "11025d6f3282bf1ff42d94626557677486ed9c3e16c4a9ae1ef657284c068b5b1de6e682c26c19427b6687babfa6ea51126dec6aa920499b39ae8f432225cbdaa528bce325c85d2fb96f18c48095fc8deabddef4c60616e65f25d1972d"}, {0xdd, 0x3d, "d10a59445931a91421fc8ccb8c048f6e91223d7265dc181616a3173c1cf77287b761042c3b1668fd35b40823751f9ea786537700f61fbbadcf8c010c51"}, {0xdd, 0xf3, "d8dab8c1b5bf48abfb021285fd8333916e52d4655795ed53f935268ac824138c986547c6891cc2d380daba53029171efd14a91116ac8d218146d8bf8758e274db53beec2f87b0cce65754735c4250eca8e72c30e1f7e008aece71bf1bc10a82cca1b2cd7e56f277eeccff0e9ff2faee7bef6ed09476c172ac028a6d20344c9c7103c52bdc3ad5926e4988cef76466b82f09eed2e00d94df7d6a13a5363514b20d5f19f6c7c81f9d30fe2123a1646820c501a42e74e564d49a15cccc21d6e600f7c48cec2468052d996ebae206ea42d9f0dd890889b1d7d812d84c9c6a5c0d197559ce0d0129ce81b7437941d0162cb49dc1738"}, {0xdd, 0xf2, "a19e097cb75d50c8e21eac87f0efd7e9ff6d0df1a861d8ea786b00528d6bf4aece8cc4402c9277d54c522916b0c6891ab9358c912600e56f656189ed6b1c6df15a88aa6c14af4eb94e8deaa94f341088fd3ecbfa5bc3c32839f2e558e322f5e0f27ea729078dc53477c10acb9f74a0fe4fe0f19dafa99e1f39e20932867c00992b18a246462b461180ddf1e641bc9032331e43dffaba7c8af32a067fd2a0a3e6f63644297a49e5f5de75bb3c80f2d20ce6f63740b10f036015d33c445c72b5335976ef7ff9c54252a3930fad8975690e75427736be311a84e2e6fc1886e587ef2e70cfee14fa27faff4b86f35b53f4b560f9"}, {0xdd, 0xd3, "896c8f11e30542068af05c3721ca037bb742cd3c717199fb5df562c05b0e214138f34c56ccdb8b7bb7f5eed05f92df89d61c75a64a765997e69c9ec2ef88500cb9960743de74678916a3a231d0d9a4ce42f757f61cc28e19a632d6ee8f3db29089cfed60d4e161a94654cc36cdcbcd07adb04e2f11cd9d1998e13e8bee80baaf0411f9c6e613df30f7098d514815182778ceb1abd24851f91098c36dabf25c9948bcb701512783f8ab84634a488bcfd87048a4d8a866f542ca1bafb55cac8c5f3e6ff4c06de87e4ba071d296d2de53326e20ac"}, {0xdd, 0xf3, "681b41e2ddb24646df69f9f4f139628afdb7d1e18138366b1e09c276e34cf3234fd64992e01613085bdd8a40927cf0e973215c2d41ad379a2209a3dab7afe6d4a4ae830bea2f4604dc3e91fdc4da8d8bb48049b442ab61b7dae45ea6535cd214aa4ec13848c7674a40fff87a4a15b32206e232041a1ff0745117b179679e987a55379bb28cbda5076dc1cfa4c3a0d334fbbb1e37d474f70bf510e052b10b0d5bd2518130543943bf742edf9729ba30635a090e47afcb4f2eac4c26d95e4bf0fcc4a6ba11c3c2ded93b190ce8331335bfb46d6601f24c1718070be8020b45ebfb77b8093482a21642e6929b998296bd00491737"}, {0xdd, 0x25, "5d85b31a2473e7b5cb3887f2ec9ec0b3886f8efcd18e598f971276e51cdb0df5548c8c0ab0"}, {0xdd, 0xb8, "2b49cbb9480315a07c1565d8854d690e5273f5ef792f89175b3d83a5c3801f07382d6a65f3681338e4774b320d04ef8beb2b311764b765601fc6fea181e3a158e93a1429ea572a852398760bfee3893a58eb9a8fd5b066b897555f3b26f279959ba67d5ad6e8641307a6b4da83418b4ba3da81df28f8eaae88a98224049ce134126d2f59b080f72f83194c2d032da87ee799d689476f01b3cc23484a4b543e74308afa41a6ac099f54a03b66e32d1c3cc05785db495c4393"}, {0xdd, 0x5f, "7e1163de4fd5c4d95a9f3def8189caa890dad662df264da4bd0cd56b4f6de3499443eac893635b1ae2f97637fcad1734b72b1e39cdc9aa697ffc7aef09c9a09707ca823a2bd7e80b867ddf48b8e8b026d5c7670bc7f5ae41773eac4d5d2b4b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1d06}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x77}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_FRAME={0x51f, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0xb}, @broadcast, @device_a, @from_mac=@device_b, {0x1}}, @void, @val={0x1, 0x1, [{0x30, 0x1}]}, @val={0x3, 0x1, 0x74}, @val={0x2d, 0x1a, {0x800, 0x3, 0x5, 0x0, {0x132f, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2}, 0x6, 0x593, 0xfd}}, @val={0x72, 0x6}, [{0xdd, 0x97, "0faf0ee212282b6da5f9f7be642829a841872b5a645b90896929ca8d502391bf3dcde305b9a4effe956feb8b5572886f2b60d1efbc0ed7d2acf7c26d674aacc04e64a012de8a6fa3c0e313bd60ec6c1a56426c7702c134fc6d0bc577aa65a9977a8656a5357b48ab4829e1f139634e0737bd37330adf020a40494caea13ae9200b0c76551a2786ecf082ef52983a14accc22b74499f76a"}, {0xdd, 0x9, "97e974ba419a517a12"}, {0xdd, 0xc1, "5da5c7dd9d5160edbc507347f6b10668f7c32160a8d4f0d8d137784ff25e69fd8e5d90e2662d21bc482848cfbe5d4949323e2a059714914215aad4d3a0c9803b2e6b97709038f5b8197784a2921d2e48140309161fb32b30788aa33401daadddb78b0ac9091182e595ef14dcd2572c5d7d6ae1d583f2ff0ad43248952766c04889adc529804f689a7fd453d9508a83ca08ce4d6b34c4e6f5af78f1b52b7a8097e43ab2d345662a74201810bc48eaa622743837243e2d9f5963a316045aa02e2ddf"}, {0xdd, 0x6d, "b62ef6a6df98a04327edac00fe82d72011ed78b74397c01f6e5d08d2470ed236f78e26dfe6367e3758642c3b51abfe65caa413a363f99290095405aeafaa29b05e10f44b81408068b3bdb3ae76ef754232e4c45a3025fc1a4726a99cda15c703489abafb44619868919497ebdf"}, {0xdd, 0x5e, "8a2712447110a209c2f147c502a1a8a9145fed185bab4581fd502136761fdeb6b91a3de0cb41a83706793251118b71c9dd0d2c3823a4e38b92ff85813441079d5bf1a94475cd5812e9f598f1f3e75b780cef1f45cba02d5c3bdf53a09455"}, {0xdd, 0x39, "1070f6709abdeee29402a69f0c80d13db3bc7969615f7f3406046323c6abeccbe38c19d52fc71f9e5a13d28f19312fe2a255c802a42a415fbe"}, {0xdd, 0xb3, "499794c4075287661c668348e0919cfe93f1c2ac675f00276ff8910f2b6ce0a4f40694a35fd9d3a0359b1e4a36ee9bdf128e12222a917fbdb93cfe070c153aab1db6ef2808759de2fbc7d60ee838fb5abf1857336b48126167e3344e5106aba71b5e13b2e9d5a31c506e0ebdabbc1dd7d03fc941226227f13e325a4e5be8b161c3483f93881a2fb3ad26587a590d7edc3dfd7b081908f9313e899fe90ce22a1432ec1a9ecde6fe709bf4d5e9fbfc13dec5236d"}, {0xdd, 0xcd, "f26cbd9c1670323fcb301dedf38c9d3235ef9f73cd25bc1a820c2bc6f3b434c88a6ef53c500c11dc17a9a8239f8568e434030d956059e1e4bbef2e90b5fe4ec92208e90b9a77cbb8903c71efb421e2ac2afb4a3a51a81f07856c7d7317e42da1d25cbaf5b60eccab9a6a4cff2686935d0e791925230b8fc2511a56c74bfbced3faebb1f1e308f15863d31736cc40c284f422d4bd969f3639f5a876546d1d1faf5436833eeec4bbe8367d31df2a44ab238ca92187529257234eba795256a2d8c9bcda9a88c672e9e70dc9d6350a"}, {0xdd, 0xe2, "c52183cf3caf540a985c8b74a74f88d49b703415d9152e07846d51802f60cc73381e2e59d0c692a9bd3fdb3634b558c92a5f0803866a81e7dcd0b8b3ae95dec11e020fc65f07b8f8416cd8c701527ab68ee13421701e47f391a2eae27f0df11593cb172d42ca3f63eea21b7200adb2a107d9e7992760de6318fcf6cbeba6a7923ef060fcf58f0fbdab7898e9fba3412778ca28a77631fcc09bdbcffab3285424126c1aa8d84a11724aa6ea1d3cda420cc76fd89859290ff3e618c543932e87e7a829b2d1903e1bc4e87d0446196f958b86994c161c559cf5f13f3f0b197470a71570"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xb18}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b80)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000001bc0)='blkio.bfq.time\x00', 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000003300)={{r13, &(0x7f0000001c00)='firstname\x00', 0x2c001, &(0x7f0000001c40)={@_ha_fsid={[0x40000000, 0x80000001]}, {0x1, 0x3, 0xc3, 0xc}}, 0xffffff00, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4f8}, 0x7, &(0x7f0000003200)=[{0x1, 0xff, &(0x7f0000001d00)='IPVS\x00', &(0x7f0000001d40)="a1c3aee7f0de9208a86ab5e927281cf3ca8aa3a5be7710d50539f13b0ecbe314a87b41e1f8aaf092354d485bf7ac01596cb867fb1cc087d1d49ebf3c5c21626eb257ef46164204d0655316547af0c132c9957a1feeb2256320c5be264050521e0a0b08c58976961be359c2c555c458de5625291bb9f4f6583df4220d82ba362c0a8097bc5f185c3ad526d0dfa984a79423b0ed5fbe3588f52754f4ff451bf8c92bf492c1e747d68003958aab19336895e21bf04998bd26362c711969c588c6e47a5d67e25e08", 0xc6}, {0xfb8869a271c8cced, 0xfffffffc, &(0x7f0000001e40)='IPVS\x00', &(0x7f0000001e80)="4d09752b257ca8f96aa853", 0xb, 0x2}, {0x0, 0x9e55, &(0x7f0000001ec0)='\x00', &(0x7f0000001f00)="729c0ec2ec7e25201047c59066def05064584b38ae151426dd21b8a920d0a0fd83aaa935eb35f54c16cb", 0x2a, 0x18}, {0x2, 0x10001, &(0x7f0000001f40)='nfc\x00', &(0x7f0000001f80)="5ca923948ab0784acfbbfdf7fc3268667f436a29af1e793d9e27c6c597ac50066fbd2bb622fefb7aefce1a266918629e3a90ac31a049ec7398dd893e425d257095bfa73f8e436f5a49be0373fa753723f408647589f9415df52636904e1688af42910b08302aa8be", 0x68, 0x8}, {0x2, 0x86f, &(0x7f0000002000)='($:$&\x00', &(0x7f0000002040)="da5e170d2b08159f52a974a1f0f334f4baca036a7095e0ed0bd7d34749e74943464340e176647d38de3166854da2cae5d27c86a0f17adccfd179d7a76f8f", 0x3e, 0x8}, {0x0, 0x0, &(0x7f0000002080)='@\x93]&}!\x00', &(0x7f00000020c0)="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", 0x1000, 0x8}, {0x3, 0xfffffffb, &(0x7f00000030c0)='devlink\x00', &(0x7f0000003100)="0cf9fab514d98379c964123f34dc93378b046f8cce4f8362f10bd0d51dc607d966a632e24dca4c62b9f3a56845667f4df8ca912927eb67d91cb5205a6edac7b7290364d9d338f9780b0601fa50039980c6210f68457e300726f4a9c05ad9e49b511f1afdb09cd286abf745af4832f7e540af6d94c4c55a3d6569fc1c6e549973cbc380d05ae7f4c9353122dfd8d19ad4c20e3574b8bd9fa9906051ddc88d7394c8b76493a0829f8e731e1e43b0d3241a9fe2d33013e3f0b0ad37c1745c4eed04e4c78abc68fdee4f0faf01831691ec866d28839941951da40cadeac9441a6ec3fc", 0xe1, 0x10}]}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r14, &(0x7f0000004980)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004940)={&(0x7f0000003400)={0x152c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x828, 0x111, 0x0, 0x1, {0x824, 0x5, 0x0, 0x1, [{0x294, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x61}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc1d4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x209}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x290, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x226}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x224, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x17d8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xdff4f4270b8aedd6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x42}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d8}]}]}, {0x2a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa63d}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd2d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xf5bb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0xcc0, 0x111, 0x0, 0x1, {0xcbc, 0x5, 0x0, 0x1, [{0x384, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x38}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8672}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa50a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1d62}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x28}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x336}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x298, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x69d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2e61}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xab}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x46c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x44}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x4}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe4e6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2a}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8001}]}, 0x152c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 2.496808537s ago: executing program 3 (id=9870): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f0000000040)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="23ba8925b83af6f5175d2504e59c956778e49846d8b8d7c0212c42748a6a250638ceef2baaf723ff8eec5bd8429c3c110926f2fd4f00709fdf421e45689c4760db591dffd4cd71b8c087f2843c057cff38279019fcee4b9d29b6d2f3973e01e012e9635879fa96a52458c3cf81c04667b8d9fccb26d328ad26aba2a634eb2e7dcb853148d4d882a30eb85726d0b7b1a3634dfbc262e47f70e708091c88d294768fafca4a5d73f196662f93d62e81e2e546dbb4", 0xb3}], 0x1, &(0x7f0000000280)=[{0xe8, 0x185, 0x1, "0131410eb7e498f4af4292fe4390a777f46b16b97697fbda806e484e1cf88a86cd10de2ebd1ce595f58c0801333bce4af97be246a69b2ca886bfc2dd1d289f2b6389a734f3987b1025eaedcd7016db2723e40554b26dd1fd6b827d83c5648c0426208a12becc5444caa1318bd8bc2726bef2ac6c69aa1b50a5427f4014aa4247455772be9aeb5495d2a77657ce7fe646efc9c80e31e8890f655fb11a85ed7d6df8052a14d523452b5f8954985cc995fd1a573fbf3a460407c40a787fa496372cd4951484c66ac7f89e177df3f1ab11bd1bdde8"}], 0xe8}}, {{&(0x7f0000000380)=@isdn={0x22, 0x9, 0x44, 0xdc, 0x5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="bb5373ab134dbc7feca7eb89577f3a0cf7cebc86879c66bc3303275d4e209ebb9ac470db38967fb8a5b87859514fd3a97a3fe9cc4783c9b59bf11938f95cb4c754", 0x41}], 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="980000000000000007010000090000004720b50fe85eab5045c58049abc6701119691d2eb24de4ea3e9617310f79357fd0de01a792f96ec6451796365acf9396a23a99217c285cdf4af79a2b8845392e910331136769babc57ef165711b7434e0f0e1ff85fb04ec496436cf3af64a399606ea7ab386af1460eaab06d909439db5c131a8a344cbb5c578158f299dbfc4c502a000000000000a8000000000000000b010000ff020000b0a01aeda21d88e4b2bd2504bc44632a213ef7bcfd312033dc3cad00437d1a6c23eaa6c0e4c2fa94503fd1e6756aa5974992be43adb8d77dff045a601e0acaec5a4d2d05d2411ee7bf323e1d15ef9faec295e223e302000000332aba74601bca84f0677b3e9a0d30b4ec212d1482714250430d51bc54dd4803aa924a55bd2347f6c25762ab0906c8abaf2df5dd8b6133012deb8610305950000100000000000029000000f6ffffff782b98c7a123b0642b2a43727d712fe065d618c2f3f084915ae7bb79be8c0550be5ee4751b34f90dc5cfc72aecba28724761d27596ccf0252ffdce7e4b35ca3b7f4e618d1f27b54c160c08e3831574045f0385179cf66d79026e23328bbbd2bdd8989b1fbc19c88bf6bacb4bf05b6179ae4cd52b2cee4364d7abf13ab15c2f4c52cddf435d7fbd31d40ac9d87a34c362aae107e8cabe9fc8bf767cad96792d5d1684ad75b076947df74b0b30c8e6ca42724b558e63c110d5a3e4578a3eea0d3f9133312dc31c5e0fe002b088bf36ef858ec2bcfaee81dbc739ddac01295dcca7c3475eb32399ce8a46f90689c14ba40000000058000000000900000001000006000000acad8344da8d527cbe308b70431d94cdbe648dea654b21d119df40794bc0a2c9ee05390281d6ac8f28b128858c27ab519bd5d71f68042485fd1669287b62ab5aaaba05c003000000"], 0x298}}], 0x2, 0x48000) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 2.4809325s ago: executing program 0 (id=9872): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000022f0ffffff22958634939fdeb08d7790ffffff0180c200000e88a800008100200237015b344916bb2500000011907800000000e0000001000017c100c54ac7fd6bd9d3"], 0x3e) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600300000fc020000000000000000000000000000ff02000000000000000000012900000000000000b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf800000000"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000540)={{r2, &(0x7f0000000380)='+\xd3-)*\\\x00', 0x84000, &(0x7f00000003c0)={@_ha_fsid={[0xfffffff0, 0x2]}, {0xa, 0x100, 0xfffff99a, 0xf}}, 0xbaf5, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x2}, {[0x7, 0x7fffffff, 0x9, 0x10]}, 0x2, 0xa5, &(0x7f0000000480)=""/165}) 2.297526364s ago: executing program 3 (id=9875): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) close(0x4) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c020000000000000502000931"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x8, 0x2, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0xb}, 0x94) 2.081082775s ago: executing program 1 (id=9877): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000200)={0xfffffffc, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) 2.028343881s ago: executing program 0 (id=9878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, r4, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x2f, 0x10, 0x6, 0xcac, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x1, 0x10, 0x80000000, 0x200000}}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0xc292a6331c3de168, 0x1e, 0x5, {{0x16, 0x4, 0x2, 0x8, 0x58, 0x65, 0x0, 0xf, 0x29, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x8d, 0x1, 0x1, [{@loopback, 0x2000}, {@dev={0xac, 0x14, 0x14, 0x42}}]}, @generic={0x89, 0x9, "3cf88a7ee0d879"}, @ssrr={0x89, 0x7, 0x5b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1f, 0x78, [@broadcast, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @multicast1, @remote]}]}}}}}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}, @TCA_NETEM_CORR={0x10, 0x1, {0xa267, 0xffffffff, 0x4000}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x7946f580167b6286}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x3}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x7, 0x80, 0xffff7fff, 0x3, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x67, 0x0, 0xff, 0xc579da9853f8594b, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x1, [{@empty, 0xc0d}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x9}, {@empty, 0xc5}]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x800) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c25180100002020702500000000002020207b9af8ff000000001d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200040000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2.017879702s ago: executing program 1 (id=9880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x155555f9, 0x0, 0x5, 0x0, 0x98}]}, {0x0, [0x30, 0x30, 0x61, 0x2e]}}, 0x0, 0x2a, 0x0, 0x8, 0xbf81}, 0x28) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x44000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4) 1.837390532s ago: executing program 4 (id=9882): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="e7", 0x1}, {&(0x7f0000000040)="25d540ff0e687f5b490a16b072838135d22c92e67c919849c4b1cb7d1c9c5c2dcaec7516d8c89251d0c9ad152e3a4844c92b4cda0260a839afbf819c175d2b4cbf9199f573b04880a12a73bc6ed6de693a48", 0x52}, {&(0x7f0000000200)="4fc481815b10dfcd196d89bf74e7c320d52207583f7ef8bfb27c9febfc699a286c77bf57e60e1480bcfac2db8c5a28c7978d61b96c08fc503f02a9b96755934297ca9cbddebbaa4b898aecef6e4865ebe1bb9320c37b249abcb524a6bac95804ae6f9ba3781381383a53b5fdd0942a9a0e836a606963ad6301c73f6dbf72795594bf340f6916a0149cf9580f7007abd127f40f282a386d9831c8641c87e8d50316b8e6e0cfaa1830675131d59704b3f6671100016d3d98f53afde6b733e6435ec79b4a0cc67dca4203cb94fe1b4099189cd38f7a72cae4b5d99b522226f1c4766582275bcc9ddc5c8a4938", 0xeb}], 0x3, 0x210, 0x80) pwrite64(r0, 0x0, 0x0, 0xda8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) 1.793005665s ago: executing program 0 (id=9883): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000210001002cbd7000fddbdf250a000004ff0000010200000014000100fe8000000000000000000000000000aa1400010020010000000000000000000000000001140011"], 0xa4}, 0x1, 0x0, 0x0, 0x4000841}, 0x1000c890) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000a0000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.755007731s ago: executing program 1 (id=9884): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}], 0x1, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r5, @ANYRESHEX=r4], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x26}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 1.656580262s ago: executing program 4 (id=9885): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xfed96151785c9995}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000010401120000000000000000050000070a08305b07792c958c4e8ddf6b1276aa290002000000000d0200000008000340fffff066"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4008000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x7, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x4, 0x4, 0x401, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$rds(0x15, 0x5, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xe, &(0x7f0000000380)="ed6606c370a5", 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000008500000085000000090000000f0000000000000a030000000e00000008000084499dffff0100000000000000f2cd00000100000005000000010000000a00000000000000010000000d00000001000000fb0900000400000003000000090000000e00000002000000050000000000000000000000b60000001000000000000000000000000c0000000000000f0100000084000000000000300000003000f90fc8ed5d07652feaa8f52d32d261c2b1aa3215233ac0cf53f3f5cd567897eba8391d2ff4cd4537defd781694af5a1098fa1e83410fac81e7afc6457d84c663d721a150a935fc988b8f7a12b3ff1d026667b1aba8248f1af8a8704a6b8a58cc42c08468a23e1ee49d2de5de5ab9936e14b5ffde7b"], 0x0, 0xa9}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r4}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r6, @ANYRES64=r0, @ANYRES8=r6], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r6, @ANYRES64=r0, @ANYRES8=r6], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0xb, 0x2, 0x2, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0xb, 0x2, 0x2, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000002c0)=0x8) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) 1.558058099s ago: executing program 1 (id=9887): syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000005500e50226bd7000feffffff07000000", @ANYRES32, @ANYBLOB="090001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x8, @loopback, 0x8001}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="580000000000000029000000390000002c0802a00000000000000000000000000000ffffffffffff0000000000000000000000000000000020010000000000000000000000000002fc000000000000000000000000000001300000000000000029000000360000003202000000000000c910ff0200000000000000000000000000010101000000002400000000000000290000003200000000000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYBLOB="0000000020fc00000000002900000037000000210100fdff69bb806d00008dd1b47581d400c2040000e7660100180000000000000029000000390000e292d8c235a1781533f42102747c166a9e6e3998b2ac99c9809faab8e65bd7b488238eda8bcfeb94f5083d924b5548ac5f5cc02cf70f7c5985762a81a881d8d972d6f53522a862dca25c3c82bdee053f397cf7b6363eb2b37b7a52e91ac4f732092556b9f1e543d406ceed4c98"], 0xe8}}], 0x1, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.312597651s ago: executing program 4 (id=9889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x101, 0x4, [0x4, 0x7f, 0xb, 0x7ff]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x6}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xa4, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1fc00000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xcd66}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x525}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x3}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xa4}}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0={0xfc, 0x0, '\x00', 0xfd}, @empty, 0x8000, 0x80, 0x7, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x35}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x48806}, 0x0) 1.312312981s ago: executing program 3 (id=9890): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x81}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800001c}, 0x40040) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x1}, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000101c8aa7989392a36f64f4ad0037042bbd7000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000280012800b0001006970366772650000180002800000080081000000"], 0x10}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000181100"/20, @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$packet(r0, &(0x7f0000000000)='o', 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.13956009s ago: executing program 1 (id=9892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'sit0\x00', @remote}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x73, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 963.872667ms ago: executing program 3 (id=9893): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/110, 0x4e, 0x6e, 0x1, 0x6}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x2040600) openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x2) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00'}) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004dc0)={0x6, 0x5, &(0x7f0000004a80)=@raw=[@tail_call], &(0x7f0000004b80)='syzkaller\x00', 0x0, 0xed, &(0x7f0000004bc0)=""/237, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x90) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, 0x0, 0x300) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r8, 0x40109441, &(0x7f00000000c0)={0x2, 0x3, 0x6}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) 962.35732ms ago: executing program 2 (id=9894): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400), 0xe) listen(r1, 0x0) listen(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 893.429934ms ago: executing program 0 (id=9895): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002080)={0x2c, r4, 0x401, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x400c000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 876.031098ms ago: executing program 4 (id=9896): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3201818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3201818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000012c0)={r0, &(0x7f00000011c0)=',(\x00', 0x110141, &(0x7f0000001200)={@_ha_fsid={[0x9, 0xde34]}, {0xfff, 0xaa, 0x0, 0x2}}, 0x2, &(0x7f0000001240), &(0x7f0000001280)=0xbef}) r4 = socket(0x11, 0xa, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r4}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001380)={0xffffffffffffffff, 0x931b, 0x10}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001380)={0xffffffffffffffff, 0x931b, 0x10}, 0xc) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000424c0000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r9}, &(0x7f0000001d80), &(0x7f0000001d40)=r8}, 0x20) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000"], 0x50) preadv(r11, &(0x7f0000001440)=[{0x0}, {&(0x7f0000001480)=""/15, 0xf}], 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e000000850000000600000085000000ae00000018490000ffffffff0000000000000000182a0000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x22, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000001300)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0x0, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000013c0)=[r5, r6, r7, r9, r11], &(0x7f0000001400)=[{0x1, 0x3, 0x9, 0xb}], 0x10, 0x2}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000000000)={'wg1\x00'}) 813.549788ms ago: executing program 2 (id=9897): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x400, 0x2, 0x2000005}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb65584500452c0000000000240700001e0001e00000010000655800189078040000000000000086ddffff00000000"], 0xfdef) 734.648849ms ago: executing program 4 (id=9898): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009f4000/0x1000)=nil, 0x1000, 0x3000007, 0x50, r4, 0xab6f8000) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000000c0)=""/4108, &(0x7f0000000080)=0x100c) 710.302788ms ago: executing program 1 (id=9899): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r0, 0x11e, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 496.641894ms ago: executing program 3 (id=9900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x101) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0, 0x50}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 496.11235ms ago: executing program 0 (id=9901): syz_emit_ethernet(0x56, &(0x7f0000001100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @timestamp={0x8, 0xa, 0x40, 0x66}]}}}}}}}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001180), &(0x7f00000011c0)=0x4) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001040)={@nl=@unspec, {&(0x7f0000000000)=""/4096, 0x1000}, &(0x7f0000001000), 0x4}, 0xa0) 430.709557ms ago: executing program 2 (id=9902): r0 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="6e65d159b8f0083bae9533963411f9c6c49389cb9502f163491382b39d3fe8939b5b1689f47c53648ee764ff7d5f6abd4cdb103e604681ddc7ce46edc799d898d5b709c9db7cca0a86db01af5f45", @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$XFS_IOC_ERROR_INJECTION(r4, 0x40085874, &(0x7f0000000600)={r3, 0xffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private=0x400}, "000088be00000000"}}}}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x83, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000700), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000400000009848dd0fd09ccf2c4"], 0x50) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a03400004200010025bd7000fddbdf25020000000800388004000680100001800c00c80002000000000000007334048011"], 0x34a0}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4, r2}, 0xc) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 227.539169ms ago: executing program 4 (id=9903): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000080)={0x11d4, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x53}}}}, [@NL80211_ATTR_FRAME_MATCH={0x88, 0x5b, "69a1ac0693f3f43e478c3a5ba734bfa6e18c7226516c62903bec92e0254a8c0acbf29e206aa9e5ff0648015030537b91ed81dbdd9d4382473cf7ab128b9f9160c24592d4d094032df9b47dfd1d7e8905121506017949966a18c89d17be9fe9bb82ddd7cc13d42620d3a26b25bb7536f2883e9084bbfe927fcab7844ed1cd9a75c7b54c8c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_MATCH={0x86, 0x5b, "6f00ed424b8563cf9b32a5a040e4dd6fe282b967f6384cee78d4a84bcb6066ce6096e8d5cde39f9e1e69c06170afb74916f7f23b3f533f08107dde0b80032d2fd21d2dd3869f5320a28cb2ebaf8e25f754f5d549853bb3579ac67243524d31bec2863802c54d080dbb2f475687434ad949dbc746ab25fa7db9f6e748ca595f34a18e"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x80, 0x5b, "d4c8d2a4579908d633e969634009359482df9bd7705e7d2330605cba9b3f9126161c4304896cedee910dc543631083224406c5ff1e0777d5ab2be78b4e90785d121061239e040a4ca8ba789f05d7e96a2498fdd849be9490d65c614435b419a3a65cb23f58c3fef7272b223866d9368419a3effe33fc4e8addeab29d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x11d4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001340)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x98, r4, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd3}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x12}, @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x5, 0x8c, 0x9, 0x9, 0x95]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x98}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x34, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x400c890) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000001b80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f00000016c0)={0x480, 0x3f4, 0x400, 0x70bd28, 0x6bdd99bb, {0x5, 0x2, 0x23, [0x5, 0x5, 0x800, 0x31a4, 0x0, 0xb9db, 0x40, 0x1, 0x3, 0xa98, 0x401, 0x7, 0xa, 0xb2c, 0x3, 0xfffffff9, 0x7f, 0x7ff, 0xffffffff, 0xf9feff3, 0xab5, 0x6, 0xfffff6f4, 0x6, 0xe446, 0x8, 0x6, 0x4670, 0x9, 0x4, 0x5, 0x9, 0x9, 0x0, 0xb2, 0x4, 0x0, 0x9d1, 0xcc, 0x4, 0x400, 0x0, 0xfffff00b, 0x401, 0x9, 0xa, 0x4, 0x0, 0x80000000, 0xf5, 0x9, 0xfc4, 0x7f, 0xab, 0x3, 0xe324, 0xa8, 0x0, 0x48, 0x5, 0x98, 0x8, 0xff, 0x3], [0x5, 0x9, 0x1, 0xbc43, 0x4, 0x4, 0x8, 0x9, 0x9, 0x0, 0x9478, 0x10, 0x6, 0xffff, 0x400, 0x2, 0x9, 0x10001, 0x71a, 0x8, 0x8, 0x6, 0x7f, 0x3, 0x80, 0x1000, 0x7f, 0x9, 0x8, 0x3, 0x2737, 0x4, 0x5, 0x6, 0x3, 0xc, 0xfffffffe, 0xfff, 0x21cb, 0x8, 0x10000, 0x7502, 0x5, 0x7fffffff, 0x80, 0x4, 0x401, 0x84, 0x6, 0x1, 0x8, 0x79, 0x4, 0x0, 0x6, 0x5, 0x2, 0x3b, 0x101, 0x4, 0xfffffeff, 0x1, 0x1, 0xb], [0x7ff, 0xef3f, 0x7fff, 0x200, 0x2, 0xd9ce, 0x4, 0x3ff, 0x9000000, 0x0, 0x1ff, 0x5, 0xfffffffd, 0x2, 0x4392, 0x401, 0x9, 0x6, 0x6, 0x15, 0xfff, 0x0, 0x5, 0x5, 0x9, 0xfffffffa, 0x8, 0x2, 0x7, 0x6, 0x7, 0xff, 0x1, 0x0, 0x200, 0x6, 0x9, 0x52, 0x58b5, 0xff, 0x0, 0x0, 0x3, 0x4, 0x7, 0x0, 0xfffffffd, 0x3ff, 0x6, 0xb226, 0x80, 0x0, 0x401, 0x100, 0x3, 0x1, 0xd20a, 0x7fff, 0xfffffe00, 0x400, 0x4, 0x6, 0x8000, 0x8], [0x4, 0xd9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x39, 0x4, 0x0, 0x10001, 0x6, 0x5, 0x80, 0x10001, 0xfffffffe, 0x1, 0xfffffffb, 0x401, 0x800, 0x8, 0x5, 0xfff, 0xa, 0x0, 0x7, 0x5, 0x7c, 0x9, 0xd14, 0x9, 0x6, 0x5, 0x2, 0x8000, 0xc, 0xfffffffd, 0x200, 0x7, 0x2, 0xd7, 0x3, 0x5, 0x1, 0x3, 0x80, 0x1, 0x2, 0x4, 0x730, 0x9, 0x7ff, 0x9d, 0x0, 0x8001, 0x3ff, 0xffff75b9, 0x7, 0xb, 0x4, 0x81, 0x58, 0x2, 0x8], 0x5d, ['NLBL_CALIPSO\x00', 'cpuacct.usage_user\x00', 'NLBL_CALIPSO\x00', '=/^#:\'@\x00', 'wlan0\x00', 'NLBL_CALIPSO\x00', 'wlan0\x00', 'Q\x00', 'NLBL_CALIPSO\x00']}, ["", "", "", "", "", ""]}, 0x480}, 0x1, 0x0, 0x0, 0x40010}, 0x4014) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x80, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe881}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "20ec9f25cd456e0ee4d0aac2f4a0333b4325f166945d8281a84dcd6c1214d6ba089e7fa92b6cc4f47f808371019b17c67e76cd47"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x545}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000881}, 0x2000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001e40)={{r2, &(0x7f0000001d00)='cpuacct.usage_user\x00', 0x1, &(0x7f0000001d40)={@_ha_fsid={[0x3]}, {0x458, 0x4, 0x5, 0x8}}, 0x80, &(0x7f0000001d80)={@_ha_fsid}, &(0x7f0000001dc0)=0x8}, {[0x7, 0x1, 0x1, 0x5]}, 0x8, 0x34, &(0x7f0000001e00)=""/52}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001ec0)={r8, r2}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f00)={r8, 0x0, 0x25, 0xa, @void}, 0x10) r9 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r9, &(0x7f0000001f40)=""/82, 0x52, 0x0, &(0x7f0000001fc0)={0x23, 0x2, 0x7, 0x6}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002040), r3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000002200)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f00000020c0)={0xd4, r11, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x381}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a9}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) recvmsg$kcm(r8, &(0x7f0000002440)={&(0x7f0000002240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002340)=[{&(0x7f00000022c0)=""/95, 0x5f}], 0x1, &(0x7f0000002380)=""/187, 0xbb}, 0x40000020) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000024c0), r3) sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0xb8, r13, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4000000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0xb8}}, 0x4000) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002640)=""/105, 0x69}], 0x1, 0x7, 0x3eeb) sendmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002700)="ee026db68595bc41e6a2b7c699312ab06ca84916fc5fd528abe6214c063fb38b30bbb55e296412f479d7b8a277034759c5b4789f8007c6ac1829767c696820e8fff3887436de83719b1dac4a2306208fb9ebfe92204fa59ee0938cf14927a42350376be0726d9ee046634e05c738df732245366125241dcfc90e1d25b854fc", 0x7f}, {&(0x7f0000002780)="68139c199d64e9c117bf27f63c20488f3ebc59affbf3b5c4e7db6f486db96d2dfea7935ab0a6688c0c2ac19aedbc66ebbe04ea5568ea56e6bdbaf705a57b47b01c72be9f744ef88e066c37dc36159a17ab75efb43f5bf41ecfffafbf04141de0d2669ecc84f9e86ba10d83237702afd92a2486ddd1bb8ccce6a33ce275f354c5194a29476c45fa14715af3513c39c3a3f34ff49176792ba58abf5944149474", 0x9f}], 0x2, &(0x7f0000002880)=[{0x58, 0x113, 0x73a8, "cc4ec688f87b8834579fe5bf0fb4b72a7ea76ffa797ebe5d1b9c7b90fde503cb501b5125d9fb70fad3b427cfecf76920acd58b9db1c3dc77ddb07eed798a836cf2a1"}, {0xc0, 0x0, 0x5, "f2d66f83c691cc759a2bbc49a0c8d56382219e5b1977b393cefe1519cb9c7614bd059138c425bdb05ba05a9b47d2ed18e3dbc78afc62ba00bd60aaabb0081dff094a19a87a3cace4a5bde63d227aebc707333f5c036f5a692c79405bcc1612053af80fefb3384472e08735a641a5905e656fc08d7cf1a9cb315db3bc8c2d4b8c5537e6116f598c2b43f9c926d317f17d9a8598651976c707b994435d6937b541ba36ce93d122fec29c1cafc8160a223a"}, {0x10, 0x10a}, {0x98, 0x111, 0x3, "926aae9b092f506ae9c1b250e1e553e7c7b068b9af81cc93a5c70227ad090febe87181d5b00e67c09e27c16ce5518059a0b337a93561c65da9fdc3e3ef3279aa4539ca1b063125264f1395d9b43a3034373e304d7c60d7d57316453ecba3099d4fa2ebe9725270b13677e7991add954a24c2b7de00003f3b2fd3c4363f87ff18c167432c6d5c"}, {0x100, 0x119, 0xfffffff7, "b19dd208c28db04c3f9fa31c04d8a9fc6c83f783c9de2a1de3d639fb7619587ef1f49d22dc7aeb6a2980ffa7d2292eba7b993c25e2031c4998570d2743f34dfc2e5d7781ace3200c91d2e9834000e01635e986a72ee23cec6fa4ec1ef04b69ab7d97ed77db78a4e6e509d1fa6269c82ade830495e7fa7398b875dbcec3904e60bc8e3578daebdc37d065ee3357d8a7ace0fb92001cc6c7a71721f578e943d38fdbc176662787936528e71bb0f9e6f53e4f8eea8144e1e0bf65e596510c018eec118791a3feadae5ba6b37a98c4eee85eb6e5a047f5df96328eb3c1cfc9880c699fbd3d0f4c4ee0ac092b0e6907"}, {0x30, 0x112, 0x5, "b20c834223b9118285b409625d1bd49be370af00bba76d84cdb926"}, {0x68, 0x1e6, 0xfffffffd, "f699e3a9c794f7933e8daedd7d3ca24f3e7c78c2be584163db6f5d2591757b569dd08eb4246698615741eb6e89a912033568e9059af858d91dc29d044f719f15ffe78aaf52fe75dee52ddfffa1eff07874ac"}, {0xf8, 0x104, 0x8, "b9d3a9b46149a486a0e344cb13b4d400a7ece8d22e4200bff4294d0073ccbdf11e74e8b427447930fe5d58db2c477d15f68d9e5d9316ef9d9d886344705b43f212a419f1ea0b71f84818103124f09294f89bad90c1f369966f0df7945fecabb699c77095211389845d34b660cadfb4717eeb746e4b770cec076d761160ea6076b2a37acda4410f6d1976ef73749c6357bb50cf0f94834223af794a633bebdba5c3fe06a298d5998044be606ec5ce58ae940c9972a4664a1920ae2d1171d3d7d3a0351aa2507db8a796828f81ebda871f8dd4a1e9b2dec19db2324bd04b157dd81f277b1ac6c2"}], 0x450}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002d00)="ddf66b9970d26822dfdd11a89229387154ff865ef0958d1255ef98ede2c976eb416be8aa61520fcf976565ed1ef8f06c0e0701d12e0563697e12620d50c613d04073acd42708fa8fe30a8066a0a34a76cc77b028928d7a15380bbad583a6595da6da246dd095a9aed8e57e09b0bdf3def5b53ff350", 0x75}], 0x1}}], 0x2, 0x40015004) 136.567113ms ago: executing program 0 (id=9904): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="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"], 0x48}}, 0x4) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000802) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000680)={0x5a, {{0xa, 0x4e23, 0x2f, @remote, 0x2}}}, 0x88) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000000000000000000000850000006300000095000000000000000419a78ee8d717b618661dd84873751e0b6c3adad6c884d956271446757b583ed947272bccd0e3fce596720cbcd51b7dc569212f46cfbecd"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x3) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffffffffffffffe1, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5], 0x5c}}, 0x20000010) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x90, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "05fee7cbb2"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ffff00008fb2592500"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "3652d1712c6f59b16cd7981b64db2232"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x4001) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 136.064698ms ago: executing program 2 (id=9905): r0 = socket$kcm(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10003) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xc000e2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000280), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="2b030000000000001c00128009000100626f6e6400000009000000000000000600001000278a79f38f108134258a4f5696d51440a832b4d74621fc59553f10213a6f2f01f25d050f2031affb315aafda88dfa91e8af3b58e438d7a88b7ff4f20300e2a75a2edf4f5e5c38dcf788bf67ecf2151a85647660562f355170918b1ca7110cdab6fcc78386667b37dbfde3d74bff12025fe10c2c072aa63fd79029d89d52381af90ee9f97d8e21b8b8f1b0d45b02bae"], 0x3c}, 0x1, 0x0, 0x0, 0x40000010}, 0x880) 71.304607ms ago: executing program 2 (id=9906): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00a", 0x59}], 0x1}}], 0x1, 0x20000044) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000048027b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=9907): mmap(&(0x7f00002bf000/0x3000)=nil, 0x3000, 0x1000000, 0x50, 0xffffffffffffffff, 0x3a40a000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a8, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x74}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x850}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x437}]}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x10c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x556d285c66fff3ba}, 0x0) kernel console output (not intermixed with test programs): state [ 1247.562140][ T1818] pimreg808482864: left allmulticast mode [ 1248.141572][ T1818] bond9 (unregistering): (slave vti0): Releasing backup interface [ 1248.156054][ T1818] vti0 (unregistering): left promiscuous mode [ 1248.294267][ T1818] batman_adv: batadv0: Removing interface: vlan3 [ 1248.373527][ T1818] bond8 (unregistering): (slave gre1): Releasing backup interface [ 1248.381553][ T1818] gre1 (unregistering): left promiscuous mode [ 1248.501139][ T1818] team0: Port device bridge1 removed [ 1248.514113][ T1818] team0: Port device bridge2 removed [ 1248.544575][ T1818] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1248.552927][ T1818] bridge3 (unregistering): left promiscuous mode [ 1248.571920][ T1818] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 1248.584875][ T1818] bridge4 (unregistering): left promiscuous mode [ 1248.591389][ T1818] bridge4 (unregistering): left allmulticast mode [ 1248.641539][ T1818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.652626][ T1818] bond_slave_0: left promiscuous mode [ 1248.660287][ T1818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.673834][ T1818] bond_slave_1: left promiscuous mode [ 1248.679995][ T1818] bond0 (unregistering): Released all slaves [ 1248.694141][ T1818] bond1 (unregistering): Released all slaves [ 1248.714853][ T1818] bond2 (unregistering): Released all slaves [ 1248.743885][ T1818] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1248.754730][ T1818] bond3 (unregistering): Released all slaves [ 1248.795011][ T1818] bond4 (unregistering): Released all slaves [ 1248.842092][ T1818] bond5 (unregistering): Released all slaves [ 1248.862808][ T1818] bond6 (unregistering): Released all slaves [ 1248.885670][ T1818] bond7 (unregistering): Released all slaves [ 1248.913887][ T1818] bond8 (unregistering): Released all slaves [ 1248.942012][ T1818] bond9 (unregistering): Released all slaves [ 1248.962092][ T1818] bond10 (unregistering): Released all slaves [ 1249.037894][ T5632] Bluetooth: hci0: command tx timeout [ 1249.518632][ T1818] tipc: Left network mode [ 1249.546037][T11562] ip6tnl6: entered promiscuous mode [ 1249.568490][ T1818] IPVS: stopping backup sync thread 6358 ... [ 1249.571006][T11562] ip6tnl6: entered allmulticast mode [ 1249.874041][T11563] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8930'. [ 1250.087852][ T30] audit: type=1800 audit(1780434354.710:41): pid=11581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8934" name="r" dev="tmpfs" ino=2192 res=0 errno=0 [ 1250.463128][T11593] macsec2: entered promiscuous mode [ 1250.485408][T11593] bridge0: entered promiscuous mode [ 1250.963614][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1251.116180][ T5632] Bluetooth: hci0: command tx timeout [ 1251.359643][T11629] xt_hashlimit: max too large, truncated to 1048576 [ 1251.694734][T11647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8948'. [ 1251.729699][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8947'. [ 1251.995944][T11661] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 1252.126587][T11415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.186145][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.202384][T11415] bridge_slave_0: entered allmulticast mode [ 1252.241582][T11415] bridge_slave_0: entered promiscuous mode [ 1252.358123][T11415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.382236][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.408904][T11415] bridge_slave_1: entered allmulticast mode [ 1252.431093][T11415] bridge_slave_1: entered promiscuous mode [ 1252.492706][T11667] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8949'. [ 1252.654142][T11415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.699729][T11415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.794630][T11677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8950'. [ 1252.901190][T11415] team0: Port device team_slave_0 added [ 1252.953233][T11415] team0: Port device team_slave_1 added [ 1253.130099][T11415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.156296][T11415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.197689][ T5632] Bluetooth: hci0: command tx timeout [ 1253.244539][T11415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.271432][T11415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.302170][T11415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.341800][T11415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.357787][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1253.450743][T11694] netlink: 'syz.2.8955': attribute type 9 has an invalid length. [ 1253.791545][ T1818] veth1_to_team: left promiscuous mode [ 1253.808698][ T1818] dummy0: left promiscuous mode [ 1253.852082][T11711] FAULT_INJECTION: forcing a failure. [ 1253.852082][T11711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.867066][T11711] CPU: 1 UID: 0 PID: 11711 Comm: syz.3.8958 Not tainted syzkaller #0 PREEMPT(full) [ 1253.867094][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1253.867092][ T1818] hsr_slave_0: left promiscuous mode [ 1253.867106][T11711] Call Trace: [ 1253.867116][T11711] [ 1253.867124][T11711] dump_stack_lvl+0xe8/0x150 [ 1253.867151][T11711] should_fail_ex+0x412/0x560 [ 1253.867176][T11711] _copy_from_user+0x2d/0xb0 [ 1253.867198][T11711] __sys_bpf+0x229/0x950 [ 1253.867226][T11711] ? __pfx___sys_bpf+0x10/0x10 [ 1253.867266][T11711] ? ksys_write+0x242/0x270 [ 1253.867293][T11711] ? __pfx_ksys_write+0x10/0x10 [ 1253.867321][T11711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.867340][T11711] __x64_sys_bpf+0x7c/0x90 [ 1253.867365][T11711] do_syscall_64+0x174/0x580 [ 1253.867384][T11711] ? trace_irq_disable+0x3b/0x140 [ 1253.867408][T11711] ? clear_bhb_loop+0x40/0x90 [ 1253.867430][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.867447][T11711] RIP: 0033:0x7f6da179ce59 [ 1253.867464][T11711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.867479][T11711] RSP: 002b:00007f6da268e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1253.867498][T11711] RAX: ffffffffffffffda RBX: 00007f6da1a15fa0 RCX: 00007f6da179ce59 [ 1253.867528][T11711] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1253.867540][T11711] RBP: 00007f6da268e090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.867551][T11711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.867562][T11711] R13: 00007f6da1a16038 R14: 00007f6da1a15fa0 R15: 00007fff875e7448 [ 1253.867591][T11711] [ 1254.809243][ T1818] hsr_slave_1: left promiscuous mode [ 1254.825913][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.393326][ T1818] team0 (unregistering): Port device veth1_to_hsr removed [ 1255.529335][ T1818] team0 (unregistering): Port device team_slave_1 removed [ 1255.550205][ T1818] team0 (unregistering): Port device team_slave_0 removed [ 1255.578507][ T6396] smc: removing ib device syz0 [ 1255.913351][T11415] hsr_slave_0: entered promiscuous mode [ 1255.933844][T11415] hsr_slave_1: entered promiscuous mode [ 1256.077870][ T6396] smbdirect: ib_dev[syz0] removed [ 1257.614437][T11771] FAULT_INJECTION: forcing a failure. [ 1257.614437][T11771] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.671334][T11736] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1257.705853][T11771] CPU: 0 UID: 0 PID: 11771 Comm: syz.4.8969 Not tainted syzkaller #0 PREEMPT(full) [ 1257.705886][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1257.705899][T11771] Call Trace: [ 1257.705908][T11771] [ 1257.705917][T11771] dump_stack_lvl+0xe8/0x150 [ 1257.705946][T11771] should_fail_ex+0x412/0x560 [ 1257.705975][T11771] should_failslab+0xa8/0x100 [ 1257.705998][T11771] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 1257.706026][T11771] ? __get_vm_area_node+0x13f/0x300 [ 1257.706057][T11771] __get_vm_area_node+0x13f/0x300 [ 1257.706087][T11771] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1257.706115][T11771] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1257.706140][T11771] ? __lock_acquire+0x6b5/0x2cf0 [ 1257.706189][T11771] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1257.706216][T11771] ? __lock_acquire+0x6b5/0x2cf0 [ 1257.706242][T11771] ? _parse_integer_limit+0x1ae/0x1f0 [ 1257.706277][T11771] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1257.706295][T11771] __vmalloc_noprof+0xd2/0x120 [ 1257.706321][T11771] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1257.706344][T11771] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1257.706368][T11771] bpf_prog_alloc+0x3c/0x1a0 [ 1257.706390][T11771] bpf_prog_load+0x779/0x1a10 [ 1257.706424][T11771] ? __pfx_bpf_prog_load+0x10/0x10 [ 1257.706444][T11771] ? __might_fault+0xaf/0x130 [ 1257.706486][T11771] ? bpf_lsm_bpf+0x9/0x20 [ 1257.706504][T11771] ? security_bpf+0x7e/0x2d0 [ 1257.706534][T11771] __sys_bpf+0x618/0x950 [ 1257.706566][T11771] ? __pfx___sys_bpf+0x10/0x10 [ 1257.706612][T11771] ? ksys_write+0x242/0x270 [ 1257.706642][T11771] ? __pfx_ksys_write+0x10/0x10 [ 1257.706675][T11771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.706706][T11771] __x64_sys_bpf+0x7c/0x90 [ 1257.706734][T11771] do_syscall_64+0x174/0x580 [ 1257.706754][T11771] ? trace_irq_disable+0x3b/0x140 [ 1257.706783][T11771] ? clear_bhb_loop+0x40/0x90 [ 1257.706808][T11771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.706827][T11771] RIP: 0033:0x7f65c739ce59 [ 1257.706846][T11771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.706863][T11771] RSP: 002b:00007f65c82cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1257.706884][T11771] RAX: ffffffffffffffda RBX: 00007f65c7615fa0 RCX: 00007f65c739ce59 [ 1257.706899][T11771] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1257.706911][T11771] RBP: 00007f65c82cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.706923][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.706935][T11771] R13: 00007f65c7616038 R14: 00007f65c7615fa0 R15: 00007fffc8dd9e18 [ 1257.706967][T11771] [ 1257.708919][T11771] syz.4.8969: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1258.151010][T11771] CPU: 0 UID: 0 PID: 11771 Comm: syz.4.8969 Not tainted syzkaller #0 PREEMPT(full) [ 1258.151041][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1258.151051][T11771] Call Trace: [ 1258.151059][T11771] [ 1258.151066][T11771] dump_stack_lvl+0xe8/0x150 [ 1258.151091][T11771] warn_alloc+0x249/0x340 [ 1258.151121][T11771] ? __pfx_warn_alloc+0x10/0x10 [ 1258.151152][T11771] ? __get_vm_area_node+0x2b5/0x300 [ 1258.151180][T11771] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1258.151205][T11771] ? __lock_acquire+0x6b5/0x2cf0 [ 1258.151247][T11771] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1258.151269][T11771] ? __lock_acquire+0x6b5/0x2cf0 [ 1258.151288][T11771] ? _parse_integer_limit+0x1ae/0x1f0 [ 1258.151317][T11771] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1258.151335][T11771] __vmalloc_noprof+0xd2/0x120 [ 1258.151358][T11771] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1258.151379][T11771] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 1258.151403][T11771] bpf_prog_alloc+0x3c/0x1a0 [ 1258.151423][T11771] bpf_prog_load+0x779/0x1a10 [ 1258.151454][T11771] ? __pfx_bpf_prog_load+0x10/0x10 [ 1258.151474][T11771] ? __might_fault+0xaf/0x130 [ 1258.151515][T11771] ? bpf_lsm_bpf+0x9/0x20 [ 1258.151532][T11771] ? security_bpf+0x7e/0x2d0 [ 1258.151560][T11771] __sys_bpf+0x618/0x950 [ 1258.151592][T11771] ? __pfx___sys_bpf+0x10/0x10 [ 1258.151632][T11771] ? ksys_write+0x242/0x270 [ 1258.151661][T11771] ? __pfx_ksys_write+0x10/0x10 [ 1258.151689][T11771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.151712][T11771] __x64_sys_bpf+0x7c/0x90 [ 1258.151739][T11771] do_syscall_64+0x174/0x580 [ 1258.151759][T11771] ? trace_irq_disable+0x3b/0x140 [ 1258.151784][T11771] ? clear_bhb_loop+0x40/0x90 [ 1258.151806][T11771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.151824][T11771] RIP: 0033:0x7f65c739ce59 [ 1258.151845][T11771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.151860][T11771] RSP: 002b:00007f65c82cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1258.151882][T11771] RAX: ffffffffffffffda RBX: 00007f65c7615fa0 RCX: 00007f65c739ce59 [ 1258.151896][T11771] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1258.151918][T11771] RBP: 00007f65c82cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.151931][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.151942][T11771] R13: 00007f65c7616038 R14: 00007f65c7615fa0 R15: 00007fffc8dd9e18 [ 1258.151974][T11771] [ 1258.152062][T11771] Mem-Info: [ 1258.236736][T11415] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1258.337337][T11783] x_tables: duplicate underflow at hook 3 [ 1258.344719][T11771] active_anon:11170 inactive_anon:0 isolated_anon:0 [ 1258.344719][T11771] active_file:3141 inactive_file:40803 isolated_file:0 [ 1258.344719][T11771] unevictable:768 dirty:115 writeback:0 [ 1258.344719][T11771] slab_reclaimable:13000 slab_unreclaimable:113652 [ 1258.344719][T11771] mapped:32605 shmem:7040 pagetables:1543 [ 1258.344719][T11771] sec_pagetables:0 bounce:0 [ 1258.344719][T11771] kernel_misc_reclaimable:0 [ 1258.344719][T11771] free:1276336 free_pcp:31672 free_cma:0 [ 1258.529269][T11771] Node 0 active_anon:37680kB inactive_anon:0kB active_file:12564kB inactive_file:163016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:43104kB dirty:456kB writeback:0kB shmem:20024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13892kB pagetables:5952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1258.577799][T11771] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86016kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1258.661130][T11771] Node 0 DMA free:15304kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:32kB free_cma:0kB [ 1258.696641][T11771] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1258.702610][T11771] Node 0 DMA32 free:1417936kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28780kB inactive_anon:0kB active_file:12564kB inactive_file:163016kB unevictable:1536kB writepending:456kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:69128kB local_pcp:27864kB free_cma:0kB [ 1258.782903][T11771] lowmem_reserve[]: 0 0 0 0 0 [ 1258.796683][T11771] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1258.848678][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1258.891931][T11771] lowmem_reserve[]: 0 0 0 0 0 [ 1258.910253][T11771] Node 1 Normal free:3685032kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61240kB local_pcp:31792kB free_cma:0kB [ 1258.946145][T11788] veth1_virt_wifi: entered allmulticast mode [ 1258.961200][T11771] lowmem_reserve[]: 0 0 0 0 0 [ 1258.967823][T11771] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15304kB [ 1259.038385][T11771] Node 0 DMA32: 10580*4kB (UME) 9743*8kB (UME) 6484*16kB (UME) 682*32kB (UME) 828*64kB (UME) 1126*128kB (UME) 970*256kB (UME) 576*512kB (UME) 291*1024kB (U) 73*2048kB (UM) 0*4096kB = 1433672kB [ 1259.132396][T11771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1259.184014][T11771] Node 1 Normal: 5*4kB (UM) 12*8kB (UM) 11*16kB (UM) 2*32kB (UM) 17*64kB (UM) 8*128kB (UM) 8*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 5*2048kB (U) 893*4096kB (UM) = 3685284kB [ 1259.251539][T11771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.270272][T11415] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1259.285037][T11804] netlink: 'syz.0.8975': attribute type 1 has an invalid length. [ 1259.285365][T11771] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1259.309448][T11771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.327539][T11771] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1259.337536][T11805] netlink: 'syz.0.8975': attribute type 1 has an invalid length. [ 1259.338091][T11771] 45234 total pagecache pages [ 1259.351257][T11771] 0 pages in swap cache [ 1259.356448][T11771] Free swap = 124996kB [ 1259.360991][T11771] Total swap = 124996kB [ 1259.400950][T11771] 2097051 pages RAM [ 1259.407581][T11771] 0 pages HighMem/MovableOnly [ 1259.425581][T11771] 427116 pages reserved [ 1259.442028][T11771] 0 pages cma reserved [ 1259.587096][T11804] bond12: entered promiscuous mode [ 1259.592482][T11804] bond12: entered allmulticast mode [ 1259.600820][T11804] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1259.611634][T11816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8976'. [ 1260.024452][T11832] openvswitch: netlink: EtherType 50a is less than min 600 [ 1260.040877][T11415] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1260.417055][T11849] openvswitch: netlink: Multiple metadata blocks provided [ 1260.456398][T11415] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1260.886119][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8987'. [ 1260.910047][ T1818] IPVS: stop unused estimator thread 0... [ 1261.330102][T11882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.372501][T11884] netlink: 'syz.0.8987': attribute type 27 has an invalid length. [ 1261.535571][T11883] geneve1: entered promiscuous mode [ 1262.076877][T11415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1262.164264][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1262.223817][T11415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1262.292966][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1262.326400][T11415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1262.355597][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1262.378499][T11415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1262.418121][T11415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1262.744432][T11415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.833891][T11415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.900285][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.907590][ T6396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.999107][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.009073][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.238375][T11934] nbd: nbd0 already in use [ 1263.274522][T11934] block nbd0: NBD_DISCONNECT [ 1263.326796][T11934] block nbd0: Send disconnect failed -32 [ 1263.343767][T11937] ip6gre0: Caught tx_queue_len zero misconfig [ 1263.383156][T11934] block nbd0: shutting down sockets [ 1263.390031][T11937] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1264.510287][T11973] Bluetooth: MGMT ver 1.23 [ 1265.077763][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9003'. [ 1265.091788][T11986] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1265.126856][T11986] netlink: 120 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1265.157088][T11986] netlink: 41 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1265.440097][T11999] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1265.481601][T11415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.747490][T11415] veth0_vlan: entered promiscuous mode [ 1265.836411][T11415] veth1_vlan: entered promiscuous mode [ 1265.858266][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1266.006666][T11415] veth0_macvtap: entered promiscuous mode [ 1266.060113][T11415] veth1_macvtap: entered promiscuous mode [ 1266.159105][T11415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.308305][T11415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.437459][T18466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.470445][T18466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.523474][T18466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.550709][T18466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.556127][ T5632] Bluetooth: hci0: command tx timeout [ 1267.078578][T18466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.152932][T18466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.426815][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.463438][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.929544][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1268.946096][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1268.961309][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1268.969116][T12067] netlink: 'syz.1.9019': attribute type 1 has an invalid length. [ 1268.992873][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1268.994604][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9019'. [ 1269.042397][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1269.442161][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9018'. [ 1269.621883][T12086] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9020'. [ 1269.666279][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9021'. [ 1270.028941][T31802] syz_tun (unregistering): left allmulticast mode [ 1270.061858][T12101] netlink: 'syz.1.9022': attribute type 7 has an invalid length. [ 1270.096530][T12101] netlink: 'syz.1.9022': attribute type 8 has an invalid length. [ 1270.145422][T12101] __nla_validate_parse: 1 callbacks suppressed [ 1270.145444][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9022'. [ 1270.492035][T12101] veth1: entered promiscuous mode [ 1270.521257][T12101] veth0: entered promiscuous mode [ 1270.538280][T12101] erspan0: entered promiscuous mode [ 1270.953562][ T1818] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1270.994848][ T1818] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.025397][ T1818] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1271.115790][ T5632] Bluetooth: hci1: command tx timeout [ 1271.118303][T12125] netlink: 'syz.1.9027': attribute type 4 has an invalid length. [ 1271.148262][T12125] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9027'. [ 1271.271671][ T1818] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1271.300053][ T1818] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.329401][ T1818] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1271.503415][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.511294][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.564412][T12141] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1271.636972][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.653611][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.940220][T18466] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.959543][T18466] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.992091][ T1818] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.004821][ T1818] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.016298][ T1818] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1272.060511][T18466] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.070962][T18466] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.130965][ T1818] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.160554][ T1818] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.195745][ T1818] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1272.838363][T12150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.890601][T12150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.966256][T12150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.195585][ T5632] Bluetooth: hci1: command tx timeout [ 1273.220096][T12150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.257542][T12150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.342935][T12150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1273.403691][T12150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1273.467436][T12150] veth1_vlan: left promiscuous mode [ 1273.474306][T12150] veth0_vlan: left promiscuous mode [ 1273.481467][T12150] veth0_vlan: entered promiscuous mode [ 1273.492069][T12150] veth1_vlan: entered promiscuous mode [ 1273.504464][T12150] veth1_macvtap: left promiscuous mode [ 1273.513217][T12150] veth0_macvtap: left promiscuous mode [ 1273.521739][T12150] veth0_macvtap: entered promiscuous mode [ 1273.529830][T12150] veth1_macvtap: entered promiscuous mode [ 1273.546311][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1273.556119][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1273.564989][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1273.574488][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1273.587131][T12150] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network [ 1273.598667][T12150] hsr1: Slave B (veth0) is not up; please bring it up to get a fully working HSR network [ 1273.670045][T18466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.677454][T18466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.690574][T18466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.698328][T18466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.713816][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.736114][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.753281][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.776139][ T6396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.792865][ T6396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.829489][ T6396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.869796][ T6396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.021319][ T6396] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1274.036855][T12189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1274.150945][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1274.450815][ T3663] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1274.456143][T12210] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9048'. [ 1274.621183][ T3663] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1275.257461][T12240] netlink: 209808 bytes leftover after parsing attributes in process `syz.0.9052'. [ 1275.275823][ T5632] Bluetooth: hci1: command tx timeout [ 1275.299348][ T3667] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1275.369797][ T1818] batadv3: left allmulticast mode [ 1275.397188][ T1818] batadv3: left promiscuous mode [ 1275.412905][ T1818] bridge0: port 4(batadv3) entered disabled state [ 1275.452227][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9053'. [ 1275.468580][T12248] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9053'. [ 1275.479530][ T1818] batadv2: left allmulticast mode [ 1275.484830][ T1818] batadv2: left promiscuous mode [ 1275.493704][ T1818] bridge0: port 2(batadv2) entered disabled state [ 1275.503021][T12248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9053'. [ 1275.525809][ T1818] batadv1: left allmulticast mode [ 1275.534118][ T1818] batadv1: left promiscuous mode [ 1275.550753][ T1818] bridge0: port 3(batadv1) entered disabled state [ 1276.140675][ T1818] bond6 (unregistering): (slave geneve3): Releasing backup interface [ 1276.160243][ T1818] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1276.330613][ T1818] bond0 (unregistering): Released all slaves [ 1276.331225][ T137] smc: removing ib device syz1 [ 1276.348218][ T1818] bond1 (unregistering): Released all slaves [ 1276.370876][ T1818] bond2 (unregistering): Released all slaves [ 1276.407200][ T1818] bond3 (unregistering): Released all slaves [ 1276.432979][ T1818] bond4 (unregistering): Released all slaves [ 1276.464748][ T1818] bond5 (unregistering): Released all slaves [ 1276.488972][ T1818] bond6 (unregistering): Released all slaves [ 1276.514365][ T1818] bond7 (unregistering): Released all slaves [ 1276.547539][ T1818] bond8 (unregistering): Released all slaves [ 1276.575415][ T1818] bond9 (unregistering): Released all slaves [ 1276.602401][ T1818] bond10 (unregistering): Released all slaves [ 1276.679466][T12272] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9059'. [ 1277.201419][ T1818] bond11 (unregistering): (slave veth5): Releasing backup interface [ 1277.355475][ T5632] Bluetooth: hci1: command tx timeout [ 1279.410391][ T1818] bond11 (unregistering): Released all slaves [ 1279.439143][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1279.534280][ T137] smbdirect: ib_dev[syz1] removed [ 1279.774283][T12259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.094507][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9063'. [ 1280.274154][T12259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.409194][T12300] sctp: [Deprecated]: syz.1.9063 (pid 12300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1280.409194][T12300] Use struct sctp_sack_info instead [ 1280.722534][T12259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.750359][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.757962][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.766660][T12062] bridge_slave_0: entered allmulticast mode [ 1280.829365][T12062] bridge_slave_0: entered promiscuous mode [ 1280.886332][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.911375][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.938221][T12062] bridge_slave_1: entered allmulticast mode [ 1281.003957][T12062] bridge_slave_1: entered promiscuous mode [ 1281.060658][T12259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.098157][T12316] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9069'. [ 1281.118438][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9068'. [ 1281.206703][T12314] netlink: 'syz.3.9068': attribute type 8 has an invalid length. [ 1281.215386][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9068'. [ 1281.498519][T12062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.563508][T12062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.795747][T12339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9072'. [ 1282.015428][T12062] team0: Port device team_slave_0 added [ 1282.064480][T12062] team0: Port device team_slave_1 added [ 1282.090372][T12350] netlink: 'syz.2.9074': attribute type 1 has an invalid length. [ 1282.210346][ T6396] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.609674][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1282.614252][T12368] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9077'. [ 1282.658955][T12062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.695551][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.768205][T12062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.814888][T12062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.823999][T12373] x_tables: duplicate underflow at hook 1 [ 1282.847116][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.917519][T12062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.021234][ T6090] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.032012][T12373] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1283.180330][T18466] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.590269][ T1818] tipc: Left network mode [ 1283.688276][T12062] hsr_slave_0: entered promiscuous mode [ 1283.732986][T12062] hsr_slave_1: entered promiscuous mode [ 1283.755347][T12062] debugfs: 'hsr0' already exists in 'hsr' [ 1283.797318][T12062] Cannot create hsr debugfs directory [ 1283.832540][ T3671] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.967901][T12419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9091'. [ 1284.995582][T12419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9091'. [ 1285.053418][T12419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9091'. [ 1285.322476][T12062] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1285.712731][T12062] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1286.044192][T12466] xt_cgroup: invalid path, errno=-2 [ 1286.084177][T12468] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1286.306490][T12062] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1286.527256][T12062] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1286.563354][T12474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1286.595579][T12493] syz.1.9109: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1286.637020][T12493] CPU: 0 UID: 0 PID: 12493 Comm: syz.1.9109 Not tainted syzkaller #0 PREEMPT(full) [ 1286.637051][T12493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1286.637064][T12493] Call Trace: [ 1286.637073][T12493] [ 1286.637083][T12493] dump_stack_lvl+0xe8/0x150 [ 1286.637115][T12493] warn_alloc+0x249/0x340 [ 1286.637146][T12493] ? stack_trace_save+0xa9/0x100 [ 1286.637179][T12493] ? __pfx_warn_alloc+0x10/0x10 [ 1286.637216][T12493] ? kasan_save_track+0x4f/0x80 [ 1286.637241][T12493] ? kasan_save_track+0x3e/0x80 [ 1286.637265][T12493] ? __kasan_kmalloc+0x93/0xb0 [ 1286.637291][T12493] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1286.637319][T12493] ? xskq_create+0x56/0x170 [ 1286.637347][T12493] ? xsk_setsockopt+0x54c/0x990 [ 1286.637372][T12493] ? do_sock_setsockopt+0x17c/0x1b0 [ 1286.637393][T12493] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1286.637413][T12493] ? do_syscall_64+0x174/0x580 [ 1286.637437][T12493] __vmalloc_node_range_noprof+0x132/0x1750 [ 1286.637494][T12493] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1286.637528][T12493] ? __kasan_kmalloc+0x93/0xb0 [ 1286.637564][T12493] vmalloc_user_noprof+0xad/0xe0 [ 1286.637591][T12493] ? xskq_create+0xbf/0x170 [ 1286.637622][T12493] xskq_create+0xbf/0x170 [ 1286.637655][T12493] xsk_init_queue+0x8a/0xe0 [ 1286.637687][T12493] xsk_setsockopt+0x54c/0x990 [ 1286.637727][T12493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1286.637755][T12493] ? __pfx_aa_sk_perm+0x10/0x10 [ 1286.637787][T12493] ? aa_sock_opt_perm+0xff/0x1a0 [ 1286.637820][T12493] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1286.637847][T12493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1286.637878][T12493] do_sock_setsockopt+0x17c/0x1b0 [ 1286.637908][T12493] __x64_sys_setsockopt+0x13d/0x1b0 [ 1286.637935][T12493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.637957][T12493] do_syscall_64+0x174/0x580 [ 1286.637977][T12493] ? trace_irq_disable+0x3b/0x140 [ 1286.638008][T12493] ? clear_bhb_loop+0x40/0x90 [ 1286.638034][T12493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.638055][T12493] RIP: 0033:0x7ff70199ce59 [ 1286.638076][T12493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.638095][T12493] RSP: 002b:00007ff702909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1286.638118][T12493] RAX: ffffffffffffffda RBX: 00007ff701c15fa0 RCX: 00007ff70199ce59 [ 1286.638133][T12493] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1286.638145][T12493] RBP: 00007ff701a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1286.638158][T12493] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 1286.638171][T12493] R13: 00007ff701c16038 R14: 00007ff701c15fa0 R15: 00007ffc6a2ed3c8 [ 1286.638205][T12493] [ 1286.638626][T12493] Mem-Info: [ 1286.916215][T12502] netlink: 'syz.1.9109': attribute type 10 has an invalid length. [ 1286.918829][T12493] active_anon:5421 inactive_anon:0 isolated_anon:0 [ 1286.918829][T12493] active_file:3141 inactive_file:40719 isolated_file:0 [ 1286.918829][T12493] unevictable:768 dirty:95 writeback:0 [ 1286.918829][T12493] slab_reclaimable:12863 slab_unreclaimable:110845 [ 1286.918829][T12493] mapped:31729 shmem:1293 pagetables:1585 [ 1286.918829][T12493] sec_pagetables:0 bounce:0 [ 1286.918829][T12493] kernel_misc_reclaimable:0 [ 1286.918829][T12493] free:1291193 free_pcp:25415 free_cma:0 [ 1286.992324][T12493] Node 0 active_anon:21648kB inactive_anon:0kB active_file:12564kB inactive_file:162680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36896kB dirty:380kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14168kB pagetables:6160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1287.048715][T12493] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98916kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1287.110782][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9109'. [ 1287.179113][T12493] Node 0 DMA free:11192kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:32kB free_cma:0kB [ 1287.211118][T12510] openvswitch: netlink: Key 0 has unexpected len 172 expected 0 [ 1287.336446][T12514] netlink: 'syz.1.9109': attribute type 10 has an invalid length. [ 1287.345947][T12493] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1287.383719][T12493] Node 0 DMA32 free:1465184kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21748kB inactive_anon:0kB active_file:12564kB inactive_file:162680kB unevictable:1536kB writepending:380kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:39848kB local_pcp:19744kB free_cma:0kB [ 1287.393369][T12498] tipc: Enabled bearer , priority 0 [ 1287.448152][T12502] team0: Port device dummy0 added [ 1287.472131][T12500] syzkaller0: entered promiscuous mode [ 1287.477911][T12493] lowmem_reserve[]: 0 0 0 0 0 [ 1287.484235][T12493] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1287.525643][T12500] syzkaller0: entered allmulticast mode [ 1287.562727][T12493] lowmem_reserve[]: 0 0 0 0 0 [ 1287.573090][ T1818] hsr_slave_0: left promiscuous mode [ 1287.579121][T12493] Node 1 Normal free:3689152kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61164kB local_pcp:33468kB free_cma:0kB [ 1287.614699][T12493] lowmem_reserve[]: 0 0 0 0 0 [ 1287.620782][T12493] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11192kB [ 1287.622979][ T1818] hsr_slave_1: left promiscuous mode [ 1287.644830][T12493] Node 0 DMA32: 10926*4kB (UME) 8815*8kB (UME) 6509*16kB (UME) 1489*32kB (UME) 896*64kB (UME) 1145*128kB (UME) 984*256kB (UME) 584*512kB (UME) 294*1024kB (U) 70*2048kB (UM) 0*4096kB = 1465248kB [ 1287.669950][T12493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1287.683853][T12493] Node 1 Normal: 9*4kB (UM) 14*8kB (UM) 14*16kB (UM) 8*32kB (UM) 22*64kB (UM) 12*128kB (UM) 11*256kB (UM) 9*512kB (UM) 10*1024kB (UM) 9*2048kB (U) 891*4096kB (UM) = 3689204kB [ 1287.690836][ T1818] veth0_macvtap: left promiscuous mode [ 1287.703838][T12493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.714529][ T1818] veth0_vlan: left promiscuous mode [ 1287.718938][T12493] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1287.737553][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9113'. [ 1287.761539][T12493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.778116][T12493] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1287.791827][T12493] 45148 total pagecache pages [ 1287.796697][T12493] 0 pages in swap cache [ 1287.801135][T12493] Free swap = 124996kB [ 1287.805741][T12493] Total swap = 124996kB [ 1287.810041][T12493] 2097051 pages RAM [ 1287.813998][T12493] 0 pages HighMem/MovableOnly [ 1287.818920][T12493] 427116 pages reserved [ 1287.823179][T12493] 0 pages cma reserved [ 1288.193925][T12514] team0: Port device dummy0 removed [ 1288.203966][T12514] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1288.264025][T12494] tipc: Resetting bearer [ 1288.292080][T12494] tipc: Disabling bearer [ 1288.729862][T12544] veth0_to_bond: Caught tx_queue_len zero misconfig [ 1288.775415][T12062] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1288.840766][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1288.863445][T12062] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1288.906946][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.041834][T12062] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1289.079394][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.171900][T12062] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1289.215525][T12062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1289.228004][T12566] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1289.296645][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1289.343722][T12541] syzkaller0: entered promiscuous mode [ 1289.368692][T12541] syzkaller0: entered allmulticast mode [ 1289.414293][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1289.451144][ T1818] IPVS: stop unused estimator thread 0... [ 1289.678491][T12570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9122'. [ 1289.958842][ T30] audit: type=1800 audit(1780434394.580:42): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9125" name="memory.events" dev="tmpfs" ino=201 res=0 errno=0 [ 1290.013464][ T30] audit: type=1804 audit(1780434394.610:43): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9125" name="/newroot/35/memory.events" dev="tmpfs" ino=201 res=1 errno=0 [ 1295.398278][T12062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.481899][T12062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.558880][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.566126][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.677486][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.684785][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.761062][T12668] syzkaller0: entered promiscuous mode [ 1295.785753][T12668] syzkaller0: entered allmulticast mode [ 1296.412126][T12697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9137'. [ 1296.772810][T12717] netlink: 750 bytes leftover after parsing attributes in process `syz.1.9142'. [ 1296.898408][T12722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1297.234527][T12729] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9144'. [ 1297.276477][T12729] netlink: 'syz.3.9144': attribute type 1 has an invalid length. [ 1297.493949][T12062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.377428][T12062] veth0_vlan: entered promiscuous mode [ 1298.422139][T12062] veth1_vlan: entered promiscuous mode [ 1298.485090][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9154'. [ 1298.549922][T12062] veth0_macvtap: entered promiscuous mode [ 1298.579483][T12062] veth1_macvtap: entered promiscuous mode [ 1298.661837][T12062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.727858][T12062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.766313][ T3671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.793030][ T3671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.848169][ T3671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.897115][ T3671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.125362][ T3671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.162272][ T3671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.267061][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9158'. [ 1299.298044][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.306253][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.331442][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9158'. [ 1299.513458][T12822] tipc: Enabled bearer , priority 0 [ 1299.559939][T12821] syzkaller0: entered promiscuous mode [ 1299.582011][T12821] syzkaller0: entered allmulticast mode [ 1299.889555][T12829] tipc: Resetting bearer [ 1299.996300][T12829] tipc: Disabling bearer [ 1300.238277][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.625811][ T5648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1300.642572][ T5648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1300.644415][T12866] netlink: 'syz.0.9168': attribute type 1 has an invalid length. [ 1300.668941][ T5648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1300.687097][ T5648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1300.700836][ T5648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1300.969657][T12874] bond13: entered promiscuous mode [ 1301.020754][T12874] bond13: entered allmulticast mode [ 1301.042634][T12874] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1301.107745][T12887] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1301.159507][T12875] bridge9: entered promiscuous mode [ 1301.177718][T12875] bridge9: entered allmulticast mode [ 1301.193937][T12875] bond13: (slave bridge9): Enslaving as a backup interface with an up link [ 1301.196788][T18466] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1301.362452][T12874] bridge10: entered promiscuous mode [ 1301.380471][ T137] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1301.401887][T12874] bridge10: entered allmulticast mode [ 1301.418857][T12874] bond13: (slave bridge10): Enslaving as a backup interface with a down link [ 1301.634611][T12903] tipc: Enabled bearer , priority 0 [ 1301.668258][T12905] lo speed is unknown, defaulting to 1000 [ 1301.668801][T12903] syzkaller0: entered promiscuous mode [ 1301.697465][T12903] syzkaller0: entered allmulticast mode [ 1301.711014][T12905] lo speed is unknown, defaulting to 1000 [ 1301.721118][T12903] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1301.812302][T12905] lo speed is unknown, defaulting to 1000 [ 1301.845541][T12905] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1301.869205][T12901] tipc: Resetting bearer [ 1301.881677][T12905] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1301.929530][T12905] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1301.971930][T12901] tipc: Disabling bearer [ 1302.004936][T12905] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1302.179959][T12905] lo speed is unknown, defaulting to 1000 [ 1302.207407][T12905] lo speed is unknown, defaulting to 1000 [ 1302.226301][T12864] lo speed is unknown, defaulting to 1000 [ 1302.237759][T12905] lo speed is unknown, defaulting to 1000 [ 1302.256239][T12905] lo speed is unknown, defaulting to 1000 [ 1302.284470][T12905] lo speed is unknown, defaulting to 1000 [ 1302.358200][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9182'. [ 1302.518480][T12942] team0: Port device team_slave_0 removed [ 1302.564242][T12937] lo speed is unknown, defaulting to 1000 [ 1302.797712][ T5632] Bluetooth: hci5: command tx timeout [ 1302.826210][T12956] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1302.848422][T12956] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1302.882008][T12956] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1303.104552][T12974] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20004 [ 1303.251206][T12971] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9185'. [ 1303.446806][T12981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9186'. [ 1303.481264][T12981] veth1_to_team: entered promiscuous mode [ 1303.490024][T12981] veth1_to_team: left promiscuous mode [ 1303.558512][T12864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.565807][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.573867][T12864] bridge_slave_0: entered allmulticast mode [ 1303.584737][T12864] bridge_slave_0: entered promiscuous mode [ 1303.597905][T12864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.608028][T12864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.616260][T12864] bridge_slave_1: entered allmulticast mode [ 1303.623493][T12864] bridge_slave_1: entered promiscuous mode [ 1303.654861][T12864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.668998][T12864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.700166][T12864] team0: Port device team_slave_0 added [ 1303.708690][T12864] team0: Port device team_slave_1 added [ 1303.744710][T12864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.751871][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.778777][T12864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.793020][T12864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.800532][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.830750][T12864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.900525][T12864] hsr_slave_0: entered promiscuous mode [ 1303.907604][T12864] hsr_slave_1: entered promiscuous mode [ 1303.914112][T12864] debugfs: 'hsr0' already exists in 'hsr' [ 1303.921058][T12864] Cannot create hsr debugfs directory [ 1304.085975][T12864] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.100203][T12864] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.169446][T12864] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.180294][T12864] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.243946][T12864] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.255074][T12864] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.324258][T12864] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.334218][T12864] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.875793][ T5632] Bluetooth: hci5: command tx timeout [ 1305.162162][T12934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1305.188004][T12864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1305.232559][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1305.251427][T12864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1305.317081][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1305.356881][T12864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1305.371835][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1305.391162][T12864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1305.420251][T12864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1305.511238][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9191'. [ 1305.564477][T13017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9194'. [ 1305.673121][T12864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.700218][T13020] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1305.731404][T12864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.751011][T13025] netlink: 'syz.2.9196': attribute type 2 has an invalid length. [ 1305.779091][ T1818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.786472][ T1818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.849328][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.856585][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.891551][T13031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9198'. [ 1306.094472][T13041] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1306.344405][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9204'. [ 1306.600625][T13068] netlink: 45 bytes leftover after parsing attributes in process `syz.2.9206'. [ 1306.667676][T13073] netlink: 'syz.4.9208': attribute type 2 has an invalid length. [ 1306.717255][T13073] netlink: 'syz.4.9208': attribute type 1 has an invalid length. [ 1306.745257][T13073] netlink: 'syz.4.9208': attribute type 1 has an invalid length. [ 1306.755396][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9210'. [ 1306.771564][T13072] netlink: 'syz.4.9208': attribute type 2 has an invalid length. [ 1306.791833][T13072] netlink: 'syz.4.9208': attribute type 1 has an invalid length. [ 1306.803307][T13072] netlink: 'syz.4.9208': attribute type 1 has an invalid length. [ 1306.956484][ T5632] Bluetooth: hci5: command tx timeout [ 1307.184262][T12864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.322610][T13100] IPv6: sit1: Disabled Multicast RS [ 1307.369820][T13111] netlink: 'syz.2.9219': attribute type 2 has an invalid length. [ 1307.401343][T13112] netlink: 'syz.2.9219': attribute type 10 has an invalid length. [ 1307.444207][T13112] team0: Device bridge0 failed to register rx_handler [ 1307.666043][T13126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1307.680036][T12864] veth0_vlan: entered promiscuous mode [ 1307.753704][T12864] veth1_vlan: entered promiscuous mode [ 1307.872850][T12864] veth0_macvtap: entered promiscuous mode [ 1307.921484][T12864] veth1_macvtap: entered promiscuous mode [ 1307.956289][T12864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.975862][T13140] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1307.991550][T13143] __nla_validate_parse: 3 callbacks suppressed [ 1307.991574][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9228'. [ 1308.035769][T13142] netlink: 67 bytes leftover after parsing attributes in process `syz.1.9227'. [ 1308.141428][ T6999] lo speed is unknown, defaulting to 1000 [ 1308.150577][T12864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.197516][T13151] netlink: 'syz.2.9230': attribute type 1 has an invalid length. [ 1308.313184][T13151] bond9: entered promiscuous mode [ 1308.329708][T13151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1308.374016][T13163] bond9: (slave bridge5): making interface the new active one [ 1308.381871][T13163] bridge5: entered promiscuous mode [ 1308.393134][T13163] bridge5: left promiscuous mode [ 1308.469070][T13161] team0 (unregistering): Port device team_slave_0 removed [ 1308.509617][T13161] team0 (unregistering): Port device team_slave_1 removed [ 1308.542258][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.551568][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.574832][T13176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9235'. [ 1308.588870][T13172] 8021q: VLANs not supported on ip6_vti0 [ 1308.601911][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.617981][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9235'. [ 1308.627775][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.879415][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.894507][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.982705][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.992032][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.038591][ T5632] Bluetooth: hci5: command tx timeout [ 1309.273949][T13196] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9243'. [ 1309.297344][T13197] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9243'. [ 1309.308193][T13196] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9243'. [ 1309.323504][T13196] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9243'. [ 1309.352303][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9244'. [ 1309.499548][T13204] lo speed is unknown, defaulting to 1000 [ 1309.873553][T13223] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1309.913775][T13225] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1310.264260][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9251'. [ 1310.375673][T13236] lo speed is unknown, defaulting to 1000 [ 1311.764259][T13294] validate_nla: 9 callbacks suppressed [ 1311.764289][T13294] netlink: 'syz.2.9265': attribute type 17 has an invalid length. [ 1311.940118][T13298] lo speed is unknown, defaulting to 1000 [ 1311.959209][T13300] netlink: 'syz.1.9270': attribute type 1 has an invalid length. [ 1312.053685][T13300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1312.145547][T13303] bond1: (slave geneve2): making interface the new active one [ 1312.176506][T13303] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1312.474537][T13310] netlink: 'syz.4.9272': attribute type 3 has an invalid length. [ 1312.495260][T13310] netlink: 'syz.4.9272': attribute type 16 has an invalid length. [ 1313.243729][ T5648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1313.263110][ T5648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1313.279511][ T5648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1313.295096][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1313.306881][ T5648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1313.349669][T13318] __nla_validate_parse: 11 callbacks suppressed [ 1313.349690][T13318] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9272'. [ 1313.598854][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1313.653165][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1313.668064][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1313.784907][T13342] Bluetooth: MGMT ver 1.23 [ 1313.922662][T13348] netlink: 'syz.3.9280': attribute type 2 has an invalid length. [ 1314.353189][T13357] xt_nfacct: accounting object `syz0' does not exist [ 1314.689870][T13329] lo speed is unknown, defaulting to 1000 [ 1314.869890][T13376] openvswitch: netlink: Flow actions attr not present in new flow. [ 1314.897492][T13376] netlink: 'syz.4.9288': attribute type 1 has an invalid length. [ 1315.033909][T13385] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1315.078083][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1315.105927][T13381] lo speed is unknown, defaulting to 1000 [ 1315.356390][ T5632] Bluetooth: hci2: command tx timeout [ 1315.454622][T13400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9293'. [ 1315.605829][T13397] block nbd3: not configured, cannot reconfigure [ 1315.943289][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.962982][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.981204][T13329] bridge_slave_0: entered allmulticast mode [ 1316.008976][T13329] bridge_slave_0: entered promiscuous mode [ 1316.046396][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.070754][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.104946][T13329] bridge_slave_1: entered allmulticast mode [ 1316.130228][T13329] bridge_slave_1: entered promiscuous mode [ 1316.222640][T13424] x_tables: duplicate underflow at hook 2 [ 1316.247976][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.313706][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.438507][T13329] team0: Port device team_slave_0 added [ 1316.459728][T13329] team0: Port device team_slave_1 added [ 1316.530159][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9306'. [ 1316.563704][T13444] netlink: 'syz.3.9306': attribute type 30 has an invalid length. [ 1316.581353][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.583387][T13446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9307'. [ 1316.594052][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.627386][T13447] netlink: 'syz.2.9305': attribute type 21 has an invalid length. [ 1316.637599][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9306'. [ 1316.652789][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.657136][T13448] netlink: 'syz.3.9306': attribute type 30 has an invalid length. [ 1316.695089][ T6090] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.705972][ T6090] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.719117][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.730944][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.779290][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.839885][ T6090] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1316.867948][ T6090] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1317.050181][T13329] hsr_slave_0: entered promiscuous mode [ 1317.063572][T13329] hsr_slave_1: entered promiscuous mode [ 1317.085434][T13329] debugfs: 'hsr0' already exists in 'hsr' [ 1317.103678][T13329] Cannot create hsr debugfs directory [ 1317.343368][T13455] syzkaller0: entered promiscuous mode [ 1317.356404][T13455] syzkaller0: entered allmulticast mode [ 1317.444987][ T5632] Bluetooth: hci2: command tx timeout [ 1317.453644][T13467] netlink: 'syz.1.9311': attribute type 1 has an invalid length. [ 1319.522121][ T5632] Bluetooth: hci2: command tx timeout [ 1321.615358][ T5632] Bluetooth: hci2: command tx timeout [ 1321.939254][T13467] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1322.110930][T13497] netlink: 'syz.3.9318': attribute type 1 has an invalid length. [ 1322.149860][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.184590][T13498] 8021q: VLANs not supported on ip6_vti0 [ 1322.193901][T13504] __nla_validate_parse: 2 callbacks suppressed [ 1322.193922][T13504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9320'. [ 1322.252628][T13504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9320'. [ 1322.310408][T13329] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.348723][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9321'. [ 1322.366682][T13508] netlink: 'syz.4.9321': attribute type 7 has an invalid length. [ 1322.375926][T13508] netlink: 'syz.4.9321': attribute type 8 has an invalid length. [ 1322.408636][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9321'. [ 1322.500023][T13518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9325'. [ 1322.522859][T13521] netlink: 'syz.2.9326': attribute type 1 has an invalid length. [ 1322.532983][T13329] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.559199][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9326'. [ 1322.608471][T13329] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.744886][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9328'. [ 1322.761926][T13329] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.854167][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9327'. [ 1323.165522][T13543] syzkaller1: entered promiscuous mode [ 1323.171354][T13543] syzkaller1: entered allmulticast mode [ 1323.362053][T13329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1323.420203][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1323.437637][T13329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1323.488472][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1323.516666][T13329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1323.544942][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1323.572031][T13329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1323.620137][T13329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1323.903833][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.982052][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.011062][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.018351][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.087277][ T1818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.094526][ T1818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.189496][T13576] nbd: socks must be embedded in a SOCK_ITEM attr [ 1324.211440][T13577] IPVS: set_ctl: invalid protocol: 103 100.1.1.2:20001 [ 1324.212988][T13576] block nbd0: shutting down sockets [ 1324.339563][T13580] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1324.510635][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9341'. [ 1325.291859][T13592] lo speed is unknown, defaulting to 1000 [ 1325.328862][T13612] netlink: 560 bytes leftover after parsing attributes in process `syz.1.9348'. [ 1325.604904][T13621] team0: entered promiscuous mode [ 1325.619328][T13621] team0: entered allmulticast mode [ 1325.632167][T13621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.862350][T13620] team1: entered promiscuous mode [ 1325.873499][T13620] team1: entered allmulticast mode [ 1325.895688][T13620] 8021q: adding VLAN 0 to HW filter on device team1 [ 1326.149428][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.344639][T13329] veth0_vlan: entered promiscuous mode [ 1326.385617][T13329] veth1_vlan: entered promiscuous mode [ 1326.464600][T13648] tipc: Enabled bearer , priority 0 [ 1326.500043][T13648] syzkaller0: entered promiscuous mode [ 1326.516027][T13648] syzkaller0: entered allmulticast mode [ 1326.549151][T13648] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1326.629945][T13648] syzkaller0: mtu greater than device maximum [ 1326.649794][T13329] veth0_macvtap: entered promiscuous mode [ 1326.673731][T13647] tipc: Resetting bearer [ 1326.742824][T13647] tipc: Disabling bearer [ 1326.765861][T13329] veth1_macvtap: entered promiscuous mode [ 1326.811026][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.872833][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.916242][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.943806][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.967387][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.979117][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.259842][T13684] syz.4.9368: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1327.276268][ T6090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.286233][ T6090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.297190][T13684] CPU: 0 UID: 0 PID: 13684 Comm: syz.4.9368 Not tainted syzkaller #0 PREEMPT(full) [ 1327.297218][T13684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1327.297230][T13684] Call Trace: [ 1327.297238][T13684] [ 1327.297247][T13684] dump_stack_lvl+0xe8/0x150 [ 1327.297277][T13684] warn_alloc+0x249/0x340 [ 1327.297304][T13684] ? stack_trace_save+0xa9/0x100 [ 1327.297335][T13684] ? __pfx_warn_alloc+0x10/0x10 [ 1327.297369][T13684] ? kasan_save_track+0x4f/0x80 [ 1327.297395][T13684] ? kasan_save_track+0x3e/0x80 [ 1327.297420][T13684] ? __kasan_kmalloc+0x93/0xb0 [ 1327.297445][T13684] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1327.297472][T13684] ? xskq_create+0x56/0x170 [ 1327.297500][T13684] ? xsk_setsockopt+0x54c/0x990 [ 1327.297532][T13684] ? do_sock_setsockopt+0x17c/0x1b0 [ 1327.297552][T13684] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1327.297572][T13684] ? do_syscall_64+0x174/0x580 [ 1327.297595][T13684] __vmalloc_node_range_noprof+0x132/0x1750 [ 1327.297662][T13684] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1327.297697][T13684] ? __kasan_kmalloc+0x93/0xb0 [ 1327.297735][T13684] vmalloc_user_noprof+0xad/0xe0 [ 1327.297763][T13684] ? xskq_create+0xbf/0x170 [ 1327.297793][T13684] xskq_create+0xbf/0x170 [ 1327.297824][T13684] xsk_init_queue+0x8a/0xe0 [ 1327.297856][T13684] xsk_setsockopt+0x54c/0x990 [ 1327.297885][T13684] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1327.297913][T13684] ? __pfx_aa_sk_perm+0x10/0x10 [ 1327.297946][T13684] ? aa_sock_opt_perm+0xff/0x1a0 [ 1327.297979][T13684] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1327.298006][T13684] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1327.298034][T13684] do_sock_setsockopt+0x17c/0x1b0 [ 1327.298062][T13684] __x64_sys_setsockopt+0x13d/0x1b0 [ 1327.298087][T13684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.298111][T13684] do_syscall_64+0x174/0x580 [ 1327.298130][T13684] ? trace_irq_disable+0x3b/0x140 [ 1327.298159][T13684] ? clear_bhb_loop+0x40/0x90 [ 1327.298185][T13684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.298205][T13684] RIP: 0033:0x7fcdad19ce59 [ 1327.298226][T13684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.298243][T13684] RSP: 002b:00007fcdae0bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1327.298266][T13684] RAX: ffffffffffffffda RBX: 00007fcdad415fa0 RCX: 00007fcdad19ce59 [ 1327.298279][T13684] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1327.298291][T13684] RBP: 00007fcdad232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1327.298302][T13684] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.298314][T13684] R13: 00007fcdad416038 R14: 00007fcdad415fa0 R15: 00007ffdc4551ee8 [ 1327.298349][T13684] [ 1327.298358][T13684] Mem-Info: [ 1327.478028][ T1818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.531340][T13684] active_anon:5349 inactive_anon:0 isolated_anon:0 [ 1327.531340][T13684] active_file:3141 inactive_file:40737 isolated_file:0 [ 1327.531340][T13684] unevictable:768 dirty:148 writeback:0 [ 1327.531340][T13684] slab_reclaimable:12754 slab_unreclaimable:114863 [ 1327.531340][T13684] mapped:29822 shmem:1343 pagetables:1483 [ 1327.531340][T13684] sec_pagetables:0 bounce:0 [ 1327.531340][T13684] kernel_misc_reclaimable:0 [ 1327.531340][T13684] free:1287333 free_pcp:26670 free_cma:0 [ 1327.547779][ T1818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.551045][T13684] Node 0 active_anon:21396kB inactive_anon:0kB active_file:12564kB inactive_file:162752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20984kB dirty:588kB writeback:0kB shmem:3836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14724kB pagetables:5812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1327.551111][T13684] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1327.551164][T13684] Node 0 DMA free:11192kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:40kB free_cma:0kB [ 1327.650488][T13691] netlink: 'syz.4.9368': attribute type 10 has an invalid length. [ 1327.723664][T13684] lowmem_reserve[]: [ 1327.799971][T13691] team0: Port device dummy0 added [ 1327.800245][T13684] 0 2492 2493 2493 2493 [ 1327.864258][T13684] Node 0 DMA32 free:1461572kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20996kB inactive_anon:0kB active_file:12564kB inactive_file:162752kB unevictable:1536kB writepending:588kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:49696kB local_pcp:30952kB free_cma:0kB [ 1327.937991][T13684] lowmem_reserve[]: 0 0 0 0 0 [ 1327.951559][T13684] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1327.961561][T13704] syzkaller1: entered promiscuous mode [ 1328.002357][T13684] lowmem_reserve[]: 0 0 0 0 0 [ 1328.008767][T13704] syzkaller1: entered allmulticast mode [ 1328.012500][T13684] Node 1 Normal free:3676968kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56912kB local_pcp:31464kB free_cma:0kB [ 1328.052074][T13684] lowmem_reserve[]: 0 0 0 0 0 [ 1328.059616][T13684] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11192kB [ 1328.079332][T13711] __nla_validate_parse: 7 callbacks suppressed [ 1328.079353][T13711] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9371'. [ 1328.103875][T13684] Node 0 DMA32: 11245*4kB (UME) 9565*8kB (UME) 6704*16kB (UME) 788*32kB (UME) 990*64kB (UME) 1131*128kB (UME) 994*256kB (UME) 581*512kB (UME) 301*1024kB (U) 69*2048kB (UM) 0*4096kB = 1463580kB [ 1328.124296][T13684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1328.137001][T13684] Node 1 Normal: 4*4kB (UM) 12*8kB (UM) 12*16kB (UM) 3*32kB (UM) 18*64kB (UM) 9*128kB (UM) 9*256kB (UM) 8*512kB (UM) 8*1024kB (UM) 7*2048kB (U) 890*4096kB (UM) = 3677072kB [ 1328.154703][T13684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.166159][T13684] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.175870][T13684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.185998][T13684] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.195706][T13684] 45171 total pagecache pages [ 1328.200517][T13684] 0 pages in swap cache [ 1328.204719][T13684] Free swap = 124996kB [ 1328.218607][T13684] Total swap = 124996kB [ 1328.222904][T13684] 2097051 pages RAM [ 1328.228316][T13684] 0 pages HighMem/MovableOnly [ 1328.233529][T13684] 427116 pages reserved [ 1328.238677][T13684] 0 pages cma reserved [ 1328.373882][T13718] netlink: 840 bytes leftover after parsing attributes in process `syz.0.9374'. [ 1328.440044][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9374'. [ 1328.564716][T13725] netlink: 57 bytes leftover after parsing attributes in process `syz.4.9375'. [ 1328.720513][T13723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.217998][T13730] bond10 (unregistering): Released all slaves [ 1329.268745][T13734] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9378'. [ 1329.282373][T13734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1329.476278][T13723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.683737][T13723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.822714][T13723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1329.898545][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9385'. [ 1330.773256][T13790] netlink: 'syz.4.9393': attribute type 1 has an invalid length. [ 1330.941329][T13798] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1331.082666][T13795] team0: Port device dummy0 removed [ 1331.270613][ T30] audit: type=1800 audit(1780434435.890:44): pid=13773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9391" name="memory.events" dev="tmpfs" ino=146 res=0 errno=0 [ 1331.357990][ T30] audit: type=1804 audit(1780434435.920:45): pid=13773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9391" name="/newroot/25/memory.events" dev="tmpfs" ino=146 res=1 errno=0 [ 1333.020700][T13862] ip6gretap0: entered allmulticast mode [ 1333.881124][T13881] netlink: 'syz.2.9412': attribute type 30 has an invalid length. [ 1334.235458][T13892] netlink: 'syz.0.9416': attribute type 1 has an invalid length. [ 1334.265913][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9415'. [ 1334.577023][T13898] tipc: Enabled bearer , priority 0 [ 1334.773783][T13907] bridge0: port 3(batadv1) entered blocking state [ 1334.785622][T13907] bridge0: port 3(batadv1) entered disabled state [ 1334.799377][T13907] batadv1: entered allmulticast mode [ 1334.830632][T13907] batadv1: entered promiscuous mode [ 1334.991370][T13907] IPVS: Scheduler module ip_vs_ not found [ 1335.216730][T13922] bond1 (unregistering): Released all slaves [ 1335.256264][ T3663] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1335.267474][ T3663] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1335.297206][T13926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9427'. [ 1335.427198][T13926] syzkaller0: entered promiscuous mode [ 1335.463990][T13926] syzkaller0: entered allmulticast mode [ 1335.492161][T13929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1335.554231][T13929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1335.610636][T13897] tipc: Disabling bearer [ 1335.884262][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9433'. [ 1335.894617][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9433'. [ 1336.390296][T13964] bond2: entered promiscuous mode [ 1336.419032][T13964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1336.813841][T13996] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1336.847018][T13985] netlink: 'syz.3.9443': attribute type 11 has an invalid length. [ 1336.962548][T13985] netlink: 'syz.3.9443': attribute type 1 has an invalid length. [ 1337.082784][T13985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.111369][T14012] vlan0: entered promiscuous mode [ 1337.126114][T14012] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1337.262738][T14030] syzkaller1: entered promiscuous mode [ 1337.268649][T14030] syzkaller1: entered allmulticast mode [ 1337.472930][ T5632] block nbd0: Receive control failed (result -32) [ 1337.579678][T14041] syzkaller1: entered promiscuous mode [ 1337.587617][T14041] syzkaller1: entered allmulticast mode [ 1338.232997][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9463'. [ 1338.356483][T14076] openvswitch: netlink: IP tunnel TTL not specified. [ 1338.398833][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9463'. [ 1338.418160][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9461'. [ 1338.473286][ T5830] IPVS: starting estimator thread 0... [ 1338.587056][T14080] IPVS: using max 26 ests per chain, 62400 per kthread [ 1338.699082][T14062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1339.158516][T14092] netlink: 'syz.3.9466': attribute type 16 has an invalid length. [ 1339.175305][T14092] netlink: 'syz.3.9466': attribute type 17 has an invalid length. [ 1339.294366][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9468'. [ 1339.353930][T14094] netlink: 758 bytes leftover after parsing attributes in process `syz.1.9467'. [ 1339.366957][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9467'. [ 1340.093387][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9475'. [ 1340.160889][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9476'. [ 1340.298741][T14134] erspan0: entered promiscuous mode [ 1340.350275][T14134] macvtap1: entered promiscuous mode [ 1340.378649][T14134] macvtap1: entered allmulticast mode [ 1340.408678][T14134] erspan0: entered allmulticast mode [ 1340.644105][T14148] lo speed is unknown, defaulting to 1000 [ 1341.191219][T14155] ipip0: entered promiscuous mode [ 1341.291213][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9479'. [ 1341.694356][T14179] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1341.701705][ T5830] IPVS: starting estimator thread 0... [ 1341.712737][T14178] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1341.732686][T14183] tipc: Enabling of bearer rejected, failed to enable media [ 1341.742744][T14178] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1341.759723][T14183] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9486'. [ 1341.837134][T14185] IPVS: using max 26 ests per chain, 62400 per kthread [ 1342.013580][T14192] sctp: [Deprecated]: syz.2.9488 (pid 14192) Use of int in max_burst socket option. [ 1342.013580][T14192] Use struct sctp_assoc_value instead [ 1342.059708][T14195] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9489'. [ 1342.456233][T14214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9495'. [ 1342.580686][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9495'. [ 1342.748031][T14222] pim6reg1: entered promiscuous mode [ 1342.775319][T14222] pim6reg1: entered allmulticast mode [ 1342.961005][T14209] netlink: 'syz.2.9494': attribute type 1 has an invalid length. [ 1343.059334][T14209] netlink: 'syz.2.9494': attribute type 10 has an invalid length. [ 1343.096998][T14209] dummy0: entered promiscuous mode [ 1343.789799][T14264] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1343.822394][T14265] netlink: 'syz.0.9508': attribute type 15 has an invalid length. [ 1343.859232][T14265] netlink: 'syz.0.9508': attribute type 25 has an invalid length. [ 1343.954470][T14274] netlink: 'syz.1.9513': attribute type 1 has an invalid length. [ 1344.093674][T14277] bond2 (unregistering): Released all slaves [ 1344.383358][T14289] __nla_validate_parse: 6 callbacks suppressed [ 1344.383377][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9517'. [ 1344.618444][T14303] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9518'. [ 1344.716873][T14299] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1344.734319][T14306] lo speed is unknown, defaulting to 1000 [ 1345.641073][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1345.656201][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1345.665927][T14321] netlink: 'syz.0.9524': attribute type 13 has an invalid length. [ 1345.702958][T14328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1345.735844][T14330] bridge0: Device is already in use. [ 1345.916371][T14332] ip6tnl1: entered allmulticast mode [ 1345.951152][T14339] syzkaller1: entered promiscuous mode [ 1345.956910][T14339] syzkaller1: entered allmulticast mode [ 1346.029281][T14343] bridge0: port 3(vlan2) entered blocking state [ 1346.036230][T14343] bridge0: port 3(vlan2) entered disabled state [ 1346.042811][T14343] vlan2: entered allmulticast mode [ 1346.050268][T14343] vlan2: entered promiscuous mode [ 1346.104531][T14334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1346.346131][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9534'. [ 1346.499720][T14365] netlink: 'syz.4.9536': attribute type 4 has an invalid length. [ 1346.514891][T14368] netlink: 'syz.3.9537': attribute type 11 has an invalid length. [ 1346.535999][ T3666] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1346.551484][ T3666] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1346.565773][ T2648] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1346.566023][T14375] netlink: 'syz.4.9536': attribute type 4 has an invalid length. [ 1346.584950][T14376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1346.770062][T14384] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1346.841993][T14390] bridge_slave_0: left allmulticast mode [ 1346.846101][ T2648] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1346.857404][T14390] bridge_slave_0: left promiscuous mode [ 1346.879755][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.981058][T14390] bridge_slave_1: left allmulticast mode [ 1346.993846][T14390] bridge_slave_1: left promiscuous mode [ 1347.010349][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.042768][T14390] bond0: (slave bond_slave_0): Releasing backup interface [ 1347.057656][T14390] bond0: (slave bond_slave_1): Releasing backup interface [ 1347.077861][T14390] team0: Port device team_slave_0 removed [ 1347.091285][T14390] team0: Port device team_slave_1 removed [ 1347.099574][T14390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.111005][T14390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.123684][T14390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.132831][T14390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.143574][T14390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1347.155504][ T6999] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1347.168388][T14394] IPVS: Error connecting to the multicast addr [ 1347.191493][T14397] team0: Port device xfrm0 added [ 1347.208269][T14400] tipc: Started in network mode [ 1347.235627][T14400] tipc: Node identity 3e33d112c72c, cluster identity 4711 [ 1347.251333][T14400] tipc: Enabled bearer , priority 0 [ 1347.350819][T14410] netlink: 'syz.1.9547': attribute type 1 has an invalid length. [ 1347.396393][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9548'. [ 1347.420345][T14410] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1347.424189][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9548'. [ 1347.608620][ T5632] block nbd1: Receive control failed (result -32) [ 1347.676063][T14435] netlink: 'syz.1.9552': attribute type 1 has an invalid length. [ 1347.887004][T14446] xt_hl: Unknown TTL match mode: 237 [ 1347.948617][T14446] syzkaller0: entered promiscuous mode [ 1347.963725][T14446] syzkaller0: entered allmulticast mode [ 1347.986242][T14454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.997731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.093162][ T1712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.278070][T14462] netlink: 'syz.1.9563': attribute type 22 has an invalid length. [ 1348.325286][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.366754][ T5830] tipc: Node number set to 4179611922 [ 1348.560272][T14480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9564'. [ 1348.627027][ T3671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.637929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.706816][ T3671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.715278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.752203][ T3671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.887248][ T3666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.896674][ T3666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.100431][T14508] pim6reg1: entered promiscuous mode [ 1349.125535][T14508] pim6reg1: entered allmulticast mode [ 1349.382881][T14522] netlink: 'syz.1.9575': attribute type 4 has an invalid length. [ 1349.406534][T14522] __nla_validate_parse: 2 callbacks suppressed [ 1349.406556][T14522] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1349.461018][T14527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9576'. [ 1349.470872][T14522] .`: renamed from bond0 (while UP) [ 1349.542943][T14527] vlan3: entered promiscuous mode [ 1349.560132][T14527] bridge0: entered promiscuous mode [ 1349.644178][T14534] lo speed is unknown, defaulting to 1000 [ 1349.849052][T14541] lo speed is unknown, defaulting to 1000 [ 1349.892957][T14550] netlink: 'syz.0.9584': attribute type 1 has an invalid length. [ 1349.997271][T14550] bond1: entered promiscuous mode [ 1350.002804][T14550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1350.104717][T14550] netlink: 'syz.0.9584': attribute type 1 has an invalid length. [ 1350.193387][T14553] bond1: (slave veth3): making interface the new active one [ 1350.206843][T14553] veth3: entered promiscuous mode [ 1350.218088][T14553] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1350.248524][T14544] lo speed is unknown, defaulting to 1000 [ 1350.315339][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1350.410286][T14561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1350.817331][T14571] netlink: 'syz.3.9588': attribute type 4 has an invalid length. [ 1350.903178][T14572] netlink: 'syz.3.9588': attribute type 4 has an invalid length. [ 1350.920405][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9587'. [ 1350.982316][T14566] batman_adv: batadv0: Adding interface: dummy0 [ 1351.013098][T14566] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.045269][T14566] batman_adv: batadv0: Interface activated: dummy0 [ 1351.310668][T14580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9589'. [ 1351.482283][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9591'. [ 1351.570131][T14584] xt_hashlimit: max too large, truncated to 1048576 [ 1351.775498][T14590] bridge1: entered promiscuous mode [ 1351.794994][T14590] bridge1: entered allmulticast mode [ 1351.918558][ T3663] wlan1: Trigger new scan to find an IBSS to join [ 1352.018329][T14601] netlink: 'syz.4.9595': attribute type 3 has an invalid length. [ 1352.041551][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9595'. [ 1352.064671][T14607] xt_hashlimit: size too large, truncated to 1048576 [ 1352.515395][T32296] net_ratelimit: 312 callbacks suppressed [ 1352.515415][T32296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.816733][T14631] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1353.522779][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9599'. [ 1353.596640][T32296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.941739][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9605'. [ 1354.156579][ T1710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.380379][T14659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.433395][T14659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.455580][T14659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.509453][T14662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.538891][T14662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.567885][T14656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.646769][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.679483][T14665] tc action pedit 'at' offset 46 out of bounds [ 1354.726829][T14665] xt_hashlimit: size too large, truncated to 1048576 [ 1354.955304][ T3666] wlan1: Trigger new scan to find an IBSS to join [ 1355.405770][T14673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9612'. [ 1355.645697][T14687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9616'. [ 1355.686579][T14687] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9616'. [ 1355.950523][T14692] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9618'. [ 1356.320305][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9622'. [ 1356.685660][ T5648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1356.709530][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1356.718954][ T5648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1356.727416][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1356.740220][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1357.315335][T14721] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1357.371600][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9628'. [ 1357.561261][T14742] netlink: 'syz.4.9630': attribute type 1 has an invalid length. [ 1357.572847][T14742] netlink: 'syz.4.9630': attribute type 3 has an invalid length. [ 1357.633987][T14742] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9630'. [ 1357.717027][T14745] netlink: 'syz.4.9630': attribute type 4 has an invalid length. [ 1357.730320][T14743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1357.755696][ T6999] net_ratelimit: 8 callbacks suppressed [ 1357.755716][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.835412][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1357.844241][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1357.918751][ T36] wlan1: Trigger new scan to find an IBSS to join [ 1357.957176][T14761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9633'. [ 1357.981891][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9634'. [ 1358.017556][T14747] tap0: tun_chr_ioctl cmd 2147767520 [ 1358.028680][ T3663] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1358.090214][ T3663] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1358.139011][T14764] mac80211_hwsim hwsim130 wlan0: entered promiscuous mode [ 1358.160252][T14764] mac80211_hwsim hwsim130 wlan0: entered allmulticast mode [ 1358.191605][T14710] lo speed is unknown, defaulting to 1000 [ 1358.451766][ T36] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1358.470117][ T1818] vlan3: left allmulticast mode [ 1358.483255][ T1818] geneve0: left allmulticast mode [ 1358.488751][ T1818] vlan3: left promiscuous mode [ 1358.493591][ T1818] geneve0: left promiscuous mode [ 1358.500769][ T1818] bridge0: port 3(vlan3) entered disabled state [ 1358.514550][ T1818] bridge_slave_1: left allmulticast mode [ 1358.526613][ T1818] bridge_slave_1: left promiscuous mode [ 1358.532588][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.544541][ T1818] bridge_slave_0: left allmulticast mode [ 1358.558911][ T1818] bridge_slave_0: left promiscuous mode [ 1358.567024][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.599923][ T1818] pimreg: left allmulticast mode [ 1358.766234][ T1818] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1358.778529][ T1818] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1358.795752][ T5632] Bluetooth: hci3: command tx timeout [ 1358.796962][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.846876][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.034036][ T1818] team0: Port device geneve1 removed [ 1359.062466][ T1818] bridge0 (unregistering): left promiscuous mode [ 1359.083199][ T1818] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1359.147447][ T1818] bond1 (unregistering): (slave veth3): Releasing active interface [ 1359.157143][ T1818] bond1 (unregistering): (slave veth5): Releasing active interface [ 1359.166159][ T1818] bond1 (unregistering): Released all slaves [ 1359.184967][ T1818] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1359.193966][ T1818] bond3 (unregistering): left promiscuous mode [ 1359.204374][ T1818] bond2 (unregistering): Released all slaves [ 1359.219178][ T1818] bond3 (unregistering): Released all slaves [ 1359.233828][ T1818] bond4 (unregistering): Released all slaves [ 1359.250174][ T1818] bond0 (unregistering): (slave batadv1): Releasing active interface [ 1359.259625][ T1818] bond0 (unregistering): Released all slaves [ 1359.282416][ T1818] bond5 (unregistering): Released all slaves [ 1359.298932][ T1818] bond6 (unregistering): Released all slaves [ 1359.318096][ T1818] bond7 (unregistering): Released all slaves [ 1359.333082][ T1818] bond8 (unregistering): Released all slaves [ 1359.348153][ T1818] bond9 (unregistering): Released all slaves [ 1359.363922][ T1818] bond10 (unregistering): Released all slaves [ 1359.515818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.781754][ T1710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.850302][ T2648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.063716][T14806] netlink: 'syz.3.9641': attribute type 4 has an invalid length. [ 1360.124451][T14807] netlink: 'syz.3.9641': attribute type 4 has an invalid length. [ 1360.262882][ T1710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.356818][T14811] netlink: 'syz.3.9641': attribute type 4 has an invalid length. [ 1360.882360][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.885297][ T5632] Bluetooth: hci3: command tx timeout [ 1361.678600][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.916169][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.957801][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.970944][ T5632] Bluetooth: hci3: command tx timeout [ 1363.297190][ T6959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.609930][ T1710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.995822][ T6999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.011905][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1364.143313][T14814] netlink: 'syz.0.9642': attribute type 1 has an invalid length. [ 1364.170162][T14814] __nla_validate_parse: 2 callbacks suppressed [ 1364.170182][T14814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9642'. [ 1364.357319][T14828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9644'. [ 1364.523596][ T1818] tipc: Disabling bearer [ 1364.535761][ T1818] tipc: Disabling bearer [ 1364.545043][ T1818] tipc: Left network mode [ 1365.037540][ T5632] Bluetooth: hci3: command tx timeout [ 1365.087305][T14858] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1365.114185][T14851] lo speed is unknown, defaulting to 1000 [ 1365.290868][T14852] lo speed is unknown, defaulting to 1000 [ 1365.399287][T14862] netlink: 'syz.1.9651': attribute type 1 has an invalid length. [ 1365.603309][T14862] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1365.671128][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1365.973064][T14886] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1366.217007][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.226389][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.233914][T14710] bridge_slave_0: entered allmulticast mode [ 1366.246835][T14710] bridge_slave_0: entered promiscuous mode [ 1366.289317][T14710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.301289][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.313528][T14710] bridge_slave_1: entered allmulticast mode [ 1366.322849][T14710] bridge_slave_1: entered promiscuous mode [ 1366.347987][T14887] lo speed is unknown, defaulting to 1000 [ 1366.393701][T14710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.411729][T14710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.493662][ T1818] batadv0: left promiscuous mode [ 1366.519410][ T1818] hsr_slave_0: left promiscuous mode [ 1366.526363][ T1818] hsr_slave_1: left promiscuous mode [ 1366.532584][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.542610][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.550749][ T1818] batman_adv: batadv0: Removing interface: ipvlan3 [ 1367.410792][ T1818] team0 (unregistering): Port device team_slave_1 removed [ 1367.581532][T14710] team0: Port device team_slave_0 added [ 1367.616664][T14921] gtp0: entered promiscuous mode [ 1367.624118][T14921] gtp0: entered allmulticast mode [ 1367.644445][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1367.673982][T14710] team0: Port device team_slave_1 added [ 1367.922424][T14710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.956501][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.005233][T14710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.052719][T14939] tipc: Enabling of bearer rejected, failed to enable media [ 1368.062880][T14710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.064773][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9664'. [ 1368.090021][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.156568][T14710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.337854][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9666'. [ 1368.382903][T14710] hsr_slave_0: entered promiscuous mode [ 1368.434625][T14710] hsr_slave_1: entered promiscuous mode [ 1368.442140][T14710] debugfs: 'hsr0' already exists in 'hsr' [ 1368.455710][T14710] Cannot create hsr debugfs directory [ 1368.515368][T14952] sctp: [Deprecated]: syz.4.9667 (pid 14952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1368.515368][T14952] Use struct sctp_sack_info instead [ 1368.550196][ T1818] IPVS: stop unused estimator thread 0... [ 1368.750896][T14959] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9670'. [ 1368.839074][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9671'. [ 1368.858962][T14964] nbd: must specify a device to reconfigure [ 1369.059072][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9674'. [ 1369.207023][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9676'. [ 1369.497428][T14710] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1369.594824][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1369.710484][T14710] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1369.920608][T14710] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1370.175035][T14710] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 1370.203379][T15041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9688'. [ 1370.291447][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1370.859289][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9696'. [ 1370.909096][T15072] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1370.920311][T14710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1370.942586][T14710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1370.966182][T14710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1370.968546][T15072] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1370.992429][T14710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1371.025186][T14710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1371.054117][T14710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1371.061770][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1371.083670][T14710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1371.106275][T14710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1371.196247][T15087] xt_hl: Unknown TTL match mode: 237 [ 1371.429757][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9701'. [ 1371.454083][T14710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.538455][T14710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.595217][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.602555][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.616122][T15111] netlink: 'syz.0.9704': attribute type 3 has an invalid length. [ 1371.663799][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9704'. [ 1371.711173][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.718457][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.812809][T15117] syzkaller0: entered promiscuous mode [ 1371.831557][T15117] syzkaller0: entered allmulticast mode [ 1371.904052][T15117] tipc: Enabled bearer , priority 0 [ 1371.943666][T15113] tipc: Resetting bearer [ 1372.039325][T15113] tipc: Disabling bearer [ 1372.086974][T15134] tipc: Started in network mode [ 1372.100938][T15134] tipc: Node identity ac1414aa, cluster identity 4711 [ 1372.111483][T15134] tipc: Enabled bearer , priority 5 [ 1372.377881][T15152] veth0: entered promiscuous mode [ 1372.618440][T15152] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1372.659875][T15152] bond2 (unregistering): Released all slaves [ 1372.874038][T15152] veth0: left promiscuous mode [ 1373.009952][T15182] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 1373.042643][T15180] syzkaller0: entered promiscuous mode [ 1373.070142][T15180] syzkaller0: entered allmulticast mode [ 1373.195336][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1373.227351][ T2648] tipc: Node number set to 2886997162 [ 1373.819411][T15211] bridge_slave_0: left allmulticast mode [ 1373.832000][T15211] bridge_slave_0: left promiscuous mode [ 1373.864400][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.932667][T15211] bridge_slave_1: left allmulticast mode [ 1373.970604][T15211] bridge_slave_1: left promiscuous mode [ 1373.991716][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.051201][T15229] netlink: 'syz.0.9725': attribute type 30 has an invalid length. [ 1374.066456][T15211] bond0: (slave bond_slave_0): Releasing backup interface [ 1374.088414][T15211] bond0: (slave bond_slave_1): Releasing backup interface [ 1374.119920][T15211] team0: Port device team_slave_0 removed [ 1374.139118][T15211] team0: Port device team_slave_1 removed [ 1374.149733][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.160062][T15211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.171130][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.180607][T15211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.194302][T15211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1374.213403][T15221] team0: Mode changed to "roundrobin" [ 1374.228501][T15231] tipc: Started in network mode [ 1374.233705][T15231] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1374.249688][T15231] tipc: Enabled bearer , priority 0 [ 1374.257000][T15224] vlan0: entered promiscuous mode [ 1374.303338][T15224] team0: Port device vlan0 added [ 1374.401241][T15229] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1374.436368][T14710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.633055][T14710] veth0_vlan: entered promiscuous mode [ 1374.668342][T14710] veth1_vlan: entered promiscuous mode [ 1374.777612][T14710] veth0_macvtap: entered promiscuous mode [ 1374.806996][T14710] veth1_macvtap: entered promiscuous mode [ 1374.843171][T15262] __nla_validate_parse: 5 callbacks suppressed [ 1374.843192][T15262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1374.856270][T15260] xfrm1: entered allmulticast mode [ 1374.901101][T15260] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9731'. [ 1374.909031][T14710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.944155][T14710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.988638][ T1818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.020229][ T1818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.061071][ T1818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.112790][ T1818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.162966][T15271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1375.194550][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1375.297500][ T1710] tipc: Node number set to 11578026 [ 1375.398252][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9734'. [ 1375.709362][ T6090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.742019][ T6090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.871860][T15289] openvswitch: netlink: Missing valid actions attribute. [ 1375.888884][T15289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1375.929872][ T6090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.958397][ T6090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.827060][T15320] syzkaller0: entered promiscuous mode [ 1376.840463][T15320] syzkaller0: entered allmulticast mode [ 1376.910058][T15328] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9744'. [ 1377.539313][T15326] lo speed is unknown, defaulting to 1000 [ 1377.730939][T15348] syzkaller1: entered promiscuous mode [ 1377.750121][T15348] syzkaller1: entered allmulticast mode [ 1378.024325][T15367] netlink: 320 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1378.069531][T15367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1378.227581][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9756'. [ 1378.374493][T15393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9756'. [ 1378.459698][T15394] syzkaller0: entered promiscuous mode [ 1378.471998][T15394] syzkaller0: entered allmulticast mode [ 1379.100499][T15425] openvswitch: netlink: EtherType 50a is less than min 600 [ 1379.163871][T15390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1379.178481][T15390] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1379.328484][T15390] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1379.346560][T15390] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1379.440915][T15438] lo speed is unknown, defaulting to 1000 [ 1379.475436][T15390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1379.488997][T15390] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1379.596813][T15446] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1379.707293][T15390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1379.742299][T15390] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1380.169473][T15468] xt_l2tp: invalid flags combination: 8 [ 1380.423559][T15481] netlink: 'syz.0.9774': attribute type 1 has an invalid length. [ 1380.520130][T15484] gre0: entered promiscuous mode [ 1380.529790][T15484] gre0: entered allmulticast mode [ 1380.580940][T15500] netlink: 'syz.1.9779': attribute type 1 has an invalid length. [ 1380.802241][T15500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.086128][T15524] __nla_validate_parse: 4 callbacks suppressed [ 1381.086149][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9783'. [ 1381.572189][T15552] netlink: 'syz.3.9788': attribute type 1 has an invalid length. [ 1381.662103][T15558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9790'. [ 1381.675615][T15554] tipc: Started in network mode [ 1381.690482][T15554] tipc: Node identity ac14142f, cluster identity 4711 [ 1381.709119][T15554] tipc: New replicast peer: 0.0.0.0 [ 1381.727760][T15554] tipc: Enabled bearer , priority 5 [ 1381.821456][T15552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1381.867242][T15556] tipc: New replicast peer: 224.0.0.1 [ 1382.153913][T15589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9794'. [ 1382.257138][T15587] geneve2: entered promiscuous mode [ 1382.290844][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 40497 - 0 [ 1382.324149][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 40497 - 0 [ 1382.384520][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 40497 - 0 [ 1382.411307][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 40497 - 0 [ 1382.778759][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9801'. [ 1382.848932][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9801'. [ 1382.858040][ T1710] tipc: Node number set to 2886997039 [ 1383.203692][T15629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9802'. [ 1383.252609][T15629] ipvlan2: entered allmulticast mode [ 1383.284672][T15629] syz_tun: entered allmulticast mode [ 1383.339741][T15610] can: request_module (can-proto-0) failed. [ 1384.058241][T15652] xt_connbytes: Forcing CT accounting to be enabled [ 1384.079286][T15652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1384.482070][T15661] netlink: 'syz.3.9810': attribute type 1 has an invalid length. [ 1384.677323][T15675] ip6gretap1: entered promiscuous mode [ 1384.696166][T15675] ip6gretap1: entered allmulticast mode [ 1384.713695][T15680] netlink: 'syz.4.9816': attribute type 1 has an invalid length. [ 1384.851315][T15693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9819'. [ 1385.107165][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9823'. [ 1385.287162][T15718] netlink: zone id is out of range [ 1385.292760][T15719] netlink: zone id is out of range [ 1385.302670][T15718] netlink: zone id is out of range [ 1385.312036][T15719] netlink: zone id is out of range [ 1385.330738][T15718] netlink: zone id is out of range [ 1385.340866][T15719] netlink: zone id is out of range [ 1385.349282][T15718] netlink: zone id is out of range [ 1385.365220][T15719] netlink: zone id is out of range [ 1385.377103][T15718] netlink: zone id is out of range [ 1385.394121][T15719] netlink: zone id is out of range [ 1385.444277][T15725] netlink: 840 bytes leftover after parsing attributes in process `syz.4.9830'. [ 1385.454620][T15726] veth0_to_hsr: entered promiscuous mode [ 1385.461759][T15726] veth0_to_hsr: entered allmulticast mode [ 1385.699588][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9836'. [ 1385.753960][T15748] bond0: option resend_igmp: invalid value (1023) [ 1385.777266][T15748] bond0: option resend_igmp: allowed values 0 - 255 [ 1385.847243][T15746] lo speed is unknown, defaulting to 1000 [ 1386.131822][T15774] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.9845'. [ 1386.817989][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1386.862457][T15807] vxcan0: tx address claim with dest, not broadcast [ 1386.892378][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1386.925674][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1386.939292][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1386.960945][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1386.993593][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1387.032553][T15807] lo speed is unknown, defaulting to 1000 [ 1387.034175][T15746] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1387.040554][T15812] netlink: 'syz.1.9855': attribute type 1 has an invalid length. [ 1387.055237][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1387.080289][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1387.097774][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9852'. [ 1387.406519][T15828] netlink: 'syz.1.9857': attribute type 1 has an invalid length. [ 1387.461451][T15828] netlink: 'syz.1.9857': attribute type 1 has an invalid length. [ 1387.984677][T15840] rdma_op ffff88807d8d99f0 conn xmit_rdma 0000000000000000 [ 1388.049825][T15842] mac80211_hwsim hwsim124 wlan0: entered promiscuous mode [ 1388.075339][T15842] mac80211_hwsim hwsim124 wlan0: entered allmulticast mode [ 1388.344472][T15855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1388.436712][T15855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.447033][T15943] team0: Port device team_slave_0 removed [ 1390.731392][T15962] netlink: 'syz.2.9902': attribute type 2 has an invalid length. [ 1390.777401][T15950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.039128][T15950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.072600][T15958] lo speed is unknown, defaulting to 1000 [ 1391.171797][T15972] [ 1391.174179][T15972] ====================================================== [ 1391.178409][ T30] audit: type=1804 audit(1780434495.800:46): pid=15982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9907" name="/newroot/28/cgroup.controllers" dev="tmpfs" ino=161 res=1 errno=0 [ 1391.181202][T15972] WARNING: possible circular locking dependency detected [ 1391.181215][T15972] syzkaller #0 Not tainted [ 1391.181226][T15972] ------------------------------------------------------ [ 1391.215331][ T30] audit: type=1800 audit(1780434495.800:47): pid=15982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9907" name="cgroup.controllers" dev="tmpfs" ino=161 res=0 errno=0 [ 1391.221891][T15972] syz.0.9904/15972 is trying to acquire lock: [ 1391.221907][T15972] ffff88802649b418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 1391.258971][T15972] [ 1391.258971][T15972] but task is already holding lock: [ 1391.266335][T15972] ffff88802649aef0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1391.276579][T15972] [ 1391.276579][T15972] which lock already depends on the new lock. [ 1391.276579][T15972] [ 1391.287099][T15972] [ 1391.287099][T15972] the existing dependency chain (in reverse order) is: [ 1391.296140][T15972] [ 1391.296140][T15972] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1391.304777][T15972] blk_alloc_queue+0x546/0x680 [ 1391.310157][T15972] __blk_mq_alloc_disk+0x197/0x390 [ 1391.315804][T15972] nbd_dev_add+0x499/0xb50 [ 1391.320774][T15972] nbd_init+0x168/0x1f0 [ 1391.325461][T15972] do_one_initcall+0x250/0x870 [ 1391.330740][T15972] do_initcall_level+0x104/0x190 [ 1391.336202][T15972] do_initcalls+0x59/0xa0 [ 1391.341061][T15972] kernel_init_freeable+0x2a6/0x3e0 [ 1391.346801][T15972] kernel_init+0x1d/0x1d0 [ 1391.351675][T15972] ret_from_fork+0x514/0xb70 [ 1391.356847][T15972] ret_from_fork_asm+0x1a/0x30 [ 1391.362145][T15972] [ 1391.362145][T15972] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1391.369357][T15972] fs_reclaim_acquire+0x71/0x100 [ 1391.374817][T15972] __kmalloc_cache_node_noprof+0x46/0x6b0 [ 1391.381081][T15972] create_worker+0x113/0x7e0 [ 1391.386229][T15972] workqueue_prepare_cpu+0xe4/0x170 [ 1391.391961][T15972] cpuhp_invoke_callback+0x445/0x860 [ 1391.397781][T15972] _cpu_up+0x2ce/0x5b0 [ 1391.402368][T15972] cpu_up+0x1d2/0x220 [ 1391.406867][T15972] cpuhp_bringup_mask+0xb2/0x1a0 [ 1391.412324][T15972] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1391.418652][T15972] bringup_nonboot_cpus+0x17/0x30 [ 1391.424215][T15972] smp_init+0x32/0x110 [ 1391.428797][T15972] kernel_init_freeable+0x288/0x3e0 [ 1391.434522][T15972] kernel_init+0x1d/0x1d0 [ 1391.439374][T15972] ret_from_fork+0x514/0xb70 [ 1391.444490][T15972] ret_from_fork_asm+0x1a/0x30 [ 1391.449773][T15972] [ 1391.449773][T15972] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 1391.457499][T15972] cpus_read_lock+0x42/0x160 [ 1391.462616][T15972] static_key_slow_inc+0x12/0x30 [ 1391.468090][T15972] nbd_genl_reconfigure+0x132f/0x1ea0 [ 1391.474001][T15972] genl_family_rcv_msg_doit+0x22a/0x330 [ 1391.480070][T15972] genl_rcv_msg+0x61c/0x7a0 [ 1391.485108][T15972] netlink_rcv_skb+0x232/0x4b0 [ 1391.490401][T15972] genl_rcv+0x28/0x40 [ 1391.494903][T15972] netlink_unicast+0x75c/0x8e0 [ 1391.500178][T15972] netlink_sendmsg+0x813/0xb40 [ 1391.505456][T15972] ____sys_sendmsg+0x972/0x9f0 [ 1391.510746][T15972] ___sys_sendmsg+0x2a5/0x360 [ 1391.515948][T15972] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1391.521398][T15972] do_syscall_64+0x174/0x580 [ 1391.526591][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.533012][T15972] [ 1391.533012][T15972] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1391.540711][T15972] __mutex_lock+0x1a3/0x1550 [ 1391.545830][T15972] nbd_queue_rq+0x37b/0x1100 [ 1391.551030][T15972] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1391.557201][T15972] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1391.564075][T15972] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1391.570654][T15972] blk_mq_run_hw_queue+0x348/0x4f0 [ 1391.576306][T15972] blk_mq_dispatch_list+0xd16/0xe10 [ 1391.582032][T15972] blk_mq_flush_plug_list+0x48d/0x570 [ 1391.587926][T15972] __blk_flush_plug+0x3ed/0x4d0 [ 1391.593297][T15972] __submit_bio+0x28d/0x580 [ 1391.598317][T15972] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1391.604471][T15972] block_read_full_folio+0x7b7/0x830 [ 1391.610287][T15972] filemap_read_folio+0x137/0x3b0 [ 1391.615837][T15972] do_read_cache_folio+0x358/0x590 [ 1391.621470][T15972] read_part_sector+0xb6/0x2b0 [ 1391.626750][T15972] adfspart_check_ICS+0xb1/0x960 [ 1391.632226][T15972] bdev_disk_changed+0x817/0x1770 [ 1391.637765][T15972] blkdev_get_whole+0x380/0x510 [ 1391.643136][T15972] bdev_open+0x31e/0xd30 [ 1391.647892][T15972] blkdev_open+0x470/0x610 [ 1391.652823][T15972] do_dentry_open+0x822/0x13a0 [ 1391.658110][T15972] vfs_open+0x3b/0x340 [ 1391.662785][T15972] path_openat+0x2e08/0x3860 [ 1391.667902][T15972] do_file_open+0x23e/0x4a0 [ 1391.672940][T15972] do_sys_openat2+0x113/0x200 [ 1391.678135][T15972] __x64_sys_openat+0x138/0x170 [ 1391.683505][T15972] do_syscall_64+0x174/0x580 [ 1391.688613][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.695027][T15972] [ 1391.695027][T15972] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1391.702230][T15972] __mutex_lock+0x1a3/0x1550 [ 1391.707339][T15972] nbd_queue_rq+0xc6/0x1100 [ 1391.712360][T15972] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1391.718438][T15972] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1391.725289][T15972] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1391.731851][T15972] blk_mq_run_hw_queue+0x348/0x4f0 [ 1391.737486][T15972] blk_mq_dispatch_list+0xd16/0xe10 [ 1391.743291][T15972] blk_mq_flush_plug_list+0x48d/0x570 [ 1391.749267][T15972] __blk_flush_plug+0x3ed/0x4d0 [ 1391.754637][T15972] __submit_bio+0x28d/0x580 [ 1391.759664][T15972] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1391.765825][T15972] block_read_full_folio+0x7b7/0x830 [ 1391.771632][T15972] filemap_read_folio+0x137/0x3b0 [ 1391.777196][T15972] do_read_cache_folio+0x358/0x590 [ 1391.782836][T15972] read_part_sector+0xb6/0x2b0 [ 1391.788114][T15972] adfspart_check_ICS+0xb1/0x960 [ 1391.793570][T15972] bdev_disk_changed+0x817/0x1770 [ 1391.799126][T15972] blkdev_get_whole+0x380/0x510 [ 1391.804506][T15972] bdev_open+0x31e/0xd30 [ 1391.809273][T15972] blkdev_open+0x470/0x610 [ 1391.814230][T15972] do_dentry_open+0x822/0x13a0 [ 1391.819529][T15972] vfs_open+0x3b/0x340 [ 1391.824115][T15972] path_openat+0x2e08/0x3860 [ 1391.829225][T15972] do_file_open+0x23e/0x4a0 [ 1391.834246][T15972] do_sys_openat2+0x113/0x200 [ 1391.839438][T15972] __x64_sys_openat+0x138/0x170 [ 1391.844813][T15972] do_syscall_64+0x174/0x580 [ 1391.849916][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.856322][T15972] [ 1391.856322][T15972] -> #1 (set->srcu){.+.+}-{0:0}: [ 1391.863437][T15972] __synchronize_srcu+0xca/0x300 [ 1391.868899][T15972] elevator_switch+0x1e8/0x7a0 [ 1391.874708][T15972] elevator_change+0x2cc/0x450 [ 1391.880006][T15972] elevator_set_default+0x36c/0x430 [ 1391.885716][T15972] blk_register_queue+0x3e9/0x4e0 [ 1391.891255][T15972] __add_disk+0x677/0xd50 [ 1391.896102][T15972] add_disk_fwnode+0xfb/0x480 [ 1391.901314][T15972] nbd_dev_add+0x72c/0xb50 [ 1391.906249][T15972] nbd_init+0x168/0x1f0 [ 1391.910921][T15972] do_one_initcall+0x250/0x870 [ 1391.916216][T15972] do_initcall_level+0x104/0x190 [ 1391.921674][T15972] do_initcalls+0x59/0xa0 [ 1391.926520][T15972] kernel_init_freeable+0x2a6/0x3e0 [ 1391.932239][T15972] kernel_init+0x1d/0x1d0 [ 1391.937083][T15972] ret_from_fork+0x514/0xb70 [ 1391.942185][T15972] ret_from_fork_asm+0x1a/0x30 [ 1391.947468][T15972] [ 1391.947468][T15972] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1391.955336][T15972] __lock_acquire+0x15a5/0x2cf0 [ 1391.960876][T15972] lock_acquire+0x106/0x350 [ 1391.965894][T15972] __mutex_lock+0x1a3/0x1550 [ 1391.971076][T15972] elevator_change+0x1b3/0x450 [ 1391.976377][T15972] elevator_set_none+0xb5/0x140 [ 1391.981767][T15972] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1391.988125][T15972] nbd_start_device+0x17f/0xb10 [ 1391.993515][T15972] nbd_genl_connect+0x165b/0x1cf0 [ 1391.999104][T15972] genl_family_rcv_msg_doit+0x22a/0x330 [ 1392.005191][T15972] genl_rcv_msg+0x61c/0x7a0 [ 1392.010222][T15972] netlink_rcv_skb+0x232/0x4b0 [ 1392.015591][T15972] genl_rcv+0x28/0x40 [ 1392.020093][T15972] netlink_unicast+0x75c/0x8e0 [ 1392.025373][T15972] netlink_sendmsg+0x813/0xb40 [ 1392.030669][T15972] ____sys_sendmsg+0x972/0x9f0 [ 1392.035946][T15972] ___sys_sendmsg+0x2a5/0x360 [ 1392.041136][T15972] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1392.046592][T15972] do_syscall_64+0x174/0x580 [ 1392.052144][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.058553][T15972] [ 1392.058553][T15972] other info that might help us debug this: [ 1392.058553][T15972] [ 1392.068784][T15972] Chain exists of: [ 1392.068784][T15972] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 1392.068784][T15972] [ 1392.082535][T15972] Possible unsafe locking scenario: [ 1392.082535][T15972] [ 1392.089989][T15972] CPU0 CPU1 [ 1392.095358][T15972] ---- ---- [ 1392.100714][T15972] lock(&q->q_usage_counter(io)#53); [ 1392.106087][T15972] lock(fs_reclaim); [ 1392.112589][T15972] lock(&q->q_usage_counter(io)#53); [ 1392.120511][T15972] lock(&q->elevator_lock); [ 1392.125110][T15972] [ 1392.125110][T15972] *** DEADLOCK *** [ 1392.125110][T15972] [ 1392.133264][T15972] 6 locks held by syz.0.9904/15972: [ 1392.138456][T15972] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1392.146652][T15972] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1392.155609][T15972] #2: ffff8880273ab9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 1392.167011][T15972] #3: ffff8880273ab8d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 1392.177967][T15972] #4: ffff88802649aef0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 1392.188585][T15972] #5: ffff88802649af28 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 1392.199479][T15972] [ 1392.199479][T15972] stack backtrace: [ 1392.205393][T15972] CPU: 1 UID: 0 PID: 15972 Comm: syz.0.9904 Not tainted syzkaller #0 PREEMPT(full) [ 1392.205409][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1392.205417][T15972] Call Trace: [ 1392.205423][T15972] [ 1392.205429][T15972] dump_stack_lvl+0xe8/0x150 [ 1392.205446][T15972] print_circular_bug+0x2e1/0x300 [ 1392.205463][T15972] check_noncircular+0x12e/0x150 [ 1392.205478][T15972] __lock_acquire+0x15a5/0x2cf0 [ 1392.205496][T15972] ? elevator_change+0x1b3/0x450 [ 1392.205509][T15972] lock_acquire+0x106/0x350 [ 1392.205519][T15972] ? elevator_change+0x1b3/0x450 [ 1392.205535][T15972] __mutex_lock+0x1a3/0x1550 [ 1392.205548][T15972] ? elevator_change+0x1b3/0x450 [ 1392.205560][T15972] ? rcu_is_watching+0x15/0xb0 [ 1392.205574][T15972] ? work_grab_pending+0x3d1/0x990 [ 1392.205587][T15972] ? elevator_change+0x1b3/0x450 [ 1392.205599][T15972] ? __pfx___mutex_lock+0x10/0x10 [ 1392.205610][T15972] ? enable_work+0x17f/0x230 [ 1392.205622][T15972] ? lockdep_hardirqs_on+0x7a/0x110 [ 1392.205635][T15972] ? __cancel_work_sync+0xf7/0x110 [ 1392.205648][T15972] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1392.205663][T15972] elevator_change+0x1b3/0x450 [ 1392.205677][T15972] elevator_set_none+0xb5/0x140 [ 1392.205689][T15972] ? __pfx_elevator_set_none+0x10/0x10 [ 1392.205703][T15972] ? xa_load+0x1db/0x210 [ 1392.205715][T15972] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1392.205734][T15972] ? kernfs_add_one+0x477/0x5c0 [ 1392.205749][T15972] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1392.205820][T15972] ? sysfs_add_file_mode_ns+0x259/0x300 [ 1392.205834][T15972] nbd_start_device+0x17f/0xb10 [ 1392.205851][T15972] ? device_create_file+0xf4/0x1b0 [ 1392.205867][T15972] nbd_genl_connect+0x165b/0x1cf0 [ 1392.205883][T15972] ? __pfx___nla_validate_parse+0x10/0x10 [ 1392.205899][T15972] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1392.205915][T15972] ? rcu_is_watching+0x15/0xb0 [ 1392.205927][T15972] ? trace_kmalloc+0x2a/0xf0 [ 1392.205943][T15972] ? __nla_parse+0x40/0x60 [ 1392.205956][T15972] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1392.205972][T15972] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1392.205989][T15972] genl_family_rcv_msg_doit+0x22a/0x330 [ 1392.206006][T15972] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1392.206026][T15972] ? __lock_acquire+0x6b5/0x2cf0 [ 1392.206039][T15972] genl_rcv_msg+0x61c/0x7a0 [ 1392.206056][T15972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1392.206070][T15972] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1392.206088][T15972] netlink_rcv_skb+0x232/0x4b0 [ 1392.206101][T15972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1392.206116][T15972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1392.206131][T15972] ? down_read+0x270/0x2e0 [ 1392.206142][T15972] ? genl_rcv+0xd/0x40 [ 1392.206156][T15972] genl_rcv+0x28/0x40 [ 1392.206170][T15972] netlink_unicast+0x75c/0x8e0 [ 1392.206184][T15972] netlink_sendmsg+0x813/0xb40 [ 1392.206198][T15972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1392.206211][T15972] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1392.206227][T15972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1392.206243][T15972] ____sys_sendmsg+0x972/0x9f0 [ 1392.206256][T15972] ? __might_fault+0xaf/0x130 [ 1392.206271][T15972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1392.206285][T15972] ? import_iovec+0x73/0xa0 [ 1392.206298][T15972] ___sys_sendmsg+0x2a5/0x360 [ 1392.206310][T15972] ? __lock_acquire+0x6b5/0x2cf0 [ 1392.206322][T15972] ? __pfx____sys_sendmsg+0x10/0x10 [ 1392.206335][T15972] ? futex_wake+0x4ac/0x580 [ 1392.206355][T15972] ? __fget_files+0x2a/0x420 [ 1392.206368][T15972] ? __fget_files+0x3a0/0x420 [ 1392.206384][T15972] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1392.206396][T15972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1392.206410][T15972] ? rcu_is_watching+0x15/0xb0 [ 1392.206424][T15972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.206436][T15972] do_syscall_64+0x174/0x580 [ 1392.206446][T15972] ? trace_irq_disable+0x3b/0x140 [ 1392.206462][T15972] ? clear_bhb_loop+0x40/0x90 [ 1392.206474][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.206485][T15972] RIP: 0033:0x7fed94f9ce59 [ 1392.206497][T15972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.206507][T15972] RSP: 002b:00007fed95f1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1392.206520][T15972] RAX: ffffffffffffffda RBX: 00007fed95215fa0 RCX: 00007fed94f9ce59 [ 1392.206529][T15972] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 1392.206536][T15972] RBP: 00007fed95032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1392.206543][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1392.206550][T15972] R13: 00007fed95216038 R14: 00007fed95215fa0 R15: 00007ffd382ceb28 [ 1392.206563][T15972] [ 1392.666575][T15950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.760890][T15950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.817216][ T5648] block nbd4: Receive control failed (result -32) [ 1392.817216][ T5632] block nbd4: Receive control failed (result -32) [ 1392.858556][ T137] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.869623][ T137] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.881985][ T1818] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.894746][ T1818] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0